last executing test programs: 2m31.333604197s ago: executing program 3 (id=785): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f000045d000/0x2000)=nil, 0x2000, 0x12) 2m30.810467176s ago: executing program 3 (id=788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000017e2dd086307802040d9014f03010902120001000000000904000000ff"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) fanotify_mark(0xffffffffffffffff, 0x631, 0x40000000, 0xffffffffffffffff, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="401201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x3000, 0x1}) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 2m29.284496016s ago: executing program 3 (id=801): sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x44, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x4, 0x700000000000000}, 0x40) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78", @ANYBLOB=',rootmo']) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) timer_create(0x0, 0x0, &(0x7f0000000000)=0x0) timer_gettime(r5, &(0x7f0000000180)) timer_delete(r5) (async) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VHOST_NET_SET_BACKEND(r7, 0x8008af83, &(0x7f0000000000)={0x1}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r8, 0x104, 0x3, &(0x7f0000000000), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (async) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x3}, 0x1c) (async) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 2m28.806631296s ago: executing program 3 (id=803): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0xa, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x1, 0x400, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x805, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x7fffffff, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb5, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r3, 0x0, &(0x7f0000000300)='LL', 0x2, 0x2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0xa, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x1, 0x400, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x805, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x7fffffff, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb5, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x3, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r3, 0x0, &(0x7f0000000300)='LL', 0x2, 0x2}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) (async) 2m28.678575979s ago: executing program 3 (id=805): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x80) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r4, 0x1, 0x48, &(0x7f0000000000), &(0x7f0000000040)=0x10) r5 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x81, 0x20203843, 0x1, [0x2], [0x800, 0x0, 0xfffffffe], [0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x1]}) r6 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect$uac1(0x3, 0xdf, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x18, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd, 0x3, 0x1, 0x8, 0x30, 0xc2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x1}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0xfffe, 0x80}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x4, 0x9, 0x200, 0x1, 0x40}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xb3, 0x1, 0x7f, 0x7f, "f89d3c38d61e66"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x1, 0xbe, 0xa, "9ed8b8fd32b5ddec"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2, 0x7, 0x0, {0x7, 0x25, 0x1, 0x80, 0x2, 0xfff7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xd0, 0x2, 0x9, 0xfd, "13f6df7e9451ba"}, @as_header={0x7, 0x24, 0x1, 0x71, 0x5, 0x805}, @as_header={0x7, 0x24, 0x1, 0xe8, 0x0, 0x4}, @as_header={0x7, 0x24, 0x1, 0xc, 0x40}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x9, 0x37fe, 0xb4, "d163192aa0"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x5, 0x4, 0x8, 0x0, '?T'}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x5, 0x0, {0x7, 0x25, 0x1, 0x2, 0x1, 0xffff}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xe, 0x6, 0xf, 0x20, 0xf4}, 0x1e1, &(0x7f0000000300)={0x5, 0xf, 0x1e1, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xb, 0xf7, 0x1}, @generic={0xc6, 0x10, 0x4, "a1bcc9e930ea37e8642f9e43548ee85dfdf85301056ca14effe7d2c3f9122e23fb12f48a66a3e4f10be938c9f9665487e90b5fd040a30293a4e3295bbaf30b981097bd5fae47468847e565550674c78cc15a79dfeee02138125f9ce6e20cc41bec66c23691b39110c9f06dcb1694ff663f56c7fc7da95c622c0449e52fc00ebb24680a7a532b2f5ec3e5bedae271b2252ec008f851d9d2424e0137df46bee8c339168a7b57ac7d933d73e909fdbc655e3e62d08c319c7cc93eaea84ceb41f4af08d592"}, @ptm_cap={0x3}, @generic={0x102, 0x10, 0xb, "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"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x1, 0x8, 0x200}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1c09}}]}) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}}, 0x0) listen(r6, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m25.523537612s ago: executing program 3 (id=811): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x5, "17"}, @global=@item_4={0x3, 0x1, 0x5, "d1145c34"}]}}, 0x0}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000240)) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="40054600000041104efea6889c811dfd8588fcb3c6bb6c1b6dc0b9181c0a3ccf6ac35c213aacadcc5a9b37ad2cb3998dc0e960732997d1fe360f22bee85997f76850a5c6de8031a3075c46f197a90ecf74bcc5e0"], &(0x7f0000000280)={0x0, 0x3, 0xa, @string={0xa, 0x3, "b28bb5c51c6ece6b"}}, 0x0, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xcd, 0x1, {0x22, 0x727}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x3, 0x1}}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd(r1, &(0x7f00000002c0)={[0x5]}, 0x8) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c000280050001000000000008000840000095030400108008001540"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 2m10.365204734s ago: executing program 32 (id=811): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x5, "17"}, @global=@item_4={0x3, 0x1, 0x5, "d1145c34"}]}}, 0x0}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x0) ioctl$int_out(r1, 0x2, &(0x7f0000000240)) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="40054600000041104efea6889c811dfd8588fcb3c6bb6c1b6dc0b9181c0a3ccf6ac35c213aacadcc5a9b37ad2cb3998dc0e960732997d1fe360f22bee85997f76850a5c6de8031a3075c46f197a90ecf74bcc5e0"], &(0x7f0000000280)={0x0, 0x3, 0xa, @string={0xa, 0x3, "b28bb5c51c6ece6b"}}, 0x0, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0xcd, 0x1, {0x22, 0x727}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x3, 0x1}}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd(r1, &(0x7f00000002c0)={[0x5]}, 0x8) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c000280050001000000000008000840000095030400108008001540"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 1m52.984099053s ago: executing program 4 (id=1011): r0 = userfaultfd(0x801) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="2d726c696d6974202b6d656def7279202b626c6b696f20"], 0x17) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x5}, 0x1c) r4 = syz_pidfd_open(r2, 0x0) process_madvise(r4, 0x0, 0x0, 0x0, 0x0) (async) r5 = userfaultfd(0x0) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) (async) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x7}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, r0, 0x0) 1m52.737173621s ago: executing program 4 (id=1012): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, r4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, r6) (async) mount$fuse(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000240), 0x2a00400, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {}], [{@uid_eq={'uid', 0x3d, r6}}]}}) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000080)={0x3, 0xffffffff, 0x100, 0x6, 0x6, 0xa2cd}) (async) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8922, &(0x7f0000000040)={'veth0\x00', 0x1000}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)='bfs\x00', 0x208000, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9) sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r10, @ANYBLOB="01000000000000000000010000000800010000000000140004800500030007000000050003000100000008000200010000000800020001000000a00008801c0007800800850002000000050005"], 0xe0}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000803000001030000000000000000000900010073797a30000000000600024088a800000500030001000000040004"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000020801"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) (async) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r11, 0x84, 0x12, &(0x7f0000000080), 0x4) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x97, 0x4d, 0xc9, 0x8, 0x52b, 0x1911, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x33, [{{0x9, 0x4, 0x41, 0xd, 0x0, 0x48, 0x85, 0x2e, 0x6}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x400a}}, {0x0, 0x0}, {0xa8, &(0x7f0000000300)=@string={0xa8, 0x3, "0415faf5538e06ac1d99afc30ec5be5a40e487a18550c47e6f19a3866ef7bb5da91af4e80227a61a756a11e806fe6c7adecf249450ccf2ea9e56a10b049e602f369864857b4b7cff58d0ebbe0e2e92004a17ac359f391829e1fe2381fc9df6d8cdea57972830105585678ab093142cdc4e44f490e1f44d95aa0d646b581cac0b112aa578136c72d7272779d192ade040419c105926acf3f4660ba7c630221e3b2487eea271d8"}}]}) 1m51.983766576s ago: executing program 4 (id=1014): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x2, {{0xa, 0x4e20, 0x7, @empty, 0x62}}, 0x0, 0x5, [{{0xa, 0x4e22, 0xe6, @loopback, 0xffb}}, {{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x800}}, {{0xa, 0x4e23, 0x2, @remote, 0x7}}, {{0xa, 0x4e20, 0x5, @remote, 0x1ff}}, {{0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x13}, 0x922}}]}, 0x310) pwritev(r0, &(0x7f0000002480)=[{&(0x7f0000000340)="66edd509d02401f1f22fd73a4a859b6bfd5fd4b1abe92088", 0x18}, {&(0x7f0000000380)="0c237ae63935834419e08792aaafc0a5a27b7f", 0x13}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="0d99bdedf0e1e17c9899864a66655fadd60e4ba31c719b3983055ca3dae7fd0205d7cab1d091fe2c6eb7f05b53114a5130bdac9c3eb9fbd20968e447498bcd45392a5b789ea50fe478564cebb0a66d72a2d9ef31de43cd9acd5cfa3138cab9d1259afdf27d8b28e7d5a0bda06aac645664f92b86d3fb44b0d3215f9c58ba090f84903ccc03b1a2984c6d2455d08ca2210918ff64567e2bd3e13d7d760c738e7858f49c47803b612421b1204e0cdbebf8740c1af5", 0xb4}], 0x5, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002500)={r1}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000002540)={{0x0, 0x3, 0x0, 0xe, 0x641d4dd7, 0x100, 0xe, 0x7, 0x401, 0x0, 0xb, 0x1, 0x8, 0x9, 0x785}, 0x8, [0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000025c0)={{r3, 0xd50c, 0x5, 0x400000008000000, 0x101, 0x80000000, 0x9, 0xa2e, 0x0, 0x32ae, 0x0, 0x10, 0x1, 0x7f, 0x4b}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000003680)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003640)={&(0x7f0000003600)={0x28, 0x1411, 0x100, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}, 0x1, 0x0, 0x0, 0x44080}, 0x10) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000036c0)={'ip_vti0\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000003700)={'gretap0\x00', {0x2, 0x4e23, @multicast2}}) r5 = gettid() capset(&(0x7f0000003740)={0x20071026, r5}, &(0x7f0000003780)={0xfffffff8, 0x4, 0xe, 0x53, 0x0, 0x1}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000037c0)=0x0) capget(&(0x7f0000003800)={0x20080522, r6}, &(0x7f0000003840)={0x0, 0x2703348f, 0x6, 0x200, 0x47c3, 0x31}) syz_genetlink_get_family_id$tipc2(&(0x7f0000003880), r2) socket$caif_seqpacket(0x25, 0x5, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003900), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000003a00)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)={0x40, r7, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x23}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa85}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffd}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r9 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003a80)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000003a40)="317c33fb1df49e524088c006cf4ea48784696679f0d5d3a7e0f29390479fcad5d3e261a339", 0x25, r1}, 0x68) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003b00), r9) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000003c00)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x1c, r10, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40044) r11 = syz_open_dev$I2C(&(0x7f0000003c40), 0x9, 0x408000) ioctl$F2FS_IOC_DEFRAGMENT(r11, 0xc010f508, &(0x7f0000003c80)={0x7fffffffffffffff, 0x80000000}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000003e00)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d40)={0x50, r10, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x4, 0x39}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "3ecadb"}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, ']'}]}, 0x50}}, 0x80d1) ioctl$SIOCGSTAMPNS(r12, 0x8907, &(0x7f0000003e40)) 1m51.860235462s ago: executing program 4 (id=1015): syz_usb_connect(0x5, 0x35, &(0x7f00000000c0)={{0x12, 0x1, 0x311, 0x39, 0xbe, 0x63, 0x40, 0x499, 0x1051, 0x692d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x72, 0x4a, 0x80, 0x3, [{{0x9, 0x4, 0xe3, 0x4, 0x1, 0x40, 0x69, 0x1c, 0x1, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x1, 0x7, 0x7}]}], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7e, 0x5, 0x80}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc704, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa, 0x20, 0x10, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x7, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0x41d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x8, 0xde}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x8, 0x7, 0x5, 0xff, 0xfc}, 0x30, &(0x7f0000000080)={0x5, 0xf, 0x30, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x9, 0x8, 0xa9d, 0x1a}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x3, 0xff0f, 0xe000}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "226a86577bec717d30c255175501bb93"}]}, 0x5, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x816}}, {0x2, &(0x7f0000000140)=@string={0x2}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc01}}, {0x66, &(0x7f00000001c0)=@string={0x66, 0x3, "2885380fefbbf5b9d382e0f7c509d14cbc5fe55de9fbaa48282c6bef8309ff999f5502a8ef00dd104f5c82f96adeeb698ef3039f823b4d36917d5adedc1d5f55f5b9147eaea9aa3c256a70c61cba0139acd4dc185a74645288e4217905ffe353d4f38cce"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1c0a}}]}) 1m50.392235533s ago: executing program 4 (id=1030): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xef}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x2, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) 1m50.143928505s ago: executing program 4 (id=1035): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x200) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = msgget$private(0x0, 0x1c6) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000040)=""/99) msgsnd(r1, &(0x7f00000000c0)={0x1, "64540e1e24c01bb47125c6acd3cd3ae43d28c2b20c7e3efebb0fe50cdc736a2ae92fed21d7558216d6a7932a961628ec49c2ac8b48c03795b89de4d9604b7853082dc25bc011d8ff06a73baa218fcead3f43318016551743cdef0d14968c52ffc799ecaccb11ef72e64abf3c784947f20e77f66e5e6a8c44b2be70358b4fe14b09eb"}, 0x8a, 0x0) sync() sync() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r3, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000014}, 0x80e0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040005}, 0x40000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000480)={0x2, r0, 0x1}) getgroups(0x5, &(0x7f00000004c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0x0, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1028, &(0x7f0000000500)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xd553}}], [{@flag='mand'}, {@smackfsroot={'smackfsroot', 0x3d, 'nl80211\x00'}}, {@subj_user={'subj_user', 0x3d, '-'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) epoll_pwait(r5, &(0x7f0000000600), 0x0, 0x8, &(0x7f0000000640)={[0x101]}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000700)={r8, 0x6, r2, 0x4, 0x80000}) read$FUSE(r5, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000002780)={0x8001, 0x1, {r9}, {0x0}, 0xffffffffffffff7f, 0x647}) write$FUSE_ATTR(r5, &(0x7f00000027c0)={0x78, 0x0, r10, {0x80000001, 0x34a, 0x0, {0x5, 0x4, 0x8, 0x5, 0x5, 0x6, 0x2, 0x2, 0xf7cd, 0x2000, 0xa, r12, r7, 0xfffffffa, 0x2}}}, 0x78) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000002840)) msgctl$IPC_RMID(r1, 0x0) close_range(r0, r0, 0x0) mkdirat(r5, &(0x7f0000002880)='./file0\x00', 0x1) capset(&(0x7f00000028c0)={0x20080522, r11}, &(0x7f0000002900)={0x9, 0x8, 0x7, 0x7ff, 0xe, 0x80}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000002940)={0x3, "2684499a6b6e3db3eb0a34fad8257bbe0bf7da836bc008a72ac31ad1ef291266", 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000002980)={{0x0, 0x1, 0x54, 0x1ff, 0x39, 0x7fff, 0x7fffffffffffffff, 0x3, 0xffffffc1, 0x1, 0x3, 0xed2, 0xffffffff, 0x4, 0x101}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r13, 0xd0009411, &(0x7f0000002a40)={{r14, 0x5, 0x0, 0x0, 0x6, 0x6, 0x9, 0x4, 0x3ff, 0x4, 0x5, 0xf43c, 0x5800000000000000, 0xc8, 0x4}}) 1m34.951804028s ago: executing program 33 (id=1035): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x200) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = msgget$private(0x0, 0x1c6) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000040)=""/99) msgsnd(r1, &(0x7f00000000c0)={0x1, "64540e1e24c01bb47125c6acd3cd3ae43d28c2b20c7e3efebb0fe50cdc736a2ae92fed21d7558216d6a7932a961628ec49c2ac8b48c03795b89de4d9604b7853082dc25bc011d8ff06a73baa218fcead3f43318016551743cdef0d14968c52ffc799ecaccb11ef72e64abf3c784947f20e77f66e5e6a8c44b2be70358b4fe14b09eb"}, 0x8a, 0x0) sync() sync() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, r3, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000014}, 0x80e0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040005}, 0x40000) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000480)={0x2, r0, 0x1}) getgroups(0x5, &(0x7f00000004c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0x0, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1028, &(0x7f0000000500)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xd553}}], [{@flag='mand'}, {@smackfsroot={'smackfsroot', 0x3d, 'nl80211\x00'}}, {@subj_user={'subj_user', 0x3d, '-'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}}) epoll_pwait(r5, &(0x7f0000000600), 0x0, 0x8, &(0x7f0000000640)={[0x101]}, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000700)={r8, 0x6, r2, 0x4, 0x80000}) read$FUSE(r5, &(0x7f0000000740)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000002780)={0x8001, 0x1, {r9}, {0x0}, 0xffffffffffffff7f, 0x647}) write$FUSE_ATTR(r5, &(0x7f00000027c0)={0x78, 0x0, r10, {0x80000001, 0x34a, 0x0, {0x5, 0x4, 0x8, 0x5, 0x5, 0x6, 0x2, 0x2, 0xf7cd, 0x2000, 0xa, r12, r7, 0xfffffffa, 0x2}}}, 0x78) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000002840)) msgctl$IPC_RMID(r1, 0x0) close_range(r0, r0, 0x0) mkdirat(r5, &(0x7f0000002880)='./file0\x00', 0x1) capset(&(0x7f00000028c0)={0x20080522, r11}, &(0x7f0000002900)={0x9, 0x8, 0x7, 0x7ff, 0xe, 0x80}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000002940)={0x3, "2684499a6b6e3db3eb0a34fad8257bbe0bf7da836bc008a72ac31ad1ef291266", 0xffffffffffffffff}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000002980)={{0x0, 0x1, 0x54, 0x1ff, 0x39, 0x7fff, 0x7fffffffffffffff, 0x3, 0xffffffc1, 0x1, 0x3, 0xed2, 0xffffffff, 0x4, 0x101}, 0x18, [0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r13, 0xd0009411, &(0x7f0000002a40)={{r14, 0x5, 0x0, 0x0, 0x6, 0x6, 0x9, 0x4, 0x3ff, 0x4, 0x5, 0xf43c, 0x5800000000000000, 0xc8, 0x4}}) 1m17.850786865s ago: executing program 5 (id=1199): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="d8000000190081054e81f782db0000070a000a000900142603600e1208001e0000050401a8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d302fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500d1d6e3ebd063a851270e98bebfeb789d005f5f188976000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43", 0xd8}], 0x1}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x6, 0x8f00fbfad9fed96f) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r1, 0xc1004111, &(0x7f0000000080)={0x9, [0x2, 0x9, 0x3], [{0x4, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x8, 0x0, 0x1}, {0xb, 0x3}, {0x8, 0x8, 0x1, 0x0, 0x1}, {0x4, 0xcd, 0x0, 0x0, 0x1}, {0x7fffffff, 0x6, 0x0, 0x1}, {0x7f36, 0x21e}, {0xd6, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x251, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x7}, {0x7, 0x3, 0x1, 0x0, 0x0, 0x1}], 0x1}) 1m17.775353341s ago: executing program 5 (id=1200): unshare(0x22020600) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x4, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2001000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000108001d000000000008001e000000000014000e"], 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r2) unshare(0x22020600) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x4, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2001000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000108001d000000000008001e000000000014000e"], 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) fsync(r2) (async) 1m17.626907454s ago: executing program 5 (id=1202): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x6, 0x5b, "963c"}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000850}, 0x20008040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x4e21, 0xffffff01, @empty, 0x2}, 0x0, {[0x1, 0xa8b, 0x5, 0x4, 0x434, 0x0, 0xa, 0x6]}}, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r5 = syz_usb_connect(0x0, 0x62, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103040505"], 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000140)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00036a0000006a03"]}, 0x0) r6 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0xc92) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) 1m17.404514303s ago: executing program 5 (id=1204): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) socketpair(0x1f, 0x4, 0x1, &(0x7f0000000080)) r2 = semget(0x1, 0x5, 0x6b4) semctl$GETPID(r2, 0x2, 0xb, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r3]) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x4000) semop(r2, &(0x7f0000000040)=[{0x1, 0x4}], 0x1) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000040)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000140)=[0x4, 0xb]) close(r0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 1m16.468187372s ago: executing program 5 (id=1207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$getown(r1, 0x9) setpriority(0x0, r2, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@empty, 0x1c, r3}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r4, 0x6f000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fdffffff03000000400001802c00040014280100020000005f14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x388, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2714}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd793}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x234d, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x915}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe4ce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xadc8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x952}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc6f9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5b}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1800000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe42f}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x388}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fcntl$getown(r1, 0x9) (async) setpriority(0x0, r2, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) (async) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@empty, 0x1c, r3}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) (async) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r4, 0x6f000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fdffffff03000000400001802c00040014280100020000005f14140f000000000000000014000200020000000000ffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) (async) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x388, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2714}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd793}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x234d, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x915}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe4ce}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xadc8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast2}}}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x952}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc6f9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'netpci0\x00'}}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5b}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1800000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe42f}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x388}}, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) (async) 1m16.28903762s ago: executing program 5 (id=1210): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') 1m0.72216492s ago: executing program 34 (id=1210): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') 37.448974747s ago: executing program 1 (id=1376): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) 37.332554949s ago: executing program 1 (id=1377): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x0, 0xff}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000080)={r4, 0x2}, 0x8) syz_usb_control_io$hid(r2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x2, &(0x7f0000000300)=[{0x14, 0xfe, 0x0, 0x4}, {0x6, 0x10, 0x0, 0xfff}]}) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_012={0x2, 0x2, 0x0, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) 34.298180574s ago: executing program 1 (id=1394): r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x1, 0x6, &(0x7f0000000000)={0x0, "0097ec0000206f0000a2263397400000060000000000400000aeb2e1e13d00"}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 34.172541176s ago: executing program 1 (id=1395): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0/file0\x00'}) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000100)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) preadv(r4, &(0x7f0000000440)=[{&(0x7f0000000200)=""/46, 0x2e}], 0x1, 0xf44, 0x2) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$packet(0x11, 0x2, 0x300) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xfffffffffffffffa, 0x2000, 0x100, 0x0, 0x0, 0x7, 0xfffff471, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0x80024, 0x2, 0x4, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x1}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) r9 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) r11 = openat$cgroup_int(r10, &(0x7f00000001c0)='cgroup.max.depth\x00', 0x2, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0x12) sendfile(r12, r11, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6, r7}}, './file0/file1\x00'}) ioctl$FS_IOC_FSSETXATTR(r13, 0x401c5820, &(0x7f0000000080)={0x0, 0x9, 0x2, 0x90, 0x2}) 33.336687966s ago: executing program 1 (id=1402): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00108008000b00e0000001080002"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008004) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r6, 0x0, {0x2, 0xff, 0x1}, 0xff}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0}, 0x1}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x58, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d00cf32cac80000040300000108000000e707800c00018006000600800a000008000280040015"], 0x76}, 0x1, 0x0, 0x0, 0x105}, 0x0) 33.095195777s ago: executing program 1 (id=1403): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000080)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRES16=r0], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 32.823420907s ago: executing program 35 (id=1403): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000080)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000040)={0x0}, &(0x7f0000000140)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRES16=r0], 0xfe33) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 7.460511947s ago: executing program 0 (id=1498): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x404, &(0x7f0000002780)=ANY=[@ANYBLOB="6100004e4b26ded45a9b9dbacc78be13835b74cb26e16077131d1093465011d098a3ee89500bbf301b136f98813928662006333214d01a667d92ee1a7ecb486b38a351b185133cfa1ecb8a27eab4fac1bd2880c1b28cc67f9f748bdd3584902cd377ce31610000009503004e9eb05543c3192f6b83720f1f89dce13b19d1906b713129003bc01b84584afe6fa8fcd407503ccd53a0b345adc771e4520c57454654609355724f4a067fb819f2a277a597beca23b10963748dcbba3526d0888096d442677757bde2d73f0bb6cdd6aae2323b541ef14072025125a8bbc0c24fb6551b15693da4fdd797803bf872beaa7576a010dedd8adf2adc1f49a522f8ee8005eeb250decb0b68543ccad74a3d326c0d175e34286ba0fe013dce87cae0bf64111b1063497bf1c7e84b4b8261e9c37a631d651169b36153b2b5f7d68aa9ba1f70699aa8956eda64a43cc0b6c0116cd87323f842a7e08617c1bf6d106162ea559906df0f3813b41adfcce6d46b62a697e1bfc217c4a15517248fd19a4a2d03fb72e10dcfb8441193ebbde587ff713eba3aeec56304731882f4ec736bce0a0d53cdd591af24a0ff1c776732db7ff6c681eced312d36678b388181853a0bc857240b67016cd0dc29891e829147ff40ea8a1e1366574110a4c2cb14760900b7d42f66a2824b33931d1965bea3ccbfd8d2cc5b19ac54d21ac7893cbbf5c2ee3144fd68d8c7dd33e9d7e65f83481e6b6e03c2fa88d3f9e27de9ce0f3bcc4b71abae93ee7b657f9892987fb49e6ce4a620aad211fe52a9f7403c7e0e4a5b44a361ff49a6a789dd8668f5d05d187db033c6b397e0c8e1a0192a5e413198225d4744722265bc2c72630b2bacf5951a08ae1b2e6313ad8a3a84043a967b56df04e5ffa9f7a9b15766054df260d754abe40ae2af3c24d8021402ea58e1ae523a77761af00903a52768b4b6f82bbeee0b3ef5f5f4c24e8f92ba2fe6538ce3f606a7675d2c4a1119c0a9fc68c8147cd1c624d9bc1e9ae724976cf043eb4813fa63cc61d1d155fc503d6792022b291b1513e5b1fd8cdb7fa36fd5ebe7d9cbe1d7a2f6d9171e1820bcad02c62264cd08f4d5e86565d7dcbb32fb78e7965e64b11ab86eeef4ef9a963df04b509f60c10e1af19a221b8ee1ce439a56c00a94eaa55c592da6f6d7ffee2667904ef517d4fe4a42cd034dd775eab78567686693d1efa6bd9fa92246b9859219bf6b2593b27dfb6f9fbf79b17f39c4f155de040a2de9c31ce4e96d7f407e2411d3b676cc22e1c6d940eea8790d150fc3c11967a1a416ce2a358ec4021fa6be819783dd4ffc1e6f08fb89e2f2632dfbe7ce483bcebaea2bfe6ca0df4a8ec82d9ecbcde3003258c9cb710a0df50e09d431844a517feca44d6c1152ddb8907cf5f450b001d6d706f982633da08b0b44c1b341daaa851f158e80e1f0bf5059b011000000"]) 6.588296522s ago: executing program 7 (id=1502): r0 = socket(0x11, 0xa, 0x5) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="4d01", 0x2, 0x4000085, 0x0, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) (async) ptrace$cont(0x20, r1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x108, 0x4) (async) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @loopback}}) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000008) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r0, &(0x7f0000000000)="cf3a19d02404e49cf90a0a4363d1", 0xe, 0x800, &(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10) syz_usb_connect$cdc_ecm(0x5, 0x62, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 4.453069973s ago: executing program 0 (id=1508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000001c0)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000280)={0x2, 0xfffffffa}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x6, 0x8a25, 0x2}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40186f40, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}]}, &(0x7f0000000240)=0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/power/sync_on_suspend', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000002c80)={0x30}, 0x30) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000100)=0x1, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r3, 0x6, 0x1}, &(0x7f00000000c0)=0x8) 4.412802819s ago: executing program 0 (id=1509): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000004b80)) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001540)=""/192, 0x0}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xf0ffffffffff0000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 4.300300945s ago: executing program 0 (id=1510): r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x40080) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x741, 0x1) r3 = socket(0x28, 0x5, 0x0) listen(r3, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x10100, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000240)={0x8, r5, 0x2}) r6 = socket(0x28, 0x5, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000300)={0x1d, r8, 0x4, {0x1, 0x1df, 0x4}, 0xfe}, 0x18) recvfrom(r6, &(0x7f00000000c0), 0x0, 0x40000002, &(0x7f0000000140)=@xdp={0x2c, 0x0, r8, 0x25}, 0x80) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$kcm(0x10, 0x2, 0x10) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x2c, r11, 0x103, 0x70bd25, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84880}, 0x40008a1) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000000)={r13, 0xffffffff, 0x1, 0x1}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000380)={r13, @in6={{0xa, 0x4e21, 0x9, @empty, 0x1}}, 0x0, 0x0, 0x80, 0x7fff, 0x6, 0x8, 0xc}, 0x9c) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x40000) r14 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r14, &(0x7f0000000280)=""/66, 0x42, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x1011, 0x0, 0xffffffff, 0x0, 0x0, 0x1}) syz_usb_control_io(r1, &(0x7f0000000340)={0xfffffffffffffe4b, &(0x7f0000000000)=ANY=[@ANYBLOB="b9a1879e4292cbf697016506b65f9b10993731c6fdafc98ae9e3d6"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.531252836s ago: executing program 7 (id=1512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1) write$qrtrtun(r2, &(0x7f0000000600)="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", 0x144) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000040000003900000008000300", @ANYRES32=r4, @ANYBLOB="10005a800c0003800500ba0002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) 3.396745848s ago: executing program 7 (id=1513): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'rti802\x00', [0x0, 0x2, 0x10001, 0x30, 0x67, 0x4c7, 0x7, 0x8000, 0xa, 0x104, 0xffffffff, 0x1, 0xffffffff, 0x1, 0x4, 0x7, 0x7, 0x1a449, 0x3, 0x404, 0x2087, 0x100024, 0x84000000, 0x20001e5c, 0x7ffe, 0x8002, 0x3c, 0x1, 0x6, 0x0, 0x1000000]}) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x4000014) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg(r2, &(0x7f0000000540)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x5, @local, 0x4}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="bd60732300aabced3150f1bae38b9c6cef31f9a52d82bcd4c3136e4cf6548580ad1427c466b47da9acc2001d72e026596010eca764c65cd06ed29e2faed62553f6f2612c3da0b89c5a78ce16a7c93cf76a07d968a41394a1913aafb957863c8defaaf7756e062c9e975680e85cf8d0608a64e44d525fe850e262", 0x7a}, {&(0x7f0000000640)="6c753337d374aa249074fd25457d9891555583e9faa91514a7bd8f2d4a9768b22afa3481a76d26fdc2db36811668ae0fb44e3908250c53e2a4c9b92cfcbddde89885bde27c56ff1ac768bbc57ea194e852effa16bb3526d166f6b7ceee04938e0612c0b074c1243952f12bffb7c116ec0b89d5088f9287f23b3ba789bf302b22b018a9e54187eb42b98f0c2fcdd600dcf3e05dc35cc755877698853c7e304b60cc7252f29b8835dd401555e3a5add335d65c316430069f0477cd6f7b090424e951abbf2174f49495d4c4ad124a0c6bb833ce4927ff7ff642de5983645dac6c14b13772f31cb5ad3f2c98cc6d7f5e734490e6065817f2df286801254d845dbe800dacee37142bf3ee2aeab5df09b464fef7056a355160a742a738b01e446750132c2ed58f974fb34e4724c1a1f07ea695542e45c5672b8000d866b179edfbfce2d658d56e7e5cd3ac380404e430a4f0042f3054763174be9b366e948022d9456d3a46dd2778bf01a3c501f938a51591c62f6005bf6c63e1529527298112afdde7e12446519baea4a749e16ed9a8f6b04b535279c23eda7ee748ac10ca9d43c7c04007201e81f547657c0639c7fa4bbd656c8bdde5510e1938d8bf1d551123c262d4bfc9c4fc6834e1c0960bc60bfae27a550a0b71f3513e19dd316ea33734779041ae8ca99a2280a1ffcb8bd3561890f8b11d26a4ecc1e32ffc005be0dbcb54c7ca10931b7fdb5894a612aee74ea2cf9fa6660cfe24bb8fba4bfa59887e39633b244bfc5c967d9d47fa439328ec5a0f1a502499dd6800f4c6e3e8b6fc50aad62dd1e21df0bddc9a862d76fe07f9d557f5b237e33a52ccae329589e667d004295d7a636727ebdb994f103493dafdba6a9bc3be30d7d18ed4a960552f43cf0dc8bcc163e2ad2c9261a42ecca83feac0bf91351b2c6c5eee914871020d6a9785df49d01135f6193df5465004718e6c322b19af3b1ddb54a8c7ad5c34d428cb8ddac3782c3c51a776486b2a03bfd417280fcdeca9c75956845b701c681fcaf6361d9393ffef4df8df93f7a9e9603b7937116a709e71e871f0a9f63984080a04a1785c6b0410c12d229f234551e4008daf002b23fb74c4221ee0d061158db8ec728b204a668881f3b851647ff90ca494e9f196096d73fbdc8dc07ba17da8f0d4596fc051c217b5931540205faf55355ac3ee6613d83a34e39d04038852c48264b85565a1966ef76546bbd81d4b69f01b35032162e499b887921e4187c052d7414ece97c9994dc82785dd1bcd22f620c276a21cea062949d9ac92390adf45953ae6a396ea0b8aabc9319bc94d75e63e0f888a0f792488666ad7d92cb4e5849467b1a0665f8d62969b554b8daf566c793e5d5409247eeba8b489c8de935484d184f40ff1f133fb6207fb2ca5518a42c7c1a78271e60cc12e2777c7dba4b9b4fd7e40f8517291bdf2deb85626fc734b0355c107e4e848e961d0465b77e362a6f6244f11d5ebedbf712d5600a1676ddb99b2cfede12b56d77cd231d22e95ed9c43d90b7a334496170d1e5c2ebf472c51fe09645121de7867037776453c21ba8f3100af8bb876a7f4ba103c32ab15363912243358fcccae9f92b3f50006d377d3e7297f70276d5e412f3625da19851be93f3251681ebb6276b6c81b4bc003831e46ca98a474ff08f6e7267333bfb008e63f6b92db56cdcd46dc777763305333dcb74238e50473e14b73420427ea6047bf824ed24c6324906434256ffeace2de9a3b870619156d062b183a152df6aa3c936e924386450d1e9f595199449da75ff5d94da1f152821b03db6c1dbd17e015482130aa59a88c906d119aa666b25ad19b17902f857f10249991d718b2857ba236be1e341dfd7eb24616f689c71c098738d2d0d06280e11ba3d05b66297b18f529157bea76ebd1b67f88fec85368444f3655a081c1bc25ee3a9525179a8a8e06bb1ce001daafb3eb6c16d9f10d93c1a3ee2585b054a2635530924b04597fffe01b67d11b167a95e05a1ebdf7a17b972d0bbd98a211bae1d2170acc093baa6f59b9790ab9feb84d3a3dd9852b76bc12758b4af8c1f77df73cc5ac233350807cbc24f8ec465948e90c99d3066046afabb31f01d01d6916fc72588bb9028bcccfd8fe5db22a23041c975004c5cd4f37d6efd1ce5535d9705197ca688bec6391128e9d0462d7b16b760a816eb2464972fc64a9afd3d011b935ef260867e6331509c64bda74e539a9fefccd4e1aa0f645d90073bbb22e260f307a154e11222e18a74c4efa7a5241498da249cb472242cd35ccf3a856733ce87c8fa85d4154ef50db8f528b17a765aa040f500bdb808f7dec35fde06cf2d6c59c735d9a6dd99274019c3ca1f472927ff83bd103c31e33ef6d9c24f4734b4e5b10acee797aebb6e8a8e82c1422e9c3f03349d68f8111455d65ff8bb9289572756041f44d15b7d68cf24b88af7e50bdc32b96cf78a2233a24f74fa34d785c6ec6a72a3cd0f8e07acbca94f25252383c2578732820a605c28e4fee1fc9f5579e220c137e7678f88d0040bc2f3d60308ca73e977442e0ee1cb6c5ef45df3c47dc244cc27ec472da30a9b9bbe6f8812033354999244c78659316f3a402d2e08efba6b0291408634797a0816d6e06fe3874332ed0d466e756bfd5779c269c9b6ba4c465907eb5e8053922e37ded2352b01cc878e9a04304a707492177a6e3bb9c2676ce9da128238e060a2023f31c158aef5578e38a532334f69cfb396f0c7257f2739a9c0b2c69ed9a4be496b19fdfe93620119035ec42ce53fb38de3ecc96e4a6e9df6ddefca61b9bd463211c6bbb03452661cc58ce3e224b9730e1710d60d3f221185b291a7dfca3390413b774688ed603a70148f9c7995c11f9d5528af464f21ef7907df429e2b032e808682983f40fec5c49ed04a2efb49f75cb0727fe58ad83e303449775316f9972e9e83226968fc531e6958424b989dc5dd9bcb616eb3630a8a225dd4e033263eef201b5fd0492173d012ed9d5b37f6d90533cc43cd8a9c5cbf8395f524ae7d26414a088734cd61acfe7fe31fb317735878d2cc1f4646951b89ff2072937bc100f6d521bc9f54625729cecbbc81ad3e00a94dea64a3b9920d08e329c75514c9ee84a33e95eb4a18016e467534fabbacf18d73e08131bd2b3afbaee7640311f2f8a8b6a5573fc8eaaf92f78b97d3699880a6102885d92c9e19abe67c5a8d1974c346d82667ff253eb5cea5eed39b0eb11d629082bc0b7eae7b0957bc3e57e8204fa26ea7574b8542667cd1fff066f40163273c290bef56a6f2e519702bb787ba7ebfd7b8577bc1cd91ab27ce6bbaf5667e91536608e945d37f06db68e659e8453704f2b0eef5310aea4d0c3cbe3119281510dbcf60c9c269f2bbc77a6d263b3bf2abf919df4c87fe75d403a1a4e6f00adc2aaf4ddd0507122dc4eab710b2cdb31f16d86aee1279ab3eadceb6b6dbd4eb0b5114032a9c49bf74e87a44f0360bb554e799adddebe6fc7f0a4f519f23527c43a0ee6cf5503780611949a4f5989ce9d4c06fb91b82fe44a9d4ffdf21e477a40a7316f26f19a725d489a579c478341baacfd7d17134de841c524118af99e6d9286a479f4be7266ed886817c8dad3fccfa888c8e715f7d7fc77e682bd923979bbe338f381591aa2339345cac61aa244a3374edf7e93031ccb3c8620d5250710ac885c0bdb586add353543cdf9e25fe95b7ba08a9fef6598043839667d28c2b07e29c2da2073e271083e22c5edae93447a8ab9373feb1b8883e918c01a958702298a31e68ff6a24c62eba1d7b04cbe097396aadc1a746015a20872d2cf2a9408380aad249c9a175842560fba396e9f203da3b6c63d373cdcd9f87d617a0382ce4ca98b3ed7b588843bbf2a034764da078cd8db965a1b2b1d48ed0fc59680d0bf552b79c7eff522809cea8f57272adb588aaef94d381b37bfe5fa345620b71b644c4e8aa3c853ac6db8cff7c086dc463c56ddb98dd8a95ff37cd2efbc667494a215a7e790dc03e7aa87b6665cc3efb16904464e8d677de8c59c630cfe47fdb42a4e0439d73d105ce5b689a34cc8a7bd5444190bc28aceab563a1f943006aacd70bf8483cc4a57d94d489ab4fc4cfcabc7aaa414384ed8c708d8d65e21cb5deea976ee4d4af535558bb6d5801b7c92112eed2705b65d4b127c661567889360a225f288cd0b6bafd197050fbf01386eafe7798835bc13efabc5fc1319db9d4b0121724a5fadd3d95ddc0796702333deb741f80b3a28339f356fe17bfa4452b76587c936cdb966aa8d4efa969981d0c25c01b0c3b128a8178fd56b79d5fac5e5788c0d9cee2cf7fdb72e0e6c9e8459817371b2c5e9688286c3735e5cc411b2bc030a7765c389e3db216504106c3e15ef4232ef1ca378480ce83247d7b4587b0a6af21035b6747f02ef460e37bba946ca3e6ed64c8251ea8bf89eabda9b2e46661450dae8930080fd3499dea2365c0ad9a79d19474d6be1412ed5c52e1c728f857566aae2989592697bfb9c1da0253c6da192e1c4cecbdef95120c83cf5564084a2beb74a32e10fc72947b1aae2616af249fda192126cfad147d6d03e763d29fa1f2e103b62562ff560b3041ed8068a318f7cab2c829e98ef61e1c520568ab9bbe0e1cb29f2c91fd5ec985b8353ab9010c0d81d7313e72dc6bf2f576d6969ab64cb940c5ee74ec2bf6fd22b7b340f696405b52fc3632b6333da91278bce1988dc4fbf1a3e04c01e0b0bfe3388600c768cc38fe353fc1ea50ff96a5314d602bfe6ae975d68e3936e6a8d841cd72edb825663f4a00a83ee90b6c2d540428ddb61622f8abd61f04aa496f9b16ea29b220a8ca36b2d94766ca9e0f0b06bcd5e9dd19f7cbd4500d82a6fc9ecb68c2b8be06141ee79acf870ff127a2e175fa81ce722f098f0971b9b0bdc3bdf08aa6b89bdfdfdd8e7d7c20dbdafbb1d636746dbe80c38630981245f5dc4d41f9070843bc339d4c1c9d32574b12ef7fd3989623fa46379db056af97678d3ee7a18b6463bd31ccbe9ce08d1df5015315153adc30be60b3235b261ea7f7f97ff5ec53f166ea1d75b4c441d421afb3d6e856ce54556d15a6a8678008f713604c110e22797af01f73f1d47cb55673760537aed792eccb2c4db148dc6b00d63c8325df400ec95a6c51be75f5a0f918caafe40f8fef2d2f4c0fbe271918f367aec47e5d041dfc7e75cd4d3e250a6c973d1670a570d33b44dde0d971bd0f11d5947cb45f5c1d80c748d13d16bd9e878213657fc348d408406ebcb33ffaf636def0102c13c4e1a5263b2615f6f3c196c8597d5da8ae2459acf24124db3cf6ac38ebae454fc059ea2e6c2b4d57c51cf90419ef2aae4be8df6ca48ae3a6cac6bba061baaf3995629887c12050cbdca39c45571250e4355ac9c7b57bf89a1183ab2ef183f7903fd8f2576d95530d64573577951ded52e03b653979cf6895d8080984af19e21898abe4be103eae632a4822d0a2566a3d5027e2169bdd821e970be1f860c4cebd670cdd95dc285b43101da983a2a8862b4616955400b90b0f3bd425d534c1ad06c7432013b59c6b11135f4ba9aaec7d80c5c0ff94fc3ab94ee205466e77edc663de06e402adaa19d7b6ecc0fc2684135990997dbcb5a3bab2fd4bd7be78cc4dc180bbb1c075c4ec0d4093252fda6c3d7017fdcf5b3c5e1eb1cd02d63111c9086482d7e67a45bc87d7b4846d76c6eab95c0c9643b74853e711a7d29f9ff0a8ba936104a6e580b3727e7651c6acd8149c152427211ab6daaf5a3d86545a190512db9af", 0x1000}, {&(0x7f00000001c0)="7930a6616426f762aa36a2e149d97831ae3d5fb2fba5d01b4e706e46b23f798c6c5dc05c82f431c742efd7abecca63af5adfef512b1bfa01f8a07e000000010000000029bb500e34b85e9f98997cb3e58ff838151c805a2f3a884ea1cad00b2d9c57d4cd35d83d9bc2d186b6b2ca045ba5df3e02a0a62bbf5bbea9ffa40c11f08fe1f35f43878bc63bf9c9e06cad200406ee2f642b7c2fd8f5", 0x99}, {&(0x7f0000000000)="859e3ea0e7429b063e654a26e5ccbdda0bddb0dc023ebf516340ac3e458c9419e146c4528899c43bc39aa0357926e7947ce2cb45b1f3", 0x36}, {&(0x7f0000000280)="669f1e37b3a15699d5d8c88757aa4b03f64a2f5607bf3677945059243f36d74ad20b6ccf4286106c95d6c30ccc1932bd45ebdc766adc10fe49ad8eabc7e476cc27b4b246ff32a87fecbf3be684bab0818ce66f0ef8542dd4a90ac23aa7ca6cc83cfa4d7135892ed4744675b5", 0x6c}], 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x4000804) 3.325795488s ago: executing program 7 (id=1514): syz_usb_connect(0x3, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0xf0, 0x84, 0xc, 0x8, 0x1286, 0x1fa4, 0x3686, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x96, 0xfd, 0x0, 0x0, [{{0x9, 0x4, 0x3b, 0x7, 0x0, 0xa3, 0x8, 0x83, 0x5}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x16, 0x33, 0x39, 0x20, 0x2040, 0xb200, 0xc7df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x28, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x8c, 0x80, 0x0, 0xa2, 0x5d, 0x71}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x48d, 0xce50, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0x88, 0xb, [{{0x9, 0x4, 0x0, 0x22, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0xb, 0x2, 0x1, {0x22, 0x53d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x5, 0xa5}}, [{{0x9, 0x5, 0x2, 0x3, 0x60, 0xf, 0x3, 0x81}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x9, 0x10, 0x6d, 0x8, 0x6}, 0xe1, &(0x7f00000000c0)={0x5, 0xf, 0xe1, 0x5, [@wireless={0xb, 0x10, 0x1, 0xa, 0x80, 0xa, 0xc8, 0x1, 0xfe}, @generic={0xaf, 0x10, 0x2, "4571f2642f09d0cbe624d58145438fcf4f2c01451038300c48eba921b5a971fb2efd81d915b769d3b061aadd59b20da7f1ea33ce6e63136e10ef90221c0b66f1db3076b3934599d8faa1c68efb4694d70fb641b2fc094f02fef44e0ee7b354d0413179be2a0158a26cc9fd4a1e4c470850c19302826ce6ded0d05b93e53ff155f2e32685b520b8e9844804e6b9b2ccf35e067fc6684ba113870f36db9d42ed04f4906a4803d7757c8d36e205"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x7, 0x20, 0x4, 0xf}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xfc, 0x8, 0x4, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x5a0, 0x0, 0x8}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xfcff}}, {0x33, &(0x7f0000000200)=@string={0x33, 0x3, "22d24aafba62583f45ed18d9bc5fa21189ccb269aff2bef63050d760aec5bd270416fce97645f8a277af17a1e9ef28b2c0"}}]}) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x17, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x4004) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) 2.982168186s ago: executing program 6 (id=1515): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "e3baf3ca"}]}}, 0x0}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) (async) r3 = accept$alg(r2, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000480), 0x12) readv(r3, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/180, 0xb4}], 0x1) (async) sendmmsg$alg(r3, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000001c0)="600acf5a9bd524eb24b587d669ec230e195f47b0714ed0706724c7027345a5c5549147e0e0eb421cf5516f15825f1123dbd8d9fe13ee446b8d0010000083c210f701d90618f567027058453b612dc5fe6c1b5f7c2d02dd75f74572e04a275f9b31d3e3c1cd02000000e16372e3b9c6f8af", 0x71}], 0x1, 0x0, 0x0, 0x4c040}], 0x1, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001200)="1129d12efb42678d4673667ef157f88d8f115d34af65499c721d9d0ac085577b7056685da95b0792d0ded09058125728c07f", 0x32}], 0x1}, 0x80) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80440d5}, 0xc00d0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000000), 0x4) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x127140, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 2.246211611s ago: executing program 6 (id=1517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, 0x0, 0xc8) (async) bind$packet(r2, &(0x7f0000001100)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = dup2(r2, r2) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@empty, @empty, @mcast1, 0x100001, 0x6, 0x0, 0x100, 0x10003, 0x180107, r7}) socketpair(0x18, 0x5, 0x10000, &(0x7f0000000080)) 2.127973876s ago: executing program 6 (id=1518): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500fe8000000072080003000500000000", 0x39}], 0x1) (async) close(r1) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r3) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000900)={0x30, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x8810) (async, rerun: 32) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x184, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xa4}, {0x8, 0x15, 0x800}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9b3d}, {0x6, 0x11, 0xedd}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0xfff7}, {0x8, 0x15, 0x101}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3ff}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x7fffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x7fff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x620}}]}, 0x184}, 0x1, 0x0, 0x0, 0x44851}, 0x40000) (rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) (async, rerun: 64) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000161401"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bc18a7b7f620e90f01d550230102030109021200010000000009044200007be37900"], 0x0) 1.919981294s ago: executing program 6 (id=1519): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @multicast2}, &(0x7f0000000340)=0x10) sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="7cc5ada8d0b5c6c0bc9b1908fa3a9a05948ef400d1cc810d1d9b5207d6c211", 0x1f}, {&(0x7f00000003c0)="771237ab4c9dc8e1c2984480ad84103872d500371070c274c9916daa43d01ff436c83d06c43923108d68eac487428cc748a1942b16d1", 0x36}], 0x2}, 0x8000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001800)={'#! ', './file0', [{0x20, 'cgroup.s:\rt\x00'}, {0x20, 'J\xadS\xabY\x04\x89o\xcfT\xba\x82\x1fvG\xa5\x1a\xea\xce\xa2\xbb\x1e\x16\xfd\xdf2\xc7\xd4D\xd5\xb6\xd3\xe5\xcc;\\\x0e\x8a:\xc1\xa3\xf8k\x99\x16\xf4\xc79\"KL\xb2\x99\xf7\x8c\x8a\xc7\'\xaf\x9a\x85\x00'/75}], 0xa, "b524be350e7611b133a163b4ab1b040000000000fdffffff00000000200080ca925f71ffff1122765bc8e7157e278f87ee19f333b4d628c5ac4b44c07bd2708ff2c7bd51d4f9c36c027fd192db335bca10551a4b61635dbeda79e3eac5dcba174008edb66e7c6b16ea5612e2b90233374eac86caf07aad4598836160adf8caff54a1cef9907a9c2595598201db3dcd9820394b9dbc463818139cafb3322f0271602083b8d908ce6a9d80476c34eb660f79198c1ad63552c072b96e5b1ec80cc080d4e7cfb812d05e15e41ae812d8f2063307ccaf73b8059d9436020947a304414206e63bd2"}, 0x149) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"}) mknodat$loop(r3, &(0x7f0000000180)='./file1\x00', 0x6000, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000002c0)) r5 = accept4$bt_l2cap(r3, &(0x7f00000005c0), &(0x7f0000000600)=0xe, 0x800) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000640)={0xa, "68048b"}, 0x6) write$UHID_INPUT(r2, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) sendto$netrom(r2, &(0x7f0000000000)="0721ba7ff7efd6cd39707e60a3cc7e4e5eded8892c06055728ef08cacc440b56b869356d62cd54583b1df0952941280ce09c1530c10126fe65b79ebf7be6126d89ecfcb92f5ef7cd9acf9fa3404c35d6609b1bb111222188d4c961d2d4d02060f840990d422a08bd853da446871271fcd75ac44048c67b8452eb422e27da65", 0x7f, 0x80, &(0x7f0000000080)={{0x3, @default, 0x2}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000480)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) 1.834842356s ago: executing program 6 (id=1521): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SLAVE(r1, 0x703, 0x26b) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9431070900d60083008000000b09007a150b5d8c3dda"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000002b000b00000000080000000008000000040003000c0001"], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x800000, &(0x7f0000000300)={[{@huge_advise}]}) chdir(&(0x7f0000000140)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) (async) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) (async) ioctl$I2C_SLAVE(r1, 0x703, 0x26b) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9431070900d60083008000000b09007a150b5d8c3dda"], 0x0}, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000000)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000002b000b00000000080000000008000000040003000c0001"], 0x2c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x800000, &(0x7f0000000300)={[{@huge_advise}]}) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) (async) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) (async) 1.216388888s ago: executing program 0 (id=1522): socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f00000003c0), 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r3}) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4008000) socket$igmp6(0xa, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r4], 0xc4}}, 0x0) 1.213181401s ago: executing program 2 (id=1523): set_mempolicy(0x8000, &(0x7f0000000000)=0xfffffffffffffffd, 0x2) (async, rerun: 32) set_mempolicy(0x8000, &(0x7f0000000080)=0x9, 0xb936) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x57, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000002d000b0026bd7000004000000b0000001400020020010000000000000000000000000001"], 0x28}}, 0x8010) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000089c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x1c, 0x1, 0x1, [r2, r2, r2]}}], 0x20}}], 0x1, 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x80000000, &(0x7f0000000300)) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a"], 0x38}}, 0x2040) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c0000001c0a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30"], 0xe0}}, 0x0) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'geneve1\x00', {0x2, 0x4e23, @local}}) (async) remap_file_pages(&(0x7f0000e8e000/0x2000)=nil, 0x2000, 0x6, 0x8, 0x80000) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) pread64(r9, &(0x7f0000000000)=""/4, 0x4, 0x7) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) 1.11283961s ago: executing program 0 (id=1524): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, 0x0, 0x119) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000080904"], 0x0) socket$inet6(0xa, 0x3, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x63, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000002b0007f465f0336c486f7176027c0000"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8082, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0xffffffffffffffff], 0x24}], 0x1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="021704000000ab"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000540)={0x20, 0x30, 0x4, "f397860b"}, 0x0, 0x0}) syz_usb_control_io(r9, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x0, 0x13, 0x4, "28ea0ca7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYRES64=r6, @ANYRES32=r10, @ANYBLOB="28005080110001004abee33908f8eef16f162471f400000005000200010000000800030005ac0f00"], 0x44}}, 0x0) 1.061828195s ago: executing program 2 (id=1525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000180)='wg2\x00', 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x16, 0x1000}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xf0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x2, r3, 0x29, r1}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r12, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000009368f11a82dce8998b47ea651c47adbb4d9fc969839e8d150d61a4208f1876b51cfddfa694d2c74504f902c0c9f05d0aac6959591b783ec93de26c8662879e7b46d882b6a3745296e48974b8e3c093da74f3a1803586acd48b121f3cbcedb56850e43176c2", @ANYRES16=r13, @ANYBLOB="00042bbd7000fcdbdf253000000005003500fb000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4040040) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000bc0)="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", 0x4fe}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) 652.711183ms ago: executing program 2 (id=1526): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000640)=0x6, 0x4) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a341", 0xffffffce, 0x20000041, 0x0, 0x0) 611.292243ms ago: executing program 2 (id=1527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r3, 0xf0000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x31, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x0, 0xa, 0x8}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0x4}]}, 0x64}}, 0x0) 504.598659ms ago: executing program 2 (id=1528): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x109000) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000000c0)={r1}) 388.295456ms ago: executing program 2 (id=1529): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1c) r4 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffffc, 0x0, 0x1, r4, 0x1}) (async) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r4, 0x1}) (async) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "1a29b98c"}]}}, 0x0}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0x2, 0x6, 0x0, 0x2, 0x3, 0x1, 0x6, 0x7fffffff}) (async) write$P9_RVERSION(r6, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0xd, 0x8, '9P2000.L'}, 0x15) (async) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000, 0xf7a88e66408f07db, &(0x7f0000ffa000/0x3000)=nil) (async) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r7) r8 = socket$qrtr(0x2a, 0x2, 0x0) accept(r8, 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x58a8b9c2, 0x6, 0x9, 0x4, 0x7, "0000fd000000000009e49200", 0x802046, 0x200068e}) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 249.432969ms ago: executing program 7 (id=1530): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x3, 0x101}, 0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e24, 0xb, @dev={0xfe, 0x80, '\x00', 0x20}}}}, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x40000, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x400100, 0x0, 0x6f6daedf, 0x0, 0x54}, 0x9c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x3, 0x101}, 0x8) (async) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e24, 0xb, @dev={0xfe, 0x80, '\x00', 0x20}}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x40000, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x400100, 0x0, 0x6f6daedf, 0x0, 0x54}, 0x9c) (async) 165.252729ms ago: executing program 6 (id=1531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r4, 0xf501, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x80100, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) r9 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001b1c1b100c00000000000109022d000100006000090400867980020300000009200604000122050009058103204009080709050203400009"], 0x0) syz_usb_control_io(r9, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r9, 0x81, 0x1, &(0x7f0000000040)='t') syz_usb_ep_write(r9, 0x81, 0x1, &(0x7f0000000180)='@') bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r8, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r7, 0x7b2, &(0x7f0000000280)={&(0x7f0000000400)=[0x401, 0xbf, 0x8, 0x2, 0x5, 0xde0f, 0x3, 0x8, 0x2, 0x0, 0x8, 0x4, 0x6, 0x7, 0x6, 0x9, 0x80000000, 0x6, 0x7, 0x6, 0x7, 0x7f, 0xff, 0x3, 0x8, 0x9, 0x0, 0x80000000, 0x9, 0x6, 0x3, 0x4, 0x7e, 0x7, 0x3, 0xf1d, 0x2, 0x80, 0x7, 0xf, 0x4, 0x99ccac07, 0x4, 0x5, 0x0, 0x1, 0xb07a, 0x5, 0x4, 0x6, 0x2, 0x1, 0xfffffffc, 0xe, 0x4, 0xa6d, 0x9, 0x6, 0x5, 0x3, 0xfffffff9, 0x80, 0x6, 0x9, 0x7, 0x80000001, 0xffff, 0x8, 0x7, 0x1bfffff, 0xfffffffd, 0x5, 0x0, 0x7, 0x2, 0xac, 0x10, 0xb, 0xfffffff8, 0x1, 0xffffff93, 0x7fffffff, 0xc717, 0xe52, 0x4, 0x4, 0xaff, 0x4, 0xfffffd48, 0x0, 0x7, 0x10000, 0x3, 0x1000, 0x1ff00, 0x8, 0xe9b, 0xffffffff, 0x3, 0x1, 0x4, 0x3, 0x40, 0x2, 0x101, 0x53f8a93f, 0x1, 0x100, 0x7, 0x6d71, 0x5, 0xa3, 0x0, 0xef, 0x7, 0x401, 0x5, 0x9a8a, 0x1619, 0xd, 0x7, 0x1, 0x8, 0x39e2, 0x0, 0x4, 0x5, 0x6, 0x2, 0x6, 0xffffffff, 0x8001, 0x1, 0x8000, 0xe, 0x0, 0x1, 0x0, 0x1000, 0x2, 0x2, 0x0, 0x40, 0x7, 0x8, 0x10001, 0x3, 0x2, 0x6, 0x2, 0x0, 0x2, 0x8, 0x5, 0x7, 0x6, 0x7, 0x101, 0x3bc, 0x9, 0x7, 0x1, 0xffffff7f, 0x5, 0x7, 0xe, 0xb1a, 0x1, 0xa, 0x7, 0x2, 0x10000, 0x4, 0x6, 0x56c9, 0x1, 0xda, 0x0, 0xd, 0x6, 0x5, 0x7, 0x2, 0xfffffff0, 0x9, 0x13265196, 0x47c, 0xd839, 0x7, 0x5, 0x32, 0x5, 0x0, 0x9, 0x9, 0xfff, 0x90, 0x1, 0x6, 0x3, 0x5, 0x3, 0x3, 0x9, 0x6, 0x2, 0xfffffffa, 0x5, 0x2, 0x4, 0xffff, 0x8000, 0x0, 0xe, 0xfffffffb, 0xffffff80, 0x5, 0xf, 0x72f5, 0x7, 0x777, 0x5, 0x0, 0x2, 0x7f, 0x0, 0x2, 0x2, 0x7f, 0xd, 0x80000001, 0x7, 0x8, 0xf2b0, 0x8, 0x8, 0x100, 0x9, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x2, 0x6, 0x5, 0x3, 0xbb81, 0xffff, 0x8, 0x7, 0xfff, 0x3ff, 0xff, 0x4, 0x22ef, 0x2800, 0x10001, 0x67, 0x8, 0x3, 0xfff, 0x80000001, 0x80, 0x6, 0x4, 0x6, 0x6, 0x2, 0x7, 0x6, 0x43f, 0x3, 0x7, 0x80, 0x0, 0x8, 0x1000, 0x4, 0x0, 0x1, 0x8, 0x20000000, 0x3, 0x2, 0x1, 0x9, 0x2, 0x8000, 0x1, 0x53c1, 0x5, 0x7ff, 0x3, 0x9, 0x100, 0x10000, 0x57061a6f, 0x1, 0x7ff, 0x0, 0xffff, 0x1, 0x4, 0xce1, 0x3, 0x3, 0xe8, 0xffffffff, 0x468, 0x7f, 0x8000000, 0x0, 0x6, 0x2, 0xa9, 0x9, 0x3, 0x0, 0x2, 0x1, 0x4, 0x1, 0x1, 0x5, 0xb, 0x3, 0x8, 0x44, 0x8, 0xfc3, 0x4, 0xc30, 0x9, 0x7, 0x8001, 0x0, 0x1, 0x5, 0xb, 0xffff7fff, 0x7f, 0x3ff, 0x6de, 0x6, 0x1, 0x8ea7, 0x7fc, 0x3, 0xf, 0x1, 0x9, 0x80000000, 0x8, 0x62, 0x2, 0x8, 0x3, 0x2, 0x3, 0x7, 0x4, 0x2, 0xfffffffe, 0x1ff, 0x8, 0x6, 0x0, 0x2, 0x9, 0x0, 0x9, 0x8, 0x9363, 0x76000000, 0xffff249b, 0x9, 0x8001, 0x8, 0xfffffffb, 0x1000, 0x2, 0x7a, 0x4, 0x6, 0x81, 0x8, 0x4, 0x58, 0x800, 0x1f40, 0x3b, 0x3ff, 0x9, 0x1, 0x7, 0x3da28de3, 0x99f, 0x2, 0x8, 0x3, 0x8e, 0x0, 0x5, 0x5, 0xb8, 0x6, 0xfff, 0x9, 0x38f1, 0x3, 0xf, 0x1, 0xfff, 0x9, 0x8e98, 0x4, 0xffffffff, 0x4, 0x3, 0x7, 0xd1e3, 0x81, 0x0, 0x4, 0xb8c1, 0x2faa00, 0x1, 0xffffff01, 0xe, 0x3, 0x1, 0x1, 0x6, 0x3, 0x7, 0x7, 0x9, 0x0, 0xce49, 0xffff, 0x100, 0xc, 0x3, 0x0, 0xffff, 0x3, 0x85, 0xffff, 0xfff, 0xffffffff, 0x7fffffff, 0x7, 0x522, 0x4, 0x3, 0x0, 0x7ff, 0x80, 0x377, 0x6, 0x0, 0x7, 0x3, 0x6d08242d, 0xfffffffa, 0x3, 0x7, 0xfa, 0x6, 0x0, 0xffffffff, 0xfa2, 0x1, 0x0, 0x100, 0x2, 0x0, 0x8, 0xe, 0x6, 0x5, 0x0, 0xddf, 0x800, 0x40, 0x0, 0xfc, 0x48, 0x5, 0x6, 0x81, 0xab6, 0x2, 0x9c, 0x3, 0x5, 0xdd, 0x2, 0x5, 0x800, 0x0, 0x18, 0x9, 0x2, 0xbfd, 0x7, 0x8000, 0x1, 0x800, 0x8, 0x8, 0x400, 0x7b8e38f6, 0x8, 0x5, 0x2, 0xfffffff9, 0x400, 0x8, 0x80, 0x6, 0xd5b, 0x5, 0x2, 0x0, 0x3, 0x4, 0x2, 0x8000, 0x1, 0xcbf, 0x5, 0x4, 0x1000, 0x9, 0x4, 0x1, 0x7, 0x558f, 0xffff, 0x2, 0x5, 0x9, 0xd3, 0x0, 0x9693, 0xe, 0x4, 0x7f, 0x10, 0xfffffffc, 0x9, 0x0, 0x2, 0xfffffffd, 0x50ab, 0x7ff, 0x0, 0x101, 0xa, 0x80000001, 0x5, 0x9, 0x7, 0xf, 0x861, 0x0, 0x3fe9, 0x1, 0xff, 0x9, 0x2, 0x10, 0x7f, 0x200, 0x0, 0x5, 0x2, 0x6, 0x7, 0xd, 0x2, 0x5, 0x7f0, 0xfffffffc, 0x7, 0x8, 0x8001, 0x1, 0x8, 0x1ff, 0x10000, 0x8001, 0x4, 0x8, 0x10000b, 0x40, 0x8, 0x4, 0x1, 0xf, 0x1, 0xffff7fff, 0xfffffffa, 0x8001, 0xb, 0x6, 0x5, 0x0, 0x4c, 0xfffffffc, 0xe33, 0x4, 0x5, 0x3, 0x3, 0xffff, 0x0, 0x3, 0x3, 0x0, 0x50070dae, 0x40, 0x7, 0x3, 0x400, 0x0, 0x2, 0x1, 0x6, 0x2, 0x7, 0x4, 0x7f, 0x5, 0x8e, 0x80000000, 0x4, 0x400, 0x0, 0x4d869685, 0x8000, 0x4, 0xc701, 0x8, 0x7f, 0x6b9, 0x0, 0x6, 0x9, 0x2, 0x8465, 0xc6, 0x3, 0x6, 0xd, 0xffff, 0x0, 0x7, 0x3, 0xd86, 0x1, 0x6, 0x9, 0x7f, 0x10, 0x49a4, 0x7, 0x6, 0x5a, 0xfffffff8, 0xff, 0x3, 0xfffff651, 0x6, 0xc, 0x0, 0x9, 0x6, 0x48000000, 0x5, 0x8, 0x7, 0x8, 0x0, 0x2, 0x8, 0x800, 0x7f, 0x9, 0x9, 0x0, 0x0, 0x1000, 0xffffff95, 0x9, 0x2, 0x7, 0x4, 0x8, 0x81, 0x101, 0x9, 0x7, 0x539, 0x9, 0xffffffff, 0xfffffffa, 0x6, 0x7, 0x8, 0x7f, 0xc, 0x5, 0x2, 0x7, 0x5de, 0x69, 0xfffffffa, 0x27b, 0xb, 0x7, 0x5, 0x9, 0x7fff, 0x8, 0x7, 0x5, 0x2, 0x9b0, 0x0, 0xffffffff, 0x3c, 0xfffffffa, 0x8, 0xfffffff9, 0x1000, 0x1, 0x5f9, 0x4, 0x6, 0x5, 0x7, 0x5, 0x2, 0xc4, 0xfffff000, 0x1, 0x8, 0x5, 0xbc5, 0x73036072, 0xb, 0x2, 0x9, 0x2483, 0x800, 0x0, 0x9, 0x6, 0x3, 0xc1b, 0x5, 0x7fff, 0x81549fbb, 0x6, 0x5, 0xd5, 0x9, 0x9, 0x1, 0xa, 0x2, 0x3, 0xfe, 0x4, 0x8, 0xae3, 0xfffffff9, 0x9, 0x4, 0x3, 0x1, 0xd, 0x208001, 0x3856, 0x9, 0x2, 0x3, 0x62a, 0x5, 0x19, 0x5, 0xe5cd, 0x1, 0x3, 0x4, 0xffff, 0x2, 0x4, 0x2, 0x3, 0x8, 0x6a3c, 0x7fff, 0x5, 0x8, 0xc0, 0x81, 0x6, 0xd, 0x0, 0xc523, 0x2, 0x7ff, 0x0, 0x800, 0x7f, 0x8, 0x7, 0xff, 0xfffffff7, 0xc, 0x4, 0x5, 0x2, 0x7fffffff, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x9, 0x3, 0x4, 0x7, 0xb27a, 0x8, 0x5, 0x4, 0x80000000, 0x2, 0x4c69, 0x4, 0x4, 0x2, 0x4, 0xa39, 0x0, 0x200, 0xf286, 0x8, 0xfffffffd, 0x3, 0xc2, 0x7, 0x7, 0x8, 0x2, 0x6, 0x5, 0x3, 0x9, 0x5, 0x0, 0x6, 0x735, 0x2, 0x0, 0x996, 0x0, 0xfa03, 0xfffffff9, 0x6, 0x2, 0x7, 0x9, 0x200, 0x81, 0x5aa7, 0x4, 0x8001, 0x9, 0x19f8, 0x7, 0x10000, 0x5, 0x29, 0x7, 0x7fffffff, 0x5, 0x50ee, 0x20c4bc1b, 0x1, 0x616, 0x6, 0xe, 0x9, 0x46aa937f, 0xffffffff, 0x9, 0xc87, 0xb, 0x0, 0x80000000, 0x4, 0x7, 0x2, 0x7, 0x8, 0x7, 0xd9a0, 0x6, 0x3, 0x1000, 0x84b, 0x9, 0x76, 0x7, 0x0, 0x6, 0x3, 0x7, 0xfffffffe, 0x7, 0x7d, 0x79, 0x1ff, 0x3, 0x4, 0x100, 0xa, 0x3, 0x0, 0x4, 0x200, 0x5e85, 0x1, 0x6f3f, 0x1, 0xda, 0x3, 0x5a58, 0x2d31, 0x0, 0x3, 0x5, 0x0, 0x431, 0x0, 0x0, 0x200, 0x401, 0x101, 0x7, 0x3, 0x5, 0x80000000, 0x81, 0x3ff, 0x1, 0x5, 0xfffffffa, 0x1, 0x2, 0x8, 0x9, 0x3, 0x7, 0xbc8, 0x6, 0x1, 0x60e, 0xa, 0x4, 0x80000001, 0xf, 0x2, 0x401, 0x9, 0x0, 0x1, 0xfffffff9, 0x9, 0x3, 0x7, 0x2, 0x1ff, 0xffff, 0x800, 0x3, 0x8001, 0x7, 0x4f, 0xf4, 0x5, 0xbc, 0x8001, 0x5, 0x9, 0x3e, 0x598, 0xa4, 0x8, 0x9, 0x7, 0x6, 0x9, 0x800, 0x0, 0x8b, 0x2, 0x80, 0x9, 0x5, 0x4, 0xfffffffe, 0x6, 0x88, 0x7, 0x3, 0x80000000, 0x400007], 0x6, 0x400, 0x8}) r10 = memfd_create(&(0x7f0000000740)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\x04\x00\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd1M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xdew\x94\x01\x88K\xe6\x86\xaf)hW\xc8\\/Pl\x9b\x1b\xf2\xf1_\xbb\xaa\xc9?\xf7\xae\x13\xc2\f=\x059\x1c\xb7\x1ca\xe4\xb8C[\x06\x8c\f%l\x19I\x1fq9y)\xaf~~\xa8\xaf\'S\xf0kA\xa8\x93\x8a\xd3\x98\xbf[5\x0f\x05\"\xbd4h\xd9\xd4\xb8\x17P\xb4\xa7\xd6\x03\x86\xe6\xb0\x90W\xc3\xbd\xcb\x1er\xc4e\xc2\x96\r\x15\x84\xda\x16m\xc7\x19g\x83O\a=\xcb\'\xb7E\xc2\xd3L\xd5\xe5\xc2&L\xebjb\xfaOBc\x95\xb7\x97[\xcd$n\xbcO\x81\x03\xc3e:C&\"\x06B:\xa4\xe9\xab\x95DG(^\xd7\xb4\x8e5\x1a\xdb\xcf\x12\xccV\xb7\x98i\xfb\xadv\xb3', 0x0) write(r10, &(0x7f0000000140)='/', 0x1) sendfile(r10, r10, &(0x7f0000000040), 0xfec) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r10, 0x0) rmdir(&(0x7f0000000100)='./control\x00') setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x4, r6, 0xfffffffd}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000008f831dbd2939472cb57d876cbaa7d38d0417ed58d285b8430c3baac78c55d8c150d4ce7c8cbdfdbc0e8028f88ab39f3414b2d8e2d4cca2878041c13ffaf65c9bd5a8c850a2d5ab119018e6ec5d0ab0403d74fc49d86db407a67f2d463c4d4e6c574943af10713b29ffe638d85e6963aa2e2698142ea5c5d576eca30600000000000000b295e77adccd123799739d82a259b90ae2991a21f8a3cd6273f0641abeaf93364ca20399d982701000c07ba750a4bf10b882fc4867a10dadf4136f22522696b003", @ANYRES16=r3, @ANYBLOB="01002dbd7000000000000700000004000180"], 0x18}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 0s ago: executing program 7 (id=1532): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "f89e"}, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) ppoll(&(0x7f0000000080)=[{r3, 0x4000}], 0x1, &(0x7f0000000180), 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="00040300000020"], 0x0, 0x0}) kernel console output (not intermixed with test programs): ibutes in process `syz.5.1199'. [ 311.617047][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1200'. [ 311.671909][T10083] overlayfs: overlapping lowerdir path [ 311.677696][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 311.683036][ T5196] loop2: partition table partially beyond EOD, truncated [ 311.690818][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 311.830414][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 311.836566][ T5196] loop2: partition table partially beyond EOD, truncated [ 311.849167][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 312.193706][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 312.355601][ T24] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 312.365403][ T24] usb 3-1: config 0 has no interface number 0 [ 312.378980][ T24] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e14, bcdDevice=db.f2 [ 312.391044][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.403992][ T24] usb 3-1: Product: syz [ 312.408305][ T24] usb 3-1: Manufacturer: syz [ 312.413149][ T24] usb 3-1: SerialNumber: syz [ 312.422864][ T24] usb 3-1: config 0 descriptor?? [ 312.645569][ T24] dvb-usb: found a 'DiBcom STK7700P reference design' in warm state. [ 312.673398][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 312.694125][ T24] dvbdev: DVB: registering new adapter (DiBcom STK7700P reference design) [ 312.702774][ T24] usb 3-1: media controller created [ 312.745755][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 312.845047][ T24] DVB: Unable to find symbol dib7000p_attach() [ 312.869606][ T24] dvb-usb: no frontend was attached by 'DiBcom STK7700P reference design' [ 312.981243][T10116] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1207'. [ 313.014145][T10116] tipc: Invalid UDP bearer configuration [ 313.014214][T10116] tipc: Enabling of bearer rejected, failed to enable media [ 313.067716][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 313.083676][ T24] Registered IR keymap rc-empty [ 313.089020][ T24] dvb-usb: could not initialize remote control. [ 313.113128][ T24] dvb-usb: DiBcom STK7700P reference design successfully initialized and connected. [ 313.137344][ T24] usb 3-1: USB disconnect, device number 10 [ 313.213359][ T24] dvb-usb: DiBcom STK7700P reference design successfully deinitialized and disconnected. [ 313.350769][T10124] input: syz1 as /devices/virtual/input/input46 [ 313.495793][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 313.501195][ T5196] loop2: partition table partially beyond EOD, truncated [ 313.543985][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 313.844129][ T24] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 313.845898][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 313.867604][ T5196] loop2: partition table partially beyond EOD, truncated [ 313.890185][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 314.003714][ T24] usb 2-1: device descriptor read/64, error -71 [ 314.077079][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 314.082572][ T5196] loop2: partition table partially beyond EOD, truncated [ 314.105067][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 314.244542][ T24] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 314.384013][ T24] usb 2-1: device descriptor read/64, error -71 [ 314.393131][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 314.482938][T10151] netlink: 'syz.2.1218': attribute type 10 has an invalid length. [ 314.494714][ T24] usb usb2-port1: attempt power cycle [ 314.533271][T10151] veth0_vlan: left promiscuous mode [ 314.538979][ T5196] loop2: partition table partially beyond EOD, truncated [ 314.551274][T10151] veth0_vlan: entered promiscuous mode [ 314.567482][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 314.586726][T10151] team0: Device veth0_vlan failed to register rx_handler [ 314.845117][ T24] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 314.874324][ T24] usb 2-1: device descriptor read/8, error -71 [ 315.118342][ T24] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 315.154492][ T24] usb 2-1: device descriptor read/8, error -71 [ 315.274186][ T24] usb usb2-port1: unable to enumerate USB device [ 315.371296][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 315.387273][ T5196] loop2: partition table partially beyond EOD, truncated [ 315.404358][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 315.578753][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 315.602211][ T5196] loop2: partition table partially beyond EOD, truncated [ 315.619841][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 316.011607][T10170] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1223'. [ 316.216272][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 316.221656][ T5196] loop2: partition table partially beyond EOD, truncated [ 316.230466][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 316.583906][ T5946] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 316.752265][ T5946] usb 3-1: no configurations [ 316.762721][ T5946] usb 3-1: can't read configurations, error -22 [ 316.913769][ T5946] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 317.013790][ T24] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 317.076551][ T5946] usb 3-1: no configurations [ 317.081223][ T5946] usb 3-1: can't read configurations, error -22 [ 317.089462][ T5946] usb usb3-port1: attempt power cycle [ 317.143891][ T24] usb 2-1: device descriptor read/64, error -71 [ 317.386735][ T24] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 317.433891][ T5946] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 317.472265][ T5946] usb 3-1: no configurations [ 317.481376][ T5946] usb 3-1: can't read configurations, error -22 [ 317.524094][ T24] usb 2-1: device descriptor read/64, error -71 [ 317.613812][ T5946] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 317.634889][ T24] usb usb2-port1: attempt power cycle [ 317.640628][ T5946] usb 3-1: no configurations [ 317.646958][ T5946] usb 3-1: can't read configurations, error -22 [ 317.656022][ T5946] usb usb3-port1: unable to enumerate USB device [ 317.983896][ T24] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 318.024850][ T24] usb 2-1: device descriptor read/8, error -71 [ 318.088778][ T5146] Bluetooth: hci4: link tx timeout [ 318.094537][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 318.152690][T10191] tmpfs: Bad value for 'mpol' [ 318.274040][ T24] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 318.314805][ T24] usb 2-1: device descriptor read/8, error -71 [ 318.415041][T10201] overlayfs: failed to clone lowerpath [ 318.436859][ T24] usb usb2-port1: unable to enumerate USB device [ 319.399943][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 319.410048][ T5196] loop2: partition table partially beyond EOD, truncated [ 319.431267][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 319.603722][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 319.614782][ T5196] loop2: partition table partially beyond EOD, truncated [ 319.634441][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 319.758489][T10230] XFS (loop2): Invalid superblock magic number [ 319.930575][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 319.941052][ T5196] loop2: partition table partially beyond EOD, truncated [ 319.954006][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 320.173711][ T877] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 320.183836][ T5146] Bluetooth: hci4: command 0x0406 tx timeout [ 320.340306][ T877] usb 3-1: Using ep0 maxpacket: 16 [ 320.344979][ T5893] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 320.359930][ T877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 320.372550][ T877] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 320.381845][ T877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.390027][ T877] usb 3-1: Product: syz [ 320.394561][ T877] usb 3-1: Manufacturer: syz [ 320.399280][ T877] usb 3-1: SerialNumber: syz [ 320.408737][ T877] usb 3-1: config 0 descriptor?? [ 320.423282][ T877] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 320.432948][ T877] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 320.514788][ T5893] usb 2-1: Using ep0 maxpacket: 32 [ 320.525032][ T5893] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 320.541136][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.563681][ T5893] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 320.572870][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.614711][ T5893] usb 2-1: config 0 descriptor?? [ 320.853515][ T5893] hid_parser_main: 139 callbacks suppressed [ 320.853541][ T5893] cougar 0003:060B:500A.0026: unknown main item tag 0x0 [ 320.897092][ T5893] cougar 0003:060B:500A.0026: unknown main item tag 0x0 [ 320.915559][ T5893] cougar 0003:060B:500A.0026: unknown main item tag 0x0 [ 320.929706][ T5893] cougar 0003:060B:500A.0026: unknown main item tag 0x0 [ 320.961375][ T5893] cougar 0003:060B:500A.0026: unknown main item tag 0x0 [ 320.985490][ T5893] cougar 0003:060B:500A.0026: hidraw2: USB HID v0.05 Device [HID 060b:500a] on usb-dummy_hcd.1-1/input0 [ 321.023013][ T877] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 322.359591][ T877] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 322.371966][ T877] em28xx 3-1:0.0: board has no eeprom [ 322.433700][ T877] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 322.441944][ T877] em28xx 3-1:0.0: dvb set to bulk mode. [ 322.448221][ T5946] em28xx 3-1:0.0: Binding DVB extension [ 322.469314][ T877] usb 3-1: USB disconnect, device number 15 [ 322.502631][ T877] em28xx 3-1:0.0: Disconnecting em28xx [ 322.541407][ T5946] em28xx 3-1:0.0: Registering input extension [ 322.555743][ T877] em28xx 3-1:0.0: Closing input extension [ 322.596449][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.596533][ T877] em28xx 3-1:0.0: Freeing device [ 322.602913][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.787154][T10265] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.939936][T10269] delete_channel: no stack [ 322.947493][T10269] delete_channel: no stack [ 322.956114][T10269] lo speed is unknown, defaulting to 1000 [ 322.956518][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 322.962238][T10269] lo speed is unknown, defaulting to 1000 [ 322.980851][ T5196] loop2: partition table partially beyond EOD, truncated [ 322.984353][T10269] lo speed is unknown, defaulting to 1000 [ 323.005338][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 323.037997][T10269] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 323.039020][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1253'. [ 323.129167][T10269] lo speed is unknown, defaulting to 1000 [ 323.141798][T10269] lo speed is unknown, defaulting to 1000 [ 323.150621][T10269] lo speed is unknown, defaulting to 1000 [ 323.159973][T10269] lo speed is unknown, defaulting to 1000 [ 323.168380][T10269] lo speed is unknown, defaulting to 1000 [ 323.177180][T10269] lo speed is unknown, defaulting to 1000 [ 323.188710][ T9] usb 2-1: USB disconnect, device number 119 [ 323.293813][ T5893] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 323.451470][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1256'. [ 323.475882][ T5893] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 323.486150][ T5893] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.518318][ T5893] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.528084][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.752398][ T5893] usb 3-1: GET_CAPABILITIES returned 0 [ 323.769612][ T5893] usbtmc 3-1:16.0: can't read capabilities [ 323.955068][ T5911] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 323.968326][T10272] usbtmc 3-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 323.979300][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.991131][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.000774][ T5893] usb 3-1: USB disconnect, device number 16 [ 324.134151][ T5911] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 324.143535][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.153146][ T5911] usb 2-1: Product: syz [ 324.158251][ T5911] usb 2-1: Manufacturer: syz [ 324.162904][ T5911] usb 2-1: SerialNumber: syz [ 324.186410][ T5911] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 324.201517][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 324.488761][ T5911] usb 2-1: USB disconnect, device number 120 [ 324.598581][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 324.613706][ T5196] loop2: partition table partially beyond EOD, truncated [ 324.621030][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 324.810391][T10305] tipc: Enabling of bearer rejected, failed to enable media [ 324.875044][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 324.880435][ T5196] loop2: partition table partially beyond EOD, truncated [ 324.900591][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 325.153716][ T5946] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 325.303910][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 325.306018][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 325.315622][ T10] ath9k_htc: Failed to initialize the device [ 325.329607][ T5911] usb 2-1: ath9k_htc: USB layer deinitialized [ 325.362991][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34165, setting to 1024 [ 325.383810][ T5946] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 325.394232][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.414371][ T5946] usb 3-1: config 0 descriptor?? [ 325.420151][T10307] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 325.647996][ T5911] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 325.815505][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 325.822901][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.839110][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.849453][ T5911] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 325.859907][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.872003][ T5946] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 325.880919][ T5946] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 325.883457][ T5911] usb 2-1: config 0 descriptor?? [ 325.890130][ T5946] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 325.901221][ T5946] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 325.909815][ T5946] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 325.920722][ T5946] playstation 0003:054C:0DF2.0027: hidraw2: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 325.920873][ T5911] hub 2-1:0.0: USB hub found [ 326.056453][ T5946] playstation 0003:054C:0DF2.0027: Invalid byte count transferred, expected 20 got 0 [ 326.066432][ T5946] playstation 0003:054C:0DF2.0027: Failed to retrieve DualSense pairing info: -22 [ 326.084359][ T5946] playstation 0003:054C:0DF2.0027: Failed to get MAC address from DualSense [ 326.093312][ T5946] playstation 0003:054C:0DF2.0027: Failed to create dualsense. [ 326.115680][ T5946] playstation 0003:054C:0DF2.0027: probe with driver playstation failed with error -22 [ 326.142220][ T5911] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 326.272194][ T5946] usb 3-1: USB disconnect, device number 17 [ 326.555471][ T5911] hid (null): global environment stack underflow [ 326.567604][ T5911] hid-generic 0003:046D:C31C.0028: global environment stack underflow [ 326.576189][ T5911] hid-generic 0003:046D:C31C.0028: item 0 0 1 11 parsing failed [ 326.590255][ T5911] hid-generic 0003:046D:C31C.0028: probe with driver hid-generic failed with error -22 [ 326.839391][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 326.857676][ T5196] loop2: partition table partially beyond EOD, truncated [ 326.869651][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 326.877308][ T5911] usb 2-1: USB disconnect, device number 121 [ 327.143916][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 327.316558][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 327.331606][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.343069][T10318] netlink: 'syz.1.1268': attribute type 27 has an invalid length. [ 327.351404][T10318] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 327.353934][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 327.360438][T10318] bridge0: port 1(bridge_slave_0) entered learning state [ 327.385566][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.410905][ T24] usb 3-1: config 0 descriptor?? [ 327.844688][ T24] mcp2221 0003:04D8:00DD.0029: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 328.240785][ T24] usb 3-1: USB disconnect, device number 18 [ 328.792625][ T5826] Bluetooth: hci2: Malformed Event: 0x2f [ 328.836798][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 328.842176][ T5196] loop2: partition table partially beyond EOD, truncated [ 328.866012][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 329.108506][ T5146] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 329.129112][ T5146] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 329.151500][ T5911] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 329.151752][ T5146] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 329.169517][ T5146] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 329.177648][ T5146] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 329.218847][T10341] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.227593][T10341] lo speed is unknown, defaulting to 1000 [ 329.316997][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.328519][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.340460][ T5911] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 329.351033][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.362864][ T5911] usb 3-1: config 0 descriptor?? [ 329.404704][ T1154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.535862][ T30] audit: type=1326 audit(1760308189.675:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.0.1274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f879798eec9 code=0x7fc00000 [ 329.573137][ T1154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.605830][T10341] chnl_net:caif_netlink_parms(): no params data found [ 329.665059][T10349] netlink: 624 bytes leftover after parsing attributes in process `syz.0.1277'. [ 329.677834][ T1154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.756698][ T1154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.763819][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 329.778135][ T5911] hid (null): global environment stack underflow [ 329.798152][ T5911] stadia 0003:18D1:9400.002A: global environment stack underflow [ 329.807807][ T5911] stadia 0003:18D1:9400.002A: item 0 1 1 11 parsing failed [ 329.816137][ T5911] stadia 0003:18D1:9400.002A: parse failed [ 329.822068][ T5911] stadia 0003:18D1:9400.002A: probe with driver stadia failed with error -22 [ 329.849280][T10341] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.856792][T10341] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.866966][T10341] bridge_slave_0: entered allmulticast mode [ 329.874874][T10341] bridge_slave_0: entered promiscuous mode [ 329.885408][T10341] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.892683][T10341] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.900288][T10341] bridge_slave_1: entered allmulticast mode [ 329.908282][T10341] bridge_slave_1: entered promiscuous mode [ 329.947043][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.966754][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.989841][ T5911] usb 3-1: USB disconnect, device number 19 [ 329.998418][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.020466][T10341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.041590][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 330.056526][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.066502][T10341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.081361][ T1154] bridge_slave_1: left allmulticast mode [ 330.088126][ T1154] bridge_slave_1: left promiscuous mode [ 330.094480][ T10] usb 2-1: config 0 descriptor?? [ 330.096435][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.117674][ T1154] bridge_slave_0: left allmulticast mode [ 330.123398][ T1154] bridge_slave_0: left promiscuous mode [ 330.129661][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.320494][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 330.328594][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 330.340045][ T10] usb 2-1: USB disconnect, device number 122 [ 330.551302][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 330.559586][ T5196] loop2: partition table partially beyond EOD, truncated [ 330.566983][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 330.669036][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.682811][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.696499][ T1154] bond0 (unregistering): Released all slaves [ 330.754141][ T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 330.771587][T10341] team0: Port device team_slave_0 added [ 330.789548][T10341] team0: Port device team_slave_1 added [ 330.863720][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 330.902857][T10341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.910421][T10341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.937675][T10341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.950534][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.962477][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.973137][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 330.989959][T10341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.997084][T10341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.023338][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.032548][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.042805][T10341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.047613][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 331.068072][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 331.084818][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.095068][ T10] usb 2-1: config 0 descriptor?? [ 331.127744][ T43] usb 3-1: config 0 descriptor?? [ 331.148936][ T43] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 331.224288][ T5826] Bluetooth: hci6: command tx timeout [ 331.311157][T10341] hsr_slave_0: entered promiscuous mode [ 331.327742][T10341] hsr_slave_1: entered promiscuous mode [ 331.336087][T10341] debugfs: 'hsr0' already exists in 'hsr' [ 331.341900][T10341] Cannot create hsr debugfs directory [ 331.412058][ T1154] hsr_slave_0: left promiscuous mode [ 331.419499][ T1154] hsr_slave_1: left promiscuous mode [ 331.426996][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.435545][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.445322][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.452788][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.493256][ T1154] veth1_macvtap: left promiscuous mode [ 331.526334][ T10] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 331.544117][ T1154] veth0_macvtap: left promiscuous mode [ 331.549927][ T1154] veth1_vlan: left promiscuous mode [ 331.555323][ T56] block nbd3: Possible stuck request ffff888025aae000: control (read@0,1024B). Runtime 120 seconds [ 331.567292][ T56] block nbd3: Possible stuck request ffff888025aae1c0: control (read@1024,1024B). Runtime 120 seconds [ 331.574007][ T1154] veth0_vlan: left promiscuous mode [ 331.579151][ T56] block nbd3: Possible stuck request ffff888025aae380: control (read@2048,1024B). Runtime 120 seconds [ 331.594878][ T56] block nbd3: Possible stuck request ffff888025aae540: control (read@3072,1024B). Runtime 120 seconds [ 331.611100][ T43] gspca_sonixj: reg_r err -71 [ 331.617679][ T43] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 331.646253][ T43] usb 3-1: USB disconnect, device number 20 [ 331.686627][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 331.692009][ T5196] loop2: partition table partially beyond EOD, truncated [ 331.725272][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 332.115805][ T43] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 332.286792][ T43] usb 3-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.297191][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 332.303969][ T43] usb 3-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 332.313135][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.327898][ T43] usb 3-1: config 0 descriptor?? [ 332.551687][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 332.609826][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 332.750246][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.769599][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.793422][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.814385][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.847520][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.849652][T10395] 9pnet_fd: Insufficient options for proto=fd [ 332.871851][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.126026][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 333.132120][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 333.163988][ T43] usb 3-1: USB disconnect, device number 21 [ 333.303937][ T5826] Bluetooth: hci6: command tx timeout [ 333.636587][ T10] usb 2-1: USB disconnect, device number 123 [ 333.722000][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 333.756584][ T5196] loop2: partition table partially beyond EOD, truncated [ 333.793866][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 333.835400][T10404] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1288'. [ 333.844985][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20003. Sending cookies. [ 333.872742][T10341] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 333.895490][T10406] rdma_op ffff88802a85f1f0 conn xmit_rdma 0000000000000000 [ 333.904936][T10341] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 333.951260][T10341] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 333.996559][T10341] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.019909][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 334.040139][ T5196] loop2: partition table partially beyond EOD, truncated [ 334.077587][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 334.416312][T10341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.448356][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 334.470037][ T5196] loop2: partition table partially beyond EOD, truncated [ 334.480470][T10341] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.499828][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 334.525422][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.532641][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.595726][ T43] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 334.611957][ T4558] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.619999][ T4558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.786268][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 334.793658][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.805499][ T5196] loop2: partition table partially beyond EOD, truncated [ 334.805714][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 334.855719][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 334.887245][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 334.916633][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.951548][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.975776][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.036364][ T43] usb 2-1: config 0 descriptor?? [ 335.125799][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 335.144295][ T5196] loop2: partition table partially beyond EOD, truncated [ 335.161899][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 335.325455][T10341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.392616][ T5826] Bluetooth: hci6: command tx timeout [ 335.455033][ T5946] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 335.477894][ T43] plantronics 0003:047F:FFFF.002C: ignoring exceeding usage max [ 335.498846][T10471] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1300'. [ 335.541259][ T43] plantronics 0003:047F:FFFF.002C: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 335.674711][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.692132][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.713709][ T5946] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 335.741442][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.766217][ T5946] usb 3-1: config 0 descriptor?? [ 335.962629][T10341] veth0_vlan: entered promiscuous mode [ 335.992058][T10341] veth1_vlan: entered promiscuous mode [ 336.059672][T10341] veth0_macvtap: entered promiscuous mode [ 336.078976][T10341] veth1_macvtap: entered promiscuous mode [ 336.137340][T10341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.162251][T10341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.192830][ T1154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.198255][ T5946] hid-steam 0003:28DE:1142.002D: unknown main item tag 0x0 [ 336.225370][ T1154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.238321][ T5946] hid-steam 0003:28DE:1142.002D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 336.257066][ T1154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.270269][ T1154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.304563][ T5946] hid-steam 0003:28DE:1142.002D: Steam wireless receiver connected [ 336.327035][ T5946] hid-steam 0003:28DE:1142.002D: No HID_FEATURE_REPORT submitted - nothing to read [ 336.370149][ T5946] hid-steam 0003:28DE:1142.002E: unknown main item tag 0x0 [ 336.422455][ T5946] hid-steam 0003:28DE:1142.002E: hidraw3: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 336.446050][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.474120][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.487794][ T5946] usb 3-1: USB disconnect, device number 22 [ 336.524893][ T5946] hid-steam 0003:28DE:1142.002D: Steam wireless receiver disconnected [ 336.550569][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.572758][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.616751][T10492] fido_id[10492]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 336.957037][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 336.962427][ T5196] loop2: partition table partially beyond EOD, truncated [ 336.980099][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 337.023706][ T985] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 337.183745][ T985] usb 7-1: Using ep0 maxpacket: 32 [ 337.191271][ T985] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 337.203763][ T985] usb 7-1: config 0 has no interface number 0 [ 337.217059][ T985] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.248870][ T985] usb 7-1: config 0 interface 85 has no altsetting 0 [ 337.266473][ T985] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 337.284003][ T985] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.288036][ T877] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 337.302303][ T985] usb 7-1: Product: syz [ 337.312430][ T985] usb 7-1: Manufacturer: syz [ 337.322561][ T985] usb 7-1: SerialNumber: syz [ 337.340570][ T985] usb 7-1: config 0 descriptor?? [ 337.465634][ T5826] Bluetooth: hci6: command tx timeout [ 337.476406][ T877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.494396][ T877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.511926][ T877] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 337.524398][ T877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.543496][ T877] usb 3-1: config 0 descriptor?? [ 337.591842][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1306'. [ 337.719164][ T5826] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 337.827759][ T5911] usb 2-1: USB disconnect, device number 124 [ 337.966374][T10534] overlayfs: failed to clone upperpath [ 337.971350][ T985] appletouch 7-1:0.85: Geyser mode initialized. [ 337.980271][ T877] stadia 0003:18D1:9400.002F: unknown main item tag 0x0 [ 337.988652][ T877] stadia 0003:18D1:9400.002F: unknown main item tag 0x0 [ 337.993739][ T985] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input49 [ 338.005968][ T877] stadia 0003:18D1:9400.002F: unknown main item tag 0x0 [ 338.007708][ T5911] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 338.020720][ T877] stadia 0003:18D1:9400.002F: unknown main item tag 0x0 [ 338.037807][ T877] stadia 0003:18D1:9400.002F: unknown main item tag 0x0 [ 338.051220][ T877] stadia 0003:18D1:9400.002F: hidraw2: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 338.075277][ T877] stadia 0003:18D1:9400.002F: no inputs found [ 338.090428][ T877] stadia 0003:18D1:9400.002F: force feedback init failed [ 338.182694][ T877] usb 7-1: USB disconnect, device number 2 [ 338.187749][ T5911] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 338.223492][ T5911] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 338.244892][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.253055][ T5911] usb 2-1: Product: syz [ 338.262362][T10506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.277798][ T5911] usb 2-1: Manufacturer: syz [ 338.282483][ T877] appletouch 7-1:0.85: input: appletouch disconnected [ 338.289376][ T5911] usb 2-1: SerialNumber: syz [ 338.296129][T10506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.316534][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.334168][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.366458][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.376422][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.512931][T10516] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1304'. [ 338.527674][ T985] usb 3-1: USB disconnect, device number 23 [ 338.535701][ T5911] usb 2-1: selecting invalid altsetting 1 [ 338.549361][ T5911] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 338.549453][ T5911] dvb_usb_lmedm04 2-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 338.585830][ T5911] usb 2-1: USB disconnect, device number 125 [ 339.057599][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 339.063124][ T5196] loop2: partition table partially beyond EOD, truncated [ 339.547641][ T985] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 339.684139][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 339.906189][T10566] overlayfs: statfs failed on './file0' [ 339.907363][ T985] usb 3-1: Using ep0 maxpacket: 16 [ 339.928853][ T985] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 339.931047][T10566] binfmt_misc: register: failed to install interpreter file ./file0 [ 339.947717][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 339.966569][ T985] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 339.976539][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.984975][ T985] usb 3-1: Product: syz [ 339.989358][ T985] usb 3-1: Manufacturer: syz [ 339.994683][ T985] usb 3-1: SerialNumber: syz [ 340.016646][ T985] usb 3-1: config 0 descriptor?? [ 340.032408][ T985] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 340.050737][ T985] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 340.173806][ T5911] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 340.313744][ T877] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 340.333791][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 340.343202][ T5911] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 340.353292][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.361431][ T5911] usb 2-1: Product: syz [ 340.365967][ T5911] usb 2-1: Manufacturer: syz [ 340.370593][ T5911] usb 2-1: SerialNumber: syz [ 340.378284][ T5911] usb 2-1: config 0 descriptor?? [ 340.388775][ T5911] gspca_main: se401-2.14.0 probing 047d:5003 [ 340.463799][ T877] usb 7-1: Using ep0 maxpacket: 8 [ 340.473052][ T877] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 340.482270][ T877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.490439][ T877] usb 7-1: Product: syz [ 340.496453][ T877] usb 7-1: Manufacturer: syz [ 340.501098][ T877] usb 7-1: SerialNumber: syz [ 340.512942][ T877] usb 7-1: config 0 descriptor?? [ 340.626681][ T985] em28xx 3-1:0.0: chip ID is em2874 [ 340.732028][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.741044][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.752380][ T877] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 340.788695][ T5911] gspca_se401: ExtraFeatures: 114 [ 340.793885][ T5911] gspca_se401: Too many frame sizes [ 340.848983][ T985] usb 3-1: USB disconnect, device number 24 [ 340.865420][ T985] em28xx 3-1:0.0: Disconnecting em28xx [ 340.878356][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 340.884190][ T985] em28xx 3-1:0.0: Freeing device [ 340.895328][ T5196] loop2: partition table partially beyond EOD, truncated [ 340.907076][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 340.964403][ T877] usb write operation failed. (-71) [ 340.978415][ T877] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 340.992299][ T877] dvbdev: DVB: registering new adapter (Terratec H7) [ 340.999623][ T877] usb 7-1: media controller created [ 341.023645][ T877] usb read operation failed. (-71) [ 341.026271][ T5911] usb 2-1: USB disconnect, device number 126 [ 341.031666][ T877] usb write operation failed. (-71) [ 341.071201][ T877] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 341.100611][ T877] usb 7-1: USB disconnect, device number 3 [ 341.443830][ T5946] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 341.583889][ T5946] usb 3-1: device descriptor read/64, error -71 [ 341.677981][T10592] sock: sock_set_timeout: `syz.6.1326' (pid 10592) tries to set negative timeout [ 341.699821][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1326'. [ 341.832507][T10596] qrtr: Invalid version 43 [ 341.837544][ T5946] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 341.944482][ T5826] Bluetooth: hci6: command tx timeout [ 341.945057][ T5911] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 341.993735][ T5946] usb 3-1: device descriptor read/64, error -71 [ 342.103813][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 342.104065][ T5946] usb usb3-port1: attempt power cycle [ 342.110564][ T5911] usb 7-1: too many configurations: 17, using maximum allowed: 8 [ 342.123475][ T5911] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 342.131578][ T5911] usb 7-1: config 0 has no interface number 0 [ 342.138976][ T5911] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 342.147146][ T5911] usb 7-1: config 0 has no interface number 0 [ 342.155903][ T5911] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 342.164002][ T5911] usb 7-1: config 0 has no interface number 0 [ 342.171291][ T5911] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 342.185575][ T5911] usb 7-1: config 0 has no interface number 0 [ 342.196591][ T5911] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 342.204696][ T5911] usb 7-1: config 0 has no interface number 0 [ 342.212104][ T5911] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 342.221018][ T5911] usb 7-1: config 0 has no interface number 0 [ 342.228250][ T5911] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 342.236448][ T5911] usb 7-1: config 0 has no interface number 0 [ 342.244007][ T5911] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 342.253761][ T5911] usb 7-1: config 0 has no interface number 0 [ 342.262140][ T5911] usb 7-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 342.271352][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.279423][ T5911] usb 7-1: Product: syz [ 342.283841][ T5911] usb 7-1: Manufacturer: syz [ 342.288479][ T5911] usb 7-1: SerialNumber: syz [ 342.295708][ T5911] usb 7-1: config 0 descriptor?? [ 342.303066][ T5911] etas_es58x 7-1:0.2: Starting syz syz (Serial Number syz) [ 342.453731][ T5946] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 342.484352][ T5946] usb 3-1: device descriptor read/8, error -71 [ 342.504635][ T5911] etas_es58x 7-1:0.2: could not parse product info: '﷘)' [ 342.734400][ T5946] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 342.768149][ T5946] usb 3-1: device descriptor read/8, error -71 [ 342.884144][ T5946] usb usb3-port1: unable to enumerate USB device [ 342.993883][ T5911] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 343.108573][ C0] etas_es58x 7-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D. [ 343.119894][ C0] etas_es58x 7-1:0.2: es58x_check_crc: Bad CRC, urb_len: 9 [ 343.127400][ C0] etas_es58x 7-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 343.135435][ C0] etas_es58x 7-1:0.2: es58x_split_urb() returned error -EBADMSG [ 343.144720][ T5491] etas_es58x 7-1:0.2 can1: bit-timing not yet defined [ 343.178500][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.189910][ T5911] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 343.199397][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.211612][ T5911] usb 2-1: config 0 descriptor?? [ 343.320188][ C0] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 343.329612][ C0] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 343.338894][ C0] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 343.348082][ C0] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 343.357280][ C0] etas_es58x 7-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 343.366464][ C0] etas_es58x 7-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 343.375374][ T5491] etas_es58x 7-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL [ 343.376102][ T9] usb 7-1: USB disconnect, device number 4 [ 343.394991][ T9] etas_es58x 7-1:0.2: Disconnecting syz syz [ 343.643385][ T5911] kye 0003:0458:501A.0030: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 343.665297][ T5911] kye 0003:0458:501A.0030: unknown main item tag 0x0 [ 343.672176][ T5911] kye 0003:0458:501A.0030: unknown main item tag 0x0 [ 343.680966][ T5911] kye 0003:0458:501A.0030: unknown main item tag 0x0 [ 343.690491][ T5911] kye 0003:0458:501A.0030: unknown main item tag 0x0 [ 343.697617][ T5911] kye 0003:0458:501A.0030: unknown main item tag 0x0 [ 343.707180][ T5911] kye 0003:0458:501A.0030: unknown main item tag 0x0 [ 343.715555][ T5911] kye 0003:0458:501A.0030: unknown main item tag 0x0 [ 343.755210][ T5911] kye 0003:0458:501A.0030: hidraw2: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 343.773684][ T5911] kye 0003:0458:501A.0030: tablet-enabling feature report not found [ 343.794151][ T5911] kye 0003:0458:501A.0030: tablet enabling failed [ 343.853083][ T5946] usb 2-1: USB disconnect, device number 127 [ 344.087860][T10649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.108844][T10649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.259686][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 344.270866][ T5196] loop2: partition table partially beyond EOD, truncated [ 344.292779][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 344.313715][ T877] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 344.487805][ T877] usb 7-1: config 0 has an invalid interface number: 46 but max is 0 [ 344.487839][ T877] usb 7-1: config 0 has no interface number 0 [ 344.487886][ T877] usb 7-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 344.487912][ T877] usb 7-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 344.490389][ T877] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 344.557944][ T877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.566421][ T877] usb 7-1: Product: syz [ 344.570806][ T877] usb 7-1: Manufacturer: syz [ 344.576935][ T877] usb 7-1: SerialNumber: syz [ 344.596758][ T877] usb 7-1: config 0 descriptor?? [ 344.617098][ T877] ums-karma 7-1:0.46: USB Mass Storage device detected [ 344.668687][ T877] ums-karma 7-1:0.46: probe with driver ums-karma failed with error -5 [ 344.816806][ T9] usb 7-1: USB disconnect, device number 5 [ 344.843750][ T5911] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 345.007812][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 345.019714][ T5911] usb 3-1: config 0 has an invalid interface number: 158 but max is 0 [ 345.028067][ T5911] usb 3-1: config 0 has no interface number 0 [ 345.036805][ T5911] usb 3-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=70.01 [ 345.046004][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.054146][ T5911] usb 3-1: Product: syz [ 345.058342][ T5911] usb 3-1: Manufacturer: syz [ 345.062975][ T5911] usb 3-1: SerialNumber: syz [ 345.070904][ T5911] usb 3-1: config 0 descriptor?? [ 345.084979][ T5911] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 345.093024][ T5911] dvb-usb: bulk message failed: -22 (4/0) [ 345.099149][ T5911] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 345.109499][ T5911] dvb-usb: bulk message failed: -22 (5/0) [ 345.115957][ T5911] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 345.133528][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 345.143248][ T5911] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 345.154993][ T5911] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650) [ 345.163781][ T5911] usb 3-1: media controller created [ 345.184421][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.202542][ T5911] ttusb2: set interface to alts=3 failed [ 345.238637][ T5911] DVB: Unable to find symbol tda10023_attach() [ 345.244897][ T5911] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650' [ 345.303920][ T5911] rc_core: IR keymap rc-tt-1500 not found [ 345.309811][ T5911] Registered IR keymap rc-empty [ 345.321193][ T5911] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 345.347003][ T5911] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input50 [ 345.362285][ T5911] dvb-usb: schedule remote query interval to 150 msecs. [ 345.375260][ T877] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 345.380893][ T5911] dvb-usb: bulk message failed: -22 (4/0) [ 345.388618][ T5911] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 345.400884][ T5911] dvb-usb: bulk message failed: -22 (5/0) [ 345.406810][ T5911] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 345.417545][ T5911] dvb-usb: Technotrend TT-connect CT-3650 successfully initialized and connected. [ 345.456506][ T5911] usb 3-1: USB disconnect, device number 29 [ 345.535466][ T5911] dvb-usb: Technotrend TT-connect CT-3650 successfully deinitialized and disconnected. [ 345.549206][T10676] trusted_key: encrypted_key: key user:syz not found [ 345.557634][ T877] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 345.578960][ T877] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 345.592119][ T877] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 345.607416][ T877] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 345.621416][ T877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.639542][ T877] usb 2-1: Product: syz [ 345.646631][ T877] usb 2-1: Manufacturer: syz [ 345.651418][ T877] usb 2-1: SerialNumber: syz [ 345.662463][ T877] usb 2-1: config 0 descriptor?? [ 345.669201][T10669] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 345.677251][T10669] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 345.690765][ T877] usb 2-1: ucan: probing device on interface #0 [ 345.920545][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 345.935534][ T5196] loop2: partition table partially beyond EOD, truncated [ 345.974241][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 346.096145][ T877] usb 2-1: ucan: device reported invalid device info [ 346.105130][ T877] usb 2-1: ucan: probe failed; try to update the device firmware [ 346.233824][ T5946] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 346.307305][ T30] audit: type=1400 audit(1760308206.445:90): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10668 comm="syz.1.1342" [ 346.368431][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1347'. [ 346.393688][ T5946] usb 3-1: device descriptor read/64, error -71 [ 346.623764][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 346.634343][ T5946] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 346.763731][ T5946] usb 3-1: device descriptor read/64, error -71 [ 346.787381][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.797867][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.808720][ T9] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 346.818133][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 346.826516][ T9] usb 7-1: SerialNumber: syz [ 346.876798][ T5946] usb usb3-port1: attempt power cycle [ 347.067850][ T9] usb 7-1: 0:2 : does not exist [ 347.101462][ T9] usb 7-1: USB disconnect, device number 6 [ 347.225261][ T5946] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 347.255467][ T5946] usb 3-1: device descriptor read/8, error -71 [ 347.494071][ T5946] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 347.524525][ T5946] usb 3-1: device descriptor read/8, error -71 [ 347.650136][ T5946] usb usb3-port1: unable to enumerate USB device [ 347.808643][T10708] fuse: Bad value for 'rootmode' [ 347.888563][ T9] lo speed is unknown, defaulting to 1000 [ 348.164070][ T5946] usb 2-1: USB disconnect, device number 2 [ 348.244493][T10725] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1354'. [ 348.504467][ T43] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 348.665391][ T43] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 348.679888][ T43] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 348.689331][ T43] usb 7-1: config 0 has no interface number 0 [ 348.698368][ T43] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 348.709880][ T43] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 348.719888][ T43] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 348.729470][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.752412][ T43] usb 7-1: config 0 descriptor?? [ 349.064523][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 349.093322][ T5196] loop2: partition table partially beyond EOD, truncated [ 349.101545][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 349.375543][ T43] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.21/input/input51 [ 349.432395][ T43] input: failed to attach handler kbd to device input51, error: -5 [ 350.003708][ T5911] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 350.018716][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 350.026301][ T5196] loop2: partition table partially beyond EOD, truncated [ 350.035880][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 350.162746][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 350.169341][ T5196] loop2: partition table partially beyond EOD, truncated [ 350.190836][ T5911] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 350.199711][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 350.208229][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 350.232420][T10811] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1368'. [ 350.243817][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 350.262353][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 350.288791][ T5911] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 350.323757][ T5911] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 350.332859][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.365964][ T5911] usb 2-1: config 0 descriptor?? [ 350.381380][T10796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.563672][ T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 350.601543][T10796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.612233][T10796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.718633][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 350.738445][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.758263][ T43] usb 3-1: Product: syz [ 350.762504][ T43] usb 3-1: Manufacturer: syz [ 350.769021][ T43] usb 3-1: SerialNumber: syz [ 350.977916][ T5911] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 351.025167][T10813] delete_channel: no stack [ 351.042263][T10813] delete_channel: no stack [ 351.246028][ T9] usb 7-1: USB disconnect, device number 7 [ 351.366877][ T5946] usb 2-1: USB disconnect, device number 3 [ 351.599117][T10846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.654614][T10846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.944866][T10877] netlink: 1372 bytes leftover after parsing attributes in process `syz.0.1375'. [ 352.013890][ T5946] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 352.066926][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 352.085584][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 352.097813][ T43] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 352.116097][ T43] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 352.133133][ T43] usb 3-1: USB disconnect, device number 34 [ 352.173753][ T5946] usb 7-1: Using ep0 maxpacket: 8 [ 352.180369][ T5946] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 352.191725][ T5946] usb 7-1: config 179 has no interface number 0 [ 352.202990][ T5946] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 352.214334][ T5946] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 352.225911][ T5946] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 352.238191][ T5946] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 352.250670][ T5946] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 352.264527][ T5946] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 352.273681][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.274236][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 352.289600][T10864] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 352.445743][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.456614][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.470046][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.479203][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.490087][ T9] usb 2-1: config 0 descriptor?? [ 352.722403][ T5946] usb 7-1: USB disconnect, device number 8 [ 352.722467][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 352.722522][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 352.946006][ T30] audit: type=1326 audit(1760308213.085:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.1.1377" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f265ef8eec9 code=0x0 [ 353.212395][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 353.219251][ T5196] loop2: partition table partially beyond EOD, truncated [ 353.233849][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 353.844017][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 353.849646][ T5196] loop2: partition table partially beyond EOD, truncated [ 353.858516][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 353.914308][T10915] netlink: 'syz.2.1388': attribute type 1 has an invalid length. [ 354.005787][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 354.011173][ T5196] loop2: partition table partially beyond EOD, truncated [ 354.018898][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 354.303895][ T5893] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 354.483680][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 354.490809][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 354.504691][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 354.517186][ T5893] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 354.526324][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.537140][ T5893] usb 3-1: config 0 descriptor?? [ 354.552961][ T5893] input: USB Pegasus Device 0e20:0101 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input53 [ 354.573199][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.581715][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.589309][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.596673][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.604053][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.611432][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.618760][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.626147][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.633499][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.641378][ T5946] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 354.642519][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.657377][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.664934][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.672292][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.679840][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.687316][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.694800][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.702148][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.709633][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.717193][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.724637][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.731975][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.739457][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.747652][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.755072][ T5181] usb 3-1: control msg error: -71 [ 354.756383][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.768018][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.775689][ C0] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.782905][ C0] usb 3-1: pegasus_irq - usb_submit_urb failed with result -1 [ 354.793009][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.801172][ C1] usb 3-1: pegasus_irq - nonzero urb status received: -71 [ 354.802614][ T5893] usb 3-1: USB disconnect, device number 35 [ 354.808336][ C1] usb 3-1: pegasus_irq - usb_submit_urb failed with result -19 [ 354.811149][ T5181] usb 3-1: control msg error: -71 [ 354.827915][ T5946] usb 7-1: Using ep0 maxpacket: 32 [ 354.835577][ T5946] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 354.844618][ T5946] usb 7-1: config 0 has no interface number 0 [ 354.858038][ T5946] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 354.869851][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.878014][ T5946] usb 7-1: Product: syz [ 354.882420][ T5946] usb 7-1: Manufacturer: syz [ 354.887202][ T5946] usb 7-1: SerialNumber: syz [ 354.910259][ T5946] usb 7-1: config 0 descriptor?? [ 354.919437][ T5946] smsc95xx v2.0.0 [ 355.066246][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 355.072327][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 355.091946][ T9] usb 2-1: USB disconnect, device number 4 [ 355.325255][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 355.336535][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 355.348959][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 355.354738][ T5196] loop2: partition table partially beyond EOD, truncated [ 355.365499][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 355.407012][T10934] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1396'. [ 355.703964][ T5891] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 355.751265][ T5946] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 355.764485][ T5946] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 355.794921][ T5946] usb 7-1: USB disconnect, device number 9 [ 355.855844][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 355.862478][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.875847][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.886275][ T5891] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 355.895774][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.906546][ T5891] usb 3-1: config 0 descriptor?? [ 356.316926][ T5891] hid (null): unknown global tag 0xe [ 356.354424][ T5891] razer 0003:1532:011B.0032: unknown global tag 0xe [ 356.384923][ T5891] razer 0003:1532:011B.0032: item 0 0 1 14 parsing failed [ 356.392980][ T5891] razer 0003:1532:011B.0032: probe with driver razer failed with error -22 [ 356.430123][T10861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.518192][T10934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.531378][T10934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.570890][ T5893] usb 3-1: USB disconnect, device number 36 [ 356.633798][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 356.644394][ T5196] loop2: partition table partially beyond EOD, truncated [ 356.645438][T10861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.663320][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 356.736419][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1407'. [ 356.857224][ T5943] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 356.862606][ T5943] loop2: partition table partially beyond EOD, truncated [ 356.883978][ T5943] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 356.970251][T10963] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1408'. [ 356.998890][T10861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.101877][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 357.127226][ T5196] loop2: partition table partially beyond EOD, truncated [ 357.153847][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 357.327269][T10861] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.396675][T10986] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1413'. [ 357.548630][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.566382][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.568114][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 357.579287][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.589306][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.599461][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 357.621616][ T5196] loop2: partition table partially beyond EOD, truncated [ 357.654923][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 357.714122][T10861] bridge_slave_1: left allmulticast mode [ 357.719846][T10861] bridge_slave_1: left promiscuous mode [ 357.743933][T10861] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.764751][T10861] bridge_slave_0: left allmulticast mode [ 357.770476][T10861] bridge_slave_0: left promiscuous mode [ 357.776597][T10861] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.941020][T11010] tmpfs: Unknown parameter 'grpquota_inLde_hardlimit' [ 358.047305][T10861] dvmrp0 (unregistering): left allmulticast mode [ 358.067827][T10861] dvmrp1 (unregistering): left allmulticast mode [ 358.184925][ T43] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 358.277890][T10861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.287972][T10861] bond_slave_0: left promiscuous mode [ 358.297970][T10861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.307736][T10861] bond_slave_1: left promiscuous mode [ 358.315745][T10861] bond0 (unregistering): Released all slaves [ 358.339040][T10992] virt_wifi0 speed is unknown, defaulting to 1000 [ 358.345866][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 358.361625][ T43] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 358.381789][T11009] netlink: 56537 bytes leftover after parsing attributes in process `syz.6.1418'. [ 358.393088][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.443131][T10992] lo speed is unknown, defaulting to 1000 [ 358.444243][ T43] usb 7-1: Product: syz [ 358.474608][ T43] usb 7-1: Manufacturer: syz [ 358.479276][ T43] usb 7-1: SerialNumber: syz [ 358.486459][T10861] tipc: Left network mode [ 358.517180][ T43] usb 7-1: config 0 descriptor?? [ 358.565100][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 358.586244][ T5196] loop2: partition table partially beyond EOD, truncated [ 358.625667][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 358.907336][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 358.930903][ T5196] loop2: partition table partially beyond EOD, truncated [ 358.946178][ T43] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 358.958908][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 358.979994][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 358.984333][ T43] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 358.995752][ T43] usb 7-1: media controller created [ 359.041043][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.057469][T11023] kvm: Disabled LAPIC found during irq injection [ 359.158395][ T43] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 359.187000][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 359.355872][T10861] hsr_slave_0: left promiscuous mode [ 359.410097][T10861] hsr_slave_1: left promiscuous mode [ 359.415831][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 359.416726][T10861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.421177][ T5196] loop2: partition table partially beyond EOD, truncated [ 359.421420][ T5196] loop2: p1 size 3004527350 extends beyond EOD, [ 359.429028][T10861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.475149][T10861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.492316][T10861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.499702][ T5196] truncated [ 359.612652][T10861] veth1_macvtap: left promiscuous mode [ 359.627736][T10861] veth0_macvtap: left promiscuous mode [ 359.633591][T10861] veth1_vlan: left promiscuous mode [ 359.634243][ T5826] Bluetooth: hci2: command tx timeout [ 359.641802][T10861] veth0_vlan: left promiscuous mode [ 359.816756][T10861] pimreg3 (unregistering): left allmulticast mode [ 360.224533][ T30] audit: type=1326 audit(1760308220.355:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11041 comm="syz.0.1424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f879798eec9 code=0x0 [ 360.278385][T10861] team0 (unregistering): Port device team_slave_1 removed [ 360.337092][T10861] team0 (unregistering): Port device team_slave_0 removed [ 360.892453][T11006] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.905164][T11006] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 360.952292][T10992] chnl_net:caif_netlink_parms(): no params data found [ 360.977161][T11006] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 360.986392][T11006] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 360.997331][T11048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1426'. [ 361.033231][T11048] netlink: 872 bytes leftover after parsing attributes in process `syz.0.1426'. [ 361.042426][T11048] netlink: 872 bytes leftover after parsing attributes in process `syz.0.1426'. [ 361.140999][T11006] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 361.182070][T11006] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.189527][T11006] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 361.254454][T11006] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 361.305662][T11006] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 361.351834][T11006] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 361.365114][T10992] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.374022][T10992] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.376919][T11006] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.381387][T10992] bridge_slave_0: entered allmulticast mode [ 361.396197][T10992] bridge_slave_0: entered promiscuous mode [ 361.410924][T11006] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 361.418583][T10992] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.430995][T10992] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.431206][T11006] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 361.442235][T10992] bridge_slave_1: entered allmulticast mode [ 361.453808][T10992] bridge_slave_1: entered promiscuous mode [ 361.484259][T10861] IPVS: stop unused estimator thread 0... [ 361.526686][ T43] usb 7-1: USB disconnect, device number 10 [ 361.639661][T10992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.663076][ T56] block nbd3: Possible stuck request ffff888025aae000: control (read@0,1024B). Runtime 150 seconds [ 361.675038][ T56] block nbd3: Possible stuck request ffff888025aae1c0: control (read@1024,1024B). Runtime 150 seconds [ 361.686533][ T56] block nbd3: Possible stuck request ffff888025aae380: control (read@2048,1024B). Runtime 150 seconds [ 361.697909][ T56] block nbd3: Possible stuck request ffff888025aae540: control (read@3072,1024B). Runtime 150 seconds [ 361.711765][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 361.719082][T10992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.721252][ T5946] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 361.815835][T10992] team0: Port device team_slave_0 added [ 361.827330][T10992] team0: Port device team_slave_1 added [ 361.896530][ T5946] usb 3-1: Using ep0 maxpacket: 16 [ 361.907001][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.934407][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.952627][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 361.969264][ T5946] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 361.980476][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.999213][ T5946] usb 3-1: config 0 descriptor?? [ 362.008767][T11074] fuse: Bad value for 'user_id' [ 362.027293][T10992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.034750][T11074] fuse: Bad value for 'user_id' [ 362.042863][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.071132][T10992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.126018][T10992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.133044][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.169896][T10992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.186832][ T43] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 362.242836][T10992] hsr_slave_0: entered promiscuous mode [ 362.249920][T10992] hsr_slave_1: entered promiscuous mode [ 362.257165][T10992] debugfs: 'hsr0' already exists in 'hsr' [ 362.262942][T10992] Cannot create hsr debugfs directory [ 362.357759][ T43] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.384855][ T43] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.407736][ T43] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1808, setting to 1024 [ 362.431741][ T5946] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 362.441717][ T5946] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 362.455119][ T43] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.464381][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.472704][ T5946] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 362.480447][ T43] usb 7-1: Product: syz [ 362.485900][ T5946] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 362.493833][ T5946] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 362.501202][ T5946] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 362.508658][ T43] usb 7-1: Manufacturer: syz [ 362.513291][ T43] usb 7-1: SerialNumber: syz [ 362.531373][T11070] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 362.535225][ T5946] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 362.563397][ T5946] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 362.583433][ T5946] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 362.609708][ T5946] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 362.642652][ T5946] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0033/input/input54 [ 362.748336][ T5946] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 362.796737][T11070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.819062][T10992] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 362.828626][T11070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.835909][ T5946] usb 3-1: USB disconnect, device number 37 [ 362.906496][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 362.914598][ T43] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 362.922096][ T43] cdc_ncm 7-1:1.0: bind() failure [ 362.934142][T10992] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 362.983992][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 362.992964][T10992] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 362.998099][T11089] fido_id[11089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 363.029224][ T43] usb 7-1: USB disconnect, device number 11 [ 363.097292][T10992] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 363.224588][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 363.308485][ T5826] Bluetooth: hci6: command 0x0c1a tx timeout [ 363.310812][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 363.373825][ T5196] loop2: partition table partially beyond EOD, truncated [ 363.383739][ T5826] Bluetooth: hci2: command 0x040f tx timeout [ 363.407578][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 363.461363][T11111] netlink: 'syz.2.1436': attribute type 21 has an invalid length. [ 363.472330][T10992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.508815][T11111] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1436'. [ 363.528329][T11111] netlink: 'syz.2.1436': attribute type 4 has an invalid length. [ 363.539771][T11111] netlink: 'syz.2.1436': attribute type 3 has an invalid length. [ 363.575625][T11111] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1436'. [ 363.617345][T10992] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.645882][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 363.651358][ T5196] loop2: partition table partially beyond EOD, truncated [ 363.653703][T10861] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.659721][ T5196] loop2: p1 size 3004527350 extends beyond EOD, [ 363.665625][T10861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.665640][ T5196] truncated [ 363.732394][T10861] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.739763][T10861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.835099][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 363.846147][ T5196] loop2: partition table partially beyond EOD, truncated [ 363.869231][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 364.235180][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.254283][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 364.284758][ T43] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 364.405738][ T10] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.417955][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 364.429647][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 364.446976][ T43] usb 7-1: not running at top speed; connect to a high speed hub [ 364.451882][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.462648][ T43] usb 7-1: config index 0 descriptor too short (expected 2322, got 18) [ 364.488126][ T10] usb 3-1: config 0 descriptor?? [ 364.492439][ T43] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 364.519148][ T43] usb 7-1: config 95 has no interface number 0 [ 364.539103][ T43] usb 7-1: config 95 interface 1 has no altsetting 0 [ 364.557962][ T43] usb 7-1: string descriptor 0 read error: -22 [ 364.577155][ T43] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 364.592904][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.708036][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.736073][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.761875][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.789661][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.802337][T10992] veth0_vlan: entered promiscuous mode [ 364.822403][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.855189][T10992] veth1_vlan: entered promiscuous mode [ 364.862982][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.894743][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.930972][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.951421][T10992] veth0_macvtap: entered promiscuous mode [ 364.961930][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.974096][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.985299][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 364.996544][T10992] veth1_macvtap: entered promiscuous mode [ 365.014302][ T10] playstation 0003:054C:05C4.0034: hidraw0: USB HID v40.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 365.023357][ T43] usb 7-1: USB disconnect, device number 12 [ 365.064013][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 365.096111][ T10] playstation 0003:054C:05C4.0034: Failed to retrieve feature with reportID 18: -32 [ 365.113226][ T10] playstation 0003:054C:05C4.0034: Failed to retrieve DualShock4 pairing info: -32 [ 365.122960][ T10] playstation 0003:054C:05C4.0034: Failed to get MAC address from DualShock4 [ 365.131922][ T10] playstation 0003:054C:05C4.0034: Failed to create dualshock4. [ 365.150622][ T10] playstation 0003:054C:05C4.0034: probe with driver playstation failed with error -32 [ 365.162705][T10992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.186536][T10992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.212261][ T4558] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.253128][ T4558] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.288799][ T10] usb 3-1: USB disconnect, device number 38 [ 365.301275][ T4558] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.313287][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 365.341999][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 365.384164][ T5826] Bluetooth: hci6: command 0x0c1a tx timeout [ 365.389464][ T4558] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.403405][ T5196] loop2: partition table partially beyond EOD, truncated [ 365.412528][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 365.467069][ T5826] Bluetooth: hci2: command 0x040f tx timeout [ 365.528879][ T5196] loop2: [CUMANA/ADFS] p1 [ADFS] p1 [ 365.544402][ T5196] loop2: partition table partially beyond EOD, truncated [ 365.562054][ T5196] loop2: p1 size 3004527350 extends beyond EOD, truncated [ 365.643524][T10861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.698766][T10861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.778755][ T4558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.790674][ T4558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.029383][T11176] netlink: 'syz.7.1404': attribute type 13 has an invalid length. [ 366.044667][ T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 366.176466][ T5946] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 366.200754][ T43] usb 3-1: device descriptor read/64, error -71 [ 366.364706][ T5946] usb 7-1: Using ep0 maxpacket: 8 [ 366.374539][ T5946] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 366.420353][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.433799][ T5946] usb 7-1: Product: syz [ 366.438036][ T5946] usb 7-1: Manufacturer: syz [ 366.442662][ T5946] usb 7-1: SerialNumber: syz [ 366.457107][ T43] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 366.477129][ T5946] usb 7-1: config 0 descriptor?? [ 366.614846][ T43] usb 3-1: device descriptor read/64, error -71 [ 366.695253][ T5946] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 366.725837][ T43] usb usb3-port1: attempt power cycle [ 366.921971][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.934281][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.943235][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.958513][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.970338][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.082020][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.103752][ T43] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 367.130057][ T43] usb 3-1: device descriptor read/8, error -71 [ 367.147255][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.208295][T11194] virt_wifi0 speed is unknown, defaulting to 1000 [ 367.223309][T11194] lo speed is unknown, defaulting to 1000 [ 367.267932][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.363786][ T43] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 367.398566][ T5946] gspca_sunplus: reg_w_riv err -71 [ 367.415742][ T43] usb 3-1: device descriptor read/8, error -71 [ 367.430826][ T5946] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 367.442408][ T5946] usb 7-1: USB disconnect, device number 13 [ 367.453438][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.473936][ T5826] Bluetooth: hci6: command 0x0c1a tx timeout [ 367.538035][ T43] usb usb3-port1: unable to enumerate USB device [ 367.545924][ T5826] Bluetooth: hci2: command 0x040f tx timeout [ 367.632101][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.035854][T11194] chnl_net:caif_netlink_parms(): no params data found [ 368.220503][ T79] bridge_slave_1: left allmulticast mode [ 368.231411][ T79] bridge_slave_1: left promiscuous mode [ 368.239040][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.258961][ T79] bridge_slave_0: left allmulticast mode [ 368.266055][ T79] bridge_slave_0: left promiscuous mode [ 368.272059][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.483660][ T5946] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 368.647140][ T5946] usb 7-1: Using ep0 maxpacket: 16 [ 368.677536][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.715432][ T5946] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.734397][ T5946] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 368.748682][ T5946] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 368.757899][ T5946] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.773257][ T5946] usb 7-1: config 0 descriptor?? [ 369.080737][ T5826] Bluetooth: hci0: command tx timeout [ 369.115343][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.128188][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.139652][ T79] bond0 (unregistering): Released all slaves [ 369.188689][T11225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.209310][T11225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.240826][T11225] netlink: 328 bytes leftover after parsing attributes in process `syz.6.1449'. [ 369.271967][T11225] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 100 [ 369.367342][ T5946] shield 0003:0955:7214.0035: item fetching failed at offset 1/5 [ 369.405144][ T5946] shield 0003:0955:7214.0035: Parse failed [ 369.409585][T11194] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.421426][ T5946] shield 0003:0955:7214.0035: probe with driver shield failed with error -22 [ 369.431533][T11194] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.448066][T11194] bridge_slave_0: entered allmulticast mode [ 369.460340][T11194] bridge_slave_0: entered promiscuous mode [ 369.469293][ T79] tipc: Left network mode [ 369.470456][T11194] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.485083][T11194] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.515208][T11194] bridge_slave_1: entered allmulticast mode [ 369.532555][T11194] bridge_slave_1: entered promiscuous mode [ 369.556761][ T10] usb 7-1: USB disconnect, device number 14 [ 369.625420][ T5826] Bluetooth: hci2: command 0x040f tx timeout [ 369.745812][T11194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.805788][T11194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.052679][T11194] team0: Port device team_slave_0 added [ 370.074426][T11194] team0: Port device team_slave_1 added [ 370.131161][ T79] hsr_slave_0: left promiscuous mode [ 370.173642][ T79] hsr_slave_1: left promiscuous mode [ 370.191395][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.220812][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.254294][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.272055][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.389806][ T79] veth1_macvtap: left promiscuous mode [ 370.408585][ T79] veth0_macvtap: left promiscuous mode [ 370.426552][ T79] veth1_vlan: left promiscuous mode [ 370.438842][T11290] overlayfs: conflicting lowerdir path [ 370.592705][ T79] pimreg3 (unregistering): left allmulticast mode [ 370.601781][ T5946] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 370.628584][ T79] pimreg (unregistering): left allmulticast mode [ 370.753653][ T5946] usb 7-1: Using ep0 maxpacket: 8 [ 370.776200][ T5946] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 370.791119][ T5946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.812715][ T5946] usb 7-1: Product: syz [ 370.822864][ T5946] usb 7-1: Manufacturer: syz [ 370.839904][ T5946] usb 7-1: SerialNumber: syz [ 370.847930][ T5946] usb 7-1: config 0 descriptor?? [ 370.869188][ T5946] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 371.143988][ T5826] Bluetooth: hci0: command tx timeout [ 371.350035][ T79] team0 (unregistering): Port device team_slave_1 removed [ 371.412553][ T79] team0 (unregistering): Port device team_slave_0 removed [ 371.527385][T11311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.548636][T11311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.720915][ T5826] Bluetooth: hci2: command 0x040f tx timeout [ 372.262596][T11290] netlink: 'syz.2.1457': attribute type 30 has an invalid length. [ 372.282811][ T10] lo speed is unknown, defaulting to 1000 [ 372.285014][ T5946] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 372.292604][ T10] infiniband syz2: ib_query_port failed (-19) [ 372.308800][ T5946] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 372.397167][T11194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.407885][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.412824][ T10] usb 7-1: USB disconnect, device number 15 [ 372.443635][T11194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.474631][T11194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.485726][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.518769][T11194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.689567][T11194] hsr_slave_0: entered promiscuous mode [ 372.706400][T11194] hsr_slave_1: entered promiscuous mode [ 372.751303][T11329] sp0: Synchronizing with TNC [ 372.951937][ T79] IPVS: stop unused estimator thread 0... [ 373.097701][T11341] netlink: 'syz.6.1462': attribute type 27 has an invalid length. [ 373.209900][T11341] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.218832][T11341] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.226813][ T5826] Bluetooth: hci0: command tx timeout [ 373.377415][T11341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.410730][T11341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.587951][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.597081][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.612650][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.651384][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.176261][T11194] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.195754][ T5891] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 374.206983][T11194] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.228723][T11194] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 374.242493][T11194] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 374.363634][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 374.395700][ T5891] usb 3-1: unable to get BOS descriptor or descriptor too short [ 374.414441][ T5891] usb 3-1: config 5 has an invalid interface number: 85 but max is 0 [ 374.422586][ T5891] usb 3-1: config 5 has no interface number 0 [ 374.447625][ T5891] usb 3-1: config 5 interface 85 has no altsetting 0 [ 374.463002][ T5891] usb 3-1: New USB device found, idVendor=0c45, idProduct=627c, bcdDevice=e8.b7 [ 374.484552][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.492632][ T5891] usb 3-1: Product: syz [ 374.502943][T11194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.530376][ T5891] usb 3-1: Manufacturer: syz [ 374.543383][ T5891] usb 3-1: SerialNumber: syz [ 374.570206][T11194] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.586370][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.593678][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.614932][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.622150][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.766899][ T5891] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:627c [ 374.784079][ T5891] gspca_sn9c20x: Write register 1000 failed -71 [ 374.790404][ T5891] gspca_sn9c20x: Device initialization failed [ 374.798083][ T43] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 374.814385][ T5891] gspca_sn9c20x 3-1:5.85: probe with driver gspca_sn9c20x failed with error -71 [ 374.847669][ T5891] usb 3-1: USB disconnect, device number 43 [ 374.988272][ T43] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 374.997828][ T43] usb 7-1: can't read configurations, error -22 [ 375.032298][T11194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.107938][T11194] veth0_vlan: entered promiscuous mode [ 375.125835][T11194] veth1_vlan: entered promiscuous mode [ 375.135325][ T43] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 375.192469][T11194] veth0_macvtap: entered promiscuous mode [ 375.208201][T11194] veth1_macvtap: entered promiscuous mode [ 375.239920][T11194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.258641][T11194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.279566][ T4558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.289337][ T4558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.303873][ T5826] Bluetooth: hci0: command tx timeout [ 375.315910][ T43] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 375.331381][ T43] usb 7-1: can't read configurations, error -22 [ 375.342920][ T4558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.377912][ T43] usb usb7-port1: attempt power cycle [ 375.401144][ T4558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.521268][ T4558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.547450][ T4558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.591968][ T4558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.602954][ T4558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.676783][ T5891] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 375.741985][ T4558] Bluetooth: hci5: Frame reassembly failed (-84) [ 375.750663][ T43] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 375.789969][ T43] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 375.798944][ T43] usb 7-1: can't read configurations, error -22 [ 375.844096][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 375.851601][ T5891] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.873121][ T5891] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.884048][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.890731][ T5891] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 375.901534][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.914479][ T5891] usb 3-1: config 0 descriptor?? [ 375.943884][ T43] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 375.966950][ T43] usb 7-1: config index 0 descriptor too short (expected 9, got 0) [ 375.993660][ T43] usb 7-1: can't read configurations, error -22 [ 376.004280][ T43] usb usb7-port1: unable to enumerate USB device [ 376.141109][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1469'. [ 376.357717][ T5891] hid_parser_main: 7 callbacks suppressed [ 376.357742][ T5891] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 376.375761][ T5891] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 376.383130][T11429] netlink: 'syz.7.1470': attribute type 2 has an invalid length. [ 376.391930][ T5891] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 376.404153][ T5891] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 376.410993][ T5891] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 376.418771][ T5891] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 376.426834][ T5891] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 376.434188][ T5891] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 376.442323][ T5891] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 376.451240][ T5891] kye 0003:0458:0138.0036: unknown main item tag 0x0 [ 376.462800][ T5891] kye 0003:0458:0138.0036: reserved main item tag 0xe [ 376.470810][ T5891] kye 0003:0458:0138.0036: reserved main item tag 0xe [ 376.478219][ T5891] kye 0003:0458:0138.0036: report_id 0 is invalid [ 376.485170][ T5891] kye 0003:0458:0138.0036: item 0 0 1 8 parsing failed [ 376.492816][ T5891] kye 0003:0458:0138.0036: parse failed [ 376.501849][ T5891] kye 0003:0458:0138.0036: probe with driver kye failed with error -22 [ 376.551851][ T10] usb 3-1: USB disconnect, device number 44 [ 377.108183][T11451] loop5: detected capacity change from 0 to 7 [ 377.130389][T11451] Dev loop5: unable to read RDB block 7 [ 377.136401][T11451] loop5: unable to read partition table [ 377.142247][T11451] loop5: partition table beyond EOD, truncated [ 377.149788][T11451] loop_reread_partitions: partition scan of loop5 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 377.229577][ T30] audit: type=1400 audit(1760308237.365:93): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 377.604913][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.742523][T11467] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1476'. [ 377.766394][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 377.775820][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 377.787476][ T5826] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 377.816002][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 377.833883][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 377.845147][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 377.876066][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 377.900971][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 377.916396][ T10] usb 3-1: Product: syz [ 377.923754][ T10] usb 3-1: Manufacturer: syz [ 377.945898][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 377.953615][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 377.971207][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 377.987587][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 378.141039][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 378.245281][T11487] overlayfs: missing 'workdir' [ 378.263134][T11489] comedi comedi3: mpc624: I/O port conflict (0x4f27,16) [ 378.820548][ T5911] usb 3-1: USB disconnect, device number 45 [ 379.067068][T11501] AppArmor: change_hat: Invalid input '' [ 379.071654][T11501] netlink: 'syz.6.1486': attribute type 11 has an invalid length. [ 379.403716][ T5911] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 379.563624][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 379.572550][ T5911] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 379.592259][ T5911] usb 7-1: config 0 has no interface number 0 [ 379.598586][ T5911] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 379.620906][ T5911] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 379.636738][ T5911] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 379.648188][T11509] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!' [ 379.649546][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 379.663336][T11509] CPU: 1 UID: 0 PID: 11509 Comm: syz.7.1490 Not tainted syzkaller #0 PREEMPT(full) [ 379.663380][T11509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 379.663412][T11509] Call Trace: [ 379.663425][T11509] [ 379.663436][T11509] dump_stack_lvl+0x189/0x250 [ 379.663474][T11509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.663501][T11509] ? __pfx__printk+0x10/0x10 [ 379.663538][T11509] ? kernfs_path_from_node+0x2f/0x290 [ 379.663576][T11509] ? kernfs_path_from_node+0x250/0x290 [ 379.663611][T11509] ? kernfs_path_from_node+0x2f/0x290 [ 379.663654][T11509] sysfs_warn_dup+0x8e/0xa0 [ 379.663690][T11509] sysfs_do_create_link_sd+0xc0/0x110 [ 379.663731][T11509] device_add_class_symlinks+0x1cf/0x240 [ 379.663768][T11509] device_add+0x475/0xb50 [ 379.663803][T11509] wiphy_register+0x1c81/0x2aa0 [ 379.663856][T11509] ? __pfx_wiphy_register+0x10/0x10 [ 379.663884][T11509] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 379.663931][T11509] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 379.663973][T11509] ieee80211_register_hw+0x3473/0x40d0 [ 379.664030][T11509] ? ieee80211_register_hw+0x1451/0x40d0 [ 379.664080][T11509] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 379.664115][T11509] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 379.664147][T11509] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 379.664171][T11509] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 379.664207][T11509] ? __hrtimer_setup+0x187/0x210 [ 379.664240][T11509] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 379.664278][T11509] mac80211_hwsim_new_radio+0x2f7a/0x5220 [ 379.664344][T11509] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 379.664378][T11509] ? trace_kmalloc+0x1f/0xd0 [ 379.664402][T11509] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 379.664430][T11509] ? kstrndup+0xbf/0x160 [ 379.664477][T11509] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 379.664514][T11509] ? __pfx___nla_validate_parse+0x10/0x10 [ 379.664559][T11509] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 379.664597][T11509] ? rcu_is_watching+0x15/0xb0 [ 379.664638][T11509] ? __nla_parse+0x40/0x60 [ 379.664667][T11509] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 379.664712][T11509] genl_family_rcv_msg_doit+0x215/0x300 [ 379.664753][T11509] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 379.664803][T11509] ? bpf_lsm_capable+0x9/0x20 [ 379.664824][T11509] ? security_capable+0x7e/0x2e0 [ 379.664871][T11509] genl_rcv_msg+0x60e/0x790 [ 379.664910][T11509] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.664942][T11509] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 379.664990][T11509] netlink_rcv_skb+0x208/0x470 [ 379.665026][T11509] ? __lock_acquire+0xab9/0xd20 [ 379.665059][T11509] ? __pfx_genl_rcv_msg+0x10/0x10 [ 379.665092][T11509] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.665157][T11509] ? down_read+0x1ad/0x2e0 [ 379.665191][T11509] genl_rcv+0x28/0x40 [ 379.665218][T11509] netlink_unicast+0x82f/0x9e0 [ 379.665267][T11509] ? __pfx_netlink_unicast+0x10/0x10 [ 379.665305][T11509] ? netlink_sendmsg+0x642/0xb30 [ 379.665326][T11509] ? skb_put+0x11b/0x210 [ 379.665363][T11509] netlink_sendmsg+0x805/0xb30 [ 379.665400][T11509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.665429][T11509] ? aa_sock_msg_perm+0xf1/0x1d0 [ 379.665457][T11509] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 379.665486][T11509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.665512][T11509] __sock_sendmsg+0x21c/0x270 [ 379.665550][T11509] ____sys_sendmsg+0x505/0x830 [ 379.665585][T11509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.665624][T11509] ? import_iovec+0x74/0xa0 [ 379.665659][T11509] ___sys_sendmsg+0x21f/0x2a0 [ 379.665691][T11509] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.665765][T11509] ? __fget_files+0x2a/0x420 [ 379.665793][T11509] ? __fget_files+0x3a0/0x420 [ 379.665837][T11509] __x64_sys_sendmsg+0x19b/0x260 [ 379.665868][T11509] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 379.665917][T11509] ? do_syscall_64+0xbe/0xfa0 [ 379.665950][T11509] do_syscall_64+0xfa/0xfa0 [ 379.665976][T11509] ? lockdep_hardirqs_on+0x9c/0x150 [ 379.666003][T11509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.666027][T11509] ? clear_bhb_loop+0x60/0xb0 [ 379.666058][T11509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.666082][T11509] RIP: 0033:0x7efeebf8eec9 [ 379.666107][T11509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.666128][T11509] RSP: 002b:00007efeecebc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.666154][T11509] RAX: ffffffffffffffda RBX: 00007efeec1e5fa0 RCX: 00007efeebf8eec9 [ 379.666173][T11509] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 379.666190][T11509] RBP: 00007efeec011f91 R08: 0000000000000000 R09: 0000000000000000 [ 379.666205][T11509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.666221][T11509] R13: 00007efeec1e6038 R14: 00007efeec1e5fa0 R15: 00007ffd5fd112d8 [ 379.666264][T11509] [ 380.152849][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 380.164493][ T5911] usb 7-1: Product: syz [ 380.172581][ T5911] usb 7-1: SerialNumber: syz [ 380.180526][ T5911] usb 7-1: config 0 descriptor?? [ 380.197868][ T5911] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 380.208720][ T5911] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input56 [ 380.347370][ T10] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 380.355808][ T10] usb 3-1: config 0 has no interface number 0 [ 380.364274][ T10] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e14, bcdDevice=db.f2 [ 380.373392][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.381458][ T10] usb 3-1: Product: syz [ 380.386079][ T10] usb 3-1: Manufacturer: syz [ 380.390789][ T10] usb 3-1: SerialNumber: syz [ 380.398961][ T10] usb 3-1: config 0 descriptor?? [ 380.421676][T11503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.435849][T11503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.445606][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.455721][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.463839][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.473645][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.480951][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.488477][ T5911] usb 7-1: USB disconnect, device number 20 [ 380.494630][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 380.494659][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 380.521798][ T5911] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 380.616475][ T10] dvb-usb: found a 'DiBcom STK7700P reference design' in warm state. [ 380.627850][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.638566][ T10] dvbdev: DVB: registering new adapter (DiBcom STK7700P reference design) [ 380.647262][ T10] usb 3-1: media controller created [ 380.668805][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.711897][ T10] DVB: Unable to find symbol dib7000p_attach() [ 380.719781][ T10] dvb-usb: no frontend was attached by 'DiBcom STK7700P reference design' [ 380.786687][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 380.792853][ T10] Registered IR keymap rc-empty [ 380.798225][ T10] dvb-usb: could not initialize remote control. [ 380.804541][ T10] dvb-usb: DiBcom STK7700P reference design successfully initialized and connected. [ 380.830527][ T10] usb 3-1: USB disconnect, device number 46 [ 380.878208][ T10] dvb-usb: DiBcom STK7700P reference design successfully deinitialized and disconnected. [ 381.323665][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 381.473638][ T10] usb 7-1: device descriptor read/64, error -71 [ 381.724906][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 381.863903][ T10] usb 7-1: device descriptor read/64, error -71 [ 381.974499][ T10] usb usb7-port1: attempt power cycle [ 382.343733][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 382.365475][ T10] usb 7-1: device descriptor read/8, error -71 [ 382.539753][T11544] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1499'. [ 382.613792][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 382.654128][ T10] usb 7-1: device descriptor read/8, error -71 [ 382.767860][ T10] usb usb7-port1: unable to enumerate USB device [ 383.563751][ T5911] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 383.715136][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 383.726096][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 383.737687][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 383.751142][ T5911] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 383.760290][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.768601][ T5911] usb 3-1: Product: syz [ 383.772806][ T5911] usb 3-1: Manufacturer: syz [ 383.777665][ T5911] usb 3-1: SerialNumber: syz [ 383.784692][ T5911] usb 3-1: config 0 descriptor?? [ 383.792734][ T5911] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 383.802416][ T5911] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 384.039193][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.048303][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.175045][ T5826] Bluetooth: hci6: unexpected event for opcode 0x1009 [ 384.176422][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1506'. [ 384.399953][ T5911] em28xx 3-1:0.0: chip ID is em2870 [ 384.692506][ T5911] usb 3-1: USB disconnect, device number 47 [ 384.702431][ T5911] em28xx 3-1:0.0: Disconnecting em28xx [ 384.710803][ T5911] em28xx 3-1:0.0: Freeing device [ 385.013771][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 385.163938][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 385.170676][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.179153][ T9] usb 7-1: config 0 has no interface number 0 [ 385.189195][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 385.198668][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.207106][ T9] usb 7-1: Product: syz [ 385.211862][ T9] usb 7-1: Manufacturer: syz [ 385.216919][ T9] usb 7-1: SerialNumber: syz [ 385.227515][ T9] usb 7-1: config 0 descriptor?? [ 385.250416][ T9] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 385.263006][ T9] usb 7-1: selecting invalid altsetting 1 [ 385.270291][ T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 385.285921][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 385.298898][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 385.309354][ T9] usb 7-1: media controller created [ 385.335971][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 385.563715][ T43] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 385.646714][T11572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.656733][T11572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.727694][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.739806][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.752209][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.761526][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.770154][ T43] usb 3-1: Product: syz [ 385.775772][ T43] usb 3-1: Manufacturer: syz [ 385.780422][ T43] usb 3-1: SerialNumber: syz [ 385.858028][ T985] usb 7-1: USB disconnect, device number 25 [ 385.879297][T11588] qrtr: Invalid version 43 [ 385.942758][T11591] comedi comedi3: rti802: a I/O base address must be specified [ 385.949544][T11592] netlink: 'syz.7.1513': attribute type 10 has an invalid length. [ 385.961143][T11592] macvlan0: entered promiscuous mode [ 385.967808][T11592] macvlan0: entered allmulticast mode [ 385.980887][T11592] veth1_vlan: entered allmulticast mode [ 385.990667][T11592] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 386.004140][ T43] usb 3-1: 0:2 : does not exist [ 386.015973][ T43] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 386.065731][ T43] usb 3-1: USB disconnect, device number 48 [ 386.109963][ T8316] udevd[8316]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 386.643802][ T985] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 386.793742][ T985] usb 7-1: Using ep0 maxpacket: 16 [ 386.804559][ T985] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.815858][ T985] usb 7-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 386.826961][ T985] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.841685][ T985] usb 7-1: config 0 descriptor?? [ 387.100993][ T985] usbhid 7-1:0.0: can't add hid device: -71 [ 387.117658][ T985] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 387.142797][ T985] usb 7-1: USB disconnect, device number 26 [ 387.267991][T11619] sit0: entered promiscuous mode [ 387.284548][T11619] netlink: 'syz.6.1518': attribute type 1 has an invalid length. [ 387.292611][T11619] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1518'. [ 387.823699][ T43] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 387.977369][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 387.985588][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.002420][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.016958][ T43] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 388.027666][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.056114][ T43] usb 7-1: config 0 descriptor?? [ 388.142642][T11652] netlink: 'syz.2.1523': attribute type 11 has an invalid length. [ 388.481776][ T43] microsoft 0003:045E:07DA.0037: ignoring exceeding usage max [ 388.510263][ T43] HID 045e:07da: Invalid code 65791 type 1 [ 388.517323][ T43] HID 045e:07da: Invalid code 768 type 1 [ 388.523121][ T43] HID 045e:07da: Invalid code 769 type 1 [ 388.529916][ T43] HID 045e:07da: Invalid code 770 type 1 [ 388.538265][ T43] HID 045e:07da: Invalid code 771 type 1 [ 388.558442][ T43] HID 045e:07da: Invalid code 772 type 1 [ 388.565988][ T43] HID 045e:07da: Invalid code 773 type 1 [ 388.571855][ T43] HID 045e:07da: Invalid code 774 type 1 [ 388.578320][ T43] HID 045e:07da: Invalid code 775 type 1 [ 388.590557][ T43] HID 045e:07da: Invalid code 776 type 1 [ 388.640965][ T43] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0037/input/input58 [ 388.725038][ T43] microsoft 0003:045E:07DA.0037: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 388.877901][T11634] netlink: 'syz.6.1521': attribute type 1 has an invalid length. [ 388.887469][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1521'. [ 389.118763][T11634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.137514][T11634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.176760][ T5911] usb 7-1: USB disconnect, device number 27 [ 389.214782][ T985] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 389.393837][ T985] usb 3-1: Using ep0 maxpacket: 8 [ 389.401281][ T985] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 389.412995][ T985] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 389.426551][ T985] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.433197][ T985] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 389.442403][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.452827][ T985] usb 3-1: config 0 descriptor?? [ 389.633635][ T5911] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 389.784477][ T31] INFO: task syz.3.811:8653 blocked for more than 143 seconds. [ 389.792291][ T31] Not tainted syzkaller #0 [ 389.797493][ T5911] usb 7-1: device descriptor read/64, error -71 [ 389.797991][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 389.812895][ T31] task:syz.3.811 state:D stack:27336 pid:8653 tgid:8652 ppid:5834 task_flags:0x400040 flags:0x00080002 [ 389.825401][ T31] Call Trace: [ 389.828774][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 389.831797][ T31] __schedule+0x1798/0x4cc0 [ 389.838394][ T31] ? do_filp_open+0x1fa/0x410 [ 389.843199][ T31] ? __lock_acquire+0xab9/0xd20 [ 389.849104][ T31] ? __lock_acquire+0xab9/0xd20 [ 389.854388][ T31] ? __pfx___schedule+0x10/0x10 [ 389.859521][ T31] ? schedule+0x91/0x360 [ 389.864422][ T31] schedule+0x165/0x360 [ 389.870448][ T31] schedule_preempt_disabled+0x13/0x30 [ 389.903583][ T31] __mutex_lock+0x7e6/0x1350 [ 389.931447][ T31] ? __mutex_lock+0x5bb/0x1350 [ 389.951459][ T31] ? bdev_open+0xe0/0xd30 [ 389.958597][ T985] usbhid 3-1:0.0: can't add hid device: -71 [ 389.993603][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 389.999116][ T31] ? __pfx___might_resched+0x10/0x10 [ 390.004723][ T985] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 390.033582][ T31] ? wait_on_inode+0xc0/0x230 [ 390.038376][ T31] ? disk_block_events+0xab/0x120 [ 390.043465][ T31] ? bdev_open+0xaf/0xd30 [ 390.048409][ T985] usb 3-1: USB disconnect, device number 49 [ 390.073631][ T5911] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 390.093664][ T31] bdev_open+0xe0/0xd30 [ 390.097963][ T31] blkdev_open+0x457/0x600 [ 390.102577][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 390.133632][ T31] do_dentry_open+0x953/0x13f0 [ 390.138557][ T31] vfs_open+0x3b/0x340 [ 390.142725][ T31] ? path_openat+0x2ecd/0x3830 [ 390.151750][ T31] path_openat+0x2ee5/0x3830 [ 390.163628][ T31] ? __pfx_path_openat+0x10/0x10 [ 390.169045][ T31] do_filp_open+0x1fa/0x410 [ 390.177581][ T31] ? __lock_acquire+0xab9/0xd20 [ 390.182610][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 390.188705][ T31] ? _raw_spin_unlock+0x28/0x50 [ 390.194445][ T31] ? alloc_fd+0x64c/0x6c0 [ 390.198879][ T31] do_sys_openat2+0x121/0x1c0 [ 390.203723][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 390.209028][ T31] ? rcu_is_watching+0x15/0xb0 [ 390.213883][ T31] __x64_sys_openat+0x138/0x170 [ 390.218809][ T31] do_syscall_64+0xfa/0xfa0 [ 390.223659][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.229013][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.235447][ T31] ? clear_bhb_loop+0x60/0xb0 [ 390.240226][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.246264][ T31] RIP: 0033:0x7f8de7f8d710 [ 390.250745][ T31] RSP: 002b:00007f8de8e63b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 390.259297][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8de7f8d710 [ 390.267348][ T31] RDX: 0000000000000000 RSI: 00007f8de8e63c10 RDI: 00000000ffffff9c [ 390.278949][ T31] RBP: 00007f8de8e63c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 390.287062][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 390.295147][ T31] R13: 00007f8de81e6038 R14: 00007f8de81e5fa0 R15: 00007ffcb6937698 [ 390.303199][ T31] [ 390.306640][ T31] [ 390.306640][ T31] Showing all locks held in the system: [ 390.323649][ T31] 1 lock held by khungtaskd/31: [ 390.328606][ T31] #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 390.381273][ T31] 3 locks held by kworker/1:1/43: [ 390.403622][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 390.443694][ T31] #1: ffffc90000b37ba0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 390.463585][ T31] #2: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 390.483643][ T31] 2 locks held by getty/5590: [ 390.488416][ T31] #0: ffff8880333ae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 390.523568][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 390.553665][ T31] 1 lock held by udevd/5824: [ 390.558354][ T31] #0: ffff888025a28358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 390.613678][ T31] 5 locks held by kworker/0:6/5911: [ 390.619164][ T31] #0: ffff888144280148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 390.673665][ T31] #1: ffffc90004517ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 390.723655][ T31] #2: ffff8880282b1198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 390.732705][ T31] #3: ffff8880282b3518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 390.783592][ T31] #4: ffff888027873668 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 390.813674][ T31] 1 lock held by syz.3.811/8653: [ 390.818712][ T31] #0: ffff888025a28358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 390.845955][ T31] 1 lock held by syz.4.1035/9436: [ 390.851098][ T31] #0: ffff888025a28358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 390.885444][ T31] 1 lock held by syz.4.1035/9441: [ 390.897466][ T31] #0: ffff888025a28358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 390.923577][ T31] 1 lock held by syz.2.1511/11584: [ 390.928978][ T31] 1 lock held by syz.0.1524/11664: [ 390.953592][ T31] 2 locks held by syz.6.1531/11689: [ 390.958893][ T31] #0: ffffffff8f4e4fc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 390.976357][ T31] #1: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 390.988187][ T31] 1 lock held by syz.7.1532/11694: [ 390.996797][ T31] #0: ffffffff8f4e4fc8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 391.006406][ T31] [ 391.008795][ T31] ============================================= [ 391.008795][ T31] [ 391.018239][ T31] NMI backtrace for cpu 0 [ 391.018258][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.018281][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.018295][ T31] Call Trace: [ 391.018308][ T31] [ 391.018317][ T31] dump_stack_lvl+0x189/0x250 [ 391.018346][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.018369][ T31] ? __pfx__printk+0x10/0x10 [ 391.018403][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 391.018438][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 391.018471][ T31] ? __pfx__printk+0x10/0x10 [ 391.018496][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 391.018525][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 391.018560][ T31] watchdog+0xf60/0xfa0 [ 391.018593][ T31] ? watchdog+0x1e2/0xfa0 [ 391.018625][ T31] kthread+0x711/0x8a0 [ 391.018650][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.018675][ T31] ? __pfx_kthread+0x10/0x10 [ 391.018698][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.018719][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.018740][ T31] ? __pfx_kthread+0x10/0x10 [ 391.018762][ T31] ret_from_fork+0x4bc/0x870 [ 391.018792][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.018826][ T31] ? __switch_to_asm+0x39/0x70 [ 391.018849][ T31] ? __switch_to_asm+0x33/0x70 [ 391.018870][ T31] ? __pfx_kthread+0x10/0x10 [ 391.018892][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.018934][ T31] [ 391.018964][ T31] Sending NMI from CPU 0 to CPUs 1: [ 391.169609][ C1] NMI backtrace for cpu 1 [ 391.169628][ C1] CPU: 1 UID: 0 PID: 11664 Comm: syz.0.1524 Not tainted syzkaller #0 PREEMPT(full) [ 391.169648][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.169660][ C1] RIP: 0010:lock_acquire+0x11b/0x360 [ 391.169687][ C1] Code: 4c 89 7c 24 08 41 f7 c7 00 02 00 00 41 0f 94 c1 4c 89 ef 89 de 8b 54 24 04 44 89 e1 45 89 f0 6a 00 6a 00 6a 00 55 ff 74 24 30 e0 02 00 00 48 83 c4 28 48 c7 c7 c7 99 9d 8d e8 80 59 a7 09 b8 [ 391.169702][ C1] RSP: 0018:ffffc900198e6de0 EFLAGS: 00000006 [ 391.169719][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000002 [ 391.169731][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13d2e0 [ 391.169742][ C1] RBP: ffffffff8230f5ba R08: 0000000000000000 R09: 0000000000000000 [ 391.169754][ C1] R10: dffffc0000000000 R11: ffffed100b3038c0 R12: 0000000000000002 [ 391.169767][ C1] R13: ffffffff8e13d2e0 R14: 0000000000000000 R15: 0000000000000246 [ 391.169779][ C1] FS: 0000000000000000(0000) GS:ffff888125e2b000(0000) knlGS:0000000000000000 [ 391.169794][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 391.169806][ C1] CR2: 00007ffeb91f9ff0 CR3: 000000000df38000 CR4: 00000000003526f0 [ 391.169823][ C1] Call Trace: [ 391.169830][ C1] [ 391.169838][ C1] ? __page_table_check_zero+0xba/0x530 [ 391.169863][ C1] ? __page_table_check_zero+0xba/0x530 [ 391.169881][ C1] __page_table_check_zero+0xd7/0x530 [ 391.169904][ C1] ? __page_table_check_zero+0xba/0x530 [ 391.169921][ C1] ? __reset_page_owner+0x148/0x1f0 [ 391.169941][ C1] free_unref_folios+0xdc7/0x14f0 [ 391.169965][ C1] ? folio_unqueue_deferred_split+0x93/0x230 [ 391.169990][ C1] folios_put_refs+0x584/0x670 [ 391.170018][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 391.170043][ C1] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 391.170071][ C1] shmem_undo_range+0x49e/0x14b0 [ 391.170103][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 391.170154][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 391.170180][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 391.170202][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 391.170226][ C1] shmem_evict_inode+0x272/0xa70 [ 391.170249][ C1] ? inode_wait_for_writeback+0xf9/0x290 [ 391.170275][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 391.170295][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 391.170323][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 391.170342][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 391.170361][ C1] evict+0x504/0x9c0 [ 391.170390][ C1] ? __pfx_evict+0x10/0x10 [ 391.170415][ C1] ? _raw_spin_unlock+0x28/0x50 [ 391.170431][ C1] ? iput+0x946/0xc50 [ 391.170455][ C1] __dentry_kill+0x209/0x660 [ 391.170476][ C1] ? shrink_kill+0x8d/0x2c0 [ 391.170496][ C1] shrink_kill+0xa9/0x2c0 [ 391.170518][ C1] shrink_dentry_list+0x2e0/0x5e0 [ 391.170543][ C1] shrink_dcache_parent+0xa1/0x2c0 [ 391.170567][ C1] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 391.170597][ C1] do_one_tree+0x23/0xe0 [ 391.170620][ C1] shrink_dcache_for_umount+0xa0/0x170 [ 391.170645][ C1] generic_shutdown_super+0x67/0x2c0 [ 391.170673][ C1] kill_litter_super+0x76/0xb0 [ 391.170690][ C1] deactivate_locked_super+0xbc/0x130 [ 391.170716][ C1] cleanup_mnt+0x425/0x4c0 [ 391.170740][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.170759][ C1] task_work_run+0x1d4/0x260 [ 391.170780][ C1] ? __pfx_task_work_run+0x10/0x10 [ 391.170798][ C1] ? do_exit+0x6b0/0x2300 [ 391.170813][ C1] ? kmem_cache_free+0x19b/0x690 [ 391.170831][ C1] ? free_nsproxy+0x2c7/0x350 [ 391.170855][ C1] do_exit+0x6b5/0x2300 [ 391.170874][ C1] ? do_raw_spin_lock+0x121/0x290 [ 391.170898][ C1] ? __pfx_do_exit+0x10/0x10 [ 391.170922][ C1] do_group_exit+0x21c/0x2d0 [ 391.170940][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.170960][ C1] get_signal+0x1285/0x1340 [ 391.170990][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 391.171012][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 391.171033][ C1] ? __fget_files+0x2a/0x420 [ 391.171058][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 391.171081][ C1] exit_to_user_mode_loop+0x72/0x130 [ 391.171102][ C1] do_syscall_64+0x2bd/0xfa0 [ 391.171120][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.171138][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.171157][ C1] ? clear_bhb_loop+0x60/0xb0 [ 391.171177][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.171194][ C1] RIP: 0033:0x7f0a71f8eacb [ 391.171208][ C1] Code: Unable to access opcode bytes at 0x7f0a71f8eaa1. [ 391.171217][ C1] RSP: 002b:00007f0a72d70f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.171235][ C1] RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 00007f0a71f8eacb [ 391.171248][ C1] RDX: 00007f0a72d71fe0 RSI: 0000000080085502 RDI: 0000000000000007 [ 391.171259][ C1] RBP: 00007f0a72d71fe0 R08: 0000000000000000 R09: 00302e6364755f79 [ 391.171272][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 391.171283][ C1] R13: 0000000800000000 R14: 0000200000000040 R15: 00007f0a7201d50d [ 391.171304][ C1] [ 391.687912][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 391.694839][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 391.703979][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.714180][ T31] Call Trace: [ 391.717581][ T31] [ 391.720543][ T31] dump_stack_lvl+0x99/0x250 [ 391.725175][ T31] ? __asan_memcpy+0x40/0x70 [ 391.729803][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.735056][ T31] ? __pfx__printk+0x10/0x10 [ 391.739693][ T31] vpanic+0x237/0x6d0 [ 391.743708][ T31] ? __pfx_vpanic+0x10/0x10 [ 391.748248][ T31] ? preempt_schedule_common+0x83/0xd0 [ 391.753756][ T31] panic+0xb9/0xc0 [ 391.757532][ T31] ? __pfx_panic+0x10/0x10 [ 391.761988][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 391.767406][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 391.773604][ T31] watchdog+0xf9f/0xfa0 [ 391.777814][ T31] ? watchdog+0x1e2/0xfa0 [ 391.782202][ T31] kthread+0x711/0x8a0 [ 391.786315][ T31] ? __pfx_watchdog+0x10/0x10 [ 391.791036][ T31] ? __pfx_kthread+0x10/0x10 [ 391.795839][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.801076][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.806305][ T31] ? __pfx_kthread+0x10/0x10 [ 391.810938][ T31] ret_from_fork+0x4bc/0x870 [ 391.815579][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 391.820750][ T31] ? __switch_to_asm+0x39/0x70 [ 391.825555][ T31] ? __switch_to_asm+0x33/0x70 [ 391.830354][ T31] ? __pfx_kthread+0x10/0x10 [ 391.834982][ T31] ret_from_fork_asm+0x1a/0x30 [ 391.839807][ T31] [ 391.843193][ T31] Kernel Offset: disabled [ 391.847537][ T31] Rebooting in 86400 seconds..