last executing test programs: 4m13.627996746s ago: executing program 0 (id=113): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0xffffffffffffffa6) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r2 = socket(0x18, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x1, 0x8000000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x40000) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x40005) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x22000, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_FREEZE(r6, 0x400c620e, &(0x7f0000000340)={0x0, 0x0, 0x6}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f00000004c0)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000040)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) r8 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) connect$unix(r8, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905", @ANYRES8], 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={0x0, 0xf506}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r9, 0x101, 0x4}, 0xc) 4m11.836370484s ago: executing program 0 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010003e70000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad160000400033"], 0x68}}, 0x0) 4m11.693411865s ago: executing program 0 (id=124): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}, 0x2}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0xc6e030f857509242, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x20042000) accept4(r0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x403101) r2 = openat$kvm(0xffffff9c, &(0x7f0000000300), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e9000009", @ANYRESDEC], 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="3a03000018002551", 0x8) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2000000000c45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x5, 0x3, 0x4002004c2, 0x400000000007f, 0x9, 0x800003, 0x2, 0x10080, 0x3, 0x0, 0x4, 0x9], 0x100000, 0x80}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 4m9.409135033s ago: executing program 0 (id=142): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup(r4, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x274) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) read$FUSE(r1, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r8, @ANYBLOB="2c666f776e6585d2b3506155a9f31b723c", @ANYRESDEC=r9, @ANYBLOB=',\x00']) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r10, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock '], 0xe) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r13 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r13, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r13, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r14, 0x12}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r12, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r12, 0xc02c5341, &(0x7f00000001c0)) 4m9.146130995s ago: executing program 0 (id=146): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040800) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x17e0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x4, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xea}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x8, 0x58, 0x66}}]}}}]}}]}}, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f00000000c0)=0x7) syz_usb_connect$cdc_ecm(0x4, 0x88, &(0x7f0000001280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x5, 0x60, 0x81, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0xf, {{0xb, 0x24, 0x6, 0x0, 0x0, "b63cbf309325"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xe9e, 0x8, 0x1ff, 0x4}, [@acm={0x4, 0x24, 0x2, 0xb}, @mbim={0xc, 0x24, 0x1b, 0x7, 0xcd90, 0x9, 0x7, 0x7f, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x73, 0xb, 0x9, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6, 0x80, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x1, 0x6f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x3, 0x8, 0xfb}}}}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001340)={0xa, 0x6, 0x310, 0x10, 0x8, 0xc3, 0x10, 0x1}, 0x31, &(0x7f0000001380)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x3, 0x3ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x80, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x3, 0x5}, @generic={0x11, 0x10, 0x1, "19cabd08481351a056a983c44f2d"}]}, 0x8, [{0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x1c09}}, {0xde, &(0x7f00000014c0)=@string={0xde, 0x3, "f97ee6428015abad19ae558caf0746c47d9618ac02e0b58b004b39e94580fcbbfa2d44fd96f75c5d7f8d95faff4f9871b40b37a4df26f79329f20a0bf0e445f5db4359e0851a786e20902200b72b563d0fb14cd75e65002cf0a4e8e38ec4bce178233533c6b344bfe8031c8962509b649ecd463661b7784e6e8508e3bda1b2862b46e3c6f1f5a397d822bc1ebb875bc2a4435d8a6ae7f76e4f45796bf286ebbbf753d40e00d799144aab1919fd0de271e65c935fdfe948cf57de5801062611606e1090c2cab5c5c89a36795df5996af66e1fa30ab9c65ad894fdc4dc"}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x43e}}, {0x8e, &(0x7f0000001640)=@string={0x8e, 0x3, "e8eba3f4e2d9871fbdccc52705127309ce015f6c8102b93924260f0904826862e57cdcaa71fcfb41f92dba09151e9fbacad9e927a96b415a538ec58695dc54b245549fced8dee984a656301860f8107cc4091f3915702734011c311b2d2e33466217766b0a5881cf0e20d0a152da28d18acff2bb04241a1c6e5869b7496017de63d41ecad8e095e3ae280f6a"}}]}) r3 = syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x20, 0x3, 0x4, 0x2}, {0x9, 0x5, 0x8, 0x2, 0x400, 0xf7, 0xe, 0xc5}, {0x9, 0x5, 0x2, 0x3, 0x10, 0x81, 0x8}}}}}}]}}, 0x0) syz_usb_control_io(r3, &(0x7f0000000580)={0x2c, &(0x7f0000000180)={0x0, 0xe, 0xdc, {0xdc, 0x23, "8f475802abb714cf32d90051d70db0a67b2c29f7111f688b033810c2af17bb41b85bf7e59b57e6c085b0338d3bdc59e9f4647304b1b8ebef9bfbb660b143fe5b33bf4d82bdce1685a886fd11a913ace56d597a3467f283bc44dc3b0c5b598ec86589250669e8500b13e3603869118b4e00b259a775ece780c998657c6ce045766d4d50be4a8409d5541798f62257c4bf74a7bcf9b2ea70e85e52f20655f71e325cd3998be2c4f7f160786aeec5eef75572a47acc3c1065544b1194cf5bdb62c5c27225e13b7529ea63eaea25c885b56dccf4bae81087b150634c"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f00000003c0)={0x0, 0xf, 0x10b, {0x5, 0xf, 0x10b, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "fae2c2b8e9737d86b8ceadc93af50715"}, @generic={0xdb, 0x10, 0x4, "918f3b88480e8a56ff9b5142f3d272f4992e9b6742a244e47d34f913d49dae6ca8a4a2bc222c0235bea5708bfa74c3e3726fe00b157941c3bd436c47fac892ae420dd43e0d5d6117b722d38ab5186cba986bc16dd36eb2f0f4bfc234bb4f2551affcc41f1f0b39a16c46be7688161773a409734b9616c11f33f6d2f1fe7752df69a8dca27dddbd1438ff018d30d2675bcd9a5cc8748b054fa9628f0644a048a9f229f9ff5245a35cf17a9e3112cea8c62afbd0a531b4ec1f4592caedc944d81fb7a3d3501923495465e83ad7c002e71def64461db1155e9c"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x9, 0x6, 0xa626}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x2, 0x120}]}}, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x0, 0x8, 0x2, "24e6b562", "d011249d"}}, &(0x7f0000000540)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf0, 0x0, 0x1, 0x0, 0x2c, 0x9, 0x8000}}}, &(0x7f00000009c0)={0x84, &(0x7f00000005c0)={0x20, 0xf, 0x22, "c01b2cab224449641b5d79b840720e594060590b1cc6f4ad6fd32cdaf2dcc6e31b61"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x9, 0x1}, &(0x7f0000000780)={0x40, 0xb, 0x2, "afa3"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000800)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000840)={0x40, 0x17, 0x6}, &(0x7f0000000880)={0x40, 0x19, 0x2, "c980"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x400}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0xa0}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x7}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x23, 0x2b, {0x2b, 0x8, "884ff66b839c6c9f9e8a46bf096f402c18f8ba2c90e4a7ae418f28c619dda120f5456904aba334553b"}}, &(0x7f00000006c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000140)="1e", 0x1}, {&(0x7f0000001780)="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", 0x1000}], 0x2) r9 = syz_usb_connect$cdc_ncm(0x5, 0xbb, &(0x7f0000002bc0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x2, 0x1, 0xd, 0x10, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "f2"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x2, 0x5}, {0x6, 0x24, 0x1a, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0xff, 0x5, 0x4}, @mdlm_detail={0x3f, 0x24, 0x13, 0x77, "bdfd56cfb796ae5bd97582735cc52623fc8370eee351e1a05a09e45a98793cc0cf1c9601f667752516ab51db76666b0397e7d1e768ceeba7af3009"}, @obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x6, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x10, 0x1, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x8, 0x80}}}}}}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x201, 0x4, 0x3, 0x3, 0x20, 0x10}, 0xdb, &(0x7f0000000b80)={0x5, 0xf, 0xdb, 0x5, [@generic={0x21, 0x10, 0x3, "07f6d162b02b848580736a2bc0ec44d17d06083393fb772a492182d2ffcc"}, @generic={0x97, 0x10, 0x2, "8ccd7e2f8f7c803041635079df5a27278d8a4ff02b8de0ea7e386c3ece51a9168d39dae71e5eff208455ae2798ed6ea3e9245d6781609d92734328589d9781600ed3249464c55acaec1e309fd2dc7d0484c03dfce43b3cf95dbf63f130cffb359c1eb9fc7a99bb7379f7a3eaff1e25ed3901634063ba0bbd2c78691218f3ff63d6821622844cf8ea5d82dd7dd2442b5d35938a63"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x9, 0x4}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "3c17567b94a8548d7c3a6b622672026c"}]}, 0x1, [{0xc8, &(0x7f0000002c80)=@string={0xc8, 0x3, "4c478cb63941029f5b2b069549e852eb4b372be87e82ff18a7460da96e705ef8ce57148d1d23de5ad4ab43a9f389755e060feff85894dc1fd33638993484476bb5897961ca2e84a16d039238584546303457f46aeb2f208b75cb07177af46378f6127f8c83ff08165c6ad2cbaf8207c72bca4ea8517ebebb30a963cfe297bfe72b5b5dc7f5f83a7ae69cdb49802bf8153aaaedb87b5bb969536436f8749b98901aed9af070325dfde6d4bf71a7637546c49ac430490dea6ff95db51cdd339ffd3c3caa179f7f"}}]}) r10 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r10, 0x0, 0x0, 0x1000f4) ftruncate(r10, 0x5) getsockname(r4, &(0x7f0000002780)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000002800)=0x80) syz_usb_control_io$cdc_ncm(r9, &(0x7f0000000e00)={0x14, &(0x7f0000000d00)={0x0, 0x31, 0xaf, {0xaf, 0x23, "bccca8401ca152d27894183e49d4d4d5c7771c286fe16fda81a321c93f2daedcfa3bab5db03bde604d4ab08f92a0b2bb95107780907ce7bee6bc512c60dcc5ffd6db525d47142c6c72bfcee397b7bec4bf67371e87ead48301498318383d60b9d336bbf40e3b2c5a30fd187edf9b62b34c563e164f94582bcbc19dd156e3537b75862830f55b3409f22aeca2efa02405c446359d6fe721fcdfcc74f8c701ef8470e48267c1cdb4636c17215f55"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001080)={0x44, &(0x7f0000000e40)={0x20, 0x31, 0x40, "099975710f3317a9ecb62eee9989b130a5eb0c295238e61a29d3b5d12e7151da8ef6c29a9f7f87ae6c377682a02cf3e54ae936c72845d6a88f55560299b452e8"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000f40)={0x20, 0x80, 0x1c, {0x5, 0x4, 0x5, 0x6, 0x0, 0xe4fd, 0x4f2, 0x800, 0x7, 0x1, 0x101, 0x1}}, &(0x7f0000000f80)={0x20, 0x85, 0x4}, &(0x7f0000000fc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001000)={0x20, 0x87, 0x2}, &(0x7f0000001040)={0x20, 0x89, 0x2}}) socket$pptp(0x18, 0x1, 0x2) syz_usb_connect$uac2(0x2, 0x11f, &(0x7f0000002840)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x582, 0x23, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10d, 0x3, 0x1, 0x1, 0x40, 0x6, {0x8, 0xb, 0x1, 0x0, 0x1, 0x9, 0x20, 0xd}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x4, 0x4c, 0x7f}, [@extension_unit={0xb, 0x24, 0x9, 0x2, 0xf, 0xf, "90301dc0"}, @extension_unit={0xa, 0x24, 0x9, 0x4, 0xffcb, 0x3, "08ba00"}, @sample_rate={0xd, 0x24, 0xd, 0x5, 0x0, 0x3, [0x1, 0x0, 0x2]}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x400, 0x1, 0xfc, 0x6, 0x90, 0x8, 0x8, 0x2}, @selector_unit={0x9, 0x24, 0xb, 0xf5, 0x4, "ba401ef0"}, @selector_unit={0x8, 0x24, 0xb, 0x8, 0x3, "58dde3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x0, 0x3, {0x8, 0x25, 0x1, 0x6, 0x30, 0x0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x2, 0x3, 0x1, 0x3, 0x2, 0x8, 0x1}, @as_header={0x10, 0x24, 0x1, 0x81, 0xa, 0x0, 0x1, 0x1, 0xaa0a, 0xff}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffd, 0x6, 0x0, 0x9}, @as_header={0x10, 0x24, 0x1, 0xc, 0x84, 0x3, 0x1001, 0x0, 0x0, 0x9}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x1, 0x4, 0xd5, "914014feb9219d378e"}, @as_header={0x10, 0x24, 0x1, 0x9, 0x1, 0x2, 0x4, 0x8, 0x100, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5c, 0xff, 0x8, {0x8, 0x25, 0x1, 0x80, 0x30, 0x6, 0xc}}}}}}}}]}}, &(0x7f0000002b80)={0xa, &(0x7f0000002980)={0xa, 0x6, 0x110, 0x0, 0x6, 0x1, 0x10, 0x40}, 0x114, &(0x7f00000029c0)={0x5, 0xf, 0x114, 0x4, [@generic={0xad, 0x10, 0x4, "b415bded361757039963c8f0c8a443e2e7b9e916ba3d0fc20b09fc00b1ec117b43963dd320eb002facb3fdea45141e3c16d9d4aea75b574fb54a4424c95ce69c79a6ca2b2d70492529b5320b84206bf34bda7bf7a185671251dc67323c08c06920a2dd5b6a30d5dd28f989dcb41a37a78ac6e4b4d19c57a94de5acc35db1ad06088fac6dd669c426886401dc763c8e4ecdfb3d4a8ae1ba74954bce51aca3b8eb62d4fcf1187ea06e8c30"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0c637fa69991f3ebad7ee822ccdba618"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "d5dbc6aac640dfef39da3ae73f84e76e"}, @generic={0x3a, 0x10, 0x2, "7ce1ed27624b185177c2f475d601d9797594b7c61b52597fa29b986b6c4fd8ac0ca238b5d5bf40f231d1cfebd3e58879e904a345eaef50"}]}, 0x2, [{0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000002b40)=@lang_id={0x4, 0x3, 0x423}}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 4m7.852300331s ago: executing program 0 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001080)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x5000000}, 0x400404c) 4m7.393123147s ago: executing program 32 (id=159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001080)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1000}]}, 0x24}, 0x1, 0x0, 0x0, 0x5000000}, 0x400404c) 2m5.268701141s ago: executing program 2 (id=1089): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x6, 0x2, 0x0, {0x0, 0x9}, {0x4000350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4000005, 0x400, 0x1}, 0x1, 0x2000, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x3, 0x4}) 2m5.06462543s ago: executing program 2 (id=1091): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0xff00, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "60ec6972"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 2m4.825564125s ago: executing program 2 (id=1094): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_connect(0x2, 0x7c9, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0x3c, 0xbc, 0x94, 0x20, 0x58f, 0x6610, 0xa834, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b7, 0x3, 0xb, 0x3, 0x0, 0x6, "", [{{0x9, 0x4, 0x97, 0xcf, 0x7, 0x46, 0xa1, 0x54, 0xb, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "f593"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xb616, 0x3279, 0xa}, [@obex={0x5, 0x24, 0x15, 0x7}]}, @hid_hid={0x9, 0x21, 0x8, 0x8, 0x1, {0x22, 0x8ae}}], [{{0x9, 0x5, 0x7, 0x2, 0x10, 0x3, 0x5, 0x8}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x0, 0x8, 0x3, [@generic={0x5e, 0x8, "850f54b5ad12434cc9779d5d6a370cd690f89281a82235863e487c58daea08c0decd798e1f15f74b568f72de7260b8d15ed6b230c2583fa8afb4272f29343a39fda1f011701c49cfc921f2355cb8bd40d8e385bb953b838279f8fb8a"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x0, 0x5, 0x9, [@generic={0xd0, 0x30, "ead3429644c9f72bf3eb471797a4fcf32ef636996d99e8f2ba057490900431f6729e1a4bd39484090bd06e3c35254e4a2f365adab00ccd403c829be2bf47a5ca1c77f06177b0dcfc84921683d89d150b1326f70c28eda3abf65d0a72541c5c03c92ae503a52349936ff0fbac1a105dde84f37fb8813d70f6e0cc6fa0e8056c464c41dcc86d2168d6da35b57d893ffd943958f63a6610750bb0f223aae857416a500356e3ef1c1528a0b74f839dd78277e148e73be9ed743c9ce33074730f56c7c802a23116fb0762b83dedc7ad52"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x3, 0x4, 0x4, [@generic={0xc1, 0x21, "652387f8f6e0612999f82e0bf04964a94926ea14b6d03731cffa96a11f505211b7a8d892a9b61ad88d2e22d1d78f0d560b9f5b6dbf6204ddcef52d808c0143da951269deabf77e4e3d913473ed699b86914924672f4d7ad6777a0e97c1d046db02931dab8d5e0cc31e3505d5d4a60d9408ba90ccd54c324b0b8ec4110416ea47d12d99510178189c47ca8a4ec0ac345a133513b71ba2707e6e6e4cafdeb17daa68402107c453347be721d340d77f94bd820df7de9fefe9d58fbaaab95cebc1"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x63}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0xc, 0x7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x7}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x81, 0xfe, 0x9, [@generic={0x26, 0x5, "ea63aa1c7ba7fc9d44782977d97eafbed148858c4ab54ac9a41ad264a8575015073347cb"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x9, 0x8, 0x2}}]}}, {{0x9, 0x4, 0xba, 0x5, 0x9, 0x8, 0x4, 0x1, 0x6, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "19"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x7a81, 0x4, 0x9, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @obex={0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x8, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @dmm={0x7, 0x24, 0x14, 0xe}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xf5}]}, @hid_hid={0x9, 0x21, 0x5, 0x91, 0x1, {0x22, 0x487}}], [{{0x9, 0x5, 0x781c3f5e3f298887, 0x10, 0x10, 0x80, 0xf, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xc, 0xfffe}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x1, 0x0, 0xfe}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0xe, 0x9, 0x56}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x2, 0x1, 0x3, [@generic={0x25, 0xd, "d52ced1dabca86d51d9accfbab245559c2793ef6ed1938916eb4d955156dff32566d28"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6b, 0x7}]}}, {{0x9, 0x5, 0xd, 0x1, 0x400, 0x3, 0x36, 0x6, [@generic={0x39, 0x1, "43b72121679c9c4ed0af7b30c958402c331c6249f225b5f9fa3a0afc1f2085a1c53481ed7603d25412ac2b37f346a19e923e4e11110c98"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x74, 0x96, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1bc}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xf9, 0x3ff}]}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0xff, 0x3, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xec, 0x100}]}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0x0, 0x2, 0x6a}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x5, 0xb, 0x3c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7f}]}}]}}, {{0x9, 0x4, 0x42, 0x7, 0xb, 0xd, 0xbc, 0xf0, 0x9c, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "22d7"}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0x28d, 0x101, 0x0, 0x5}, [@country_functional={0x12, 0x24, 0x7, 0x9, 0x430, [0x8, 0x3, 0x1, 0x8, 0xffff, 0x8000]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x9, 0x6}]}], [{{0x9, 0x5, 0x1, 0x0, 0x400, 0x8, 0xfb, 0x3, [@generic={0x98, 0x24, "aec7d2721960dfa0e65d6d9ff1236dd1918d48b2ca35eb07f881b0883a73a0bca7a6d15d81f5fb8211285785b5e2f549a34a355cb18ca4830fa0025be4f0a0f2b9f7a4dc3b4b23221bd64a06c6a2c379cd83b57bd24c85906e3594769a94e13bd68e610cbc326f7bf4b5cc0b694c83fac9790f1943ab9f39dce58323d59dc5eea2b991860b25cf59f9f68dd6b064632a21dd060fbe6b"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x9, 0x8, 0x5f, [@generic={0xb5, 0x11, "43ecacb829c986233287baac28251c6a212608a8b85aacb326c374b9bcd9ef550b0376a2e48a114388adc4127617a18c9d809da8d701156c7131d19ac53d04251676afa41847af17b8fa0237e446e9e13751b8728cc30d6a117836350b08c06fe1e33a9a9f3dd086f01d0d901fc469574e2acb072d01f7ee8ce8037b20211d694d65b2bcb80d889cef51257ba51dda4e14482fdcb4eba326a124e48054e4fc1bb07cf38b1e5a1babbf652ceaeaf2672bbd8259"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x80, 0x2, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x2e0, 0x7, 0x1, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xa}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x6, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x7}]}}, {{0x9, 0x5, 0x4, 0x1, 0x10, 0xc2, 0x6, 0x6, [@generic={0xe6, 0x21, "9d01f2c217229e308bcd8aa1e7a75dc561cdf0afbdebe622a1ef20f1627ee21e891b0132342686815267c17b100c34b3f3fae364002d709a5314f08b7cbe164002048566b2519c0cd3eac51caba3ce76f45133e36ba2f0653023160c247c554a8d7e8253705426217228ba2709596831b8d7dde395709663fe66b780fa2a9b28de003a97b3328bf32d79eb281a09dce7d3fe02dca5085a98cfdc92797a097b8b2737f2b03560b4a87c85e3b204640fcf235c5b7d0bd264850c22a39cd18a5c5d76e5217408d41da4ded30d4b306d0b00a1030339e98e85a5f2a321989c8089e45489e7e1"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x6, 0xff, 0x80}}, {{0x9, 0x5, 0x6, 0x3, 0x200, 0x3, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x73a}]}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0xf, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x6}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x4, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf, 0x3c8}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0xb7, 0xe, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0xffff}, @generic={0xee, 0x1, "f751c9b98ae02b4ad325295bbe1d3974f2c209f9355fd416396a61ad45f484730f72771ce7c980fc958fca076a74525b10087b8ad3f26e3bcc8cdbf309317af593b27781ed4908f6024a77f24205e0f5e2c94edd4212927e818b59bb93f964eb1ce57bb7a0d5e39bb78b69a061d6d14a2a0b120e2754d1d1b39296182875645178bceda78cb5b751845f10a0d0d4cf0e275d0c2bc22ff5fab66aafd311856c9068fa26b0c453be4dd10f71a94bf7f4b974342ee333e592095228b396e731925a4f3bd2caf75bf3f295aaf1d4e45a3db43a987e282e7ed9f3836797613a61cdc492c4076f30dab6f1acd544e9"}]}}]}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000001100)={0xa, 0x6, 0xabeb0b0f9fc8ef2d, 0xa, 0xa0, 0x5, 0x20, 0x2f}, 0x5, &(0x7f0000001140)={0x5, 0xf, 0x5}}) (async) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="edf403000000818f61"], 0x0, 0x0}) (async, rerun: 64) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) (async, rerun: 64) r2 = gettid() syz_clone3(&(0x7f0000006240)={0x1000000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f0000006200)=[r2], 0x1}, 0x58) (async, rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = fsmount(r1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002140)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) (async) write$binfmt_misc(r4, &(0x7f0000000000)="270791cd0e359f89a6f5ea294d627abe52c34eb732d04d79d2", 0x19) (async, rerun: 64) fchdir(r3) (rerun: 64) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, &(0x7f0000000280)={0x20, 0x4, 0xf9, {0xf9, 0x11, "58ba5504b62cc2565f2a72ee7d2426d8f52a3ee170bc4ee79448161529c849992305224406b2a2ec7c851e973d4f1ed47fbc1c2b31b786ef608827c102651e3b53790e368746dba3ff8fc1fa7e899e32366a98878763cc1a6008280f531b370aa2be7e7117f1c01bc3c3f9fc5bd630101e008c5457033084d07c96f1e7e9356c1ad16c205cdb88f906effca08ad5ee35ddd381ef73a7f1d628410b613c1f5c67875f5f504ae43047100a76238996d6a94767d4770df9e107e7270b77d42892304abf029f51b16a9c05d2b714e406260410c20b7fb763535edcc7516ef188cca1a816b29947aaa32af139f67243df0616b2d7fec5b7265d"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x420}}, &(0x7f00000003c0)={0x0, 0x22, 0x16, {[@global=@item_4={0x3, 0x1, 0x8, "dbb5b0f9"}, @local=@item_012={0x1, 0x2, 0x8, '='}, @local=@item_4={0x3, 0x2, 0x4, "b2c267c9"}, @global=@item_012={0x2, 0x1, 0x8, "76b7"}, @global=@item_012={0x0, 0x1, 0x3}, @local=@item_012={0x0, 0x2, 0x1}, @global=@item_4={0x3, 0x1, 0x6, "65c716d9"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0xe743, 0x1, 0x1, {0x22, 0xd1e}}}}, &(0x7f0000000640)={0x2c, &(0x7f00000004c0)={0x20, 0x16, 0x46, "b47553901840796440570448319e89cf710a3ce7c7da2c3ca639d29eec6ed15e09fe102b0e7e58fc85a516f9be0544edf323525bd6aa67301991d922592b6a6d45b6972ac82a"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000005c0)={0x20, 0x1, 0x1b, "7e2da8e5d48e61475a32af2e0cd768804e86abefdb076ff5af9838"}, &(0x7f0000000600)={0x20, 0x3, 0x1, 0xc}}) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2m4.032926946s ago: executing program 2 (id=1103): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x40000000, 0x0, 0x9e5e111c47e3504f) 2m3.900240364s ago: executing program 2 (id=1104): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800060007001a00050004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x220fc, 0x0}, &(0x7f0000000240)="948d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000080)=r1) 2m3.789195936s ago: executing program 2 (id=1107): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000200000000000", 0x1c) 1m48.736521384s ago: executing program 33 (id=1107): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000200000000000", 0x1c) 1m42.992662594s ago: executing program 3 (id=1229): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9d"], 0x4c}}, 0x4000015) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x6, 0x0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xad}}}}}]}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x80003}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x7}, 0x1) 1m41.496260053s ago: executing program 3 (id=1231): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f00000002c0)) 1m41.284476008s ago: executing program 3 (id=1234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0xfdef}}, 0x0) 1m41.142470908s ago: executing program 3 (id=1236): r0 = socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x84282, 0x10c, 0x5}, 0x18) mknodat$loop(r1, &(0x7f0000000340)='./file0/file0\x00', 0xc000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000001300)={'nr0\x00'}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x3}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0xffffffffffffffcb, 0xa277}) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) getsockopt$inet_mreq(r0, 0x0, 0x4, &(0x7f0000000000)={@multicast2, @broadcast}, &(0x7f00000000c0)=0x8) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x100000}}, 0x40) r5 = socket(0xa, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000600)={r4, r4, 0x7fff, 0xbb, &(0x7f0000000480)="b4dcb348ea608ff60caeed3e7d31d961a3e4d1cdf1da7a050bd692fb052771ead37fc369862e2ced80bcf6b68a6173675efcd50bb0164b9e09868c8c1e83fa0ad494fb017b12ff3a1861ac14ce1392a36c8941fb4b67fb90bf9eabf02629f4ba03ca46cdb7ee4e4ea015c4ecadbe1844860b1d30068b55c3a5d3365d2c96cad586992cb54709b1841f7fafa1a1b768152a6e302236196e01ce72ca127a7cd2ce1d3d0afaa08d5df7b676aed67b311c44aae47ed7d998fe63cb3f42", 0x2, 0x7d, 0x9, 0x9, 0x1, 0x0, 0x9, 'syz0\x00'}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bind$packet(r5, &(0x7f0000000180)={0x11, 0xc22421c8945bc8fb, r6, 0x1, 0x3, 0x6, @multicast}, 0x14) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) utimensat(r1, &(0x7f0000000380)='./file0\x00', &(0x7f0000000440)={{r7, r8/1000+10000}, {r9, r10/1000+10000}}, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) 1m40.432692458s ago: executing program 3 (id=1237): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000040)={0x100000000, 0x3, 0x0, [{0x80000001, 0x0, 0x7, 0x0, 0x4, 0x7, 0xff, '\x00', 0x3d}, {0x9, 0x9, 0xa, 0x5, 0x1, 0x1, 0xb, '\x00', 0x81}, {0x4, 0xd, 0x6, 0x7, 0x3, 0x7f, 0x0, '\x00', 0x3caa}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000140)) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0x0, 0x1, [0xfffffffffffffff4, 0x7, 0x1, 0x7, 0x6], [0x9, 0x8000, 0x400, 0x5, 0x4, 0x200, 0x10, 0x7, 0xffb9, 0x7, 0x7, 0x2, 0x124, 0x6, 0xfffffffffffffffd, 0x1, 0x100, 0x7, 0x7, 0x8000, 0x8, 0x5, 0x9, 0x2, 0x7, 0x0, 0x4, 0x1, 0x7, 0x2e1, 0x8, 0x5, 0xf5, 0x9, 0xa, 0x1, 0x0, 0x428d, 0x5, 0x91, 0x3, 0xb, 0x8, 0x2, 0x4, 0xffffffffffffffff, 0x2, 0x8000000000000001, 0x317, 0x1, 0x4, 0x2, 0xf, 0x3, 0x5, 0x0, 0x4, 0x6, 0xc2a6023, 0x6, 0x2000000000000000, 0x6, 0x7ff, 0x8, 0xffffffffffffff7f, 0x0, 0x7, 0x2468, 0xffffffffffffffff, 0x2, 0xfffffffffffffffd, 0x8, 0x101, 0x6, 0xecf, 0x0, 0x4, 0x8, 0x8, 0x602, 0x9, 0x0, 0x3, 0x4, 0xfffffffffffffffb, 0xc, 0x0, 0x4, 0x7, 0xfffffffffffffffa, 0xb92d, 0x5, 0x2, 0x10001, 0x9dc, 0x4, 0x6, 0x9, 0x3, 0x7ff, 0x9, 0x23c, 0x8000000000000001, 0x8836, 0x1, 0x9, 0x3, 0x4, 0xfffffffffffffff8, 0x6, 0x10001, 0x4, 0xd, 0x9, 0x101, 0x3, 0x8, 0x9, 0x8, 0xad, 0x81]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000680)={{r1}, 0x0, 0x0, @inherit={0x48, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, {0x18, 0x4, 0x1, 0x8, 0x2}}}, @devid=r2}) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000001680)) r4 = open_tree(0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', 0x80800) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000001700)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01864c2, &(0x7f0000001740)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000001780)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f00000017c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000001800)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000001840)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f0000001880)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f0000001900)={&(0x7f00000018c0)=[r5, r6, r7, r8, r9, r10, 0x0, r11], 0x8}) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000001980)={0x3, &(0x7f0000001940)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f00000019c0)={r12}) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000001a00)) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, &(0x7f0000001a40)={0x6, 0x81, 0x4, 0x2, 0x80000000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000001ac0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r13, 0xc010640c, &(0x7f0000001b00)={0x6}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r13) ioctl$DRM_IOCTL_GET_CLIENT(r13, 0xc0286405, &(0x7f0000001b40)={0x6, 0x0, {}, {0xee00}, 0x9, 0x1}) ioctl$DRM_IOCTL_GET_CLIENT(r13, 0xc0286405, &(0x7f0000001b80)={0x83, 0x205c, {0xffffffffffffffff}, {r14}, 0x4, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r13, 0xc0106440, &(0x7f0000001c00)={0x3, 0x7fffffff, &(0x7f0000001bc0)}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002180)={{r3, &(0x7f0000001c40)='^\x00', 0x3c501, &(0x7f0000001c80)={@_ha_fsid={[0x10, 0x3]}, {0x2, 0xf75, 0xae8, 0x75b}}, 0x2, &(0x7f0000001cc0)={@_ha_fsid}, &(0x7f0000001d00)=0x80000000}, 0x4, &(0x7f0000002100)=[{0x0, 0x0, &(0x7f0000001d40)=':*\\($.#@!\x00', &(0x7f0000001d80)="5b34d79e2e30944eaae3f8e4d067494573b624482f607410610dfd28ede27dadf3da2e4d8bd7076223cf97437e98d8ad26771c03212cce32c3bf369825e1bc8d4cbd6c671ce7ba80039eb185abfc519d7d2cfb6b7dabb645eec335e552c5e77d5ae163c97ca687a99fb2ba14eb0808e0a81250fd99737678abb4e2be57bbe9d86d744c658177e99f72a40dcb35c4c05febd5bf081f2a7548e140af8579f5d0ea441b544c2aa8797e2b3cd419a64e9a10a80f20a385445e15371a8436ab14a5861147fa160402ffd540c2df06b18c36c5bb3c2aeecbbd34f2407038f52f0cc49bc76375efa6426db0ad", 0xe9}, {0x1, 0x5, &(0x7f0000001e80)='/dev/loop#\x00', &(0x7f0000001ec0)="95242424fe684707a590479ad17a45f00a54d398075a07a7f8db4c16dd5d6a0a73408dc20a6d1b010d0518cf3541fde4a7e2e606410170eaed22127292f829c46784eb56a1790a775d573778b47ce468d3d0b33462c8b8a71761b3c1b0bf254c9b0980bbf8ae6f755772810b2c36dfa31c4ccf760ef87be491ec759bbd50aac02799e95c565381d4936e79db00a86bdb0884b076942e89d62589e9e5a84ee408", 0xa0, 0xa}, {0x3442a3932246a02, 0x9, &(0x7f0000001f80)='/dev/loop#\x00', &(0x7f0000001fc0)="3c79dcaece1a1f1d272d669c4766ea7d0d10661714", 0x15, 0x8}, {0x1, 0x9, &(0x7f0000002000)='{#\x00', &(0x7f0000002040)="ef62c8536484d3681ba5ab1fd09d41a282b52844479bdb303bad11be76c415b48fc3974bb155d7aee6a8ee9e49dd93edef4e3027edc65c821447bc9e6a2a51f71f3d7b252c058930dd0ada064a345806e9494ee1a3ef151ba16db7acc2669701155cc667c0684a5a1ebefd9046469148105aa21d306b70ca006c6594bd86d2f51b8d43ddcb092f4c23", 0x89}]}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r15, 0xc01864c2, &(0x7f0000002200)={0x0, 0x0, r4}) socket$nl_netfilter(0x10, 0x3, 0xc) 1m38.097603879s ago: executing program 3 (id=1249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000090500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m37.761643031s ago: executing program 34 (id=1249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000090500010007000000280007800c00018008000140fffffff70500070088000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m34.431653185s ago: executing program 4 (id=1270): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x20, 0x0, 0x1, {0x22, 0x24}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x8, 0xc5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)='>n', 0x1f) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$COMEDI_SUBDINFO(r2, 0x80486402, &(0x7f00000000c0)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_usb_connect(0x6, 0x4da, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0xb3, 0x67, 0xb5, 0x40, 0x3eb, 0x2109, 0x7763, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c8, 0x3, 0x40, 0x40, 0x80, 0x3, "", [{{0x9, 0x4, 0x9d, 0x4, 0x4, 0x63, 0x98, 0xdd, 0x6, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x3, 0x4, 0x7f}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x2, 0x0, 0x1, "659ac9b7e12381f8"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb8, 0x3, 0x2, 0x1, "ec5518", '4'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x3, 0x4, 0xfc, "c6d210", "0702"}]}], [{{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x3, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xd57}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x6}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x0, 0x2, 0x6b, [@generic={0x12, 0x5, "56a55e5ee8b8cc8a04cc5692c8b93011"}, @generic={0x1a, 0x22, "485fea1eec855feca37779696ca46070f934461c1314a40c"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0xf8, 0x9, 0x9}}, {{0x9, 0x5, 0x9, 0x1, 0x40, 0x0, 0xd, 0xc}}]}}, {{0x9, 0x4, 0x7, 0x9, 0x2, 0xff, 0xff, 0xff, 0x4, [@hid_hid={0x9, 0x21, 0x7ff, 0x5, 0x1, {0x22, 0x121}}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0xb5, 0x3, 0x6}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xff, 0x4, 0x3, 0xf0, "fc0aba70e0822d"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7, 0x0, "595d86", 'q'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x40, 0x2, 0x1}]}], [{{0x9, 0x5, 0xf, 0x0, 0x59f, 0x7, 0x6e, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x4, 0xc, 0x8}}]}}, {{0x9, 0x4, 0x88, 0x0, 0x9, 0xff, 0x5, 0x62, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x39}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0xc8, 0xf}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0x80, "bf51e6"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x201, 0x1, 0x9f, 0x4, 0x6, 0x9}, @processing_unit={0xc, 0x24, 0x7, 0x2, 0x2, 0x0, "228b20c5b6"}, @selector_unit={0x8, 0x24, 0x5, 0x2, 0x5, '4?S'}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, 'm'}, {0x5, 0x24, 0x0, 0xd908}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xe, 0x1, 0x6}, {0x6, 0x24, 0x1a, 0x9, 0x20}}], [{{0x9, 0x5, 0x5, 0xd19ef398de21264d, 0x40, 0x5, 0x10, 0x8, [@generic={0xa5, 0x11, "46ae34128b886b102458faa2b180dbea585bd7a3252ea05c2c74fbdfa8022c3531ade2217b775bd587d317b81f4a5798b07e6e523880b9236035f7127016e751de9c6fcc253bf7881fa31bd615b4d13ad303d229f9eb5787326eb2cfbc6feea641d9189f1602a5d9aa6026a9f92605d9a183e4e7c310c2cd89fe2018ae2be0c8ee0b5fdddd32577551113606487b78115a5c7ac19c058fd8174a9916b6ebbc63603a65"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0x7fff}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x3, 0x4, 0xe1, [@generic={0x3c, 0x3, "7601678a71f8effb5742fd85978f5cdce9dfaf59bef5129327cd5ee786b7e2c4a6173d5af9f26d5ef97769aa848d26abc32fd77b652c892a7a9e"}, @generic={0xd3, 0x23, "f1a13f8178f37c6cc6f3d3638352e51eeaf31c64a7b1cc5e81d6a06cb3b419e5945b4b68dd01c3276b53d96acea9b68a1020d13f63f8d3ced85089c96149535cdf94a550ccfc474c5575dcb4b8cb42251797bc0cc2c741bb7723fb134020f2bbc13ce80a9e791b8884544d2205c95a9f998403741487c0c2464fa4888cc9cf9aac5b4960adfa70cfdb32cedf48850cd76d7cb446d6908468666ec0ad72c0ba16a8264ee6af427b0f5c4d964755f9c95b60edff56bc72c2465b8b56362fa9701912a5255ca4259e2e2f7cbef16eb05ed8c3"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0x0, 0x2, 0xd}}, {{0x9, 0x5, 0x3, 0x10, 0x3e7, 0x10, 0x5, 0x32, [@generic={0x75, 0x4, "72e3346dc12cf014fd0bcb3925e97f7183314d29bc22c623a1d18b6c60435b2db99c8f9a3257cf0652ef803edefca9846c13ca2e4737ef7cf3f12be8a981ead79461cd6f5b49449e2d3d3e9c91fef713cc606a495371bb565dd6f9d4abe489443476e041f07720724139c3b74a66f3bf5fa27e"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x1, 0x9, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x2, 0xee74}, @generic={0x6, 0x30, "5f3499a5"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x400, 0x5, 0x8, 0x4, [@generic={0x8b, 0x6, "f4fca36349b17a0477a537c6888b3124973aa2c54d16034a94f7c9ca52dc384082c5e44955ce7e7a47f2b00d31a4abb5dba39ae87cc0a40dcaef853a4ef53b29cba22a805453bd73e592831be99096aede2a3f961a1b3e8d4c5519930c068a053502bb245cd26e86ef2e2c2b252565363109bccf86b8686f6f5ef1db7ce46d2a797fb86277aeeb4ffa"}, @generic={0x51, 0xa, "45ffa59eda995821fe6428854e57eeea01f062c2b7846b15079b07d42f5509b2fe5d357acf2b18d1f33a3d33c3594cf22a0c913abb199427a80a4d3d2310074827a9fcd85448ace9fbd7912a08517f"}]}}, {{0x9, 0x5, 0xa, 0x5, 0x68ca94cd1437f3ec, 0xa, 0x6, 0xfe}}, {{0x9, 0x5, 0xd, 0xc, 0x20, 0x0, 0x0, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x78, 0x8, 0xb}}]}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x3, 0xf, 0x81, 0x40, 0x92}, 0x15d, &(0x7f0000000700)={0x5, 0xf, 0x15d, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "97d72b8b253196fdc0664dd0fd36f757"}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x3, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0x2, 0xd3, 0x7, 0x9}, @generic={0x79, 0x10, 0x2, "9cbc270a57ba1a618555d6d8e856d3c439094450f07172927a1bb72fb11fa6bea7bb1a6f3cc760fb94364f9a0547aaaca6525d2095cad3ade851a3905656805667150156d514d20f7ab7eebd5018032c484ff0a25360894afaee74e5fdd40fbd64e8d0122fe4519816ea8924d96c1a2797fff1adc684"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x3a, 0x1556}, @generic={0xa9, 0x10, 0x3, "1e082a783201e91ccf520c75cf51177622670e354604b19de666f1172d5a105dcaeef0ff8129523b711307e5d6a4c8afec871ef3712023f48867953811ff91899e4fab3a8952cd0755a41d3da950c7c0fd216baf0eb83ef639a9901aa04ff9a2197f0bbe168ecd7290b1cc4e8d67337b359419a19535d139d2c3fd03c228e2f293376c74f018d5b6713719f55187d21d0be62c0a725e27c8505d56eed4051a4f46b47a82b22a"}]}, 0x9, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x2c09}}, {0x3c, &(0x7f00000008c0)=@string={0x3c, 0x3, "9ad85aa2c73edfa1b472075178c10e79867301aa9b873347d242bc92e6cfe74f8ff02192e88710c73dad970bcec80690f7351a02d397d7de3c10"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x401}}, {0xfd, &(0x7f0000000940)=@string={0xfd, 0x3, "3400c8dff436b41a82b536a0c26698607ec8123b529c3d35876ea265fa595eefdcb85f17b047445ef2c87788974128b54e7470d5a38ad174877ff7bb1412dd3e06a22677a0c27307b226db9d257499c548ce116d45c1d7e6d42b8c50888c6b7e5ac6b37024c028a9647d572f2fdee6ba5a92835970e30b69da6174557f35ae66f9fdb5e2624c4dcd814b33cb10f8e793b87ab71689afb94416b43d2a0f63cd2de3b993a3dc71bb6b607cb36bdf1367dcacfc98901ff848f16e36de65d31e1bfe2a0fc60859e4ecede0e577baa53015bc28c434778c5b5e253dfb17bdd663721c2d024eff01f4dc38a576a36afe2ce9f2e41c4617d7b3dfb57b6f58"}}, {0x2a, &(0x7f0000000a40)=@string={0x2a, 0x3, "817f2882cd67922ab62ceaa9a86219d451aeb7b79c454fb846cb05274216c622aa79b6862150704d"}}, {0x5e, &(0x7f0000000a80)=@string={0x5e, 0x3, "293daf88f3a2e93b8ab45f858ac868355ec62e4f16b8fde5743e9fbb05e7ecdf414ad56ef52d31bbb73eea1d97ed4d93fce8bd0ed1f14cedfbc14304dc5605838a76884dacd2294076d89ecbcc8c8c75349083a0c0839a87cbf46934"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x425}}, {0x2d, &(0x7f0000000c80)=ANY=[@ANYBLOB="2d03b80714fdb9096a263c301cdb1c2010f027894143e3655f78b36231d48288d6d04d2d387c6981e862799751ecc1383ab53e51b874678caeef438ca2addd5d54b238298e651c43"]}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x41a}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x80000000, 0x410400, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000006b00)={0x0, 0x0, 0x0, &(0x7f00000063c0)={0x18, 0x0, 0x3, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x2400c5c, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="0801d6058101000067000000000000001e010000008000000000000000000000a0a0e586c4a95d91d1504e2d0554c33745aa13e0fc3691b298f83ee024b82cba88b06c8d622c2656d10700e93f3452390c8af50e24f0c007251c42e2b4e70decd99bbc0b3996070b588fbdb07955a7e2da7243a6620655232c92179ce5e36ba1f69e1c8a4f8863e25af5b23e89291d364579192faee36cda7b336542c74b3458df41e501ed82f3efcb8dbaa164f3eb032a7b3f88d1015bb700"/329], 0x3b8) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m30.965180673s ago: executing program 4 (id=1275): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3400000000000000000100000700000044200d", @ANYRES64=r1], 0x38}}], 0x1, 0x46000) 1m30.808913251s ago: executing program 4 (id=1277): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x2}, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c11e85637", 0x24) 1m30.452175816s ago: executing program 4 (id=1278): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3400000000000000000200000700000044200d", @ANYRES64=r1], 0x38}}], 0x1, 0x46000) 1m30.401576362s ago: executing program 4 (id=1279): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x4c004) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x121040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2d) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000280)="0f050f060fc71abaf80c66b88eb5558166efbafc0ced0f070f01ca660f38812b3e7a000f08362e0f21ce", 0x2a}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m30.144305463s ago: executing program 4 (id=1281): syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x16) 1m14.834463449s ago: executing program 35 (id=1281): syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x16) 4.156235075s ago: executing program 6 (id=1608): mount(0x0, 0x0, 0x0, 0x8001, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0x400}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x716e) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000feff00008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 3.961416479s ago: executing program 6 (id=1609): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffa) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc90ac21dc24e627958b0eae7e5d733e6e221"], 0x28}], 0x1}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) shutdown(r4, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x2c, 0x107, 0x70bd28, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x2400c810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket(0x2a, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000100)='ext3\x00', 0x0, &(0x7f0000000140)='grpquota') r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000040)={{0x2, 0xfffffffa}, {0x3, 0x1003ff}, 0x0, 0x8}) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 3.633329569s ago: executing program 6 (id=1610): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x10000) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) bind$ax25(r3, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bind$ax25(r3, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) sendto$inet6(r2, &(0x7f00000004c0)="0015644d41", 0x5, 0x800c815, 0x0, 0x0) 3.504294825s ago: executing program 6 (id=1612): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b7"], 0x2c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000040000600", 0x1c) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480def00005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.40829506s ago: executing program 6 (id=1613): setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000000)={0x80}, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x1, 0x26, 0x50, 0xff}, {0x1, 0x1, 0x21, 0x6}, {0x81, 0x7, 0x7f}, {0xa2e, 0xca, 0xa, 0x8}, {0x101, 0x3, 0x4, 0xffffffff}]}, 0x10) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, @none, 0x1}, 0xa) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)=0x9, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x1) write$binfmt_format(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x2) listen(r0, 0x36bb) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x3, 0x5}, &(0x7f0000002680)=0x18) sendmsg$inet_sctp(r2, &(0x7f0000002700)={&(0x7f0000000200)=@in6={0xa, 0x4e23, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}, 0x1c, &(0x7f00000025c0)=[{&(0x7f0000000240)}, {&(0x7f0000000280)="38befa63484206d4e037a9cbe2e4636c62178cc9991c5fed1114ee89e8e251c0c32eac03b331c860085f4f2149bfdfaf3314e4940bc7e65a72e199c91caf90b61874f96f759b43e87279f21d306bc3cad21b15b1b7b0987736826df3633c26", 0x5f}, {&(0x7f0000000300)="2be6512e3dc89e48a210d3f9d1f5fc90c6f5bed118fa908036d99a3f9b8e2aab1d7c5acc7366241d792f6fb60f5c95b9eae5f081ca219bb1ba5455bb5334f1622df0b394446cb783e2c8f3b7841efa2a20b7c5e4ec93006dce24a38d564bb45906822dab9610126709d14a392280e17c22857c231779c187d42a95c4806836a615db5619d1103947bcc7bc064d0b7ed2600ba45c3f875aa7b4d9b07e1ac5ced717ac6e77792fd732b2200b3276b51c6267989864c1eaca1a0197a2fe18ee6f113fe083ad2a8e4b6c005cf6df3a7243801c00d8694feb41e2d08a747df936eb27ebf968e0ae57ac6ff5f47d37a3b65b362374b5246d3ae8fbc1a2f0b775df4dfd6b7beb5c793a93f04f731fbd322b3bd5412952f48f13a196cc6b5a6a040d9746776d3901e6085ed0b39fb7307a77e2bb5f1cc4c94741528379a0400df79f3a474cd80f0fd1ab10fcc0367bab1db938f7b8bc245da4bcd71d73262150a8c6a6442660950177c57390e0fc8b5667d219b98508ff9025628edece1a07b0c002f76b1744d71c06235e6f42ced6b8998ab45afaaa2f4efb94844739de7b8c1ec7601af522be8b911e76b23a8c46adce6ecaf7deef7679e059c0ce5d7cdb06b643237780b77d051d8e17fce525446653034b4a2bf2dbf363bf5c142ef1df38f1e6fb67c6a518024c0d9443e3b493f36ad85d4f9bd8a0931d822f2a6cf6aef697dc74569a6bb6bcf84d7191c6a4875324d8f6d9c704974a498b4e827a3755707df65ae8d8f55a1a549872f0b7162a3a1a38217bda8334205b58e9f799cf4f48e792ebdb2ad5b808b1b9bb45a1a90b04d8c9bb50f90389a886082e7def2472a114223c63dd0aea622642057a2d4720f345a5566d39e431adfc0745a9697a3b26e5917d3636e0d472f74a80080d3ed1160d56bce25008c5a13ea2d418c4978a2aed8aece14aae3e73bab217670f2d9500aa19f281d2ba07aa1f918c45d7dd199df982c7d0790b9a0d8af2c1c99fa8b6fe8698c045fcfdda957fde16ec277ae9c5ce89a96126820cad049d0618dcebf72c436fb85c726b025889a7b5491c9432adb938b075fb094f1ac2f4b5e24a772925acb43edcee33cf78a6c268732869a39f4193e935b94ab2c1d995f74fde711790e2c17677e8b15ea906957a437b2c932471065f0d754363e27708c7dfeb1707f3ff42c90f4fe0f9254299b47de8916181e325c626cbe45f02e21af87df10ee1a5cd4ff87d8c30fe7976c7d9d1e588b22500dcebceda73e617b65ad8f84921aab59ec74ddd53faa91cb349cef9a84e4bc8b6489e09ba6017964d4e9f954e3f43a7e32681a59d6f0be22f92cf8b8e317d3ec6515d18e167bc7e6f93226c416234816f123c4dd9789cc07018d190e4a75977017e04d889d31ae1b8dd4e58bafe33834f82e4a40b55d0074188e440f6577716f4a48aae7e31f793760059efd66342011c842f8e657283307382c2135e267ee069cf2bbf936b38ed07bebf4e986dcff6a38ddd1527953e158136a92640bea90876dd283d1c01b4abb79bd85df80e20fdfccf55fae516d78065a63234d69a0e9ecf7498637a069cf173b32b7b216fe5855ad9fe8d2b632fa98d319c73b5467f5e9c2738d173e64b5311e9b790e710c2cc5d2258c6510f934170a05171c8986a914889a377b20b035ad66f8e6fa2b45324917198970c44089e9e7bcb8eb9c1e157ca1f895eb087d13225350cfdd2ae24c3e41dbf97fd1214b886b53c8be67d891a13ec49732daeeb930bf021deceb5be66cdbe6055e04f7558848df612ef4428210d3c632e524ac88bba59eff46e8c57222fe6255c6986db1725034530cdf0003b84e354a99a00800d22344c62bb15250578291527bc6e00b7cb1daae7c882339e804dee0397334242b3884f851138ebed782f3a9ba81e593d526ce4f5f22bbcd936ad45510435309a741b887cacffc0ba530e5086964a7f43b4dc2654e4c40f2618430eb8d8dd24083f85807ae4cdd7611f129e2083d29051e88b2d33bd7b3434d2bd2fcd0ab5f20b4a377f3d89cf8c69d41299f258ab3145f48bec7601043536495898637b6c46eab897f9bd9d9a67aea6c39d168fae0148f9ff06f28584d425a0d0eb990ae32acb135eae85ad913327e160ca9c6dd6cb9fdcd9e9c92d1a7e75af6bc71bb5f7e6c2a62323455132ec0c478ee2019d5e2df81d8ae47d25ecca1e748dfe06c325044baa476f879201716f4ec1312e2236c0f025f4c5310a148c26837d019ffbd650b994197565e5fc05822064f1fa59683b84cb97c846dd884fdf9202ddb8cc9fb2d03eab5cbb59342cd85d653baac38765a41c372ee7a32adf298a7ecde4f1cf378602732abfc1b3bbb2b3f658364e17f3a63fe9abc1388ed64e3f484fbb22377d47edc1e92542dd78310328b715e4e23557b27c6c55d8976e5bdd6c7513f9f59da4f91f060ee6e6898f1048e6c3c7aa16d41c540aae031cf903d5de9510fdda011331b190ee0248513248f8963da99e259a6b64d0761e17237bb185d87ca87031a10e6b498c7e803f0fe64703d35fbe95853e72b2dc063389b62bd1ed92886f90532d2987b62c4aafae3c3325fc19d8de8b01e6d356041b1c855c97345edc0dcacbe047d394e6c97b59e4e3d2e2ef712fd4468a2c65a90e1e12bf8492444422f3f5ddbb8b37d235ab7fc5b75f473ea8b6d7d384db29ab596fb1bcb20ed5aa439488d9699ae9fcc82f5853a0a68a52f28603a3ad5af342f5513bffa2faf06a9159a62e8e6ebdf9237b4e7d79e4f8da7b75cfb4d2b7db50feb7aede4979bb4b147caa723bf918559852c16a2ef20c5e783951802073ead3f50da2d31f01bfa1ebb3555a9cceee7cdb7e191674ff18e28d2cea9f5ee44d69377d24ef78c6a1f29baa6fd2eba25946aa81f78d4a783128d9b6252dfbe24b90b4b789687fab7e40a6a94d1d372f4f776ee1307ac8e77c418ab78a52341c0d3b016f507f27cd30e044a3f1e9af6c80e73743fde62634a235a8aca6a5ca1100ae653e2bc5abff87d9d534d5f869d07e98951a66a1a18530a3711b1180c139b1239d541f0cc4be226c43f4601e430b6e2b1cc9bd72eee0310c6b34ba7c9e9aa5fe89eeb2d5553fa261a3ac1b1c191240ef4777729ff19c5359a515253ef7d44c4548020e515b32b0988c4bb47b108d11107dd715141af33d43b1b899e2a1229c4234c2dc403712e4dc96fe3bc5abdf359e8ea7c0992c5550d69592f23e065d077c5229be62662f21505fd519ac8884262be269804ca78daa8328f35cec3e407af1b4065e63035e7126c57eaf453309c8311a43c7d14f427229567bc5a227e6336c7172b70f0fd8e556439de93be2231f568d33b748166576ce06df0e56ba268a980bb2f483bea3dc13674abb12ee578f80ee752472c87f5e466f5a7248aa46d7b1224c45378e340ea033c4493b087865fbd34c905231c1d8fa4bcef547f2990f8a47a22655a74cbd3ed63715014f32816e7ae3d396a7372e149078f2a6497ebc4f0d5a37f63235e1764d9bf3e0ca2ea682f0c7c8c5b0a271594e641f385739386a802f94c723ef9e81d73a91027d8b1f65728c157ce7c265d76399a2e9209e212af0caa763931dbfe1303bc080adc3572bf8a1a738465e099cc62f89ec6464d525e29048c9c663d9beffd26697e65695134375708c5610bce96017ffcfb81eddbd3ebd17e6d30ee45eddacd5617116620eeb8a882b0e28ba72822e3c48202f8c56d3b1222f0eb757117876b1f9f9136c341902403ffbf0ccb6c98c77b6f439e8433877dda31e47c005efbd78aa77fabe459252c60e1f0b759858bd177d5716b4676b23cbb71f62a11c9e3db8a5b4728146cd45884d89498266eb7ddce01250e1e6aca5a87f952f11044866705c76c717526973fbd97c62d952915e1cb4197b5243d610d48c84d30fb54daf836244c56555343ea182a854fc09b592b72f9d2289a85424616abc8a2308837eb6bbfb618e69a2636998ffe77665f7557ab855fa099f2d06f2036bf7f696e87baa9a7a757552fdf7a562bd03a68b7798b507ba8399cad51fb6a79e3aec53e89cddaaafeebd6b65ff56433c24e479f1d0ebdbbf7893b538aaedef5b30791a489cdac5cc465a6ec054fecabdb93b7f05d562f03a7404203a7866449d6c16913579d1aabfbc6b0287ff492ce691711780b45f9f90ab672fb74961d5e60461b83541f9f9a1766c419a236ce11c9530a7fbac9372cc3e0b8df9c2c847f0665de9b0a68fcb37a2d1cf5bd11871fef475805fbbae1ba34d78399eafab8a0d8a030c17da99242d7f77268f6662064d5ccd5b8443f775fc534fadf85a9348cf6692d240ca9407611e91048b27bb09a2ea9eb4807625ff3ab8b09cc4d9599bcee05dc401ea3544e7fb7cf967f6cca3a6dd5145fa08b402d4b3e0f58191bfc8525b847ec5099b3293d9e80b56eb9b9d6a03114fec8b85fd49d118ad350c62ea61fc0514b4b151989f16a38c56e0e3334d64cc3f4ad2883f2aa16c3dff081ec42d97783a526b6c4947d0874796aa04bc545a5677a934498ac99d7aaac09ee61c3bcaf04ec35616d0b6f3ba52ba407570fda177e4e6728919292dcd3ff3bd527b9874a7a91daca68c863973258f3a01c437bc1d2676275c840520e50946387536b8bef9643ed765261561930b8c65bdcb9582225bca2f57f13ae1e6e2495b1e8268ef786c983de9abe87e9a1df281a81d9251cc7d501caaa75743043da934a65138b3efe61af1d39cc6510a1a10c0b2d6fea733ee221d9f4fc0393f520a3b835076b6929ef57d6bf8c7390815332313681c4e653a107c3838551d823c30b85557288d0c95cea246815fd73abb119fa562d1d861fd6a2f6aa693a8b6d19349e34e2b44fbb5bbf56c02b49ff36935a46adbc8d322efd3077326cce09a5d674d52a3f741ad3e1386dff8798608dfa916e222401f43e11faf32d5494aa8f2fda72fd0a076bcc080c1385660839c8d94f1871034d3f3ad7e809de0008b5aae9df67e9f304e4e52a048d21c4070236c088f655bc829d579199e77f5d17c914b55ee3aa4cff73b589dc428f867a6238005b63c3a18999773182bb0b6eaf30b94dfbbc89883ef3b7d24dfe8e2492812600ec2a5a545ae344ea2c80c76e93f8aa8c9bb4ac06002b44bc8bc42ccce375fcfb86c42d1ac441116e2edf2674c17e6016fc76ce3cfaf21a505a5849a56e6210e64ebc1f742c6428d0bf3a181390f73ff946b3b73432f9c63e89f7351a20fa21ec75fec8a2c7c8af5bd6ff740b5959575faf56dbd374c51e7f86f3a0600b4ebf14802ebbda709909ac9988428ca91343eec0c00441f4634f8937047d1ececd6fed2e0db7d356db60692090063f7ccc19c95b2b6b4a7ac0e4619ebc9e4b188d3f159a2b2d3fa86c5f887ead39bb9bb1ae30befaca026b97899cf2f6e2de88bcf4b8cca5e384647db21ca27dd512634e6163e5831d5afc042b520bfb836ef5d189bcee17f0055a116b1a48063ed022f32589884f95e643e12722607ef22d77d4a160d8786e042825e7f7a20ae7caeb41aa92ad6efaac024b0a953cc98dae6e734d98217e4fe359c2d71c2b04cdbdd5b23cb430b3cf9ab32ad5c7ede8f68d2432983bf47413a1b771ebf8087ee338ae161ac594bb06340be1b7f732967be7abeaac8990e5d890c9c87626431a78f2482f11caa9e5a134ab49e5e3c1019e3ff054c45de916fd21c80449f27fd17db79a2be6a47b62f06c1312371fcfe0bb502eb36f641008d7e88c99ce24d8d1295c54ce53a3eac45a914a8c5", 0x1000}, {&(0x7f0000001300)="e34c22c29ac4f9ee12edc06a9a97480104b878917ecdf3bb9bffaf03075be3037d3dd5c3c17a08c56865a9a36dc135bea0b9c1490bb6914d80b04fa4f4b7f9769ca45d259b3be8fedfc1883ab82b109dfdc09f69c8a005482b56d77edafb43a2191523d1351f5f", 0x67}, {&(0x7f0000001380)="435798c9d50382", 0x7}, {&(0x7f00000013c0)="7b14954bb068ee70195151aa929504f0bb328de9b181a7df814f258b5579a85decf33f0a08a13ccfc2e77cc254bd6beab11a199c1c5ca751d5fe6d6590b4d660c01a8f06f22c392d428c07e8ccfe76459156076b969dda8c41aa52de9152f37304e1b01905b302b8e42c3f9b4fb9ea1cc086c934405c824c26e0e1f33ec14b986131ebaebdc5cbd9b194518894124ab13d2e3d2a69edb2a4428f71038faddd570086d1fa323133f5632e0890d3f0a54f8f51aece39d16c660a9964e466750a9660572cbe7a1012b7e987adffa25141953a655844207b37159c7ba1cc12555f7809a72a949f067a00d3875a7fcbe64c6eb454", 0xf2}, {&(0x7f00000014c0)="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", 0x1000}, {&(0x7f00000024c0)="8d793adba0c70f8cccbb5f906ce45cd7a07f58246f85e29f37cfc20f1e2b6d6e860162bf327b5725628edfcea44034e01bc08a3a18184e69ed56a298fc41017b2a99331d3ec80a7ef2e94b491f7b14abbc7e295878f9e7b0853ec97fa85d0300c4586e3537b137faf0bbdc441b15d1e8876afe1b49680d45c44ac997e9a91ee01cd164fc074680c9801a9cd88af80b9905246a25679f840e61ae36fd991b4682d81b912b9303f0129054851a805ffe0b6e0c5ce1a7ea99083ec751c0e6adffc4f28a8ec8674b84396a376a46ad66b445cee450f17840a72fd4ace326194ece0b43079d41ab70e7a3da02a611f1d5694a0b713563b03b", 0xf6}], 0x8, &(0x7f00000026c0)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x8209, 0x100, 0x7, r3}}], 0x20, 0x20004800}, 0x4000011) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002780)={0x4, &(0x7f0000002740)=[{0x2, 0xbe, 0x14, 0x80}, {0xfab, 0xfe, 0x9, 0x9}, {0x2, 0x8, 0x9, 0x7}, {0x6, 0x5b, 0x30, 0xbfc9}]}, 0x10) r4 = syz_socket_connect_nvme_tcp() ioctl$int_in(r1, 0xecb53fb8140aa381, &(0x7f00000027c0)=0xffffffffffff79f8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000002840)={'sit0\x00', &(0x7f0000002800)={@private0, @dev={0xac, 0x14, 0x14, 0x24}, 0x6, 0x1c}}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000002880), 0x400800) bind$inet6(r5, &(0x7f00000028c0)={0xa, 0x4e20, 0xfff, @mcast1, 0xdc7}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000002900)={0xa, 0x4e22, 0x7, @local, 0x2}, 0x1c) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000002940)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f00000029c0)={0x10, 0x1, r7}) r8 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000002a00)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r8, &(0x7f0000002b40)={0x14, &(0x7f0000002a40)={0x40, 0x23, 0x84, {0x84, 0x1, "22c29f28cc07499e33cca6dee46def0baf0f74118bb29936f6d9aad793b42da68baecc85f822c636b6e53a908c5873f586a4859f48297a0e91c8cfd37271273995e15a872d4cde1ac827e29fc07e9cd5820a42b3d3e0233cc4a55f7fd032a855a5deec4356144674d0e2d3ea8e66765d927b4ae118792bc774166ccec03f4240a7f3"}}, &(0x7f0000002b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2851}}}, &(0x7f0000002d80)={0x2c, &(0x7f0000002b80)={0x0, 0x5, 0xd9, "ea862c4ea822035414a2d5c74c4395d0184101cf6fd0b72513d1101ebc534ab1e14819ca96a2b14bfd7dac0e7ad16573936dfaa12652a601feff409e53653e0e8dc3a964f57baf881e669245dec7880f90f9840df936d3fe81b23de3c1e2d8df9b3892f86324dc0d3960947fb82009a63eea6249b0aaf1263e0b36691204faf454bca48e7951e332869dcacf9b896a62bf01bc7e1af4ea1b771e32f3d1f30d833ba092df97a0270b40499fb84298b5134d565247ac249e098d642ca13792f487b167c8afea0119bcbce211061505258323cc1066f861e59a3a"}, &(0x7f0000002c80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002cc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000002d00)={0xc0, 0x5, 0x5, "384b103515"}, &(0x7f0000002d40)={0x40, 0x5, 0x4, "4169bd91"}}) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000002dc0)={0x7fffffff, "67525e87584e9d803bea555d38fb65f8ce0dfe8f0652acd68e2e507db64637f8"}) r9 = syz_open_dev$vcsn(&(0x7f0000002e00), 0x388, 0x309040) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000002e40), &(0x7f0000002e80)=0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r9, 0x84, 0x8, &(0x7f0000002ec0)=0x5, 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x40010, r4, 0xee954000) 3.17129621s ago: executing program 5 (id=1614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe544104802800018007000100637400001c0002800800014000000007080002400000000c05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.972293664s ago: executing program 5 (id=1615): socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) 2.799362597s ago: executing program 5 (id=1616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000560ec97000fc81100fe8000000000000000000000000000aaff020000000000000011000000000001", @ANYRES32=r1, @ANYRES64=r1], 0xffe) 2.218405114s ago: executing program 7 (id=1617): sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4094}, 0x4080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x700) 2.012549777s ago: executing program 7 (id=1618): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffa) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc90ac21dc24e627958b0eae7e5d733e6e221"], 0x28}], 0x1}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) shutdown(r4, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x2c, 0x107, 0x70bd28, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x2400c810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket(0x2a, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000100)='ext3\x00', 0x0, &(0x7f0000000140)='grpquota') r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000040)={{0x2, 0xfffffffa}, {0x3, 0x1003ff}, 0x0, 0x8}) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 1.852827091s ago: executing program 5 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}, 0x1, 0x28000000}, 0x0) 1.396322297s ago: executing program 5 (id=1621): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000500028000001294", 0x2e}], 0x1}, 0x0) 1.174655557s ago: executing program 1 (id=1622): mount(0x0, 0x0, 0x0, 0x8001, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x7d4165c9) listen(r2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0x400}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x716e) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000018000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.146832219s ago: executing program 7 (id=1623): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xf0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) 880.357907ms ago: executing program 7 (id=1624): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) 880.031239ms ago: executing program 1 (id=1625): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000640)="240000001e005f02140c00fffffffff8070000000100ffa6000000000500e99c11e85637", 0x24) 676.180701ms ago: executing program 5 (id=1626): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) fallocate(0xffffffffffffffff, 0x4, 0x7, 0x90003) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@verity_off}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x81900) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="12008100", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000080)=0xf0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2004c015}, 0x40) connect$inet6(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1, 0x0, 0x0, 0x400000}}], 0x1, 0x8020) 623.271885ms ago: executing program 7 (id=1627): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000000)=@nullb, r1, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') 496.697383ms ago: executing program 1 (id=1628): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfffffffffffffffd, 0x280000) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 443.044942ms ago: executing program 1 (id=1629): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES32=r0], 0x7c}}, 0x4040080) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000002c0)={{0x3, 0x3, 0x8, 0x3, 0x46c6}, 0xb, 0x7}) sendmsg$NFT_BATCH(r1, 0x0, 0x4040080) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r4, 0x0, 0x0, 0x1}}, 0x20) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd99}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc8d0}, 0x81) socket$kcm(0x2, 0x3, 0x106) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES32=r0], 0x7c}}, 0x4040080) (async) syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') (async) preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f00000002c0)={{0x3, 0x3, 0x8, 0x3, 0x46c6}, 0xb, 0x7}) (async) sendmsg$NFT_BATCH(r1, 0x0, 0x4040080) (async) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000240)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r4, 0x0, 0x0, 0x1}}, 0x20) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="160000001f0137f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) (async) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e21, @remote}, 0x10, 0x0}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r5, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd99}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc8d0}, 0x81) (async) 381.480202ms ago: executing program 7 (id=1630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004000000560ec97000fc81100fe8000000000000000000000000000aaff020000000000000012000000000001", @ANYRES32=r1, @ANYRES64=r1], 0xffe) 216.79508ms ago: executing program 1 (id=1631): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 16.688665ms ago: executing program 1 (id=1632): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffa) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc90ac21dc24e627958b0eae7e5d733e6e221"], 0x28}], 0x1}, 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='illinois', 0x8) shutdown(r4, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x2c, 0x107, 0x70bd28, 0x25dfdbff, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x2400c810) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket(0x2a, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f0000000600)={&(0x7f0000000100)=0x1, 0x1386, &(0x7f0000000440)=[{}, {}], &(0x7f00000005c0)}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000040)={{0x2, 0xfffffffa}, {0x3, 0x1003ff}, 0x0, 0x8}) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 0s ago: executing program 6 (id=1633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c0003801400010077673200000000000000f5ff000000001400010076657468315f746f5f627269646765000900020073797a3000000000090001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) kernel console output (not intermixed with test programs): -1:220.0: No valid video chain found. [ 239.658265][ T5907] usb 4-1: selecting invalid altsetting 0 [ 239.717659][ T5907] usb 4-1: selecting invalid altsetting 0 [ 239.717696][ T5907] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 239.721983][ T5907] usb 4-1: USB disconnect, device number 42 [ 240.079035][ T9047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1113'. [ 240.113715][ T9049] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1114'. [ 240.114544][ T9051] misc userio: No port type given on /dev/userio [ 240.330194][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1120'. [ 240.612889][ T9068] input: syz0 as /devices/virtual/input/input21 [ 240.811045][ T5907] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 240.890996][ T5909] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 240.961000][ T5907] usb 2-1: Using ep0 maxpacket: 32 [ 240.967633][ T5907] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 240.967663][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.967676][ T5907] usb 2-1: Product: syz [ 240.967684][ T5907] usb 2-1: Manufacturer: syz [ 240.967691][ T5907] usb 2-1: SerialNumber: syz [ 240.975244][ T5907] usb 2-1: config 0 descriptor?? [ 241.043052][ T5909] usb 4-1: config 0 interface 0 has no altsetting 0 [ 241.043095][ T5909] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 241.043118][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.048396][ T5909] usb 4-1: config 0 descriptor?? [ 241.419606][ T5907] airspy 2-1:0.0: Board ID: 00 [ 241.419629][ T5907] airspy 2-1:0.0: Firmware version: [ 241.508482][ T5909] usbhid 4-1:0.0: can't add hid device: -71 [ 241.508608][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 241.529139][ T5909] usb 4-1: USB disconnect, device number 43 [ 241.873801][ T9090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1129'. [ 242.023415][ T5907] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 242.066789][ T5907] airspy 2-1:0.0: Registered as swradio24 [ 242.066811][ T5907] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 242.089890][ T5907] usb 2-1: USB disconnect, device number 55 [ 242.238984][ T9106] netlink: 'syz.4.1134': attribute type 4 has an invalid length. [ 242.239005][ T9106] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1134'. [ 242.610995][ T5963] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 242.772590][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 242.776537][ T5963] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 242.776564][ T5963] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 242.776584][ T5963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 242.776605][ T5963] usb 4-1: config 1 has no interface number 0 [ 242.776648][ T5963] usb 4-1: config 1 interface 1 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 242.776668][ T5963] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 242.776708][ T5963] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 242.776731][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.875626][ T5963] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 243.071518][ T5963] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 243.073163][ T5963] snd_usb_pod 4-1:1.1: invalid control EP [ 243.073175][ T5963] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 243.073687][ T5963] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 243.074100][ T5963] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 243.186169][ T9131] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1145'. [ 243.190982][ T5908] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 243.343100][ T5908] usb 5-1: config 0 interface 0 has no altsetting 0 [ 243.343126][ T5908] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 243.343138][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.345890][ T5908] usb 5-1: config 0 descriptor?? [ 243.415228][ T5907] usb 4-1: USB disconnect, device number 44 [ 243.630854][ T5963] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 243.786561][ T5963] usb 2-1: unable to get BOS descriptor or descriptor too short [ 243.788170][ T5963] usb 2-1: not running at top speed; connect to a high speed hub [ 243.806913][ T5963] usb 2-1: New USB device found, idVendor=0944, idProduct=0200, bcdDevice= 0.40 [ 243.806943][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.806962][ T5963] usb 2-1: Product: syz [ 243.806976][ T5963] usb 2-1: Manufacturer: syz [ 243.806989][ T5963] usb 2-1: SerialNumber: syz [ 243.830095][ T5908] usbhid 5-1:0.0: can't add hid device: -71 [ 243.830215][ T5908] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 243.862809][ T5908] usb 5-1: USB disconnect, device number 40 [ 244.059656][ T5963] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 244.119182][ T5963] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 244.137105][ T5963] usb 2-1: USB disconnect, device number 56 [ 244.178648][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.386513][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 244.451039][ T5909] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 244.603223][ T5909] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 244.603254][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.606072][ T5909] usb 4-1: config 0 descriptor?? [ 244.614239][ T5909] cp210x 4-1:0.0: cp210x converter detected [ 244.660982][ T5908] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 244.810890][ T5908] usb 5-1: Using ep0 maxpacket: 16 [ 244.819710][ T5908] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.833827][ T5908] usb 5-1: config 1 has an invalid interface number: 183 but max is 0 [ 244.833869][ T5908] usb 5-1: config 1 has no interface number 0 [ 244.833934][ T5908] usb 5-1: config 1 interface 183 altsetting 6 bulk endpoint 0x85 has invalid maxpacket 1024 [ 244.833959][ T5908] usb 5-1: config 1 interface 183 has no altsetting 0 [ 244.837901][ T5908] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=7c.05 [ 244.837934][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.837953][ T5908] usb 5-1: Product: syz [ 244.837967][ T5908] usb 5-1: Manufacturer: syz [ 244.837981][ T5908] usb 5-1: SerialNumber: syz [ 244.923532][ T9153] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 245.025004][ T5909] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 245.142688][ T5908] opticon 5-1:1.183: opticon converter detected [ 245.173850][ T5908] usb 5-1: opticon converter now attached to ttyUSB0 [ 245.194670][ T5908] usb 5-1: USB disconnect, device number 41 [ 245.208404][ T5908] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 245.209222][ T5908] opticon 5-1:1.183: device disconnected [ 245.292503][ T5909] usb 4-1: cp210x converter now attached to ttyUSB0 [ 245.447760][ T9147] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.448214][ T9147] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.495164][ T5909] usb 4-1: USB disconnect, device number 45 [ 245.505427][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 245.671746][ T5909] cp210x 4-1:0.0: device disconnected [ 245.752594][ T9173] netlink: 'syz.1.1164': attribute type 13 has an invalid length. [ 245.817808][ T9175] netlink: 'syz.1.1165': attribute type 4 has an invalid length. [ 245.817831][ T9175] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1165'. [ 246.080932][ T5963] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 246.240332][ T5963] usb 5-1: unable to get BOS descriptor or descriptor too short [ 246.242886][ T5963] usb 5-1: not running at top speed; connect to a high speed hub [ 246.266944][ T5963] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 246.266968][ T5963] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 246.266983][ T5963] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.274366][ T5963] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 246.274393][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 246.274411][ T5963] usb 5-1: SerialNumber: syz [ 246.302124][ T9177] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.302252][ T9177] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.309453][ T9188] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1171'. [ 246.489712][ T9186] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1170'. [ 246.515546][ T9177] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.515667][ T9177] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.685076][ T9186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.823730][ T9186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.879157][ T9186] bond0 (unregistering): Released all slaves [ 246.919012][ T5963] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 247.038475][ T9200] ======================================================= [ 247.038475][ T9200] WARNING: The mand mount option has been deprecated and [ 247.038475][ T9200] and is ignored by this kernel. Remove the mand [ 247.038475][ T9200] option from the mount to silence this warning. [ 247.038475][ T9200] ======================================================= [ 247.131138][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.131708][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.237218][ T5907] usb 5-1: USB disconnect, device number 42 [ 247.901049][ T5963] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 248.050954][ T5963] usb 2-1: Using ep0 maxpacket: 32 [ 248.053165][ T5963] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 248.053189][ T5963] usb 2-1: config 0 has no interface number 0 [ 248.071005][ T5909] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 248.085113][ T5963] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 248.085130][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.085141][ T5963] usb 2-1: Product: syz [ 248.085149][ T5963] usb 2-1: Manufacturer: syz [ 248.085157][ T5963] usb 2-1: SerialNumber: syz [ 248.125731][ T5963] usb 2-1: config 0 descriptor?? [ 248.138606][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 248.140682][ T5963] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 248.233657][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0 [ 248.233757][ T5909] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 248.233781][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.267514][ T5909] usb 5-1: config 0 descriptor?? [ 248.340286][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.341134][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.403674][ T5963] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 248.456642][ T5963] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 248.547249][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 248.748042][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 248.755783][ T5809] usb 2-1: USB disconnect, device number 57 [ 248.768737][ T5909] usbhid 5-1:0.0: can't add hid device: -71 [ 248.768855][ T5909] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 248.771144][ T5907] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 248.819078][ T5909] usb 5-1: USB disconnect, device number 43 [ 248.865913][ T5809] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 248.918624][ T5809] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 248.921981][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 248.922858][ T5809] quatech2 2-1:0.51: device disconnected [ 248.956120][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.964385][ T5907] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 248.981373][ T5907] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 248.981391][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.981402][ T5907] usb 4-1: Product: syz [ 248.981409][ T5907] usb 4-1: Manufacturer: syz [ 248.981416][ T5907] usb 4-1: SerialNumber: syz [ 249.336677][ T5907] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 249.338769][ T5907] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 249.541688][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.542257][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.696843][ T5907] usb 4-1: 2:1 : invalid Cluster Descriptor size [ 249.811760][ T5909] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 249.912726][ T5963] usb 4-1: USB disconnect, device number 46 [ 249.984651][ T5909] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 249.984681][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 249.984701][ T5909] usb 5-1: Product: syz [ 249.984715][ T5909] usb 5-1: SerialNumber: syz [ 249.990119][ T5909] usb 5-1: config 0 descriptor?? [ 250.031036][ T5909] hso 5-1:0.0: Not our interface [ 250.557293][ T9249] FAULT_INJECTION: forcing a failure. [ 250.557293][ T9249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.557328][ T9249] CPU: 0 UID: 0 PID: 9249 Comm: syz.1.1195 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 250.557341][ T9249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 250.557353][ T9249] Call Trace: [ 250.557357][ T9249] [ 250.557362][ T9249] dump_stack_lvl+0xe8/0x150 [ 250.557379][ T9249] should_fail_ex+0x46b/0x600 [ 250.557400][ T9249] _copy_from_user+0x2d/0xb0 [ 250.557416][ T9249] ___sys_recvmsg+0x175/0x590 [ 250.557430][ T9249] ? __pfx____sys_recvmsg+0x10/0x10 [ 250.557444][ T9249] ? __fget_files+0x2a/0x420 [ 250.557464][ T9249] ? __fget_files+0x3a6/0x420 [ 250.557481][ T9249] do_recvmmsg+0x33a/0x800 [ 250.557496][ T9249] ? __pfx_do_recvmmsg+0x10/0x10 [ 250.557513][ T9249] ? rt_mutex_slowunlock+0x1cb/0x300 [ 250.557532][ T9249] __x64_sys_recvmmsg+0x198/0x250 [ 250.557545][ T9249] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 250.557560][ T9249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.557572][ T9249] do_syscall_64+0x15f/0xf80 [ 250.557586][ T9249] ? trace_irq_disable+0x3b/0x140 [ 250.557598][ T9249] ? clear_bhb_loop+0x40/0x90 [ 250.557611][ T9249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.557621][ T9249] RIP: 0033:0x7fde848ac819 [ 250.557632][ T9249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.557641][ T9249] RSP: 002b:00007fde82b06028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 250.557655][ T9249] RAX: ffffffffffffffda RBX: 00007fde84b25fa0 RCX: 00007fde848ac819 [ 250.557662][ T9249] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 250.557669][ T9249] RBP: 00007fde82b06090 R08: 0000000000000000 R09: 0000000000000000 [ 250.557675][ T9249] R10: 0000000040002000 R11: 0000000000000246 R12: 0000000000000001 [ 250.557682][ T9249] R13: 00007fde84b26038 R14: 00007fde84b25fa0 R15: 00007ffec2ee5448 [ 250.557697][ T9249] [ 250.741080][ T5907] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 250.893392][ T5907] usb 4-1: config 2 has an invalid interface number: 43 but max is 0 [ 250.893420][ T5907] usb 4-1: config 2 has no interface number 0 [ 250.893548][ T5907] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 250.893568][ T5907] usb 4-1: config 2 interface 43 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 8 [ 250.893581][ T5907] usb 4-1: config 2 interface 43 has no altsetting 0 [ 250.896436][ T5907] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 250.896466][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.896486][ T5907] usb 4-1: Product: syz [ 250.896496][ T5907] usb 4-1: Manufacturer: syz [ 250.896504][ T5907] usb 4-1: SerialNumber: syz [ 250.951479][ T9245] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 250.951627][ T9245] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 251.173106][ T5907] ums-usbat 4-1:2.43: USB Mass Storage device detected [ 251.185434][ T5907] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 251.264802][ T5907] ums-usbat 4-1:2.43: probe with driver ums-usbat failed with error -5 [ 251.269799][ T5907] usb 4-1: USB disconnect, device number 47 [ 251.440934][ T5963] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 251.602635][ T5963] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.602670][ T5963] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 251.602683][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.608695][ T5963] usb 2-1: config 0 descriptor?? [ 251.851718][ T9263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1200'. [ 252.101490][ T5963] usbhid 2-1:0.0: can't add hid device: -71 [ 252.101613][ T5963] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 252.122528][ T5963] usb 2-1: USB disconnect, device number 58 [ 252.528340][ T5809] usb 5-1: USB disconnect, device number 44 [ 252.880657][ T9277] sp0: Synchronizing with TNC [ 253.081011][ T5963] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 253.220965][ T5963] usb 5-1: device descriptor read/64, error -71 [ 253.388039][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.426555][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.428506][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.429665][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.448026][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 253.488950][ T5963] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 253.608432][ T9303] syzkaller0: entered promiscuous mode [ 253.608459][ T9303] syzkaller0: entered allmulticast mode [ 253.623743][ T5963] usb 5-1: device descriptor read/64, error -71 [ 253.627506][ T9303] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 253.627529][ T9303] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 253.627632][ T9303] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 253.627650][ T9303] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 253.713826][ T5809] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 253.741194][ T5963] usb usb5-port1: attempt power cycle [ 253.870983][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 253.873597][ T5809] usb 2-1: config 9 has an invalid interface number: 33 but max is 0 [ 253.873620][ T5809] usb 2-1: config 9 has no interface number 0 [ 253.873639][ T5809] usb 2-1: config 9 interface 33 has no altsetting 0 [ 253.875843][ T5809] usb 2-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=8f.d3 [ 253.875870][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.875883][ T5809] usb 2-1: Product: syz [ 253.875890][ T5809] usb 2-1: Manufacturer: syz [ 253.875898][ T5809] usb 2-1: SerialNumber: syz [ 254.080942][ T5963] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 254.102951][ T5963] usb 5-1: device descriptor read/8, error -71 [ 254.253005][ T9301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.253557][ T9301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.337399][ T9296] chnl_net:caif_netlink_parms(): no params data found [ 254.361073][ T5963] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 254.384208][ T5963] usb 5-1: device descriptor read/8, error -71 [ 254.420936][ T5887] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 254.501308][ T5963] usb usb5-port1: unable to enumerate USB device [ 254.526927][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.527122][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.527295][ T9296] bridge_slave_0: entered allmulticast mode [ 254.529581][ T9296] bridge_slave_0: entered promiscuous mode [ 254.560277][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.560453][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.560728][ T9296] bridge_slave_1: entered allmulticast mode [ 254.586129][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 254.588112][ T9296] bridge_slave_1: entered promiscuous mode [ 254.588331][ T5887] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.588359][ T5887] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.588392][ T5887] usb 4-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 254.588414][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.650322][ T5887] usb 4-1: config 0 descriptor?? [ 254.764138][ T9296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.771277][ T9296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.907059][ T9296] team0: Port device team_slave_0 added [ 254.912324][ T9296] team0: Port device team_slave_1 added [ 254.983971][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.984048][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.984073][ T9296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.987089][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.987105][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.987183][ T9296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.089714][ T5887] hid_parser_main: 25 callbacks suppressed [ 255.089736][ T5887] elecom 0003:056E:011C.0013: unknown main item tag 0x0 [ 255.089766][ T5887] elecom 0003:056E:011C.0013: unknown main item tag 0x0 [ 255.089789][ T5887] elecom 0003:056E:011C.0013: unknown main item tag 0x0 [ 255.089812][ T5887] elecom 0003:056E:011C.0013: unknown main item tag 0x0 [ 255.089837][ T5887] elecom 0003:056E:011C.0013: unknown main item tag 0x0 [ 255.089862][ T5887] elecom 0003:056E:011C.0013: unknown main item tag 0x0 [ 255.089886][ T5887] elecom 0003:056E:011C.0013: unknown main item tag 0x0 [ 255.089911][ T5887] elecom 0003:056E:011C.0013: unknown main item tag 0x0 [ 255.089936][ T5887] elecom 0003:056E:011C.0013: unknown main item tag 0x0 [ 255.089960][ T5887] elecom 0003:056E:011C.0013: unknown main item tag 0x0 [ 255.200523][ T5887] elecom 0003:056E:011C.0013: hidraw0: USB HID v0.00 Device [HID 056e:011c] on usb-dummy_hcd.3-1/input0 [ 255.285113][ T9296] hsr_slave_0: entered promiscuous mode [ 255.287592][ T9296] hsr_slave_1: entered promiscuous mode [ 255.288987][ T9296] debugfs: 'hsr0' already exists in 'hsr' [ 255.289009][ T9296] Cannot create hsr debugfs directory [ 255.540968][ T5138] Bluetooth: hci4: command tx timeout [ 255.866864][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.866907][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.987267][ T9296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 256.028954][ T9296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.038074][ T9296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.145618][ T9296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.146471][ T9296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.181152][ T9296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.182054][ T9296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.247800][ T9296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.320890][ T5887] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 256.450203][ T9296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.496647][ T5887] usb 5-1: Using ep0 maxpacket: 8 [ 256.501641][ T5887] usb 5-1: config 6 has an invalid interface number: 220 but max is 0 [ 256.501668][ T5887] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 256.501687][ T5887] usb 5-1: config 6 has no interface number 0 [ 256.501715][ T5887] usb 5-1: config 6 interface 220 has no altsetting 0 [ 256.506106][ T5887] usb 5-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 256.506133][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.506152][ T5887] usb 5-1: Product: syz [ 256.506167][ T5887] usb 5-1: Manufacturer: syz [ 256.506181][ T5887] usb 5-1: SerialNumber: syz [ 256.569580][ T5809] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0 [ 256.579315][ T5809] gspca_sn9c20x: Write register 1000 failed -71 [ 256.579333][ T5809] gspca_sn9c20x: Device initialization failed [ 256.579409][ T5809] gspca_sn9c20x 2-1:9.33: probe with driver gspca_sn9c20x failed with error -71 [ 256.617207][ T5809] usb 2-1: USB disconnect, device number 59 [ 256.738973][ T9296] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.786396][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.786573][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.804276][ T5887] uvcvideo 5-1:6.220: probe with driver uvcvideo failed with error -22 [ 256.816874][ T5887] usb 5-1: USB disconnect, device number 49 [ 257.076691][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.076905][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.221079][ T819] usb 4-1: USB disconnect, device number 48 [ 257.499666][ T9343] syz.4.1222 (9343) used greatest stack depth: 18408 bytes left [ 257.541056][ T5887] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 257.613744][ T5138] Bluetooth: hci4: command tx timeout [ 257.692142][ T5887] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 257.698935][ T5887] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 257.698972][ T5887] usb 2-1: can't read configurations, error -22 [ 257.863565][ T5887] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 257.992438][ T819] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 258.021212][ T5887] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 258.022785][ T5887] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 258.022821][ T5887] usb 2-1: can't read configurations, error -22 [ 258.029873][ T5887] usb usb2-port1: attempt power cycle [ 258.108844][ T9296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.120988][ T819] usb 5-1: device descriptor read/64, error -71 [ 258.361014][ T819] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 258.400977][ T5887] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 258.447845][ T5887] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 258.459296][ T5887] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 258.459326][ T5887] usb 2-1: can't read configurations, error -22 [ 258.479194][ T9296] veth0_vlan: entered promiscuous mode [ 258.491624][ T819] usb 5-1: device descriptor read/64, error -71 [ 258.499193][ T9296] veth1_vlan: entered promiscuous mode [ 258.538369][ T9296] veth0_macvtap: entered promiscuous mode [ 258.542989][ T9296] veth1_macvtap: entered promiscuous mode [ 258.559357][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.581306][ T5887] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 258.615964][ T5887] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 258.657686][ T819] usb usb5-port1: attempt power cycle [ 258.660712][ T5887] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 258.664709][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.679723][ T5887] usb 2-1: can't read configurations, error -22 [ 258.680211][ T5887] usb usb2-port1: unable to enumerate USB device [ 258.699631][ T296] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.724862][ T296] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.727730][ T296] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.729043][ T296] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.019126][ T819] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 259.054308][ T819] usb 5-1: device descriptor read/8, error -71 [ 259.214677][ T5809] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 259.301044][ T819] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 259.325121][ T819] usb 5-1: device descriptor read/8, error -71 [ 259.394252][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 259.475705][ T819] usb usb5-port1: unable to enumerate USB device [ 259.498871][ T5809] usb 4-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 259.498902][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.498923][ T5809] usb 4-1: Product: syz [ 259.498937][ T5809] usb 4-1: Manufacturer: syz [ 259.498952][ T5809] usb 4-1: SerialNumber: syz [ 259.693847][ T5138] Bluetooth: hci4: command tx timeout [ 259.804243][ T5809] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 259.812899][ T5809] usb 4-1: USB disconnect, device number 49 [ 259.847468][ T296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.847489][ T296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.969401][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.969421][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.751795][ T5809] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 260.881766][ T5887] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 260.903299][ T5809] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 260.903330][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.916236][ T5809] usb 2-1: config 0 descriptor?? [ 260.936817][ T5809] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 260.938594][ T9394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.041063][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 261.043693][ T5887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.043754][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 261.043777][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 261.043802][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 261.047234][ T5887] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 261.047344][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 261.047364][ T5887] usb 6-1: Product: syz [ 261.047378][ T5887] usb 6-1: Manufacturer: syz [ 261.047392][ T5887] usb 6-1: SerialNumber: syz [ 261.146844][ T5887] usb 6-1: config 0 descriptor?? [ 261.163124][ T5887] usb 6-1: no audio or video endpoints found [ 261.335900][ T5809] gspca_stv06xx: I2C: Read error writing address: -71 [ 261.349132][ T5809] usb 2-1: USB disconnect, device number 64 [ 261.413995][ T9388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1232'. [ 261.414060][ T9388] bridge_slave_1: left allmulticast mode [ 261.414074][ T9388] bridge_slave_1: left promiscuous mode [ 261.414239][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.491881][ T9388] bridge_slave_0: left allmulticast mode [ 261.491902][ T9388] bridge_slave_0: left promiscuous mode [ 261.492091][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.796195][ T5138] Bluetooth: hci4: command tx timeout [ 261.894267][ T5887] usb 6-1: USB disconnect, device number 2 [ 261.989180][ T9403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1239'. [ 262.725180][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1246'. [ 262.811076][ T5909] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 263.020947][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 263.024886][ T5909] usb 5-1: unable to get BOS descriptor or descriptor too short [ 263.028333][ T5909] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 263.028361][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.028382][ T5909] usb 5-1: Product: syz [ 263.028397][ T5909] usb 5-1: Manufacturer: syz [ 263.028411][ T5909] usb 5-1: SerialNumber: syz [ 263.813738][ T43] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.279140][ T5909] usb 5-1: USB disconnect, device number 54 [ 264.311177][ T5969] udevd[5969]: setting mode of /dev/bus/usb/005/054 to 020664 failed: No such file or directory [ 264.311322][ T5969] udevd[5969]: setting owner of /dev/bus/usb/005/054 to uid=0, gid=0 failed: No such file or directory [ 264.456813][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.513341][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.518423][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.533962][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.534716][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.722786][ T43] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.971009][ T5809] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 265.120979][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 265.132717][ T5809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.132771][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 265.132794][ T5809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 265.132818][ T5809] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 265.149849][ T43] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.183077][ T5809] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 265.183105][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 265.183124][ T5809] usb 5-1: Product: syz [ 265.183138][ T5809] usb 5-1: Manufacturer: syz [ 265.183151][ T5809] usb 5-1: SerialNumber: syz [ 265.203362][ T5809] usb 5-1: config 0 descriptor?? [ 265.209314][ T5809] usb 5-1: no audio or video endpoints found [ 265.400248][ T9456] netlink: 'syz.5.1260': attribute type 4 has an invalid length. [ 265.400273][ T9456] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1260'. [ 265.424158][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 265.426166][ T9446] bridge_slave_1: left allmulticast mode [ 265.426194][ T9446] bridge_slave_1: left promiscuous mode [ 265.426480][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.502535][ T9446] bridge_slave_0: left allmulticast mode [ 265.502557][ T9446] bridge_slave_0: left promiscuous mode [ 265.502712][ T9446] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.573064][ T9460] MTD: Attempt to mount non-MTD device "/dev/nbd5" [ 265.573284][ T9460] cramfs: wrong magic [ 265.636063][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1262'. [ 265.848519][ T5809] usb 5-1: USB disconnect, device number 55 [ 266.082016][ T43] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.634305][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1267'. [ 266.731391][ T5138] Bluetooth: hci0: command tx timeout [ 267.389076][ T9438] chnl_net:caif_netlink_parms(): no params data found [ 267.657475][ T43] bridge_slave_1: left allmulticast mode [ 267.657503][ T43] bridge_slave_1: left promiscuous mode [ 267.657658][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.710909][ T5963] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 267.801846][ T43] bridge_slave_0: left allmulticast mode [ 267.801868][ T43] bridge_slave_0: left promiscuous mode [ 267.802017][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.882803][ T5963] usb 5-1: config 0 interface 0 has no altsetting 0 [ 267.882835][ T5963] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 267.882848][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.910417][ T5963] usb 5-1: config 0 descriptor?? [ 268.035465][ T5909] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 268.203552][ T5909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.206697][ T5909] usb 6-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 268.206727][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 268.206805][ T5909] usb 6-1: Product: syz [ 268.206820][ T5909] usb 6-1: SerialNumber: syz [ 268.276310][ T5909] usb 6-1: config 0 descriptor?? [ 268.284874][ T5909] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 268.286381][ T5909] usb 6-1: Detected SIO [ 268.290533][ T5909] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 268.820935][ T5138] Bluetooth: hci0: command tx timeout [ 269.056684][ T32] usb 6-1: USB disconnect, device number 3 [ 269.083923][ T32] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 269.084604][ T32] ftdi_sio 6-1:0.0: device disconnected [ 269.276078][ T9438] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.276481][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.276821][ T9438] bridge_slave_0: entered allmulticast mode [ 269.306510][ T9438] bridge_slave_0: entered promiscuous mode [ 269.375484][ T9438] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.375664][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.376013][ T9438] bridge_slave_1: entered allmulticast mode [ 269.380293][ T9438] bridge_slave_1: entered promiscuous mode [ 269.705130][ T9438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.724910][ T9438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.784679][ T9438] team0: Port device team_slave_0 added [ 269.788725][ T9438] team0: Port device team_slave_1 added [ 269.800890][ T5809] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 269.984020][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 270.000625][ T5809] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 270.000650][ T5809] usb 2-1: config 0 has no interface number 0 [ 270.000686][ T5809] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.000708][ T5809] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 270.001259][ T5809] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 270.001291][ T5809] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 32, changing to 9 [ 270.001317][ T5809] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.013077][ T5809] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 270.013107][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.013129][ T5809] usb 2-1: Product: syz [ 270.013142][ T5809] usb 2-1: Manufacturer: syz [ 270.013156][ T5809] usb 2-1: SerialNumber: syz [ 270.018589][ T5809] usb 2-1: config 0 descriptor?? [ 270.249657][ T5809] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 270.410489][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.410718][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.412511][ T9438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.892354][ T5138] Bluetooth: hci0: command tx timeout [ 270.900382][ T5963] usbhid 5-1:0.0: can't add hid device: -71 [ 270.900504][ T5963] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 270.966042][ T5963] usb 5-1: USB disconnect, device number 56 [ 271.048470][ T9528] netlink: 'syz.5.1276': attribute type 10 has an invalid length. [ 271.115542][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.115588][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.115614][ T9438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.154748][ T5484] 8021q: adding VLAN 0 to HW filter on device eth5 [ 271.176441][ T9528] team0: Device vxcan1 is of different type [ 271.184909][ T9533] binder: BC_ACQUIRE_RESULT not supported [ 271.184924][ T9533] binder: 9532:9533 ioctl c0306201 200000000580 returned -22 [ 271.565585][ T9438] hsr_slave_0: entered promiscuous mode [ 271.568076][ T9438] hsr_slave_1: entered promiscuous mode [ 271.569937][ T9438] debugfs: 'hsr0' already exists in 'hsr' [ 271.569959][ T9438] Cannot create hsr debugfs directory [ 271.584281][ T5963] usb 2-1: USB disconnect, device number 65 [ 271.744027][ T9542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.746263][ T9542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.982762][ T43] hsr_slave_0: left promiscuous mode [ 271.996080][ T5965] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 272.028926][ T43] hsr_slave_1: left promiscuous mode [ 272.029948][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.029970][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.062083][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.062111][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.177564][ T5965] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 272.177592][ T5965] usb 5-1: config 179 has no interface number 0 [ 272.177642][ T5965] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 272.177667][ T5965] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 272.177691][ T5965] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 272.177716][ T5965] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 272.177742][ T5965] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 272.177783][ T5965] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 272.177805][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.178233][ T43] veth1_macvtap: left promiscuous mode [ 272.178330][ T43] veth0_macvtap: left promiscuous mode [ 272.211578][ T9541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 272.211689][ T9541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 272.266359][ T43] veth1_vlan: left promiscuous mode [ 272.310679][ T43] veth0_vlan: left promiscuous mode [ 272.971314][ T5138] Bluetooth: hci0: command tx timeout [ 274.160348][ T43] team0 (unregistering): Port device team_slave_1 removed [ 274.341533][ T43] team0 (unregistering): Port device C removed [ 277.592322][ T9585] netlink: 'syz.1.1288': attribute type 10 has an invalid length. [ 277.887302][ T9585] team0: Device vxcan1 is of different type [ 278.581507][ T5484] 8021q: adding VLAN 0 to HW filter on device eth6 [ 279.082781][ T43] IPVS: stop unused estimator thread 0... [ 279.129804][ T9597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1291'. [ 279.260931][ T49] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 279.441555][ T49] usb 6-1: Using ep0 maxpacket: 16 [ 279.460102][ T49] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.460158][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 279.460186][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 279.460207][ T49] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 279.460230][ T49] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 279.514693][ T49] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 279.514724][ T49] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 279.514744][ T49] usb 6-1: Manufacturer: syz [ 279.553496][ T49] usb 6-1: config 0 descriptor?? [ 280.105255][ T9594] EXT4-fs (nbd1): unable to read superblock [ 280.291076][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 280.291102][ T9603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 280.405203][ T49] rc_core: IR keymap rc-hauppauge not found [ 280.405222][ T49] Registered IR keymap rc-empty [ 280.405374][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.422468][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.442132][ T49] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 280.524732][ T49] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input22 [ 280.547104][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.565349][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.583255][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.602039][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.621949][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.642603][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.661028][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.683700][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.706669][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.721095][ T49] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 280.769348][ T49] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 280.769374][ T49] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 280.836760][ T49] usb 6-1: USB disconnect, device number 4 [ 281.927504][ T9622] netlink: 'syz.5.1296': attribute type 4 has an invalid length. [ 281.927528][ T9622] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1296'. [ 282.243286][ T37] audit: type=1326 audit(1776330643.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9630 comm="syz.1.1299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde848ac819 code=0x0 [ 282.510293][ T9637] netlink: 4336 bytes leftover after parsing attributes in process `syz.5.1300'. [ 282.577955][ T9438] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.639054][ T9438] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.640605][ T9438] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.675608][ T9438] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.680193][ T9438] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.795072][ T9438] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.799915][ T9438] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.887023][ T9438] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.889459][ T5484] 8021q: adding VLAN 0 to HW filter on device eth7 [ 283.257587][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1301'. [ 283.513253][ T9438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.609326][ T9438] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.634206][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.653816][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.715223][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.715361][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.283619][ T9656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1302'. [ 284.340920][ T49] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 284.502401][ T49] usb 6-1: Using ep0 maxpacket: 32 [ 284.518038][ T49] usb 6-1: unable to get BOS descriptor or descriptor too short [ 284.521306][ T49] usb 6-1: config 128 has an invalid interface number: 183 but max is 0 [ 284.521341][ T49] usb 6-1: config 128 has no interface number 0 [ 284.521373][ T49] usb 6-1: config 128 interface 183 has no altsetting 0 [ 284.525954][ T49] usb 6-1: string descriptor 0 read error: -22 [ 284.526140][ T49] usb 6-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04 [ 284.526164][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.593800][ T49] go7007 6-1:128.183: probe with driver go7007 failed with error -12 [ 284.779975][ T5908] usb 6-1: USB disconnect, device number 5 [ 284.805496][ T5484] 8021q: adding VLAN 0 to HW filter on device eth8 [ 285.196086][ T9438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.544002][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1304'. [ 285.567636][ T9682] EXT4-fs (nbd5): unable to read superblock [ 285.635991][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 285.636011][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 285.902535][ T5908] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 286.123867][ T5908] usb 2-1: config 208 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 286.123902][ T5908] usb 2-1: config 208 interface 0 has no altsetting 0 [ 286.123933][ T5908] usb 2-1: New USB device found, idVendor=f7d6, idProduct=0f34, bcdDevice= 0.00 [ 286.123955][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.401261][ T5963] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 286.606857][ T5963] usb 6-1: config 0 interface 0 has no altsetting 0 [ 286.607064][ T5963] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 286.607252][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.689785][ T5963] usb 6-1: config 0 descriptor?? [ 286.716536][ T9438] veth0_vlan: entered promiscuous mode [ 286.911068][ T5908] usb 2-1: string descriptor 0 read error: -71 [ 286.958359][ T5908] usbhid 2-1:208.0: can't add hid device: -71 [ 286.958478][ T5908] usbhid 2-1:208.0: probe with driver usbhid failed with error -71 [ 286.968696][ T5908] usb 2-1: USB disconnect, device number 66 [ 287.220028][ T5963] usbhid 6-1:0.0: can't add hid device: -71 [ 287.220651][ T5963] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 287.315923][ T9438] veth1_vlan: entered promiscuous mode [ 287.342873][ T5963] usb 6-1: USB disconnect, device number 6 [ 287.581573][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 287.702095][ T9438] veth0_macvtap: entered promiscuous mode [ 287.804320][ T9438] veth1_macvtap: entered promiscuous mode [ 288.142534][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 288.249869][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 288.267233][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 288.277139][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 288.295725][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 288.838443][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.874286][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.047811][ T1192] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.050615][ T1192] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.087336][ T1192] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.128871][ T1192] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.766514][ T9722] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1314'. [ 290.050965][ T5908] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 290.260976][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 290.321217][ T5908] usb 6-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 290.321250][ T5908] usb 6-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 290.321271][ T5908] usb 6-1: Product: syz [ 290.321285][ T5908] usb 6-1: Manufacturer: syz [ 290.321299][ T5908] usb 6-1: SerialNumber: syz [ 290.384598][ T5908] usb 6-1: config 0 descriptor?? [ 290.428157][ T5908] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 290.573749][ T5138] Bluetooth: hci5: command tx timeout [ 290.831547][ T5908] gspca_zc3xx: reg_r err -71 [ 290.831640][ T5908] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 290.918874][ T5908] usb 6-1: USB disconnect, device number 7 [ 291.492900][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.492921][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.935081][ T9738] binder: 9737:9738 ioctl c0306201 200000000040 returned -14 [ 292.032412][ T9738] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 292.036059][ T9738] IPVS: set_ctl: invalid protocol: 92 172.30.0.6:20002 [ 292.236296][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.236314][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.469293][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1319'. [ 292.469317][ T9745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1319'. [ 292.652284][ T5138] Bluetooth: hci5: command tx timeout [ 292.795842][ T9698] chnl_net:caif_netlink_parms(): no params data found [ 293.432864][ T5138] Bluetooth: hci2: Malformed Event: 0x2f [ 293.433265][ T9760] program syz.6.1257 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.566476][ T9698] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.567285][ T9698] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.568913][ T9698] bridge_slave_0: entered allmulticast mode [ 293.592195][ T9698] bridge_slave_0: entered promiscuous mode [ 293.819459][ T9698] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.819769][ T9698] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.820177][ T9698] bridge_slave_1: entered allmulticast mode [ 293.836483][ T9698] bridge_slave_1: entered promiscuous mode [ 293.866513][ T5878] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 294.093817][ T5878] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 294.093834][ T5878] usb 2-1: config 1 has no interface number 0 [ 294.093860][ T5878] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 294.094015][ T5878] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 294.094033][ T5878] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 244, changing to 11 [ 294.096826][ T5878] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 294.096844][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.096855][ T5878] usb 2-1: Product: syz [ 294.096954][ T5878] usb 2-1: Manufacturer: syz [ 294.096962][ T5878] usb 2-1: SerialNumber: syz [ 294.215248][ T5878] usb 2-1: Error in usbnet_get_endpoints (-22) [ 294.353122][ T9698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.370584][ T9698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.427440][ T9698] team0: Port device team_slave_0 added [ 294.436733][ T9698] team0: Port device team_slave_1 added [ 294.480682][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.480698][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.480723][ T9698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.536312][ T9698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.536328][ T9698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.536352][ T9698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.732367][ T5138] Bluetooth: hci5: command tx timeout [ 294.907560][ T9780] EXT4-fs (nbd5): unable to read superblock [ 294.913740][ T5878] usb 2-1: USB disconnect, device number 67 [ 295.017739][ T9781] EXT4-fs (nbd6): unable to read superblock [ 295.096892][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1327'. [ 295.096913][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1327'. [ 295.364240][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1328'. [ 295.381193][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1327'. [ 296.122992][ T9698] hsr_slave_0: entered promiscuous mode [ 296.124910][ T9698] hsr_slave_1: entered promiscuous mode [ 296.156494][ T9698] debugfs: 'hsr0' already exists in 'hsr' [ 296.156520][ T9698] Cannot create hsr debugfs directory [ 296.587938][ T9804] vlan1: entered promiscuous mode [ 296.589166][ T9804] vlan1: entered allmulticast mode [ 296.589182][ T9804] veth0_vlan: entered allmulticast mode [ 296.683535][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1334'. [ 296.816447][ T5138] Bluetooth: hci5: command tx timeout [ 298.308339][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1339'. [ 298.384561][ T9834] EXT4-fs (nbd5): unable to read superblock [ 299.602313][ T9860] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1344'. [ 300.036178][ T9869] EXT4-fs (nbd5): unable to read superblock [ 300.471361][ T820] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 300.541162][ T9864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1345'. [ 300.679335][ T820] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.707576][ T820] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 300.707922][ T820] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.707942][ T820] usb 7-1: Product: syz [ 300.707956][ T820] usb 7-1: Manufacturer: syz [ 300.707969][ T820] usb 7-1: SerialNumber: syz [ 300.869515][ T820] usb 7-1: config 0 descriptor?? [ 300.928455][ T9883] EXT4-fs (nbd5): unable to read superblock [ 300.988039][ T820] ims_pcu 7-1:0.0: Missing CDC union descriptor [ 300.988904][ T820] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 301.079443][ T9881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1347'. [ 301.440919][ T9890] netlink: 'syz.1.1348': attribute type 29 has an invalid length. [ 301.440942][ T9890] netlink: 'syz.1.1348': attribute type 3 has an invalid length. [ 301.441098][ T9890] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1348'. [ 301.828076][ T9698] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 301.830930][ T5908] usb 7-1: USB disconnect, device number 2 [ 302.029754][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.031815][ T9894] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1349'. [ 302.065201][ T9698] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 302.232261][ T5809] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 302.349035][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.364529][ T9698] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.422452][ T5809] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 302.422483][ T5809] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 302.422504][ T5809] usb 2-1: Product: syz [ 302.422518][ T5809] usb 2-1: Manufacturer: syz [ 302.422533][ T5809] usb 2-1: SerialNumber: syz [ 302.430036][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.472228][ T5809] usb 2-1: config 0 descriptor?? [ 302.485196][ T5809] ch341 2-1:0.0: ch341-uart converter detected [ 302.645016][ T9698] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.715372][ T5809] usb 2-1: failed to receive control message: -121 [ 302.715431][ T5809] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 302.754297][ T9698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.627889][ T9698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.673250][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1354'. [ 303.678155][ T9925] EXT4-fs (nbd5): unable to read superblock [ 303.738564][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1354'. [ 303.738589][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1354'. [ 303.805195][ T9698] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.965536][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1356'. [ 303.989949][ T9928] EXT4-fs (nbd6): unable to read superblock [ 304.040623][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.075706][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.121358][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.121668][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.202635][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.203086][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.524545][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.538862][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.832549][ T37] audit: type=1326 audit(1776330666.236:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9941 comm="syz.6.1362" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f954491c819 code=0x0 [ 304.913302][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1361'. [ 305.331143][ T9953] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1364'. [ 305.354273][ T9953] EXT4-fs (nbd5): unable to read superblock [ 305.494905][ T9698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.527826][ T5878] usb 2-1: USB disconnect, device number 68 [ 305.597435][ T5878] ch341 2-1:0.0: device disconnected [ 306.517471][ T49] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 306.690090][ T49] usb 2-1: config 0 interface 0 has no altsetting 0 [ 306.690130][ T49] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 306.690152][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.745115][ T49] usb 2-1: config 0 descriptor?? [ 307.189717][ T9981] program syz.6.1370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.285554][ T9970] openvswitch: netlink: Flow key attr not present in new flow. [ 307.577178][ T49] usbhid 2-1:0.0: can't add hid device: -71 [ 307.577350][ T49] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 307.601918][ T49] usb 2-1: USB disconnect, device number 69 [ 307.930360][ T9698] veth0_vlan: entered promiscuous mode [ 307.971341][ T9698] veth1_vlan: entered promiscuous mode [ 308.018271][ T9698] veth0_macvtap: entered promiscuous mode [ 308.100625][ T37] audit: type=1326 audit(1776330669.295:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.6.1373" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f954491c819 code=0x0 [ 308.331482][ T9698] veth1_macvtap: entered promiscuous mode [ 308.575652][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.575872][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1375'. [ 308.632031][ T9698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.691710][ T163] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.693530][ T163] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.757234][ T9993] EXT4-fs (nbd1): unable to read superblock [ 308.791461][ T163] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.797440][ T163] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.770349][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1380'. [ 309.925487][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1379'. [ 310.157998][T10012] EXT4-fs (nbd6): unable to read superblock [ 310.868013][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.868033][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.989192][T10021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1384'. [ 311.016221][ T37] audit: type=1326 audit(1776330672.018:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10019 comm="syz.6.1385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f954491c819 code=0x0 [ 311.277800][ T296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.277818][ T296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.390248][T10027] EXT4-fs (nbd1): unable to read superblock [ 311.666981][T10032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1387'. [ 311.705991][T10032] EXT4-fs (nbd5): unable to read superblock [ 312.131234][T10042] netlink: 'syz.5.1389': attribute type 12 has an invalid length. [ 312.131256][T10042] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1389'. [ 312.742117][T10056] EXT4-fs (nbd5): unable to read superblock [ 312.895467][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1396'. [ 313.376757][T10065] netlink: 'syz.6.1399': attribute type 12 has an invalid length. [ 313.376964][T10065] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1399'. [ 313.481117][ T37] audit: type=1326 audit(1776330674.319:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10064 comm="syz.1.1400" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde848ac819 code=0x0 [ 314.114948][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1405'. [ 314.171449][T10080] EXT4-fs (nbd5): unable to read superblock [ 314.252930][ T5908] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 314.413434][ T5908] usb 7-1: Using ep0 maxpacket: 32 [ 314.415754][ T5908] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 314.415784][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.449255][ T5809] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 314.464716][ T5908] usb 7-1: config 0 descriptor?? [ 314.487036][ T5908] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 314.626883][ T5809] usb 8-1: config 0 interface 0 has no altsetting 0 [ 314.626923][ T5809] usb 8-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 314.626944][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.673648][ T5809] usb 8-1: config 0 descriptor?? [ 314.741268][ T5138] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 314.743104][T10090] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1409'. [ 314.764248][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1407'. [ 315.002843][T10092] EXT4-fs (nbd5): unable to read superblock [ 315.270184][ T5809] usbhid 8-1:0.0: can't add hid device: -71 [ 315.270434][ T5809] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 315.316216][ T5809] usb 8-1: USB disconnect, device number 2 [ 315.701877][ T5908] gspca_vc032x: reg_w err -110 [ 315.701896][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.701906][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.701915][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.701923][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.701933][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.701941][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.701949][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.701958][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.701967][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.701976][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.701984][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.701993][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.702001][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.702010][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.702031][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.702040][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.702048][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.702057][ T5908] gspca_vc032x: I2c Bus Busy Wait 00 [ 315.702066][ T5908] gspca_vc032x: Unknown sensor... [ 315.702145][ T5908] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 316.000721][T10101] netlink: 'syz.5.1411': attribute type 12 has an invalid length. [ 316.000742][T10101] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1411'. [ 316.323551][T10108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 316.390517][ T5809] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 316.508395][T10108] EXT4-fs (nbd1): unable to read superblock [ 316.547163][ T37] audit: type=1326 audit(1776330677.191:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10111 comm="syz.5.1416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff896dec819 code=0x0 [ 316.550990][ T5809] usb 8-1: Using ep0 maxpacket: 32 [ 316.582492][ T5809] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 316.582525][ T5809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 316.582551][ T5809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 316.582574][ T5809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 316.582599][ T5809] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 316.666399][ T5809] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 316.666429][ T5809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.666449][ T5809] usb 8-1: Product: syz [ 316.666463][ T5809] usb 8-1: Manufacturer: syz [ 316.666478][ T5809] usb 8-1: SerialNumber: syz [ 316.710488][ T5809] usb 8-1: config 0 descriptor?? [ 316.933088][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.934076][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.178299][ T5809] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 317.178362][ T5809] input input23: Device does not respond to id packet M [ 317.179162][ T5809] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 317.179206][ T5809] input input23: Device does not respond to id packet P [ 317.180266][ T5809] iforce 8-1:0.0: usb_submit_urb failed: -32 [ 317.180309][ T5809] input input23: Device does not respond to id packet B [ 317.181165][ T5809] input input23: Limiting number of effects to 32 (device reports 85) [ 317.402781][ T5809] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 317.403302][ T5809] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 317.404752][ T5809] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 317.410478][ T5809] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 317.464987][ T5809] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input23 [ 317.665235][ T5809] usb 8-1: USB disconnect, device number 3 [ 317.780861][ T5908] usb 7-1: USB disconnect, device number 3 [ 317.918060][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1419'. [ 318.075847][T10123] EXT4-fs (nbd5): unable to read superblock [ 318.193596][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.202463][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.282839][ T5965] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 318.443114][ T5965] usb 2-1: device descriptor read/64, error -71 [ 318.721217][ T5965] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 318.726910][T10136] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1425'. [ 318.733365][ T5809] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 318.746454][T10136] EXT4-fs (nbd7): unable to read superblock [ 318.872477][ T5965] usb 2-1: device descriptor read/64, error -71 [ 318.902480][ T5809] usb 7-1: Using ep0 maxpacket: 32 [ 318.905040][ T5809] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 318.905069][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.937431][ T5809] usb 7-1: config 0 descriptor?? [ 318.959836][ T5809] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 318.989165][ T5965] usb usb2-port1: attempt power cycle [ 318.991530][ T37] audit: type=1326 audit(1776330679.483:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.5.1427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff896dec819 code=0x0 [ 319.373173][ T5965] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 319.395280][ T5965] usb 2-1: device descriptor read/8, error -71 [ 319.522473][ T5908] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 319.661820][ T5965] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 319.684485][ T5965] usb 2-1: device descriptor read/8, error -71 [ 319.702377][ T5908] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 319.702406][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.702481][ T5908] usb 8-1: Product: syz [ 319.702496][ T5908] usb 8-1: Manufacturer: syz [ 319.702510][ T5908] usb 8-1: SerialNumber: syz [ 319.757810][ T5908] usb 8-1: config 0 descriptor?? [ 319.815041][ T5965] usb usb2-port1: unable to enumerate USB device [ 321.064836][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 321.213432][ T5809] gspca_vc032x: reg_w err -71 [ 321.213507][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.213519][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.213527][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.213535][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.213544][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.213715][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.213725][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.213734][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.213742][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.213751][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.213759][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.213768][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.214008][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.214018][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.214027][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.214035][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.214044][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.214052][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 321.214061][ T5809] gspca_vc032x: Unknown sensor... [ 321.214375][ T5809] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 321.359739][ T5809] usb 7-1: USB disconnect, device number 4 [ 321.386356][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 321.443005][ T9] usb 6-1: config index 0 descriptor too short (expected 198, got 134) [ 321.443129][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.443141][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.467646][ T9] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 321.468051][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.468073][ T9] usb 6-1: Product: syz [ 321.468088][ T9] usb 6-1: Manufacturer: syz [ 321.468257][ T9] usb 6-1: SerialNumber: syz [ 321.809048][ T5908] usb 8-1: f81604_read: reg: 200f failed: -EPROTO [ 321.828933][ T5908] usb 8-1: USB disconnect, device number 4 [ 321.889530][ T9] usb 6-1: 0:1 : does not exist [ 321.889688][ T9] usb 6-1: unit 0 not found! [ 321.924281][ T5908] usb 8-1: f81604_read: reg: 100f failed: -ENODEV [ 322.005442][T10156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1432'. [ 322.056605][T10156] EXT4-fs (nbd1): unable to read superblock [ 322.083488][ T5908] usb 8-1: f81604_read: reg: 200f failed: -ENODEV [ 322.633149][ T5809] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 322.821822][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 322.832734][ T5809] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 322.832761][ T5809] usb 2-1: config 0 has no interface number 0 [ 322.832804][ T5809] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 322.832830][ T5809] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 322.875665][ T5809] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 322.875695][ T5809] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 322.875716][ T5809] usb 2-1: Product: syz [ 322.875731][ T5809] usb 2-1: Manufacturer: syz [ 322.875749][ T5809] usb 2-1: SerialNumber: syz [ 322.884544][ T9] usb 6-1: USB disconnect, device number 8 [ 322.932865][ T5809] usb 2-1: config 0 descriptor?? [ 322.957213][ T5809] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 322.957603][ T5809] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 322.961710][ T5809] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 323.021158][ T5809] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 323.040298][ T5809] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 323.058487][ T5809] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 323.132269][ T5809] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 323.154666][ T5809] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 323.167658][ T5809] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 323.176952][ T5809] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 323.325778][T10167] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1436'. [ 323.441235][T10167] EXT4-fs (nbd5): unable to read superblock [ 323.504827][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1436'. [ 323.504847][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1436'. [ 323.580475][ T5965] usb 2-1: USB disconnect, device number 74 [ 323.720839][ T37] audit: type=1326 audit(1776330683.899:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10169 comm="syz.7.1437" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe96b70c819 code=0x0 [ 323.840917][ T5809] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 324.012642][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.012676][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.012713][ T5809] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 324.012736][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.203872][ T5809] usb 7-1: config 0 descriptor?? [ 324.228810][T10181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1441'. [ 324.283579][T10182] netlink: 'syz.1.1440': attribute type 10 has an invalid length. [ 324.459686][ T5965] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 325.116641][ T5965] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 325.398654][ T5965] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 325.536957][ T5809] cp2112 0003:10C4:EA90.0014: item fetching failed at offset 5/7 [ 325.538735][ T5809] cp2112 0003:10C4:EA90.0014: parse failed [ 325.538867][ T5809] cp2112 0003:10C4:EA90.0014: probe with driver cp2112 failed with error -22 [ 325.540987][T10184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.541586][T10184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.715394][ T820] usb 7-1: USB disconnect, device number 5 [ 325.846526][ T5965] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 326.078513][ T5965] keyspan 2-1:0.107: device disconnected [ 326.544879][T10128] udevd[10128]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.737291][T10202] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1449'. [ 326.820884][T10202] EXT4-fs (nbd7): unable to read superblock [ 326.851110][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1449'. [ 326.851133][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1449'. [ 326.866244][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 326.870620][ T5965] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 326.954244][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1450'. [ 327.047920][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 327.048763][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 327.074053][ T5965] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 327.074085][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.097783][ T9] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.097815][ T9] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.099844][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 327.099881][ T9] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 327.126476][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.186696][T10208] netlink: 'syz.7.1451': attribute type 11 has an invalid length. [ 327.310176][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1452'. [ 327.466110][ T37] audit: type=1326 audit(1776330687.407:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10211 comm="syz.7.1453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe96b70c819 code=0x0 [ 327.502742][ T5965] usb 2-1: config 0 descriptor?? [ 327.504963][ T9] usb 6-1: config 0 descriptor?? [ 327.550832][ T5965] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 327.785350][ T32] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 327.945592][ T32] usb 7-1: Using ep0 maxpacket: 8 [ 327.951229][ T32] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 327.951285][ T32] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 327.951312][ T32] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 327.951337][ T32] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 327.951362][ T32] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 327.951386][ T32] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 327.951428][ T32] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 327.951451][ T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.092250][T10194] netlink: 'syz.5.1446': attribute type 4 has an invalid length. [ 328.294990][ T32] usb 7-1: usb_control_msg returned -32 [ 328.295030][ T32] usbtmc 7-1:16.0: can't read capabilities [ 328.734622][T10224] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71 [ 328.754389][T10224] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 328.794235][ T49] usb 7-1: USB disconnect, device number 6 [ 328.989586][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 328.990562][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 329.048087][ T9] usb 6-1: USB disconnect, device number 9 [ 329.416323][T10229] netlink: 'syz.5.1457': attribute type 10 has an invalid length. [ 329.866826][ T5965] gspca_vc032x: reg_w err -110 [ 329.866978][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.866989][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.866998][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867006][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867015][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867024][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867031][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867217][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867228][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867363][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867373][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867381][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867389][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867397][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867406][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867415][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867422][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867568][ T5965] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.867579][ T5965] gspca_vc032x: Unknown sensor... [ 329.867780][ T5965] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 330.119020][T10229] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 330.144380][T10236] EXT4-fs (nbd7): unable to read superblock [ 330.218196][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1459'. [ 330.218220][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1459'. [ 330.292410][T10235] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1459'. [ 330.436231][ T32] usb 2-1: USB disconnect, device number 75 [ 330.841852][ T37] audit: type=1326 audit(1776330690.560:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10245 comm="syz.6.1463" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f954491c819 code=0x0 [ 330.929010][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1462'. [ 331.108933][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 331.302058][ T5809] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 331.408936][ T32] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 331.484085][ T5809] usb 8-1: Using ep0 maxpacket: 32 [ 331.504179][ T5809] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 331.504208][ T5809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.543501][ T5809] usb 8-1: config 0 descriptor?? [ 331.562901][ T5809] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 331.601479][ T49] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 331.622621][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 331.627238][ T32] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 331.627264][ T32] usb 2-1: config 0 has no interface number 0 [ 331.627370][ T32] usb 2-1: config 0 interface 184 has no altsetting 0 [ 331.631980][ T32] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 331.632007][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.632081][ T32] usb 2-1: Product: syz [ 331.632096][ T32] usb 2-1: Manufacturer: syz [ 331.632111][ T32] usb 2-1: SerialNumber: syz [ 331.718139][ T32] usb 2-1: config 0 descriptor?? [ 331.792211][ T49] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 331.792245][ T49] usb 6-1: config 0 has no interface number 0 [ 331.835193][ T49] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 331.835222][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.835250][ T49] usb 6-1: Product: syz [ 331.835324][ T49] usb 6-1: Manufacturer: syz [ 331.835337][ T49] usb 6-1: SerialNumber: syz [ 331.892035][ T49] usb 6-1: config 0 descriptor?? [ 332.231176][T10252] binder_alloc: 10251: binder_alloc_buf, no vma [ 332.287219][T10257] binder_alloc: binder_alloc_mmap_handler: 10251 200000ffe000-200001000000 already mapped failed -16 [ 332.592308][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 332.592334][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 333.155955][ T5808] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 333.171837][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 333.171869][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 333.172279][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 333.204156][ T32] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 333.248432][ T32] usb 2-1: USB disconnect, device number 76 [ 333.306825][ T5809] gspca_vc032x: reg_w err -71 [ 333.306841][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.306905][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.306916][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.306924][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.306932][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.306941][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.306949][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.306957][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.306966][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.306975][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.306983][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.306992][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.307000][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.307078][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.307088][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.307096][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.307105][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.307113][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 333.307121][ T5809] gspca_vc032x: Unknown sensor... [ 333.307260][ T5809] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 333.313508][ T5808] usb 7-1: Using ep0 maxpacket: 32 [ 333.316690][ T5808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 333.316779][ T5808] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 333.316805][ T5808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 333.316830][ T5808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 333.352617][ T5808] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 333.352711][ T5808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.352732][ T5808] usb 7-1: Product: syz [ 333.352746][ T5808] usb 7-1: Manufacturer: syz [ 333.352760][ T5808] usb 7-1: SerialNumber: syz [ 333.531384][ T5809] usb 8-1: USB disconnect, device number 5 [ 333.563307][ T5808] usb 7-1: config 0 descriptor?? [ 333.594905][ T5808] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input24 [ 333.891321][ T49] uvcvideo 6-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 333.891480][ T49] uvcvideo 6-1:0.64: No valid video chain found. [ 333.945718][ T49] usb 6-1: USB disconnect, device number 10 [ 333.980150][ T5809] usb 7-1: USB disconnect, device number 7 [ 334.164460][T10267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1469'. [ 334.326432][T10269] EXT4-fs (nbd5): unable to read superblock [ 334.431626][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'. [ 334.431649][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1469'. [ 334.604345][T10276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'. [ 335.858653][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 335.950379][T10308] EXT4-fs (nbd1): unable to read superblock [ 336.058128][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 336.058152][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 336.526787][T10323] netlink: 'syz.6.1490': attribute type 10 has an invalid length. [ 337.111961][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1496'. [ 337.161534][T10339] EXT4-fs (nbd5): unable to read superblock [ 337.293049][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1496'. [ 337.293071][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1496'. [ 337.699772][T10351] 9p: Bad value for 'wfdno' [ 338.027655][ T820] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 338.036571][ T49] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 338.195434][ T820] usb 8-1: config 0 interface 0 has no altsetting 0 [ 338.195843][ T820] usb 8-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 338.195869][ T820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.220993][ T49] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 1024, setting to 64 [ 338.225362][ T49] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 338.225398][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.225417][ T49] usb 6-1: Product: syz [ 338.225432][ T49] usb 6-1: Manufacturer: syz [ 338.225446][ T49] usb 6-1: SerialNumber: syz [ 338.253709][T10351] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 338.346782][ T820] usb 8-1: config 0 descriptor?? [ 338.530428][ T49] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.530489][ T49] usb 6-1: MIDIStreaming interface descriptor not found [ 338.870730][ T820] usbhid 8-1:0.0: can't add hid device: -71 [ 338.870962][ T820] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 338.942338][ T820] usb 8-1: USB disconnect, device number 6 [ 339.458864][ T49] usb 6-1: USB disconnect, device number 11 [ 339.530669][T10373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1509'. [ 339.585926][T10373] EXT4-fs (nbd6): unable to read superblock [ 339.653589][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1509'. [ 339.653615][T10373] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1509'. [ 339.654783][T10381] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1512'. [ 340.377559][ T5809] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 340.517566][T10178] udevd[10178]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.549400][ T5809] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 340.549437][ T5809] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 340.549479][ T5809] usb 7-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 340.549501][ T5809] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.608065][ T5809] usb 7-1: config 0 descriptor?? [ 340.609115][T10387] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 340.919857][ T5809] usbhid 7-1:0.0: can't add hid device: -71 [ 340.919973][ T5809] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 341.053894][ T5809] usb 7-1: USB disconnect, device number 8 [ 341.103652][T10405] overlayfs: conflicting options: userxattr,redirect_dir=on [ 341.449985][ T49] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 341.517646][T10413] __nla_validate_parse: 64 callbacks suppressed [ 341.517667][T10413] netlink: 188 bytes leftover after parsing attributes in process `syz.7.1526'. [ 341.632391][ T49] usb 6-1: config 0 interface 0 has no altsetting 0 [ 341.632431][ T49] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 341.632454][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.671967][ T49] usb 6-1: config 0 descriptor?? [ 341.906445][ T5809] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 342.070068][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 342.125425][ T5809] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 342.125519][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.210680][ T5809] usb 2-1: config 0 descriptor?? [ 342.443466][ T5809] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 342.633082][ T49] usbhid 6-1:0.0: can't add hid device: -71 [ 342.633267][ T49] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 342.643324][ T49] usb 6-1: USB disconnect, device number 12 [ 343.418487][T10429] EXT4-fs (nbd7): unable to read superblock [ 343.464294][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1531'. [ 343.464318][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1531'. [ 343.665011][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1531'. [ 343.841089][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 344.011785][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 344.028975][ T9] usb 6-1: config 0 has an invalid interface number: 48 but max is 12 [ 344.029165][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 344.029188][ T9] usb 6-1: config 0 has no interface number 0 [ 344.029606][ T9] usb 6-1: too many endpoints for config 0 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 344.029808][ T9] usb 6-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 344.029995][ T9] usb 6-1: config 0 interface 48 has no altsetting 0 [ 344.104372][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 344.104978][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.105001][ T9] usb 6-1: Product: syz [ 344.105015][ T9] usb 6-1: Manufacturer: syz [ 344.105604][ T9] usb 6-1: SerialNumber: syz [ 344.147018][ T5809] gspca_vc032x: reg_w err -71 [ 344.147035][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147045][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147053][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147062][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147071][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147079][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147087][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147096][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147104][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147113][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147122][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147130][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147138][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147146][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147155][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147163][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147171][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147179][ T5809] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.147188][ T5809] gspca_vc032x: Unknown sensor... [ 344.147265][ T5809] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 344.345111][ T5809] usb 2-1: USB disconnect, device number 77 [ 344.427216][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1535'. [ 344.457965][ T9] usb 6-1: config 0 descriptor?? [ 344.466502][T10441] EXT4-fs (nbd6): unable to read superblock [ 344.620789][ T5808] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 344.742339][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 344.743331][ T9] gspca_zc3xx: reg_w_i err -71 [ 344.781469][ T5808] usb 8-1: Using ep0 maxpacket: 16 [ 344.783562][ T5808] usb 8-1: config 11 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.783594][ T5808] usb 8-1: config 11 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.783616][ T5808] usb 8-1: config 11 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 344.785331][ T5808] usb 8-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 344.785357][ T5808] usb 8-1: New USB device strings: Mfr=234, Product=0, SerialNumber=0 [ 344.785376][ T5808] usb 8-1: Manufacturer: syz [ 345.379967][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 345.380571][ T9] gspca_zc3xx 6-1:0.48: probe with driver gspca_zc3xx failed with error -71 [ 345.424733][ T9] usb 6-1: USB disconnect, device number 13 [ 345.958443][ T9] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 346.171322][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 346.171526][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.171565][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 346.171756][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.284917][ T9] usb 6-1: config 0 descriptor?? [ 346.529918][T10463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1542'. [ 346.650016][T10464] EXT4-fs (nbd6): unable to read superblock [ 346.748050][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1542'. [ 346.748137][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1542'. [ 346.916164][ T9] isku 0003:1E7D:319C.0015: unbalanced collection at end of report description [ 346.918747][ T9] isku 0003:1E7D:319C.0015: parse failed [ 346.935992][ T9] isku 0003:1E7D:319C.0015: probe with driver isku failed with error -22 [ 347.011385][T10431] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1532'. [ 347.102187][ T49] usb 6-1: USB disconnect, device number 14 [ 347.675207][ T5808] usbhid 8-1:11.0: can't add hid device: -71 [ 347.675328][ T5808] usbhid 8-1:11.0: probe with driver usbhid failed with error -71 [ 347.824770][ T5808] usb 8-1: USB disconnect, device number 7 [ 348.039785][ T37] audit: type=1326 audit(1776330706.651:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10475 comm="syz.5.1547" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff896dec819 code=0x0 [ 348.417220][T10486] sctp: [Deprecated]: syz.7.1551 (pid 10486) Use of int in max_burst socket option. [ 348.417220][T10486] Use struct sctp_assoc_value instead [ 349.459248][T10500] netlink: 506 bytes leftover after parsing attributes in process `syz.1.1557'. [ 349.708826][ T49] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 349.871710][ T49] usb 7-1: Using ep0 maxpacket: 32 [ 349.874192][ T49] usb 7-1: config 9 has an invalid interface number: 221 but max is 1 [ 349.874218][ T49] usb 7-1: config 9 has an invalid interface number: 221 but max is 1 [ 349.874238][ T49] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 349.874266][ T49] usb 7-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 349.874287][ T49] usb 7-1: config 9 has no interface number 0 [ 349.874318][ T49] usb 7-1: config 9 interface 221 has no altsetting 0 [ 349.879003][ T49] usb 7-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 349.879031][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.879050][ T49] usb 7-1: Product: syz [ 349.879064][ T49] usb 7-1: Manufacturer: syz [ 349.879079][ T49] usb 7-1: SerialNumber: syz [ 350.124131][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.132604][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.152275][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.156959][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.173524][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.184181][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.281498][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.287964][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.311507][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.313321][ T37] audit: type=1326 audit(1776330708.784:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.1.1563" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde848ac819 code=0x0 [ 350.316394][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.664234][ T49] usb 7-1: USB disconnect, device number 9 [ 351.949558][ T9607] udevd[9607]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.060489][ T5808] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 352.227874][ T5808] usb 8-1: unable to get BOS descriptor or descriptor too short [ 352.256202][ T5808] usb 8-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 352.283246][ T5808] usb 8-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 352.283276][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.283295][ T5808] usb 8-1: Product: syz [ 352.283308][ T5808] usb 8-1: Manufacturer: syz [ 352.283322][ T5808] usb 8-1: SerialNumber: syz [ 352.600572][T10555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1575'. [ 352.621564][ T5808] ati_remote2 8-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 352.650054][ T5808] usb 8-1: USB disconnect, device number 8 [ 352.658507][T10555] EXT4-fs (nbd1): unable to read superblock [ 352.706001][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 352.706024][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 352.878792][ T37] audit: type=1326 audit(1776330711.188:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10557 comm="syz.6.1576" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f954491c819 code=0x0 [ 353.455049][ T5907] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 353.674201][ T5907] usb 6-1: config 0 interface 0 has no altsetting 0 [ 353.674243][ T5907] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 353.674266][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.725558][ T5907] usb 6-1: config 0 descriptor?? [ 354.400257][ T5907] usbhid 6-1:0.0: can't add hid device: -71 [ 354.400377][ T5907] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 354.446853][ T5907] usb 6-1: USB disconnect, device number 15 [ 354.506787][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1585'. [ 354.580331][T10590] EXT4-fs (nbd1): unable to read superblock [ 354.639645][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 354.639668][T10592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 355.933888][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1595'. [ 356.004136][T10620] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1597'. [ 356.097920][T10618] EXT4-fs (nbd5): unable to read superblock [ 356.151843][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1595'. [ 356.151867][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1595'. [ 356.699628][ T5808] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 356.862411][ T5808] usb 6-1: config 0 interface 0 has no altsetting 0 [ 356.862451][ T5808] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 356.862474][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.869505][ T5808] usb 6-1: config 0 descriptor?? [ 357.103521][T10639] sctp: [Deprecated]: syz.1.1605 (pid 10639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.103521][T10639] Use struct sctp_sack_info instead [ 357.396596][ T5808] hid (null): report_id 52101 is invalid [ 357.416053][ T5907] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 357.442297][ T5808] uclogic 0003:5543:0003.0016: report_id 52101 is invalid [ 357.442323][ T5808] uclogic 0003:5543:0003.0016: item 0 2 1 8 parsing failed [ 357.444532][ T5808] uclogic 0003:5543:0003.0016: parse failed [ 357.444656][ T5808] uclogic 0003:5543:0003.0016: probe with driver uclogic failed with error -22 [ 357.554776][ T5907] usb 2-1: device descriptor read/64, error -71 [ 357.776651][T10628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.777212][T10628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.819468][ T5907] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 357.974217][ T5907] usb 2-1: device descriptor read/64, error -71 [ 358.018572][ T32] usb 6-1: USB disconnect, device number 16 [ 358.087265][T10651] EXT4-fs (nbd6): unable to read superblock [ 358.091501][ T5907] usb usb2-port1: attempt power cycle [ 358.116654][T10650] __nla_validate_parse: 2 callbacks suppressed [ 358.116675][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1609'. [ 358.143136][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1609'. [ 358.143159][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1609'. [ 358.437385][T10655] netlink: 'syz.6.1612': attribute type 10 has an invalid length. [ 358.463375][ T5907] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 358.488271][ T5907] usb 2-1: device descriptor read/8, error -71 [ 358.751979][ T5907] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 358.755580][T10663] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1614'. [ 358.780831][ T5907] usb 2-1: device descriptor read/8, error -71 [ 358.891467][ T5907] usb usb2-port1: unable to enumerate USB device [ 358.944358][ T5809] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 359.117239][ T5809] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 359.117268][ T5809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.117288][ T5809] usb 7-1: Product: syz [ 359.117302][ T5809] usb 7-1: Manufacturer: syz [ 359.117316][ T5809] usb 7-1: SerialNumber: syz [ 359.775271][T10670] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1617'. [ 360.162967][T10673] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1618'. [ 360.227702][T10673] EXT4-fs (nbd7): unable to read superblock [ 360.280731][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1618'. [ 360.280813][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1618'. [ 360.561073][T10679] netlink: 'syz.5.1621': attribute type 10 has an invalid length. [ 360.589147][ T5809] rtl8150 7-1:1.0: couldn't reset the device [ 360.589459][ T5809] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 361.125724][T10679] bond0: (slave wlan1): Releasing backup interface [ 361.781723][ T32] usb 7-1: USB disconnect, device number 10 [ 362.194579][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 362.194981][T10706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 362.600035][ T32] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 362.707156][ T5809] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 362.739114][ T32] usb 7-1: device descriptor read/64, error -71 [ 362.870066][ T5809] usb 6-1: config 0 interface 0 has no altsetting 0 [ 362.870119][ T5809] usb 6-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 362.870142][ T5809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.923138][ T5809] usb 6-1: config 0 descriptor?? [ 363.016913][ T32] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 363.224062][ T32] usb 7-1: device descriptor read/64, error -71 [ 363.339706][ T32] usb usb7-port1: attempt power cycle [ 363.454787][ T5809] usbhid 6-1:0.0: can't add hid device: -71 [ 363.454905][ T5809] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 363.482873][ T5809] usb 6-1: USB disconnect, device number 17 [ 363.487818][ T5878] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 363.697736][ T5878] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 363.697907][ T5878] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 363.697944][ T5878] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 363.698103][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.711758][ T32] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 363.733982][ T32] usb 7-1: device descriptor read/8, error -71 [ 363.828562][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.887735][T10717] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 363.944967][ T5878] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 363.990699][ T32] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 364.012250][ T32] usb 7-1: device descriptor read/8, error -71 [ 364.129611][ T32] usb usb7-port1: unable to enumerate USB device [ 364.721492][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.788585][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.851435][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.852904][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.874239][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.885734][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 365.837345][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.216448][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.328638][ T5878] usb 2-1: USB disconnect, device number 82 [ 367.095060][ T5829] Bluetooth: hci5: command tx timeout [ 367.386497][T10721] chnl_net:caif_netlink_parms(): no params data found [ 367.692760][ T12] bridge_slave_1: left allmulticast mode [ 367.692788][ T12] bridge_slave_1: left promiscuous mode [ 367.693014][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.797927][ T12] bridge_slave_0: left allmulticast mode [ 367.797958][ T12] bridge_slave_0: left promiscuous mode [ 367.798216][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.896797][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.984681][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.012261][ T12] bond0 (unregistering): Released all slaves [ 369.069727][T10721] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.069836][T10721] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.070074][T10721] bridge_slave_0: entered allmulticast mode [ 369.072865][T10721] bridge_slave_0: entered promiscuous mode [ 369.150379][T10721] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.150508][T10721] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.150740][T10721] bridge_slave_1: entered allmulticast mode [ 369.176435][T10721] bridge_slave_1: entered promiscuous mode [ 369.284487][T10721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.287722][T10721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.313020][ T5829] Bluetooth: hci5: command tx timeout [ 369.375587][T10721] team0: Port device team_slave_0 added [ 369.386831][T10721] team0: Port device team_slave_1 added [ 369.443610][T10721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.443627][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.443651][T10721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.445785][T10721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.445799][T10721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.445824][T10721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.015623][T10721] hsr_slave_0: entered promiscuous mode [ 370.017028][T10721] hsr_slave_1: entered promiscuous mode [ 370.053716][T10721] debugfs: 'hsr0' already exists in 'hsr' [ 370.053747][T10721] Cannot create hsr debugfs directory [ 371.157409][ T5484] 8021q: adding VLAN 0 to HW filter on device eth9 [ 371.482858][ T12] hsr_slave_0: left promiscuous mode [ 371.506555][ T12] hsr_slave_1: left promiscuous mode [ 371.507728][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.507753][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.546586][ T5829] Bluetooth: hci5: command tx timeout [ 371.564359][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.564386][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.639282][ T12] veth1_macvtap: left promiscuous mode [ 371.639394][ T12] veth0_macvtap: left promiscuous mode [ 371.639630][ T12] veth1_vlan: left promiscuous mode [ 371.639790][ T12] veth0_vlan: left promiscuous mode [ 372.694482][ T12] team0 (unregistering): Port device team_slave_1 removed [ 372.767795][ T12] team0 (unregistering): Port device team_slave_0 removed [ 373.793526][ T5829] Bluetooth: hci5: command tx timeout [ 374.458740][T10721] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 374.626366][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.627319][T10721] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 374.736934][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.738530][T10721] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 375.025612][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 375.077241][ T5484] 8021q: adding VLAN 0 to HW filter on device eth10 [ 375.094925][T10721] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 375.128308][ T5829] Bluetooth: hci3: command 0x0405 tx timeout [ 375.155802][T10721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.716245][T10721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.871452][T10721] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.916031][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.916234][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.041593][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.041762][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.489026][T10721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.128600][ T5484] 8021q: adding VLAN 0 to HW filter on device eth11 [ 377.129879][T10721] veth0_vlan: entered promiscuous mode [ 377.169797][T10721] veth1_vlan: entered promiscuous mode [ 377.266934][T10721] veth0_macvtap: entered promiscuous mode [ 377.274065][T10721] veth1_macvtap: entered promiscuous mode [ 377.314678][T10721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.326246][T10721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.346310][ T163] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.350420][ T163] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.350468][ T163] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.350503][ T163] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.231113][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.231135][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.997067][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.997102][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.631282][ T5484] 8021q: adding VLAN 0 to HW filter on device eth12 [ 380.333567][ T5907] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 380.495494][ T5907] usb 9-1: Using ep0 maxpacket: 32 [ 380.498816][ T5907] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 380.498843][ T5907] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.536670][ T5907] usb 9-1: config 0 descriptor?? [ 380.570274][ T5907] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 382.425991][ T5907] gspca_vc032x: reg_w err -71 [ 382.426009][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426020][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426029][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426037][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426046][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426054][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426063][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426071][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426080][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426088][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426097][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426106][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426113][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426122][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426130][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426139][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426147][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426156][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 382.426164][ T5907] gspca_vc032x: Unknown sensor... [ 382.426246][ T5907] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 382.599861][ T5907] usb 9-1: USB disconnect, device number 2 [ 383.868426][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.874884][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.632185][ T5138] Bluetooth: hci4: command 0x0406 tx timeout [ 407.805093][ T38] INFO: task syz-executor:5823 blocked for more than 143 seconds. [ 407.805120][ T38] Not tainted syzkaller #0 [ 407.805130][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 407.805139][ T38] task:syz-executor state:D stack:22176 pid:5823 tgid:5823 ppid:1 task_flags:0x400140 flags:0x00080002 [ 407.805194][ T38] Call Trace: [ 407.805201][ T38] [ 407.805214][ T38] __schedule+0x169e/0x54f0 [ 407.805265][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 407.805293][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 407.805321][ T38] ? rt_spin_lock+0x1e0/0x400 [ 407.805343][ T38] ? __pfx___schedule+0x10/0x10 [ 407.805376][ T38] ? schedule+0x90/0x360 [ 407.805403][ T38] schedule+0x164/0x360 [ 407.805429][ T38] fuse_chan_wait_aborted+0x15b/0x250 [ 407.805462][ T38] ? __pfx_fuse_chan_wait_aborted+0x10/0x10 [ 407.805492][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 407.805577][ T38] ? __pfx_fuse_chan_abort+0x10/0x10 [ 407.805611][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 407.805640][ T38] fuse_conn_destroy+0x1e7/0x3e0 [ 407.805666][ T38] ? __pfx_fuse_conn_destroy+0x10/0x10 [ 407.805688][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 407.805713][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 407.805740][ T38] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 407.805772][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 407.805805][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 407.805830][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 407.805855][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 407.805883][ T38] fuse_kill_sb_anon+0x1ef/0x270 [ 407.805912][ T38] deactivate_locked_super+0xbc/0x130 [ 407.805949][ T38] cleanup_mnt+0x437/0x4d0 [ 407.805975][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 407.806004][ T38] task_work_run+0x1d9/0x270 [ 407.806034][ T38] ? __pfx_task_work_run+0x10/0x10 [ 407.806068][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.806090][ T38] exit_to_user_mode_loop+0xed/0x480 [ 407.806115][ T38] ? rcu_is_watching+0x15/0xb0 [ 407.806143][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.806165][ T38] do_syscall_64+0x33e/0xf80 [ 407.806188][ T38] ? trace_irq_disable+0x3b/0x140 [ 407.806210][ T38] ? clear_bhb_loop+0x40/0x90 [ 407.806234][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.806263][ T38] RIP: 0033:0x7f8917f2da57 [ 407.806282][ T38] RSP: 002b:00007ffea8304d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 407.806303][ T38] RAX: 0000000000000000 RBX: 00007f8917fc2048 RCX: 00007f8917f2da57 [ 407.806318][ T38] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea8304df0 [ 407.806332][ T38] RBP: 00007ffea8304df0 R08: 00007ffea8305df0 R09: 00000000ffffffff [ 407.806344][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea8305e80 [ 407.806355][ T38] R13: 00007f8917fc2048 R14: 000000000003a11c R15: 00007ffea8305ec0 [ 407.806384][ T38] [ 407.806455][ T38] [ 407.806455][ T38] Showing all locks held in the system: [ 407.806465][ T38] 4 locks held by ktimers/0/16: [ 407.806478][ T38] #0: ffffffff8e25f260 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 407.806532][ T38] #1: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 407.806575][ T38] #2: ffff8880b86285b8 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0x8b0 [ 407.806622][ T38] #3: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 407.806669][ T38] 1 lock held by khungtaskd/38: [ 407.806680][ T38] #0: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 407.806758][ T38] 2 locks held by getty/5575: [ 407.806769][ T38] #0: ffff8880336a40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 407.806819][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 407.806880][ T38] 1 lock held by syz-executor/5823: [ 407.806892][ T38] #0: ffff88803e7c20d0 (&type->s_umount_key#61){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 407.806960][ T38] 3 locks held by syz.4.1281/9542: [ 407.806973][ T38] #0: ffff88803e517928 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 407.807020][ T38] #1: ffff888033e9e480 (sb_writers#3){.+.+}-{0:0}, at: vfs_writev+0x2b0/0x9a0 [ 407.807068][ T38] #2: ffff88803e7c20d0 (&type->s_umount_key#61){++++}-{4:4}, at: super_lock+0x2d6/0x3d0 [ 407.807126][ T38] [ 407.807131][ T38] ============================================= [ 407.807131][ T38] [ 407.807146][ T38] NMI backtrace for cpu 1 [ 407.807167][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 407.807187][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 407.807199][ T38] Call Trace: [ 407.807207][ T38] [ 407.807216][ T38] dump_stack_lvl+0xe8/0x150 [ 407.807239][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 407.807258][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 407.807281][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 407.807304][ T38] sys_info+0x135/0x170 [ 407.807331][ T38] watchdog+0xfd3/0x1030 [ 407.807359][ T38] ? watchdog+0x1c9/0x1030 [ 407.807385][ T38] kthread+0x388/0x470 [ 407.807409][ T38] ? __pfx_watchdog+0x10/0x10 [ 407.807427][ T38] ? __pfx_kthread+0x10/0x10 [ 407.807452][ T38] ret_from_fork+0x514/0xb70 [ 407.807475][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 407.807495][ T38] ? __switch_to+0xc79/0x1410 [ 407.807525][ T38] ? __pfx_kthread+0x10/0x10 [ 407.807549][ T38] ret_from_fork_asm+0x1a/0x30 [ 407.807587][ T38] [ 407.807594][ T38] Sending NMI from CPU 1 to CPUs 0: [ 407.807623][ C0] NMI backtrace for cpu 0 [ 407.807637][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 407.807654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 407.807666][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 407.807688][ C0] Code: 9b 83 02 e9 c3 c6 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 bb 28 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 407.807702][ C0] RSP: 0018:ffffffff8e007dc0 EFLAGS: 00000242 [ 407.807716][ C0] RAX: 00000000004068e9 RBX: ffffffff8199ca4a RCX: 0000000080000001 [ 407.807728][ C0] RDX: 0000000000000001 RSI: ffffffff8d995925 RDI: ffffffff8bca4e60 [ 407.807739][ C0] RBP: ffffffff8e007eb0 R08: ffff8880b8633e9b R09: 1ffff110170c67d3 [ 407.807751][ C0] R10: dffffc0000000000 R11: ffffed10170c67d4 R12: 0000000000000000 [ 407.807762][ C0] R13: 1ffffffff1c1fdd8 R14: 0000000000000000 R15: 1ffffffff1c1fdd8 [ 407.807773][ C0] FS: 0000000000000000(0000) GS:ffff888125a68000(0000) knlGS:0000000000000000 [ 407.807787][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.807797][ C0] CR2: 00007ffdbe58ebb4 CR3: 000000000e1b6000 CR4: 00000000003526f0 [ 407.807812][ C0] Call Trace: [ 407.807818][ C0] [ 407.807824][ C0] default_idle+0x9/0x20 [ 407.807846][ C0] default_idle_call+0x72/0xb0 [ 407.807867][ C0] do_idle+0x36a/0x5f0 [ 407.807892][ C0] ? __pfx_do_idle+0x10/0x10 [ 407.807915][ C0] ? do_idle+0x5c5/0x5f0 [ 407.807937][ C0] cpu_startup_entry+0x43/0x60 [ 407.807957][ C0] rest_init+0x2de/0x300 [ 407.807971][ C0] start_kernel+0x38a/0x3e0 [ 407.807995][ C0] x86_64_start_reservations+0x24/0x30 [ 407.808011][ C0] x86_64_start_kernel+0x143/0x1c0 [ 407.808028][ C0] common_startup_64+0x13e/0x147 [ 407.808055][ C0] [ 407.808635][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 407.808650][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 407.808671][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 407.808681][ T38] Call Trace: [ 407.808689][ T38] [ 407.808697][ T38] vpanic+0x56c/0xa60 [ 407.808724][ T38] ? __pfx_vpanic+0x10/0x10 [ 407.808754][ T38] panic+0xc5/0xd0 [ 407.808775][ T38] ? __pfx_panic+0x10/0x10 [ 407.808805][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 407.808830][ T38] watchdog+0x102c/0x1030 [ 407.808859][ T38] ? watchdog+0x1c9/0x1030 [ 407.808884][ T38] kthread+0x388/0x470 [ 407.808908][ T38] ? __pfx_watchdog+0x10/0x10 [ 407.808933][ T38] ? __pfx_kthread+0x10/0x10 [ 407.808957][ T38] ret_from_fork+0x514/0xb70 [ 407.808981][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 407.809002][ T38] ? __switch_to+0xc79/0x1410 [ 407.809032][ T38] ? __pfx_kthread+0x10/0x10 [ 407.809057][ T38] ret_from_fork_asm+0x1a/0x30 [ 407.809092][ T38] [ 407.809651][ T38] Kernel Offset: disabled