last executing test programs: 12m4.211381067s ago: executing program 32 (id=211): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000000)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10m54.168767625s ago: executing program 6 (id=458): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000"/18], 0x68}}, 0x0) 10m53.290469658s ago: executing program 6 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x6, &(0x7f0000000000)={0x0, 0x2b, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000340)={0x0, 0x0, 0x508}) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000000)=ANY=[], 0x2e) r5 = syz_io_uring_setup(0xa6, &(0x7f0000000480)={0x0, 0x0, 0x1, 0x0, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd, 0x3, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddr={0x18, 0x16, 0x1}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x0) 10m50.454948359s ago: executing program 6 (id=468): r0 = socket$inet_icmp(0x2, 0x2, 0x1) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x32, 0x80800) openat$binfmt_register(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x501883, 0x0) sendfile(r1, r1, 0x0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mmap(&(0x7f00008bb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x1, {"0e000000000000000000000004000001"}, 0x0, 0x0, 0xfffffffffffffffd}}}, 0x118) 10m49.378793857s ago: executing program 6 (id=473): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) 10m48.613311142s ago: executing program 4 (id=476): syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x2f}}}, 0x4) 10m48.157149322s ago: executing program 4 (id=478): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)='?', 0x1}], 0x1}}], 0x1, 0x0) 10m48.016761462s ago: executing program 4 (id=479): ioprio_get$pid(0x1, 0x0) open(0x0, 0x145142, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000080)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x4}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000880)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 10m47.277651491s ago: executing program 6 (id=481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2085, 0x0) write(r2, &(0x7f0000000000)="38000300010003", 0x7) 10m46.289764741s ago: executing program 4 (id=483): socket$inet6(0xa, 0x806, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141301) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) 10m46.136212544s ago: executing program 4 (id=484): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x535, 0x200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000180)=""/135) 10m42.053706766s ago: executing program 0 (id=490): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x4431, &(0x7f00000088c0)="$eJzs3b9PHFceAPA3Az6Dz/ZhnwufdNKtdJbudHdC4OoSLAVjbAw2ceTELtKsF1jbJAtrwRKlcEE6S6kipYhSWImUjspCSu38CWlSOrWlpEgTKZIVop2dxcywGzaEhdj6fIod5v2G78zbN8Xw4lTt7vxyYX65UFosVGdvL58tvFetrCyUQ7xPWvZ/aP/6pzPduE5+rc0v92zktHLtwqU3b54N4au5b55ubGxshLre0NLwlp9//OH+7NZjU5yrU2+3dWt75e0Qwqlt46rrCSH0hRCiEML5NG0sPfaHEI6leTfvf3irsEejefSkfK74bPrB+siZqbWH6+1/9yiETyt/+9+dhe/+2TPy7X/2qHsAAAAAAAAAAAAAAAAAAF5wE9ev3XhjaDg8jkLvWrT9fd2J9Nju/diNPfOP7v+yAAAAAAAAAAAAAAAAAAAA8Af1/P3/QnSyxfv/4+lxtE39jde6P0a6Z/L1a+MXh4bT/d+jbfn/T5O+P98TTrTY9z2///v5XP3W+79v72e3muNr9jsQongwcx7Hg4MhfJ5u/H46OhJXqsu1/96urizO7dkwXljZ+Dd2789EJ93Qv8P4x2O59ru///9ft11N9fNbe3eJvdSy8e9pW+6LD6KO7v8LuXr7EX92Lxv/3iStf2uB0cYEUI//R707x38813634n88hFCI6mMtZGaA+hqmnt5uvUJWNv6HkrTM1Jn+Idvd/z/l4n8x1/5Bzf+r+S8iWsrG/09JWl+mxOHkM4l/vPP9fynX/kHEvz7+Vd//HcnGvxHr0JspkvwlO53/J3Ltt43/4d837htxOs7jUeYKWIsa6e3+Xx1Z2fj3bct//vwXd7T+u5yrv1/Pf81+m89/zen/31Hj+Y/WsvHvb1uu0/t/Mlev2/P/aLL+Y7ey8T+SpGXXzgPJZ6fxn8q13634J08lfc34P59Pfj7cSP/M+q8j2fj/uZEYby2xmnwm679o5/X/lVz7B7H+q49/Ne5ury+LbPyPti1Xj//XHXz/X83V6378Qxiy1t+1bPyPtS2X3P99O8d/Olev2/H/VzcbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgBjKXHgRDFg5nzOB4cDOFCen46HIlmSnPFmUp19t3lEMbT9EI4Gd2pVGdKleL8YnWuXCxVKtXZEC6m+adCX7RcqdaKC6V7lzbb6o/ulktLtZlyqRZCmEjT/x6ONduama8tlO6FEC5v5v0lri7du1taLM7NL706NDQ0FCY3x3AiKr9fKy/WGr03ckOY2qw7EG0ZXJJ9ZXMsR6N3qitLi6VKkn51S51KdbZU2VJnOs37OJyIaksri7OlWrlYqd5p9neQRtPj+OT1t65fHd6WfytqHMf2d1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/EaPR175JITQ2ziLQwijzR+iVuUfPSmfKz6bfrA+cmZq7eH603blAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgF3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8eoCQRRGIDfTIokXY6Rakm6tBsCISmyQfAEegwPo0fxEt7BwsLWQgTZRV13YRutvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY71E1/n97j0jxtH+MWE5X6/P8t67zz+77D3eYkdv5+au+Tn+YrvKP+mhT5mO6284m0VEbi9aetPfpss9z71x9+9Y3X9P3JVIuIqKs89eUc1EMewsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgwA4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA////gRtE") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r0, 0x81fd) 10m41.541332109s ago: executing program 6 (id=492): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 10m41.449414427s ago: executing program 4 (id=494): socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='mnt\x00', 0x1240bc, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}, 0x0, 0x255, &(0x7f00000007c0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) 10m39.361268096s ago: executing program 0 (id=502): setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x325000, 0x800}, 0x1c) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 10m34.229442786s ago: executing program 0 (id=509): r0 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0x8101, 0x0, 0x0, 0x24f}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) 10m33.757283596s ago: executing program 0 (id=512): socket$inet6(0xa, 0x806, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141301) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x0, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) 10m32.629708572s ago: executing program 0 (id=514): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 10m28.56529939s ago: executing program 0 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x28, 0xfffff034}, {0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 10m26.489912323s ago: executing program 33 (id=492): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 10m25.9845539s ago: executing program 34 (id=494): socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000280)='mnt\x00', 0x1240bc, &(0x7f0000000080)={[{@grpjquota_path={'grpjquota', 0x3d, './file0'}}]}, 0x0, 0x255, &(0x7f00000007c0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006100), 0x49f, 0x0, 0x0) 10m12.506800211s ago: executing program 35 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x28, 0xfffff034}, {0x6, 0x0, 0x0, 0xfff}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 7m37.230632957s ago: executing program 5 (id=1043): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x2000, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x5, 0x0, 0x15}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x2004}]}}}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000000)={0x5, 0xb7, 0xa}) 7m35.452309497s ago: executing program 5 (id=1050): epoll_create1(0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) r1 = syz_io_uring_setup(0x2ddb, &(0x7f00000006c0)={0x0, 0x1, 0x10100, 0x1}, &(0x7f00000002c0), &(0x7f0000000180)=0x0) syz_io_uring_setup(0x5df, &(0x7f0000000200)={0x0, 0x1, 0x40, 0x0, 0x0, 0x0, r1}, &(0x7f0000000040)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r1, 0x381b, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f0000000280)=0x2001) r5 = fcntl$dupfd(r4, 0x0, r4) readv(r5, &(0x7f00000003c0), 0x0) 7m35.09297454s ago: executing program 5 (id=1053): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x8000) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x94, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x9, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x8, 0x0, 0x0, 0x1, 0x3, 0x200}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xffb, 0x2, 0x0, 0x0, 0x10, 0x4}}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x9, 0x10000, 0x0, 0x8}}]}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 7m34.637122463s ago: executing program 5 (id=1057): socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1fe4, &(0x7f0000000080)={0x0, 0x400ae03, 0x10100, 0x2000}, 0x0, &(0x7f00000002c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7m34.327178121s ago: executing program 5 (id=1061): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000340), 0x327b, 0x220002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fstat(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 7m32.988373014s ago: executing program 5 (id=1066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 7m17.047529317s ago: executing program 36 (id=1066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="b700000012ed07febfa30000000000007603000028feffff7a03f0fff8ffffff79a4f0ff0000000024040000000000007f000000000000002704000001ed0a0025000000170000005d040000000000007b0300fe000000002d03000000000000c6000000000000009500000000000000023bd14560d8e9bac065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7054803d0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050e46850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5ff4d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535fd9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae9f5a6ad28599dc36fc5fb481d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c9c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600000000000000000000000000681474c0703174a92e9124dc8fc6da9f3cb3c2d12bc27fa87413a680bd09996bbd59b033c07c015617bc5142956fa065a9750774d635a19cdaf78b0fee37efcce6f4297156d5e6b2c9a06fbd3dccc8704b90647191d919a5b1f399889b8b3547dec24f3b846948424af9c63eaf074d2a954390735141befa99240a40defc1d937db2fd3a926eb10fb450baa9ad89c80365f9a24700752953e3c42779379591b5667597ad8a52a9a96dcec6706dba17749e6c59808b66fadd437e9fb16eedf7862d86d11c33ab3b49b7c6dcbde1e52d2a3b43443c3c36fdcf999ede1da0eb9450a27c2307de2b3af451"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000180)=r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 1m12.908726651s ago: executing program 8 (id=3391): syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 1m11.926913946s ago: executing program 8 (id=3404): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) poll(&(0x7f00000001c0)=[{r0, 0x8000}], 0x1, 0xffffffa5) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) lstat(0x0, 0x0) 1m10.785289829s ago: executing program 8 (id=3417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)={0x38, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x4, 0x8, 0x3, 0x3, 0x5, 0xfffc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000040) 1m10.410250252s ago: executing program 3 (id=3422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e00000000", @ANYRES32=r3], 0x3c}}, 0x0) 1m10.302060505s ago: executing program 8 (id=3424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) io_uring_enter(r3, 0x5b43, 0x8200, 0x0, 0x0, 0x0) 1m10.006003437s ago: executing program 3 (id=3428): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) pread64(r1, &(0x7f00000013c0)=""/67, 0x43, 0x3) 1m9.239081404s ago: executing program 3 (id=3429): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) poll(&(0x7f00000001c0)=[{r0, 0x8000}], 0x1, 0xffffffa5) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) lstat(0x0, 0x0) 1m9.053011867s ago: executing program 8 (id=3430): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x35, 0x8e, 0x8, 0x46d, 0x900, 0x669e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0x22, 0xf}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m8.176990266s ago: executing program 3 (id=3433): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r0, @ANYBLOB], 0x60}}, 0x10) 1m7.576193901s ago: executing program 1 (id=3436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x4, 0x8, 0x3, 0x3, 0x5, 0xfffc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000040) 1m7.485530815s ago: executing program 3 (id=3437): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x2, 0x0, 0x0, 0x42, 0x5c}) 1m6.920705201s ago: executing program 1 (id=3441): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) memfd_create(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x48b, 0x1000, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x7, 0x4, 0xfffffffd}, @multicast1, @empty, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1m6.70247983s ago: executing program 3 (id=3442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) io_uring_enter(r3, 0x5b43, 0x8200, 0x0, 0x0, 0x0) 1m6.668986511s ago: executing program 8 (id=3443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$loop(0x0, 0x5, 0x103b83) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e24, 0x3ff, @private1, 0x8}, 0x1c) 1m0.885403169s ago: executing program 1 (id=3464): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000240)=0x1) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x400445a0, &(0x7f0000000040)=""/255) 1m0.491232849s ago: executing program 9 (id=3467): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 59.619823812s ago: executing program 7 (id=3470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e0000000004000280", @ANYRES32=r3], 0x3c}}, 0x0) 59.578105186s ago: executing program 1 (id=3471): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/12, 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r1) 59.577869586s ago: executing program 9 (id=3472): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) 59.109894341s ago: executing program 1 (id=3474): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a4610000000109021200010000000009"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 58.940833169s ago: executing program 7 (id=3476): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) memfd_create(0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x48b, 0x1000, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x7, 0x4, 0xfffffffd}, @multicast1, @empty, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 58.54013814s ago: executing program 2 (id=3477): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback, 0x6}, 0x47) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 58.097648971s ago: executing program 2 (id=3478): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0xb46, &(0x7f0000000400)={0x0, 0x930c, 0x10100, 0x80001, 0xfffffffc, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) futex(&(0x7f0000000340)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffe) 56.701419019s ago: executing program 9 (id=3479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x4, 0x8, 0x3, 0x3, 0x5, 0xfffc]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x4000040) 56.488948381s ago: executing program 2 (id=3480): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0x94d, 0x4, 0x0, 0x2fa, 0xfffff800, 0xfffffff6, 0x8, 0x7}, &(0x7f0000000480)=0x20) 56.284407498s ago: executing program 9 (id=3481): read$FUSE(0xffffffffffffffff, &(0x7f00000027c0)={0x2020}, 0x2020) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) 56.150227104s ago: executing program 2 (id=3482): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001800e10200000000000000000a800000ff030006"], 0x30}}, 0x10010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 56.058854566s ago: executing program 7 (id=3483): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000a80)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000007000000002400000000"], 0x40}, 0x6048090) 55.916677791s ago: executing program 9 (id=3484): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x1, 0x10, 0x9, 0x4, 0x1b, "91a0284457c5f5c1e9872fb2d7a7455411733f"}) close_range(r0, 0xffffffffffffffff, 0x0) 55.738777016s ago: executing program 1 (id=3485): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 55.699938325s ago: executing program 7 (id=3486): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000000)={@local, @multicast2}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = socket(0x15, 0x5, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x4000400) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0xa, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x6}, {0x5, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000019580)={@link_local, @local, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x5, 0x1, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}, 0x0) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 55.496445239s ago: executing program 2 (id=3487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/14, 0xe) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r1) 55.479572385s ago: executing program 9 (id=3488): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 55.219603019s ago: executing program 7 (id=3489): syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100003040300"/20, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 55.196557538s ago: executing program 2 (id=3490): syz_usb_connect(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ceda240d804"], 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "a926b0dc", {0x1, 0x0, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 54.788822885s ago: executing program 7 (id=3491): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) 6.794607351s ago: executing program 37 (id=3488): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 4.235038398s ago: executing program 38 (id=3485): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 779.729334ms ago: executing program 39 (id=3490): syz_usb_connect(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ceda240d804"], 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000240)=@ready={0x0, 0x0, 0x8, "a926b0dc", {0x1, 0x0, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 615.647967ms ago: executing program 40 (id=3491): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, 0x0) 501.069455ms ago: executing program 41 (id=3443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$loop(0x0, 0x5, 0x103b83) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e24, 0x3ff, @private1, 0x8}, 0x1c) 0s ago: executing program 42 (id=3442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f00000005c0)={0x0, 0x20000020, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000000)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c707fe81436b024c2574980397bc49d70c060d57bc88fbe3bbaa058b040362ab926150763fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f91b18725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) io_uring_enter(r3, 0x5b43, 0x8200, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): xd30 [ 642.670794][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.676467][ T5845] ? srso_alias_return_thunk+0x5/0xfbef5 [ 642.682140][ T5845] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 642.688082][ T5845] ? __kthread_parkme+0x169/0x1d0 [ 642.693171][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 642.698338][ T5845] kthread+0x2f2/0x390 [ 642.702450][ T5845] ? __pfx_worker_thread+0x10/0x10 [ 642.707596][ T5845] ? __pfx_kthread+0x10/0x10 [ 642.712337][ T5845] ret_from_fork+0x4d/0x80 [ 642.716875][ T5845] ? __pfx_kthread+0x10/0x10 [ 642.721506][ T5845] ret_from_fork_asm+0x1a/0x30 [ 642.726323][ T5845] [ 642.729476][ C1] vkms_vblank_simulate: vblank timer overrun [ 642.946929][ T5845] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 643.055456][ T5845] Bluetooth: hci6: failed to register connection device [ 643.080863][ T5887] usb 4-1: USB disconnect, device number 10 [ 644.456313][ T5845] Bluetooth: hci6: command 0x0406 tx timeout [ 645.086539][T13182] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1970'. [ 645.243585][ T5884] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 646.192893][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 646.201746][ T5884] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 646.211096][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.219461][ T5884] usb 4-1: Product: syz [ 646.232869][ T5884] usb 4-1: Manufacturer: syz [ 646.237495][ T5884] usb 4-1: SerialNumber: syz [ 646.250755][ T5884] usb 4-1: config 0 descriptor?? [ 646.807790][ T5884] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 647.448332][ T5884] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 647.742894][ T57] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 647.895531][ T57] usb 9-1: Using ep0 maxpacket: 32 [ 647.921654][ T57] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 647.937462][ T57] usb 9-1: config 0 has no interface number 0 [ 647.956872][ T29] audit: type=1326 audit(1735077800.473:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13244 comm="syz.1.1989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x0 [ 647.957343][ T57] usb 9-1: config 0 interface 12 has no altsetting 0 [ 648.019533][ T57] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 648.032974][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.881148][ T57] usb 9-1: Product: syz [ 648.885449][ T57] usb 9-1: Manufacturer: syz [ 648.890095][ T57] usb 9-1: SerialNumber: syz [ 648.944336][ T57] usb 9-1: config 0 descriptor?? [ 649.093761][T13259] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1992'. [ 649.126783][ T5889] usb 4-1: USB disconnect, device number 11 [ 649.577985][ T57] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 649.585773][ T9408] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 649.593720][ T57] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 649.651684][ T57] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 650.455092][ T57] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 650.483899][ T57] usb 9-1: USB disconnect, device number 5 [ 650.570048][ T9408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 650.586859][ T9408] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.609231][ T9408] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 650.628626][ T9408] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.661670][ T9408] usb 2-1: config 0 descriptor?? [ 651.109526][ T9408] chicony 0003:04F2:1421.000B: unknown main item tag 0x0 [ 651.149739][ T9408] chicony 0003:04F2:1421.000B: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.1-1/input0 [ 651.297256][ T9] usb 2-1: USB disconnect, device number 31 [ 651.758428][ T29] audit: type=1326 audit(1735077804.253:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.3.2006" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x0 [ 651.798698][T13316] sctp: [Deprecated]: syz.3.2006 (pid 13316) Use of int in max_burst socket option deprecated. [ 651.798698][T13316] Use struct sctp_assoc_value instead [ 652.955665][T13329] netlink: 'syz.2.2008': attribute type 3 has an invalid length. [ 653.472929][ T9] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 653.802936][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 653.811462][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 653.820944][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.829164][ T9] usb 10-1: Product: syz [ 653.841699][ T9] usb 10-1: Manufacturer: syz [ 654.587870][ T9] usb 10-1: SerialNumber: syz [ 654.595408][ T9] usb 10-1: config 0 descriptor?? [ 654.708283][T13374] 9pnet_fd: Insufficient options for proto=fd [ 654.848620][ T9] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 656.474773][ T9] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 656.648313][ T5948] usb 10-1: USB disconnect, device number 9 [ 656.659017][ T5846] Bluetooth: hci2: command 0x0405 tx timeout [ 657.003923][T13428] fuse: Bad value for 'fd' [ 657.675017][T13451] fuse: Bad value for 'fd' [ 658.622881][ T9408] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 659.363273][ T9408] usb 10-1: Using ep0 maxpacket: 8 [ 659.480427][ T9408] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 659.511748][ T9408] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.572473][ T9408] usb 10-1: Product: syz [ 659.603347][ T9408] usb 10-1: Manufacturer: syz [ 659.608075][ T9408] usb 10-1: SerialNumber: syz [ 659.666832][ T9408] usb 10-1: config 0 descriptor?? [ 659.896478][ T9408] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 660.078512][T13485] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2073'. [ 660.088578][T13492] fuse: Bad value for 'fd' [ 661.945785][T13525] fuse: Unknown parameter '0x0000000000000004' [ 662.155382][ T9408] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 662.293518][ T9408] usb 10-1: USB disconnect, device number 10 [ 663.576886][ T29] audit: type=1326 audit(1735077816.093:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13558 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7ffc0000 [ 663.627050][ T29] audit: type=1326 audit(1735077816.143:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13558 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7ffc0000 [ 663.714962][ T29] audit: type=1326 audit(1735077816.173:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13558 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f97a7585d29 code=0x7ffc0000 [ 663.808171][ T29] audit: type=1326 audit(1735077816.173:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13558 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7ffc0000 [ 663.838470][T13564] vlan2: entered promiscuous mode [ 663.862878][ T29] audit: type=1326 audit(1735077816.173:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13558 comm="syz.3.2105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7ffc0000 [ 666.619587][T13609] fuse: Unknown parameter 'grou00000000000000000000' [ 668.489029][T13655] fuse: Unknown parameter 'grou00000000000000000000' [ 669.693868][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f08b400: rx timeout, send abort [ 670.071237][T13681] 9pnet_fd: Insufficient options for proto=fd [ 670.204294][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807f08b400: abort rx timeout. Force session deactivation [ 671.042522][T13706] trusted_key: syz.8.2160 sent an empty control message without MSG_MORE. [ 672.243921][ T5887] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 672.424672][ T5887] usb 8-1: config 0 has too many interfaces: 125, using maximum allowed: 32 [ 672.434130][ T5887] usb 8-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 672.452920][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.476706][ T5887] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 125 [ 672.492885][ T5887] usb 8-1: config 0 has no interface number 0 [ 672.499446][ T5887] usb 8-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30 [ 672.521859][ T5887] usb 8-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 672.535580][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 672.546613][ T5887] usb 8-1: config 0 interface 88 has no altsetting 0 [ 672.556298][ T5887] usb 8-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40 [ 672.566126][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.578821][ T5887] usb 8-1: Product: syz [ 672.590470][ T5887] usb 8-1: Manufacturer: syz [ 672.600795][ T5887] usb 8-1: SerialNumber: syz [ 672.615571][ T5887] usb 8-1: config 0 descriptor?? [ 672.695123][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.726756][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.766256][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 672.792344][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.807740][ T9] usb 4-1: config 0 descriptor?? [ 672.901037][ T5887] usb 8-1: USB disconnect, device number 8 [ 673.236300][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 673.272184][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 674.100214][ T9] usb 4-1: USB disconnect, device number 12 [ 674.823431][ T9408] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 674.984764][ T9408] usb 9-1: Using ep0 maxpacket: 16 [ 675.017009][ T9408] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.051972][ T9408] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 675.076625][ T9408] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.095084][ T9408] usb 9-1: Product: syz [ 675.103825][ T9408] usb 9-1: Manufacturer: syz [ 675.114082][ T9408] usb 9-1: SerialNumber: syz [ 675.136498][ T9408] usb 9-1: config 0 descriptor?? [ 677.833979][ T9] usb 9-1: USB disconnect, device number 6 [ 682.019350][T13899] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2233'. [ 682.292735][T13905] netlink: 'syz.3.2237': attribute type 1 has an invalid length. [ 682.331036][T13905] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 682.342737][T13905] bond3: (slave vcan1): Error -95 calling set_mac_address [ 685.127879][T13948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2251'. [ 685.313327][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.919180][T13980] fuse: Unknown parameter 'user_i00000000000000000000' [ 687.560630][T14024] netlink: 'syz.9.2285': attribute type 1 has an invalid length. [ 687.635434][T14024] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 687.646860][T14024] bond2: (slave vcan1): Error -95 calling set_mac_address [ 687.993329][ T5884] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 688.150421][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.171388][ T5884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.197222][ T5884] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 688.228404][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.249228][ T5884] usb 8-1: config 0 descriptor?? [ 688.300776][T14051] 9pnet_fd: Insufficient options for proto=fd [ 688.323211][ T9408] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 688.523352][ T9408] usb 2-1: Using ep0 maxpacket: 8 [ 688.807779][ T9408] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 688.817208][ T9408] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.825525][ T9408] usb 2-1: Product: syz [ 688.829839][ T9408] usb 2-1: Manufacturer: syz [ 688.834644][ T9408] usb 2-1: SerialNumber: syz [ 688.996343][ T9408] usb 2-1: config 0 descriptor?? [ 689.268533][T14062] fuse: Bad value for 'user_id' [ 689.295610][T14062] fuse: Bad value for 'user_id' [ 689.345672][ T9408] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 689.402962][ T5884] hid (null): bogus close delimiter [ 689.937911][T14083] 9pnet_fd: Insufficient options for proto=fd [ 689.990106][T14076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2308'. [ 690.444097][ T5884] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 690.453040][ T5884] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 690.461139][ T5884] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 690.469436][ T5884] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 690.477078][ T5884] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 690.577563][ T5884] usb 8-1: USB disconnect, device number 9 [ 691.245947][ T9408] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 691.357932][ T9408] usb 2-1: USB disconnect, device number 32 [ 691.639326][T14101] fuse: Bad value for 'user_id' [ 691.946118][T14101] fuse: Bad value for 'user_id' [ 692.381747][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2322'. [ 694.182930][ T5887] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 694.345562][ T5887] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.383882][ T5887] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 694.422157][ T5887] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 694.476169][ T5887] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 694.489213][T14149] fuse: Bad value for 'fd' [ 694.510343][ T5887] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 694.531968][ T5887] usb 8-1: Manufacturer: syz [ 694.544642][ T5887] usb 8-1: config 0 descriptor?? [ 694.580481][T14151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 694.915971][T14151] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2337'. [ 694.963244][T14151] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 695.238804][ T5887] usb 8-1: USB disconnect, device number 10 [ 696.123099][ T5887] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 696.284912][ T5887] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 696.298913][ T5887] usb 10-1: config 0 has no interface number 0 [ 696.320527][ T5887] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 696.585220][ T5887] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 696.612943][ T5887] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 696.634321][ T5887] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 696.660192][ T5887] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 696.699613][ T5887] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 696.703130][ T57] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 696.740126][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.769393][T14183] fuse: Bad value for 'fd' [ 696.793074][ T5887] usb 10-1: config 0 descriptor?? [ 696.808927][T14161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 696.846463][ T5887] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 696.888106][ T57] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.919028][ T57] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 696.946956][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.973986][ T57] usb 9-1: config 0 descriptor?? [ 697.001742][ T57] pwc: Askey VC010 type 2 USB webcam detected. [ 697.107171][T14161] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 697.113958][T14161] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 697.212380][T14161] vhci_hcd vhci_hcd.0: Device attached [ 697.328271][T14188] vhci_hcd: connection closed [ 697.338613][ T8772] vhci_hcd: stop threads [ 697.367724][ T5887] usb 10-1: USB disconnect, device number 11 [ 697.433278][ T9] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 697.441689][ T5887] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 697.458302][ T8772] vhci_hcd: release socket [ 697.505338][ T8772] vhci_hcd: disconnect device [ 697.998495][ T57] pwc: recv_control_msg error -32 req 02 val 2b00 [ 698.247867][ T57] pwc: recv_control_msg error -32 req 02 val 2700 [ 698.296602][ T57] pwc: recv_control_msg error -32 req 02 val 2c00 [ 698.326622][ T57] pwc: recv_control_msg error -32 req 04 val 1000 [ 698.385497][ T57] pwc: recv_control_msg error -32 req 04 val 1300 [ 698.433264][ T57] pwc: recv_control_msg error -32 req 04 val 1400 [ 698.472591][ T57] pwc: recv_control_msg error -32 req 02 val 2000 [ 698.494864][ T57] pwc: recv_control_msg error -32 req 02 val 2100 [ 698.515317][ T57] pwc: recv_control_msg error -32 req 04 val 1500 [ 698.540239][ T57] pwc: recv_control_msg error -32 req 02 val 2500 [ 698.570521][ T57] pwc: recv_control_msg error -32 req 02 val 2400 [ 698.605351][ T57] pwc: recv_control_msg error -32 req 02 val 2600 [ 698.640295][ T57] pwc: recv_control_msg error -32 req 02 val 2900 [ 698.674583][ T57] pwc: recv_control_msg error -32 req 02 val 2800 [ 698.899090][ T57] pwc: recv_control_msg error -71 req 04 val 1200 [ 698.908545][ T57] pwc: Registered as video103. [ 698.915158][ T57] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input21 [ 698.930718][ T57] usb 9-1: USB disconnect, device number 7 [ 698.942935][ T5887] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 699.193088][ T5887] usb 10-1: config 0 has too many interfaces: 125, using maximum allowed: 32 [ 699.203370][ T5887] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 699.212198][ T5887] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.222606][ T5887] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 125 [ 699.231857][ T5887] usb 10-1: config 0 has no interface number 0 [ 699.241952][ T5887] usb 10-1: too many endpoints for config 0 interface 88 altsetting 253: 68, using maximum allowed: 30 [ 699.263111][ T5887] usb 10-1: config 0 interface 88 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 699.276879][ T5887] usb 10-1: config 0 interface 88 has no altsetting 0 [ 699.331916][ T5845] Bluetooth: hci6: command 0x0406 tx timeout [ 699.338858][ T5887] usb 10-1: New USB device found, idVendor=1d7b, idProduct=0101, bcdDevice= 0.40 [ 699.349496][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.363122][ T5887] usb 10-1: Product: syz [ 699.367424][ T5887] usb 10-1: Manufacturer: syz [ 699.372332][ T5887] usb 10-1: SerialNumber: syz [ 699.388618][ T5887] usb 10-1: config 0 descriptor?? [ 699.714533][ T5887] usb 10-1: USB disconnect, device number 12 [ 700.456029][T14244] fuse: Bad value for 'fd' [ 700.548514][T14247] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2377'. [ 701.664522][T14282] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2392'. [ 702.114467][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2393'. [ 702.932947][ T9] vhci_hcd: vhci_device speed not set [ 703.194333][T14311] syz_tun: entered promiscuous mode [ 703.241747][T14311] syz_tun: left promiscuous mode [ 703.672995][ T5889] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 703.837309][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.902840][ T5889] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 703.934860][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.964484][ T5889] usb 2-1: config 0 descriptor?? [ 703.979027][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 704.384837][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 704.413729][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 704.423604][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 704.461127][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 704.491558][ T5889] pwc: recv_control_msg error -32 req 04 val 1300 [ 704.511838][ T5889] pwc: recv_control_msg error -71 req 04 val 1400 [ 704.549706][ T5889] pwc: recv_control_msg error -71 req 02 val 2000 [ 704.593466][ T5889] pwc: recv_control_msg error -71 req 02 val 2100 [ 704.607738][ T5889] pwc: recv_control_msg error -71 req 04 val 1500 [ 704.615193][ T5889] pwc: recv_control_msg error -71 req 02 val 2500 [ 704.622310][ T5889] pwc: recv_control_msg error -71 req 02 val 2400 [ 704.654704][ T5889] pwc: recv_control_msg error -71 req 02 val 2600 [ 704.691555][ T5889] pwc: recv_control_msg error -71 req 02 val 2900 [ 704.708421][ T5889] pwc: recv_control_msg error -71 req 02 val 2800 [ 704.735644][ T5889] pwc: recv_control_msg error -71 req 04 val 1100 [ 704.752886][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 704.804058][T14345] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2416'. [ 704.846821][ T5889] pwc: Registered as video103. [ 704.874292][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 704.980088][ T5889] usb 2-1: USB disconnect, device number 33 [ 706.350739][T14374] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2429'. [ 706.422958][ T9408] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 706.528953][T14381] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2433'. [ 706.584726][ T9408] usb 9-1: Using ep0 maxpacket: 16 [ 706.603947][ T9408] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.632888][ T9408] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 706.653388][ T5889] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 706.667120][ T9408] usb 9-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 706.679114][ T9408] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 706.694041][ T9408] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 706.703668][ T9408] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 706.724247][ T9408] usb 9-1: Manufacturer: syz [ 706.732487][ T9408] usb 9-1: config 0 descriptor?? [ 706.795911][T14386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2435'. [ 706.814826][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.825256][ T5889] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 706.843362][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.875149][ T5889] usb 4-1: config 0 descriptor?? [ 706.926028][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 707.133473][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2436'. [ 707.329702][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 707.338182][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 707.382637][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 707.391490][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 707.398913][ T5889] pwc: recv_control_msg error -32 req 04 val 1300 [ 707.421440][ T5889] pwc: recv_control_msg error -32 req 04 val 1400 [ 707.431167][ T5889] pwc: recv_control_msg error -32 req 02 val 2000 [ 707.441279][ T5889] pwc: recv_control_msg error -32 req 02 val 2100 [ 707.453893][ T5889] pwc: recv_control_msg error -32 req 04 val 1500 [ 707.464164][ T5889] pwc: recv_control_msg error -32 req 02 val 2500 [ 707.474574][ T5889] pwc: recv_control_msg error -32 req 02 val 2400 [ 707.489938][ T5889] pwc: recv_control_msg error -32 req 02 val 2600 [ 707.499776][ T5889] pwc: recv_control_msg error -32 req 02 val 2900 [ 707.514447][ T5889] pwc: recv_control_msg error -32 req 02 val 2800 [ 707.742412][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 707.756311][ T5889] pwc: Registered as video103. [ 707.771121][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 707.796117][ T5889] usb 4-1: USB disconnect, device number 13 [ 707.803271][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 707.877037][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2447'. [ 707.975477][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.991358][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.002610][ T9] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 708.037660][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.063961][ T9] usb 10-1: config 0 descriptor?? [ 708.499098][ T9] isku 0003:1E7D:319C.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.9-1/input0 [ 708.912581][ T9] usb 10-1: USB disconnect, device number 13 [ 709.689002][ T9408] usb 9-1: USB disconnect, device number 8 [ 710.681605][T14482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2476'. [ 710.694057][T14482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 710.701956][T14482] IPv6: NLM_F_CREATE should be set when creating new route [ 710.709304][T14482] IPv6: NLM_F_CREATE should be set when creating new route [ 711.275172][T14491] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2482'. [ 711.337678][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2481'. [ 711.422641][T14499] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2484'. [ 711.903197][ T57] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 712.054935][ T57] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 712.066249][ T57] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.094128][ T57] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 712.151994][ T57] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.179201][ T57] usb 10-1: config 0 descriptor?? [ 712.614248][ T57] hid (null): bogus close delimiter [ 712.827716][ T57] usb 10-1: language id specifier not provided by device, defaulting to English [ 713.307474][ T57] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 713.316477][ T57] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 713.324811][ T57] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 713.333024][ T57] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 713.340579][ T57] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 713.429880][ T57] usb 10-1: USB disconnect, device number 14 [ 717.344056][T14648] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2546'. [ 717.425802][T14649] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.441682][T14701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2563'. [ 720.303672][T14720] fuse: Unknown parameter 'user_i00000000000000000000' [ 721.707532][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2586'. [ 722.878104][T14800] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2603'. [ 723.964011][T14836] hsr_slave_0: left promiscuous mode [ 723.973200][ T5889] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 723.990845][T14836] hsr_slave_1: left promiscuous mode [ 724.097035][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.132873][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.134630][ T5889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.161071][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.197857][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.202503][ T5889] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.229083][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.248282][ T5889] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 724.253149][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.290139][ T5889] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.302936][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.310454][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.318307][ T5889] usb 10-1: config 0 descriptor?? [ 724.353259][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.360785][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.382868][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.408287][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.432920][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.452841][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.460305][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.483762][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.513760][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.521453][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.573056][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.580512][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.632967][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.640421][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.678295][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.696214][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.726028][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.751965][ T5889] hid (null): bogus close delimiter [ 724.752948][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.785393][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.822352][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.840115][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.852869][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.870779][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.884508][ T5887] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 724.915557][ T5887] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 724.952530][ T5889] usb 10-1: language id specifier not provided by device, defaulting to English [ 725.364546][ T5889] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71 [ 725.385884][ T5889] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 725.412816][ T5889] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71 [ 725.451598][ T5889] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 725.482055][ T5889] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 725.550292][ T57] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 725.579530][ T5889] usb 10-1: USB disconnect, device number 15 [ 725.957811][ T57] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 725.966972][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.975276][ T57] usb 9-1: Product: syz [ 725.980156][ T57] usb 9-1: Manufacturer: syz [ 725.984942][ T57] usb 9-1: SerialNumber: syz [ 726.728833][ T57] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 726.900675][ T9408] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 727.068527][T14891] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2636'. [ 727.591942][ T8] usb 9-1: USB disconnect, device number 9 [ 728.088774][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.096622][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.117562][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.147566][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.180625][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.202498][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.224617][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.246678][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.254410][ T9408] usb 9-1: Service connection timeout for: 256 [ 728.260648][ T9408] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 728.281116][ T9408] ath9k_htc: Failed to initialize the device [ 728.295872][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.325591][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.337672][ T8] usb 9-1: ath9k_htc: USB layer deinitialized [ 728.348230][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.375189][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.404158][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.435773][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.466280][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.500194][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.531441][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.565977][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.604538][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.633848][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.676369][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.714588][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.750266][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.778711][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.808681][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.841024][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.855988][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.893744][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.907891][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.939771][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 728.972830][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 729.010906][ T5948] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 729.032890][ T9408] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 729.061668][ T5948] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 729.194413][ T9408] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.243151][ T9408] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.291255][ T9408] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 729.334599][ T9408] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.389645][ T9408] usb 9-1: config 0 descriptor?? [ 729.914192][ T9408] hid (null): bogus close delimiter [ 730.139886][ T9408] usb 9-1: language id specifier not provided by device, defaulting to English [ 730.480181][ T9408] uclogic 0003:256C:006D.0012: failed retrieving string descriptor #200: -71 [ 730.548187][ T9408] uclogic 0003:256C:006D.0012: failed retrieving pen parameters: -71 [ 730.587786][ T9408] uclogic 0003:256C:006D.0012: failed probing pen v2 parameters: -71 [ 730.623532][ T9408] uclogic 0003:256C:006D.0012: failed probing parameters: -71 [ 730.636767][T14936] binder: 14935:14936 ioctl 4018620d 0 returned -22 [ 730.649093][ T9408] uclogic 0003:256C:006D.0012: probe with driver uclogic failed with error -71 [ 730.684066][ T9408] usb 9-1: USB disconnect, device number 10 [ 732.235805][T14969] binder: 14968:14969 ioctl 4018620d 0 returned -22 [ 733.415265][T15007] binder: 15005:15007 ioctl 4018620d 0 returned -22 [ 733.527493][T15012] hsr0: entered promiscuous mode [ 733.591980][T15011] hsr0: left promiscuous mode [ 733.613932][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 734.312945][ T5948] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 734.462875][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 734.474436][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 734.485014][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.504323][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 734.521663][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.560826][ T5948] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 734.580509][ T5948] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 734.591130][ T5948] usb 2-1: Manufacturer: syz [ 734.617394][ T5948] usb 2-1: config 0 descriptor?? [ 734.730970][T15049] binder: 15048:15049 ioctl c0306201 0 returned -14 [ 734.862869][ T5884] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 735.024844][ T5884] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 735.036184][ T5884] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 735.074932][ T5884] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.089028][T15061] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2708'. [ 735.093709][ T5884] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.116369][ T5884] usb 9-1: Product: syz [ 735.120559][ T5884] usb 9-1: Manufacturer: syz [ 735.135776][ T5884] usb 9-1: SerialNumber: syz [ 735.222927][ T8] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 735.290382][T15070] cgroup: fork rejected by pids controller in /syz9 [ 735.356000][T15046] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 735.373323][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 735.381431][ T8] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 735.422971][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 735.449703][ T8] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 735.460748][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.480955][ T8] usb 8-1: Product: syz [ 735.489765][ T8] usb 8-1: Manufacturer: syz [ 735.502933][ T8] usb 8-1: SerialNumber: syz [ 735.521987][ T8] usb 8-1: config 0 descriptor?? [ 735.532111][ T8] em28xx 8-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 735.677305][T15083] binder: 15082:15083 ioctl c0306201 0 returned -14 [ 735.742306][ T8061] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 735.780237][ T5884] cdc_ncm 9-1:1.0: failed GET_NTB_PARAMETERS [ 735.796846][ T5884] cdc_ncm 9-1:1.0: bind() failure [ 735.808287][ T5884] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 735.816053][ T5884] cdc_ncm 9-1:1.1: bind() failure [ 736.430335][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 736.439975][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 736.448701][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 736.457230][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 736.465684][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 736.474100][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 737.215653][ T5948] usb 2-1: USB disconnect, device number 34 [ 737.852047][ T5913] bridge_slave_1: left allmulticast mode [ 737.872852][ T5913] bridge_slave_1: left promiscuous mode [ 737.911342][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.009549][ T5887] usb 9-1: USB disconnect, device number 11 [ 738.048762][ T5913] bridge_slave_0: left allmulticast mode [ 738.058574][ T5913] bridge_slave_0: left promiscuous mode [ 738.090925][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.130041][ T9408] usb 8-1: USB disconnect, device number 11 [ 738.549568][T15134] binder: 15132:15134 ioctl c0306201 0 returned -14 [ 738.574892][ T5846] Bluetooth: hci4: command tx timeout [ 740.219198][T15164] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2738'. [ 740.253000][ T9408] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 740.419936][ T9408] usb 9-1: Using ep0 maxpacket: 32 [ 740.444943][ T9408] usb 9-1: unable to get BOS descriptor or descriptor too short [ 740.458735][ T9408] usb 9-1: no configurations [ 740.473608][ T9408] usb 9-1: can't read configurations, error -22 [ 740.516292][T15169] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2741'. [ 740.653181][ T5846] Bluetooth: hci4: command tx timeout [ 741.238923][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.284329][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.358571][ T5913] bond0 (unregistering): Released all slaves [ 741.372030][ T5913] bond1 (unregistering): Released all slaves [ 741.385171][ T5913] bond2 (unregistering): Released all slaves [ 741.624199][T15098] chnl_net:caif_netlink_parms(): no params data found [ 742.099201][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2748'. [ 742.343082][T15098] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.407874][T15098] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.459104][T15098] bridge_slave_0: entered allmulticast mode [ 742.521311][T15098] bridge_slave_0: entered promiscuous mode [ 742.587389][T15098] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.648733][T15098] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.689628][T15098] bridge_slave_1: entered allmulticast mode [ 742.735357][T15098] bridge_slave_1: entered promiscuous mode [ 742.777960][ T5846] Bluetooth: hci4: command tx timeout [ 743.053474][ T5913] hsr_slave_0: left promiscuous mode [ 743.134546][ T5913] hsr_slave_1: left promiscuous mode [ 743.221733][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.298972][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.817650][T15252] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.2769'. [ 743.847829][T15252] openvswitch: netlink: Missing key (keys=40, expected=100) [ 744.679844][ T5913] team0 (unregistering): Port device team_slave_0 removed [ 744.821426][ T5846] Bluetooth: hci4: command tx timeout [ 745.822653][ T29] audit: type=1326 audit(1735077898.343:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15281 comm="syz.1.2777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x0 [ 746.305715][ T57] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 746.445276][T15098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.462459][T15098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.572530][T15098] team0: Port device team_slave_0 added [ 746.598659][T15098] team0: Port device team_slave_1 added [ 746.624171][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 746.644825][ T57] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 746.663556][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.671677][ T57] usb 8-1: Product: syz [ 746.677810][ T57] usb 8-1: Manufacturer: syz [ 746.685857][ T57] usb 8-1: SerialNumber: syz [ 746.701087][T15098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.722201][ T57] usb 8-1: config 0 descriptor?? [ 746.727670][T15098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.757028][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.794193][T15098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.818358][T15098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.833565][T15098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.880038][T15098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.980950][ T57] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 747.122159][T15098] hsr_slave_0: entered promiscuous mode [ 747.165285][T15098] hsr_slave_1: entered promiscuous mode [ 748.236787][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2795'. [ 748.673750][ T5884] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 748.841055][T15353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2801'. [ 748.855869][T15353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 748.863231][T15353] IPv6: NLM_F_CREATE should be set when creating new route [ 748.870525][T15353] IPv6: NLM_F_CREATE should be set when creating new route [ 748.880955][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 748.888309][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 748.895484][ T57] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 748.917469][ T5884] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 748.931856][ T57] usb 8-1: USB disconnect, device number 12 [ 748.942425][ T5884] usb 4-1: config 0 has no interface number 0 [ 748.986382][ T5884] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.068938][ T5884] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 749.100336][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.134992][ T5884] usb 4-1: Product: syz [ 749.139196][ T5884] usb 4-1: Manufacturer: syz [ 749.144034][ T5884] usb 4-1: SerialNumber: syz [ 749.179947][ T5884] usb 4-1: config 0 descriptor?? [ 749.196240][ T5884] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 749.356017][T15098] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 749.412717][T15098] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 749.421655][ T5887] usb 4-1: USB disconnect, device number 14 [ 749.427666][ T8] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 749.445002][ T5887] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 749.478844][T15098] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 749.543285][T15098] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 749.605483][ T8] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.616942][ T8] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 749.653467][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.698041][ T8] usb 9-1: config 0 descriptor?? [ 749.728897][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 749.859882][T15098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 749.939123][T15098] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.978637][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.985911][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.040230][ T8770] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.047456][ T8770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.134482][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 750.141879][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 750.153958][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 750.211312][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 750.224183][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 750.252557][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 750.300444][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 750.334882][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 750.345063][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 750.383944][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 750.423789][ T8] pwc: recv_control_msg error -32 req 02 val 2400 [ 750.436660][ T8] pwc: recv_control_msg error -32 req 02 val 2600 [ 750.467363][ T8] pwc: recv_control_msg error -32 req 02 val 2900 [ 750.574969][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2811'. [ 750.714100][ T8] pwc: recv_control_msg error -32 req 04 val 1100 [ 750.743206][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 750.770460][ T8] pwc: Registered as video103. [ 750.804074][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input24 [ 751.106360][T15098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.113077][ T8] usb 9-1: USB disconnect, device number 14 [ 751.440932][T15408] ipt_ECN: cannot use operation on non-tcp rule [ 751.832943][ T9408] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 752.053382][ T9408] usb 8-1: config 0 has no interfaces? [ 752.099029][ T9408] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 752.278374][T15098] veth0_vlan: entered promiscuous mode [ 752.540800][ T9408] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.698113][T15098] veth1_vlan: entered promiscuous mode [ 752.704754][ T9408] usb 8-1: Product: syz [ 752.708948][ T9408] usb 8-1: Manufacturer: syz [ 753.053049][ T9408] usb 8-1: SerialNumber: syz [ 753.107297][ T9408] usb 8-1: config 0 descriptor?? [ 753.151084][T15098] veth0_macvtap: entered promiscuous mode [ 753.259289][T15098] veth1_macvtap: entered promiscuous mode [ 753.308885][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.330370][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.384838][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.435226][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.472880][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.501889][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.536894][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.597433][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.640846][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.678772][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.706259][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.731157][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.756817][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 753.794657][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806cd2a000: rx timeout, send abort [ 753.799581][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.802988][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806cd2a400: rx timeout, send abort [ 753.821288][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806cd2a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 753.837716][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806cd2a400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 753.927257][T15098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.976976][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.108587][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.129508][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.149337][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.179667][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.192950][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.192994][ T9408] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 754.202845][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.202871][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.202904][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.202923][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.202939][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.202958][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.202986][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 754.283570][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.298011][T15098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.373893][T15098] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.384463][T15098] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.393298][T15098] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.402097][T15098] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.583008][ T9408] usb 4-1: Using ep0 maxpacket: 32 [ 754.613125][ T8770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.613547][ T5913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.630384][ T5913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.676030][ T9408] usb 4-1: unable to get BOS descriptor or descriptor too short [ 754.704550][ T9408] usb 4-1: no configurations [ 754.713076][ T8770] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.728946][ T9408] usb 4-1: can't read configurations, error -22 [ 754.767854][ T8] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 754.945884][ T8] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 754.954571][ T8] usb 9-1: config 0 has no interface number 0 [ 754.974838][ T8] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 755.011618][ T8] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 755.035279][ T8] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 755.049959][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.073883][ T8] usb 9-1: config 0 descriptor?? [ 755.088982][T15449] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 755.108811][ T8] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 755.365194][ T8] usb 9-1: USB disconnect, device number 15 [ 755.371415][ C0] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 755.943153][ T9408] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 756.040806][ T29] audit: type=1326 audit(1735077908.553:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15491 comm="syz.1.2830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x0 [ 756.090324][ T9408] usb 4-1: device descriptor read/64, error -71 [ 756.203274][ T9408] usb usb4-port1: attempt power cycle [ 756.472997][ T57] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 756.552918][ T9408] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 756.623085][ T9408] usb 4-1: device descriptor read/8, error -71 [ 756.673258][ T57] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.683957][ T57] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 756.724740][ T57] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.779591][ T57] usb 10-1: config 0 descriptor?? [ 756.802327][ T57] pwc: Askey VC010 type 2 USB webcam detected. [ 756.862977][ T9408] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 756.883683][ T9408] usb 4-1: device descriptor read/8, error -71 [ 756.993381][ T9408] usb usb4-port1: unable to enumerate USB device [ 757.047073][ T5888] usb 8-1: USB disconnect, device number 13 [ 757.164580][T15518] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2837'. [ 757.216662][ T57] pwc: recv_control_msg error -32 req 02 val 2b00 [ 757.224515][ T57] pwc: recv_control_msg error -32 req 02 val 2700 [ 757.251770][ T57] pwc: recv_control_msg error -32 req 02 val 2c00 [ 757.279406][ T57] pwc: recv_control_msg error -32 req 04 val 1000 [ 757.495213][ T57] pwc: recv_control_msg error -71 req 04 val 1400 [ 757.522906][ T57] pwc: recv_control_msg error -71 req 02 val 2000 [ 757.537666][ T57] pwc: recv_control_msg error -71 req 02 val 2100 [ 757.563805][ T57] pwc: recv_control_msg error -71 req 04 val 1500 [ 757.579833][ T57] pwc: recv_control_msg error -71 req 02 val 2500 [ 757.597203][ T57] pwc: recv_control_msg error -71 req 02 val 2400 [ 757.623228][ T57] pwc: recv_control_msg error -71 req 02 val 2600 [ 757.640443][ T57] pwc: recv_control_msg error -71 req 02 val 2900 [ 757.667916][ T57] pwc: recv_control_msg error -71 req 02 val 2800 [ 757.689753][ T57] pwc: recv_control_msg error -71 req 04 val 1100 [ 757.712881][ T57] pwc: recv_control_msg error -71 req 04 val 1200 [ 757.744904][ T57] pwc: Registered as video103. [ 757.764032][ T57] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input25 [ 757.793826][ T57] usb 10-1: USB disconnect, device number 16 [ 759.286160][T15558] xt_time: unknown flags 0x4 [ 759.322746][T15558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.449150][T15558] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 759.819232][ T5888] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 760.082893][ T5888] usb 10-1: Using ep0 maxpacket: 16 [ 760.097126][ T5888] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 760.119242][ T5888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 760.159361][ T5888] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 760.179819][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.202827][ T5888] usb 10-1: Product: syz [ 760.208831][ T5888] usb 10-1: Manufacturer: syz [ 760.217374][ T5888] usb 10-1: SerialNumber: syz [ 760.257446][ T5888] usb 10-1: config 0 descriptor?? [ 760.276215][ T5888] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 760.302939][ T5888] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 760.609297][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 760.763079][ T5889] usb 4-1: device descriptor read/64, error -71 [ 760.874269][T15602] delete_channel: no stack [ 760.890149][ T5888] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 760.902223][ T5888] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 760.917033][ T5888] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 760.924349][ T5888] em28xx 10-1:0.0: No AC97 audio processor [ 760.972981][ T5829] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 761.022898][ T5889] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 761.133538][ T5829] usb 8-1: Using ep0 maxpacket: 32 [ 761.145812][ T5829] usb 8-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 761.155158][ T5829] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.168565][ T5829] usb 8-1: Product: syz [ 761.173158][ T5889] usb 4-1: device descriptor read/64, error -71 [ 761.182876][ T5829] usb 8-1: Manufacturer: syz [ 761.192693][ T5829] usb 8-1: SerialNumber: syz [ 761.218119][ T5829] usb 8-1: config 0 descriptor?? [ 761.231162][ T5829] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 761.283291][ T5889] usb usb4-port1: attempt power cycle [ 761.633107][ T5887] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 761.653689][ T5889] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 761.686020][ T5889] usb 4-1: device descriptor read/8, error -71 [ 761.774531][T15618] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.2876'. [ 761.782980][ T5887] usb 9-1: Using ep0 maxpacket: 16 [ 761.794003][ T5887] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 761.803829][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.806911][T15618] openvswitch: netlink: Missing key (keys=40, expected=100) [ 761.811874][ T5887] usb 9-1: Product: syz [ 761.811899][ T5887] usb 9-1: Manufacturer: syz [ 761.853295][ T5887] usb 9-1: SerialNumber: syz [ 761.865027][ T5887] r8152-cfgselector 9-1: Unknown version 0x0000 [ 761.873755][ T5887] r8152-cfgselector 9-1: config 0 descriptor?? [ 761.923279][ T5889] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 761.954460][ T5889] usb 4-1: device descriptor read/8, error -71 [ 762.006188][ T5884] usb 10-1: USB disconnect, device number 17 [ 762.013879][ T5884] em28xx 10-1:0.0: Disconnecting em28xx [ 762.043938][ T5884] em28xx 10-1:0.0: Freeing device [ 762.063498][ T5889] usb usb4-port1: unable to enumerate USB device [ 762.123677][ T5887] r8152-cfgselector 9-1: Needed 1 retries to read version [ 762.130913][ T5887] r8152-cfgselector 9-1: Unknown version 0x0000 [ 762.149318][ T5887] r8152-cfgselector 9-1: bad CDC descriptors [ 762.330769][ T5887] r8152-cfgselector 9-1: USB disconnect, device number 16 [ 762.876887][ T5829] gspca_ov534_9: reg_w failed -71 [ 763.114987][ T5829] gspca_ov534_9: Unknown sensor 0000 [ 763.115073][ T5829] ov534_9 8-1:0.0: probe with driver ov534_9 failed with error -22 [ 763.171796][ T5829] usb 8-1: USB disconnect, device number 14 [ 763.900091][T15655] hsr_slave_0: left promiscuous mode [ 764.058267][ T29] audit: type=1326 audit(1735077916.573:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15662 comm="syz.3.2895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x0 [ 764.123041][ T5887] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 764.277284][ T5887] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.306542][ T5887] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.336990][ T5887] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 764.372742][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.413183][ T5887] usb 10-1: config 0 descriptor?? [ 765.038944][ T5887] usb 10-1: language id specifier not provided by device, defaulting to English [ 765.441172][ T5887] uclogic 0003:256C:006D.0013: failed retrieving string descriptor #200: -71 [ 765.490090][ T5887] uclogic 0003:256C:006D.0013: failed retrieving pen parameters: -71 [ 765.502673][ T5887] uclogic 0003:256C:006D.0013: failed probing pen v2 parameters: -71 [ 766.237367][ T5887] uclogic 0003:256C:006D.0013: failed probing parameters: -71 [ 766.245129][ T5887] uclogic 0003:256C:006D.0013: probe with driver uclogic failed with error -71 [ 766.270861][ T5887] usb 10-1: USB disconnect, device number 18 [ 767.073029][ T5948] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 767.265765][ T5948] usb 4-1: Using ep0 maxpacket: 8 [ 767.423325][ T5948] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 767.449712][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.493380][ T5948] usb 4-1: Product: syz [ 767.528575][ T5948] usb 4-1: Manufacturer: syz [ 767.556825][ T5948] usb 4-1: SerialNumber: syz [ 767.624906][ T5948] usb 4-1: config 0 descriptor?? [ 767.890343][ T5948] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 768.715248][ T5948] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 768.741150][ T5948] usb 4-1: USB disconnect, device number 23 [ 769.771558][T15776] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.2943'. [ 769.813383][T15776] openvswitch: netlink: Missing key (keys=40, expected=100) [ 770.483035][ T5948] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 770.645072][ T5948] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 770.657359][ T5948] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.670490][ T5948] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 770.679765][ T5948] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.713511][ T5948] usb 9-1: config 0 descriptor?? [ 770.725052][ T5948] hub 9-1:0.0: USB hub found [ 770.768543][T15805] random: crng reseeded on system resumption [ 770.931049][ T5948] hub 9-1:0.0: config failed, can't read hub descriptor (err -22) [ 770.957837][ T5948] usbhid 9-1:0.0: can't add hid device: -71 [ 770.972894][ T5948] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 771.013606][ T5948] usb 9-1: USB disconnect, device number 17 [ 772.709373][T15855] random: crng reseeded on system resumption [ 772.833345][T15860] delete_channel: no stack [ 772.921375][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2978'. [ 772.993189][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2978'. [ 773.134031][T15873] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2983'. [ 773.752802][T15900] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2999'. [ 774.072895][ T5887] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 774.262585][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 774.273963][ T5887] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 774.286614][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.294930][ T5887] usb 2-1: Product: syz [ 774.299120][ T5887] usb 2-1: Manufacturer: syz [ 774.304264][ T5887] usb 2-1: SerialNumber: syz [ 774.317494][ T5887] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 774.623280][ T5948] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 774.800129][ T5948] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 774.822002][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.850508][ T5948] usb 4-1: Product: syz [ 774.860584][ T5948] usb 4-1: Manufacturer: syz [ 774.872833][ T5948] usb 4-1: SerialNumber: syz [ 774.894539][ T5948] usb 4-1: config 0 descriptor?? [ 774.911423][ T5948] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 774.935498][ T5887] gspca_stk1135: reg_w 0x3 err -71 [ 774.941883][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 774.960114][ T5887] gspca_stk1135: Sensor write failed [ 774.978122][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 774.999637][ T5887] gspca_stk1135: Sensor write failed [ 775.016646][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 775.036942][ T5887] gspca_stk1135: Sensor read failed [ 775.047491][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 775.068679][ T5887] gspca_stk1135: Sensor read failed [ 775.079760][ T5887] gspca_stk1135: Detected sensor type unknown (0x0) [ 775.100779][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 775.107728][ T5887] gspca_stk1135: Sensor read failed [ 775.113322][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 775.119789][ T5887] gspca_stk1135: Sensor read failed [ 775.125450][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 775.137055][ T5887] gspca_stk1135: Sensor write failed [ 775.142474][ T5887] gspca_stk1135: serial bus timeout: status=0x00 [ 775.149624][ T5887] gspca_stk1135: Sensor write failed [ 775.155984][ T5887] stk1135 2-1:64.0: probe with driver stk1135 failed with error -71 [ 775.174902][ T5889] usb 4-1: USB disconnect, device number 24 [ 775.204960][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 775.217791][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 775.225243][ T5887] usb 2-1: USB disconnect, device number 35 [ 775.238274][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 775.247472][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 775.256392][ T5845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 775.264417][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 775.823133][T15947] chnl_net:caif_netlink_parms(): no params data found [ 776.052132][T15947] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.064079][T15947] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.071625][T15947] bridge_slave_0: entered allmulticast mode [ 776.085449][T15947] bridge_slave_0: entered promiscuous mode [ 776.094106][T15947] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.101299][T15947] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.108888][T15947] bridge_slave_1: entered allmulticast mode [ 776.116307][T15947] bridge_slave_1: entered promiscuous mode [ 776.193036][ T9408] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 776.207208][T15947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.227306][T15947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.268406][T15947] team0: Port device team_slave_0 added [ 776.278882][T15947] team0: Port device team_slave_1 added [ 776.306871][T15947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.314028][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.341057][T15947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.352880][ T9408] usb 4-1: Using ep0 maxpacket: 16 [ 776.359811][ T9408] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 776.373026][T15947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.380016][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.406817][ T9408] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 776.419007][T15947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.455200][ T9408] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 776.464706][ T9408] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.472712][ T9408] usb 4-1: Product: syz [ 776.487283][ T9408] usb 4-1: Manufacturer: syz [ 776.491947][ T9408] usb 4-1: SerialNumber: syz [ 776.506140][T15947] hsr_slave_0: entered promiscuous mode [ 776.514236][ T9408] usb 4-1: config 0 descriptor?? [ 776.524105][T15947] hsr_slave_1: entered promiscuous mode [ 776.531286][T15947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.540246][ T9408] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 776.549921][T15947] Cannot create hsr debugfs directory [ 776.562089][ T9408] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 776.694496][T15947] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.793268][ T5887] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 776.817694][T15947] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.020657][T15947] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.136490][T15947] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.164464][ T5887] usb 2-1: Using ep0 maxpacket: 16 [ 777.172044][ T5887] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 777.181463][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 777.192633][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 777.202950][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.213232][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 777.225209][ T5887] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 777.235241][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.236402][ T9408] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 777.272098][ T5887] usb 2-1: Product: syz [ 777.285086][ T5887] usb 2-1: Manufacturer: syz [ 777.293131][ T5887] usb 2-1: SerialNumber: syz [ 777.305328][ T5887] usb 2-1: config 0 descriptor?? [ 777.318425][T15984] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 777.373258][ T5845] Bluetooth: hci3: command tx timeout [ 777.394829][ T5887] mcba_usb 2-1:0.0 can0: couldn't setup read URBs [ 777.418542][ T5887] mcba_usb 2-1:0.0 can0: couldn't start device: -90 [ 777.441170][ T9408] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 777.449413][ T9408] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 777.457820][ T9408] em28xx 4-1:0.0: No AC97 audio processor [ 777.469645][ T9408] usb 4-1: USB disconnect, device number 25 [ 777.477839][ T9408] em28xx 4-1:0.0: Disconnecting em28xx [ 777.487385][ T9408] em28xx 4-1:0.0: Freeing device [ 777.520213][T15995] netlink: 'syz.8.3036': attribute type 1 has an invalid length. [ 777.554327][ T5887] mcba_usb 2-1:0.0: probe with driver mcba_usb failed with error -90 [ 777.576735][ T5887] usb 2-1: USB disconnect, device number 36 [ 777.626951][T15947] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 777.672116][T15947] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 777.684756][T15947] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 777.716772][T15947] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 777.961258][T15947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.006579][T15947] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.037008][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.044219][ T8772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.074236][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.081407][ T8772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.181426][T15947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 778.192163][T15947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 778.572063][T15947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.656613][T15947] veth0_vlan: entered promiscuous mode [ 778.668006][T15947] veth1_vlan: entered promiscuous mode [ 778.681290][T16019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3045'. [ 778.692847][T15947] veth0_macvtap: entered promiscuous mode [ 778.702188][T15947] veth1_macvtap: entered promiscuous mode [ 778.726819][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.737962][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.748307][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.758836][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.768951][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.779468][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.789664][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.804608][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.814722][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.825334][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.835316][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.845910][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.855834][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.866387][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.876364][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.886850][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.899748][T15947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.909904][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.920448][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.930509][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.941049][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.950942][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.961539][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.971412][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.982081][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.992481][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.003574][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.013755][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.024562][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.034696][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.045475][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.055655][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.066409][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.077842][T15947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.087942][T15947] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.097004][T15947] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.106040][T15947] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.114834][T15947] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.455179][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.475324][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.483124][ T5845] Bluetooth: hci3: command tx timeout [ 779.758105][ T6648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.773126][ T6648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.797818][T16040] netlink: 'syz.1.3054': attribute type 10 has an invalid length. [ 779.837107][T16040] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 779.974405][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 780.133474][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 780.144092][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.186583][ T9] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 780.207069][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.229883][ T9] usb 4-1: Product: syz [ 780.242313][ T9] usb 4-1: Manufacturer: syz [ 780.275416][ T9] usb 4-1: SerialNumber: syz [ 780.323434][ T9] usb 4-1: config 0 descriptor?? [ 780.362141][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 780.433052][ T9] usb 4-1: selecting invalid altsetting 1 [ 780.559815][ T9] gspca_stk014: reg_r err -32 [ 780.564744][ T9] stk014 4-1:0.0: probe with driver stk014 failed with error -32 [ 780.601804][T16030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.611235][T16030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.663146][ T9] usb 4-1: USB disconnect, device number 26 [ 780.736475][T16066] netlink: 'syz.9.3064': attribute type 1 has an invalid length. [ 781.122566][ T9408] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 781.293302][ T9408] usb 9-1: Using ep0 maxpacket: 16 [ 781.312246][ T9408] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.361343][ T9408] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.393091][ T9408] usb 9-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 781.438061][ T9408] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.484019][ T9408] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 781.509524][ T9408] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 781.528374][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3075'. [ 781.540210][ T5845] Bluetooth: hci3: command tx timeout [ 781.550572][ T9408] usb 9-1: Manufacturer: syz [ 781.557446][ T9408] usb 9-1: config 0 descriptor?? [ 781.672850][ T5948] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 781.851598][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 781.865250][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 781.888078][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.943313][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 781.995704][T16103] delete_channel: no stack [ 782.000289][ T5948] usb 3-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 782.019808][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.094091][ T5948] usb 3-1: config 0 descriptor?? [ 782.535780][ T5948] uclogic 0003:5543:0064.0014: No inputs registered, leaving [ 782.592746][ T5948] uclogic 0003:5543:0064.0014: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.2-1/input0 [ 782.607214][T16120] netlink: 'syz.9.3087': attribute type 64 has an invalid length. [ 782.622420][T16120] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3087'. [ 782.763238][ T9408] usb 3-1: USB disconnect, device number 20 [ 783.613797][ T5845] Bluetooth: hci3: command tx timeout [ 783.807699][ T5887] usb 9-1: USB disconnect, device number 18 [ 784.244574][T16158] netlink: 'syz.8.3104': attribute type 3 has an invalid length. [ 786.742630][T16205] loop2: detected capacity change from 0 to 7 [ 786.796749][T16208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'. [ 786.798129][T16205] Dev loop2: unable to read RDB block 7 [ 786.866780][T16205] loop2: unable to read partition table [ 786.894657][T16205] loop2: partition table beyond EOD, truncated [ 786.919410][T16205] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 787.451854][ T9] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 787.603499][ T9] usb 2-1: device descriptor read/64, error -71 [ 787.679140][T16236] random: crng reseeded on system resumption [ 787.848505][ T9] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 788.233002][ T9] usb 2-1: device descriptor read/64, error -71 [ 788.343621][ T9] usb usb2-port1: attempt power cycle [ 788.449213][ T5887] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 789.233295][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 789.275566][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 789.281149][ T9] usb 2-1: device descriptor read/8, error -71 [ 789.308257][ T5887] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 789.316384][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 789.401616][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 789.460132][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.511505][ T5887] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 789.543096][ T9] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 789.551819][ T5887] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 789.562569][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.591766][ T9] usb 2-1: device descriptor read/8, error -71 [ 789.613209][ T5887] usb 4-1: Product: syz [ 789.617402][ T5887] usb 4-1: Manufacturer: syz [ 789.640911][ T5887] usb 4-1: SerialNumber: syz [ 789.751388][ T9] usb usb2-port1: unable to enumerate USB device [ 789.759654][T16264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 789.764019][ T5887] usb 4-1: config 0 descriptor?? [ 789.883103][T16243] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 789.966051][ T5887] mcba_usb 4-1:0.0 can0: couldn't setup read URBs [ 789.972537][ T5887] mcba_usb 4-1:0.0 can0: couldn't start device: -90 [ 790.026551][T16275] loop2: detected capacity change from 0 to 512 [ 790.035995][T16275] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 790.055013][T16275] EXT4-fs (loop2): invalid journal inode [ 790.063974][T16278] fuse: Bad value for 'fd' [ 790.068691][T16275] EXT4-fs (loop2): can't get journal size [ 790.110805][T16275] EXT4-fs (loop2): 1 truncate cleaned up [ 790.158933][T16275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.215192][ T5887] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90 [ 790.247422][ T5887] usb 4-1: USB disconnect, device number 27 [ 790.547933][T16275] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.658182][T16319] fuse: Bad value for 'fd' [ 792.963232][ T5889] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 793.123109][ T5889] usb 9-1: Using ep0 maxpacket: 16 [ 793.135837][ T5889] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.206491][ T5889] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 794.006784][ T5889] usb 9-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 794.017555][ T5889] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 794.033137][ T5889] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 794.042227][ T5889] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 794.050687][ T5889] usb 9-1: Manufacturer: syz [ 794.058082][ T5889] usb 9-1: config 0 descriptor?? [ 794.206718][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3173'. [ 794.513011][ T9408] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 794.581459][T16331] loop2: detected capacity change from 0 to 32768 [ 794.613737][T16331] XFS: ikeep mount option is deprecated. [ 794.629178][T16331] XFS: ikeep mount option is deprecated. [ 794.709736][ T9408] usb 10-1: device descriptor read/64, error -71 [ 794.794144][T16331] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 795.118781][T16331] XFS (loop2): Ending clean mount [ 795.444852][T15947] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 795.556580][ T9408] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 795.773036][ T9408] usb 10-1: device descriptor read/64, error -71 [ 795.785192][ T8] usb 9-1: USB disconnect, device number 19 [ 795.923187][ T9408] usb usb10-port1: attempt power cycle [ 796.312837][ T9408] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 796.335448][ T9408] usb 10-1: device descriptor read/8, error -71 [ 796.653944][ T9408] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 796.726231][ T9408] usb 10-1: device descriptor read/8, error -71 [ 796.955696][ T9408] usb usb10-port1: unable to enumerate USB device [ 797.853546][ T9408] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 798.023183][ T9408] usb 8-1: Using ep0 maxpacket: 16 [ 798.070787][ T9408] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.217403][ T9408] usb 8-1: config 0 has no interfaces? [ 798.302969][ T9408] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 798.333320][ T9408] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.405249][ T9408] usb 8-1: config 0 descriptor?? [ 800.076762][T16437] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3207'. [ 800.143379][ T5889] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 800.283927][ T5889] usb 4-1: device descriptor read/64, error -71 [ 800.332944][ T5887] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 800.494991][ T5887] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.509253][ T5887] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.522902][ T5889] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 800.527733][ T5887] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 800.547084][ T5887] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.567452][ T5887] usb 10-1: config 0 descriptor?? [ 800.630478][ T8] usb 8-1: USB disconnect, device number 15 [ 800.653457][ T5889] usb 4-1: device descriptor read/64, error -71 [ 800.783660][ T5889] usb usb4-port1: attempt power cycle [ 800.996679][ T5887] hid (null): bogus close delimiter [ 801.203579][ T5887] usb 10-1: language id specifier not provided by device, defaulting to English [ 801.319946][T16468] netlink: 1280 bytes leftover after parsing attributes in process `syz.8.3219'. [ 801.333324][ T5889] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 801.966338][T16468] openvswitch: netlink: Missing key (keys=40, expected=100) [ 801.981040][ T5889] usb 4-1: device descriptor read/8, error -71 [ 802.208464][ T5887] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0015/input/input27 [ 802.224221][ T5889] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 802.259995][ T5889] usb 4-1: device descriptor read/8, error -71 [ 802.307011][ T5887] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0015/input/input28 [ 802.343607][ T5887] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0015/input/input29 [ 802.388350][ T5889] usb usb4-port1: unable to enumerate USB device [ 802.390645][ T5887] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:256C:006D.0015/input/input30 [ 802.459453][ T5887] uclogic 0003:256C:006D.0015: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.9-1/input0 [ 802.483878][ T5887] usb 10-1: USB disconnect, device number 23 [ 802.534120][T16483] bridge0: entered promiscuous mode [ 802.541594][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3225'. [ 802.560339][T16483] bridge_slave_1: left allmulticast mode [ 802.570127][T16483] bridge_slave_1: left promiscuous mode [ 802.585378][T16483] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.637833][T16483] bridge_slave_0: left allmulticast mode [ 802.647516][T16483] bridge_slave_0: left promiscuous mode [ 802.657786][T16483] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.712069][T16483] bridge0 (unregistering): left promiscuous mode [ 803.276681][T16504] netlink: 1280 bytes leftover after parsing attributes in process `syz.7.3234'. [ 803.333131][T16504] openvswitch: netlink: Missing key (keys=40, expected=100) [ 803.335731][T16508] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3238'. [ 803.912926][ T8] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 804.042993][ T8] usb 3-1: device descriptor read/64, error -71 [ 804.083072][ T9] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 804.202855][ T5948] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 804.242922][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 804.278399][ T5889] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 804.278416][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 804.278450][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 804.309844][ T8] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 804.352354][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 804.361712][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.372894][ T9] usb 8-1: Product: syz [ 804.377089][ T9] usb 8-1: Manufacturer: syz [ 804.386083][ T9] usb 8-1: SerialNumber: syz [ 804.390983][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.413929][ T9] usb 8-1: config 0 descriptor?? [ 804.416623][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.431740][ T9] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 804.439666][ T5948] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 804.452970][ T5889] usb 2-1: device descriptor read/64, error -71 [ 804.460260][ T9] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 804.467479][ T8] usb 3-1: device descriptor read/64, error -71 [ 804.470555][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.511145][ T5948] usb 4-1: config 0 descriptor?? [ 804.583376][ T8] usb usb3-port1: attempt power cycle [ 804.693066][ T5889] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 804.842971][ T5889] usb 2-1: device descriptor read/64, error -71 [ 804.952259][ T5948] usbhid 4-1:0.0: can't add hid device: -71 [ 804.962981][ T8] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 804.980269][ T5948] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 804.989089][ T5889] usb usb2-port1: attempt power cycle [ 804.995660][ T8] usb 3-1: device descriptor read/8, error -71 [ 805.019405][ T5948] usb 4-1: USB disconnect, device number 32 [ 805.053740][ T9] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 805.070047][ T9] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 805.079143][ T9] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 805.088304][ T9] em28xx 8-1:0.0: No AC97 audio processor [ 805.118493][ T9] usb 8-1: USB disconnect, device number 16 [ 805.133750][ T9] em28xx 8-1:0.0: Disconnecting em28xx [ 805.146295][ T9] em28xx 8-1:0.0: Freeing device [ 805.250182][ T8] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 805.289245][ T8] usb 3-1: device descriptor read/8, error -71 [ 805.343049][ T5889] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 805.373840][ T5889] usb 2-1: device descriptor read/8, error -71 [ 805.424221][ T8] usb usb3-port1: unable to enumerate USB device [ 805.613294][ T5889] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 805.653395][ T5889] usb 2-1: device descriptor read/8, error -71 [ 805.771963][ T5889] usb usb2-port1: unable to enumerate USB device [ 806.383745][T16606] loop9: detected capacity change from 0 to 512 [ 806.411898][T16606] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 806.447087][T16606] EXT4-fs (loop9): invalid journal inode [ 806.453386][T16606] EXT4-fs (loop9): can't get journal size [ 806.477983][T16606] EXT4-fs (loop9): 1 truncate cleaned up [ 806.493450][T16606] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.535537][T16606] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.852409][ T8] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 806.967708][T16624] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3284'. [ 807.034539][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.051330][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.095473][ T8] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 807.115867][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.159642][ T8] usb 9-1: config 0 descriptor?? [ 807.634802][T16647] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3298'. [ 807.673137][ T5884] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 807.823358][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 807.881756][ T8] usbhid 9-1:0.0: can't add hid device: -71 [ 807.895699][ T8] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 808.137306][ T8] usb 9-1: USB disconnect, device number 20 [ 808.144040][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 808.216249][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 808.226339][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.263191][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.322911][ T5884] usb 4-1: Using ep0 maxpacket: 16 [ 808.329683][ T9] usb 2-1: Product: syz [ 808.345482][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.368224][ T9] usb 2-1: Manufacturer: syz [ 808.393156][ T9] usb 2-1: SerialNumber: syz [ 808.397982][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.443887][ T9] usb 2-1: config 0 descriptor?? [ 808.465407][ T9] gspca_main: spca500-2.14.0 probing 046d:0900 [ 808.471933][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 808.485554][ T5884] usb 4-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 808.495124][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.526407][ T5884] usb 4-1: config 0 descriptor?? [ 808.793162][ T5887] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 808.943359][T16661] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 808.961388][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 808.967590][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 808.979983][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.004116][ T5884] usb 4-1: USB disconnect, device number 33 [ 809.011446][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.048148][ T5887] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 809.057981][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.091134][ T5887] usb 3-1: config 0 descriptor?? [ 809.097210][T16661] usb 8-1: device descriptor read/64, error -71 [ 809.365394][T16661] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 809.486336][ T9] gspca_spca500: reg write: error -71 [ 809.495271][ T9] gspca_spca500: reg write: error -71 [ 809.501226][ T9] gspca_spca500: reg write: error -71 [ 809.507513][T16661] usb 8-1: device descriptor read/64, error -71 [ 809.524552][ T5887] hid (null): bogus close delimiter [ 809.534860][ T9] gspca_spca500: reg write: error -71 [ 809.540614][ T9] gspca_spca500: reg write: error -71 [ 809.547077][ T9] gspca_spca500: reg write: error -71 [ 809.552987][ T9] gspca_spca500: reg write: error -71 [ 809.573124][ T9] gspca_spca500: reg write: error -71 [ 809.587150][ T9] gspca_spca500: reg write: error -71 [ 809.605039][ T9] gspca_spca500: reg write: error -71 [ 809.623983][ T9] usb 2-1: USB disconnect, device number 45 [ 809.653225][T16661] usb usb8-port1: attempt power cycle [ 809.718038][ T5887] usb 3-1: language id specifier not provided by device, defaulting to English [ 809.874627][T16675] netlink: 1280 bytes leftover after parsing attributes in process `syz.3.3310'. [ 809.904265][T16675] openvswitch: netlink: Missing key (keys=40, expected=100) [ 810.161480][ T5887] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0016/input/input31 [ 810.178672][ T5887] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0016/input/input32 [ 810.196517][ T5887] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0016/input/input33 [ 810.212597][ T5887] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0016/input/input34 [ 810.242052][ T5887] uclogic 0003:256C:006D.0016: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 810.269698][T16661] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 810.313681][T16661] usb 8-1: device descriptor read/8, error -71 [ 810.329037][ T5887] usb 3-1: USB disconnect, device number 25 [ 810.553007][T16661] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 810.583587][T16661] usb 8-1: device descriptor read/8, error -71 [ 810.704274][T16661] usb usb8-port1: unable to enumerate USB device [ 810.723171][ T9] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 810.904292][ T9] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 810.926484][ T9] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 810.944942][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 810.972233][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 811.019336][ T9] usb 2-1: string descriptor 0 read error: -22 [ 811.035783][ T9] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 811.073291][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.114195][ T9] usb 2-1: config 0 descriptor?? [ 811.130920][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 811.147164][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 811.527691][ T5887] usb 2-1: USB disconnect, device number 46 [ 812.802848][ T5888] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 812.849158][T16735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.853850][T16731] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 812.861974][T16735] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 812.995359][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.013672][ T5888] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 813.043128][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.066330][ T5888] usb 3-1: config 0 descriptor?? [ 813.080408][T16741] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3337'. [ 813.102082][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 813.492907][ T9408] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 813.569101][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 813.576273][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 813.583650][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 813.590658][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 813.613645][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 813.621982][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 813.641647][ T5888] pwc: recv_control_msg error -32 req 02 val 2000 [ 813.654345][ T9408] usb 8-1: config 4 has an invalid interface number: 231 but max is 0 [ 813.662539][ T9408] usb 8-1: config 4 has no interface number 0 [ 813.726717][ T9408] usb 8-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 813.762933][ T9408] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.771063][ T9408] usb 8-1: Product: syz [ 813.808438][ T9408] usb 8-1: Manufacturer: syz [ 813.829788][ T9408] usb 8-1: SerialNumber: syz [ 813.882999][ T5888] pwc: recv_control_msg error -71 req 04 val 1500 [ 813.900131][ T9408] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 813.916284][ T5888] pwc: recv_control_msg error -71 req 02 val 2500 [ 813.949573][ T5888] pwc: recv_control_msg error -71 req 02 val 2400 [ 813.985487][ T5888] pwc: recv_control_msg error -71 req 02 val 2600 [ 814.044711][ T5888] pwc: recv_control_msg error -71 req 02 val 2900 [ 814.089455][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 814.154568][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 814.198882][ T9408] vp7045: USB control message 'out' went wrong. [ 814.212868][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 814.234977][ T9408] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 814.254386][ T5888] pwc: Registered as video103. [ 814.260186][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input35 [ 814.282317][ T9408] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 814.338593][ T9408] usb 8-1: USB disconnect, device number 21 [ 814.358687][ T5888] usb 3-1: USB disconnect, device number 26 [ 814.454681][ T29] audit: type=1326 audit(1735077966.973:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7fc00000 [ 814.511437][ T29] audit: type=1326 audit(1735077967.003:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f97a7585d29 code=0x7fc00000 [ 814.559564][ T29] audit: type=1326 audit(1735077967.003:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7fc00000 [ 814.663415][ T29] audit: type=1326 audit(1735077967.003:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7fc00000 [ 814.902978][ T29] audit: type=1326 audit(1735077967.003:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7fc00000 [ 814.974944][ T29] audit: type=1326 audit(1735077967.003:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7fc00000 [ 815.013568][ T29] audit: type=1326 audit(1735077967.003:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7fc00000 [ 815.111294][ T29] audit: type=1326 audit(1735077967.003:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7fc00000 [ 815.134260][ T29] audit: type=1326 audit(1735077967.003:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7fc00000 [ 815.157172][ T29] audit: type=1326 audit(1735077967.003:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16759 comm="syz.3.3346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97a7585d29 code=0x7fc00000 [ 815.839962][T16789] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3353'. [ 816.442906][ T5948] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 816.792931][ T5948] usb 10-1: Using ep0 maxpacket: 16 [ 816.805725][ T5948] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.819874][ T5948] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 816.978855][ T5948] usb 10-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 817.036667][ T5948] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.533330][ T5948] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 817.552942][ T5948] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 817.577371][ T5948] usb 10-1: Manufacturer: syz [ 817.635304][ T5948] usb 10-1: config 0 descriptor?? [ 817.648091][T16833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 818.146056][T16856] openvswitch: netlink: Key type 544 is out of range max 32 [ 818.820529][T16874] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 819.097837][ T5845] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 819.113331][ T5845] Bluetooth: hci2: unexpected event for opcode 0x203e [ 819.197541][T16661] usb 10-1: USB disconnect, device number 24 [ 819.914475][T16897] netlink: 1280 bytes leftover after parsing attributes in process `syz.7.3401'. [ 819.951355][T16897] openvswitch: netlink: Missing key (keys=40, expected=100) [ 819.970960][T16902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 819.988880][T16903] netlink: 'syz.9.3402': attribute type 1 has an invalid length. [ 820.033460][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3402'. [ 820.062960][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3402'. [ 821.472551][T16945] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3419'. [ 821.673235][T16952] netlink: 'syz.3.3422': attribute type 1 has an invalid length. [ 821.713119][T16952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3422'. [ 821.750013][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3422'. [ 821.892897][ T9408] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 821.983031][ T5888] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 822.042971][ T5948] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 822.834869][ T9408] usb 3-1: Using ep0 maxpacket: 16 [ 822.851139][ T9408] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 822.861782][ T9408] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 822.871208][ T9408] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 822.880982][ T9408] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.891413][ T9408] usb 3-1: config 0 descriptor?? [ 822.926929][ T5888] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 822.936214][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.946149][ T5888] usb 2-1: Product: syz [ 822.950691][ T5888] usb 2-1: Manufacturer: syz [ 822.955452][ T5888] usb 2-1: SerialNumber: syz [ 822.968726][ T5888] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 822.984909][ T9408] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 822.994209][ T5948] usb 8-1: Using ep0 maxpacket: 16 [ 823.002550][ T5948] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.022851][ T5948] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.034123][ T5948] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 823.047279][ T5948] usb 8-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 823.056825][ T5948] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.079361][ T5948] usb 8-1: config 0 descriptor?? [ 823.133089][ T5845] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 823.143693][ T5845] Bluetooth: hci2: Injecting HCI hardware error event [ 823.152281][ T5846] Bluetooth: hci2: hardware error 0x00 [ 823.158206][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 823.363019][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 823.375759][ T9] usb 9-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 823.392873][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.400904][ T9] usb 9-1: Product: syz [ 823.417566][ T9] usb 9-1: Manufacturer: syz [ 823.422214][ T9] usb 9-1: SerialNumber: syz [ 823.451995][ T9] usb 9-1: config 0 descriptor?? [ 823.466083][ T9] gspca_main: spca500-2.14.0 probing 046d:0900 [ 823.511606][ T5948] usbhid 8-1:0.0: can't add hid device: -71 [ 823.520680][ T5948] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 823.541527][ T5948] usb 8-1: USB disconnect, device number 22 [ 824.016616][T16978] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3433'. [ 824.481082][ T9] gspca_spca500: reg write: error -71 [ 824.498031][ T9] gspca_spca500: reg write: error -71 [ 824.527747][ T9] gspca_spca500: reg write: error -71 [ 824.569016][ T9] gspca_spca500: reg write: error -71 [ 824.582675][ T9] gspca_spca500: reg write: error -71 [ 824.596314][ T9] gspca_spca500: reg write: error -71 [ 824.628816][ T9] gspca_spca500: reg write: error -71 [ 824.673175][ T9] gspca_spca500: reg write: error -71 [ 824.727785][ T9] gspca_spca500: reg write: error -71 [ 824.785985][ T9] gspca_spca500: reg write: error -71 [ 824.794889][ T5887] usb 3-1: USB disconnect, device number 27 [ 824.893964][ T9] usb 9-1: USB disconnect, device number 21 [ 825.224244][ T5846] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 826.986907][T17016] netlink: 'syz.7.3449': attribute type 64 has an invalid length. [ 827.053048][T17016] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3449'. [ 827.395658][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 827.395681][ T29] audit: type=1326 audit(1735077979.913:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17010 comm="syz.2.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184a785d29 code=0x7fc00000 [ 828.865723][T17034] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3456'. [ 828.962913][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 829.197119][ T9] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 829.235142][ T9] usb 3-1: config 0 has no interface number 0 [ 829.309085][ T9] usb 3-1: config 0 interface 84 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 829.385520][ T9] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e305, bcdDevice=44.33 [ 829.427606][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.474448][ T9] usb 3-1: Product: syz [ 829.501228][ T9] usb 3-1: Manufacturer: syz [ 829.532040][ T9] usb 3-1: SerialNumber: syz [ 829.579211][ T9] usb 3-1: config 0 descriptor?? [ 829.630600][ T9] em28xx 3-1:0.84: New device syz syz @ 480 Mbps (eb1a:e305, interface 84, class 84) [ 829.683052][ T9] em28xx 3-1:0.84: Video interface 84 found: isoc [ 829.916486][ T9] em28xx 3-1:0.84: unknown em28xx chip ID (0) [ 830.078896][ T9] em28xx 3-1:0.84: reading from i2c device at 0xa0 failed (error=-5) [ 830.149183][ T9] em28xx 3-1:0.84: board has no eeprom [ 830.252915][ T9] em28xx 3-1:0.84: Identified as KWorld DVB-T 305U (card=47) [ 830.294796][ T9] em28xx 3-1:0.84: analog set to isoc mode. [ 830.303841][ T5884] em28xx 3-1:0.84: Registering V4L2 extension [ 830.376748][ T9] usb 3-1: USB disconnect, device number 28 [ 830.440738][ T9] em28xx 3-1:0.84: Disconnecting em28xx [ 830.762817][ C0] sched: DL replenish lagged too much [ 830.913554][ T5884] em28xx 3-1:0.84: Config register raw data: 0xffffffed [ 830.968123][ T5884] em28xx 3-1:0.84: AC97 chip type couldn't be determined [ 831.022932][ T5884] em28xx 3-1:0.84: No AC97 audio processor [ 831.083185][T17051] netlink: 'syz.9.3463': attribute type 64 has an invalid length. [ 831.091021][T17051] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3463'. [ 831.130975][ T5884] usb 3-1: Decoder not found [ 831.165621][ T5884] em28xx 3-1:0.84: failed to create media graph [ 831.171911][ T5884] em28xx 3-1:0.84: V4L2 device video103 deregistered [ 831.299198][ T5884] em28xx 3-1:0.84: Remote control support is not available for this card. [ 831.347972][ T9] em28xx 3-1:0.84: Closing input extension [ 831.480558][ T9] em28xx 3-1:0.84: Freeing device [ 832.000873][T17066] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3469'. [ 832.055869][ T29] audit: type=1326 audit(1735077984.563:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 832.179481][ T29] audit: type=1326 audit(1735077984.563:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 832.352548][ T29] audit: type=1326 audit(1735077984.563:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 832.486100][T17068] netlink: 'syz.7.3470': attribute type 1 has an invalid length. [ 832.530424][ T29] audit: type=1326 audit(1735077984.563:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 832.593516][T17068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3470'. [ 832.706060][ T29] audit: type=1326 audit(1735077984.563:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 832.882872][ T29] audit: type=1326 audit(1735077984.563:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 833.056503][ T29] audit: type=1326 audit(1735077984.563:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 833.181130][ T29] audit: type=1326 audit(1735077984.613:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 833.312112][ T29] audit: type=1326 audit(1735077984.613:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 833.479830][ T29] audit: type=1326 audit(1735077984.613:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 833.610997][ T29] audit: type=1326 audit(1735077984.613:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 833.736198][ T29] audit: type=1326 audit(1735077984.613:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 833.901472][ T29] audit: type=1326 audit(1735077984.613:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17052 comm="syz.1.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff42fd85d29 code=0x7fc00000 [ 835.940931][T17098] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3482'. [ 836.048803][T17098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 836.056217][T17098] IPv6: NLM_F_CREATE should be set when creating new route [ 836.063569][T17098] IPv6: NLM_F_CREATE should be set when creating new route [ 837.187723][ T5884] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 837.406896][ T5884] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 837.446662][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.501902][ T5884] usb 3-1: Product: syz [ 837.506797][ T5884] usb 3-1: Manufacturer: syz [ 837.511411][ T5884] usb 3-1: SerialNumber: syz [ 837.567622][ T5884] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 837.663089][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 839.307601][ T9] usb 3-1: Service connection timeout for: 256 [ 856.907434][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 884.298174][ T5887] usb 3-1: USB disconnect, device number 29 [ 884.358726][ T9] ath9k_htc: Failed to initialize the device [ 884.402614][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 884.562820][ T5887] usb 3-1: ath9k_htc: USB layer deinitialized [ 886.705235][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 895.225472][ T5826] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 931.058180][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 986.743950][ T30] INFO: task syz.3.3442:16999 blocked for more than 158 seconds. [ 986.751736][ T30] Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 986.789683][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 986.852882][ T30] task:syz.3.3442 state:D stack:24992 pid:16999 tgid:16997 ppid:10249 flags:0x00004004 [ 986.914287][ T30] Call Trace: [ 986.917633][ T30] [ 986.920587][ T30] __schedule+0x1850/0x4c30 [ 987.063664][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 987.170121][ T30] ? __pfx___schedule+0x10/0x10 [ 987.202979][ T30] ? __pfx_lock_release+0x10/0x10 [ 987.208080][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 987.272956][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 987.282968][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 987.288132][ T30] ? schedule+0x90/0x320 [ 987.292408][ T30] schedule+0x14b/0x320 [ 987.367697][ T30] ? down_read+0x6a5/0xa40 [ 987.372208][ T30] schedule_preempt_disabled+0x13/0x30 [ 987.432979][ T30] down_read+0x705/0xa40 [ 987.437334][ T30] ? __pfx_down_read+0x10/0x10 [ 987.442137][ T30] ? mm_release+0x263/0x430 [ 987.532903][ T30] ? __pfx_mm_release+0x10/0x10 [ 987.537857][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 987.593633][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 987.598940][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 987.663151][ T30] exit_mm+0xd4/0x310 [ 987.667225][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 987.672495][ T30] ? __pfx_exit_mm+0x10/0x10 [ 987.743087][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 987.748808][ T30] ? taskstats_exit+0x326/0xa60 [ 987.791526][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 987.823876][ T30] do_exit+0x9ad/0x28e0 [ 987.828241][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 987.873030][ T30] ? __pfx_do_exit+0x10/0x10 [ 987.877716][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 987.912986][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 987.918716][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 987.965327][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 987.971824][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 988.024113][ T30] do_group_exit+0x207/0x2c0 [ 988.028879][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 988.072946][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 988.078665][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 988.113007][ T30] get_signal+0x16b2/0x1750 [ 988.117605][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 988.166160][ T30] ? __pfx_get_signal+0x10/0x10 [ 988.171106][ T30] arch_do_signal_or_restart+0x96/0x860 [ 988.229842][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 988.252978][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 988.259036][ T30] ? syscall_exit_to_user_mode+0xa3/0x340 [ 988.303030][ T30] syscall_exit_to_user_mode+0xce/0x340 [ 988.308694][ T30] do_syscall_64+0x100/0x230 [ 988.360658][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.383017][ T30] RIP: 0033:0x7f97a7585d29 [ 988.387481][ T30] RSP: 002b:00007f97a83d70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 988.445558][ T30] RAX: fffffffffffffe00 RBX: 00007f97a7775fa8 RCX: 00007f97a7585d29 [ 988.482878][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f97a7775fa8 [ 988.490940][ T30] RBP: 00007f97a7775fa0 R08: 0000000000000000 R09: 0000000000000000 [ 988.572818][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f97a7775fac [ 988.580883][ T30] R13: 0000000000000000 R14: 00007ffd782963d0 R15: 00007ffd782964b8 [ 988.665480][ T30] [ 988.668702][ T30] [ 988.668702][ T30] Showing all locks held in the system: [ 988.721711][ T30] 1 lock held by init/1: [ 988.744333][ T30] #0: ffff8880b863e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 988.772840][ T30] 1 lock held by kworker/R-mm_pe/13: [ 988.778191][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 988.819775][ T30] 1 lock held by ksoftirqd/1/24: [ 988.852424][ T30] 1 lock held by khungtaskd/30: [ 988.864180][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 988.896833][ T30] 2 locks held by kworker/1:1/57: [ 988.901962][ T30] 1 lock held by kworker/R-krxrp/3373: [ 988.931921][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 988.960179][ T30] 1 lock held by klogd/5186: [ 988.983378][ T30] 2 locks held by getty/5574: [ 988.988128][ T30] #0: ffff8880314930a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 989.030294][ T30] #1: ffffc900033232f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 989.059213][ T30] 3 locks held by kworker/u9:2/5826: [ 989.082969][ T30] #0: ffff88802a058148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 989.122916][ T30] #1: ffffc900042c7d00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 989.166435][ T30] #2: ffff888031698d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1bf/0x6b0 [ 989.191791][ T30] 1 lock held by kworker/u9:10/5845: [ 989.209321][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 989.263308][ T30] 5 locks held by kworker/u9:11/5846: [ 989.268742][ T30] #0: ffff888029643148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 989.331580][ T30] #1: ffffc90004107d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 989.375161][ T30] #2: ffff88805e9dcd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400 [ 989.425251][ T30] #3: ffff88805e9dc078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0 [ 989.456172][ T30] #4: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 989.463162][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 989.474143][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17000/1:b..l [ 989.482983][ C1] rcu: (detected by 1, t=10502 jiffies, g=64497, q=3342 ncpus=2) [ 989.485653][ T30] 1 lock held by kworker/R-wg-cr/5866: [ 989.490783][ C1] task:syz.8.3443 state:R running task stack:26232 pid:17000 tgid:16998 ppid:7937 flags:0x00004000 [ 989.508776][ C1] Call Trace: [ 989.512075][ C1] [ 989.515004][ C1] __schedule+0x1850/0x4c30 [ 989.519524][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.525161][ C1] ? __pfx___schedule+0x10/0x10 [ 989.530012][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.535640][ C1] ? mark_lock+0x9a/0x360 [ 989.539981][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.545613][ C1] ? preempt_schedule+0xe1/0xf0 [ 989.550465][ C1] preempt_schedule_common+0x84/0xd0 [ 989.555780][ C1] preempt_schedule+0xe1/0xf0 [ 989.560457][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 989.565827][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 989.571728][ C1] preempt_schedule_thunk+0x1a/0x30 [ 989.577051][ C1] _raw_spin_unlock+0x3e/0x50 [ 989.581761][ C1] unmap_page_range+0x36c3/0x4040 [ 989.586804][ C1] ? __pfx_validate_chain+0x10/0x10 [ 989.592022][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 989.597399][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.603055][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.608691][ C1] ? mas_next_slot+0xdc6/0xea0 [ 989.613464][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.619093][ C1] ? uprobe_munmap+0x183/0x460 [ 989.623860][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.629488][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 989.634520][ C1] unmap_vmas+0x3cc/0x5f0 [ 989.638860][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 989.643736][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.649364][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 989.654824][ C1] exit_mmap+0x275/0xc20 [ 989.659069][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 989.663839][ C1] ? __pfx_exit_aio+0x10/0x10 [ 989.668518][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.674235][ C1] ? uprobe_clear_state+0x271/0x290 [ 989.679430][ C1] ? mm_update_next_owner+0xa4/0x810 [ 989.684717][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 989.689924][ C1] __mmput+0x115/0x3c0 [ 989.694086][ C1] exit_mm+0x220/0x310 [ 989.698173][ C1] ? __pfx_exit_mm+0x10/0x10 [ 989.702810][ C1] ? taskstats_exit+0x326/0xa60 [ 989.707683][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.713321][ C1] do_exit+0x9ad/0x28e0 [ 989.717484][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.723116][ C1] ? __pfx_do_exit+0x10/0x10 [ 989.727705][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 989.733091][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.738717][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 989.744697][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 989.751021][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 989.756157][ C1] do_group_exit+0x207/0x2c0 [ 989.760751][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 989.765967][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.771598][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 989.776802][ C1] get_signal+0x16b2/0x1750 [ 989.781319][ C1] ? sched_setaffinity+0x280/0x4b0 [ 989.786454][ C1] ? __pfx_get_signal+0x10/0x10 [ 989.791308][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 989.797041][ C1] ? sched_setaffinity+0x3c2/0x4b0 [ 989.802163][ C1] arch_do_signal_or_restart+0x96/0x860 [ 989.807717][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 989.813880][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 989.819872][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 989.825598][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 989.831151][ C1] do_syscall_64+0x100/0x230 [ 989.835839][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.841738][ C1] RIP: 0033:0x7f4ef0185d29 [ 989.846167][ C1] RSP: 002b:00007f4ef0fdd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000cb [ 989.854578][ C1] RAX: 0000000000000000 RBX: 00007f4ef0375fa0 RCX: 00007f4ef0185d29 [ 989.862651][ C1] RDX: 00000000200002c0 RSI: 0000000000000008 RDI: 0000000000000000 [ 989.870623][ C1] RBP: 00007f4ef0201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 989.878597][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 989.886572][ C1] R13: 0000000000000000 R14: 00007f4ef0375fa0 R15: 00007ffd33cdef98 [ 989.894556][ C1] [ 989.898177][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 989.910435][ T30] 1 lock held by kworker/R-wg-cr/5868: [ 989.916040][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 989.926287][ T30] 1 lock held by kworker/R-wg-cr/5869: [ 989.931762][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 989.942459][ T30] 1 lock held by kworker/R-wg-cr/5872: [ 989.948339][ T30] 1 lock held by kworker/R-wg-cr/5873: [ 989.953878][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 989.964606][ T30] 1 lock held by kworker/R-wg-cr/5874: [ 989.970087][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 989.980372][ T30] 1 lock held by kworker/1:3/5886: [ 989.985579][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 989.996302][ T30] 4 locks held by kworker/1:4/5888: [ 990.001516][ T30] 3 locks held by kworker/1:5/5889: [ 990.006837][ T30] 3 locks held by kworker/u8:8/5913: [ 990.012225][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 990.024317][ T30] #1: ffffc90004ad7d00 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 990.037528][ T30] #2: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: idle_cull_fn+0xd5/0x760 [ 990.053007][ T30] 4 locks held by kworker/1:7/5948: [ 990.058236][ T30] 1 lock held by syz.1.439/7572: [ 990.074189][ T30] #0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 990.103020][ T30] 1 lock held by kworker/R-wg-cr/7971: [ 990.108522][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 990.131168][ T30] 1 lock held by kworker/R-wg-cr/7975: [ 990.145496][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 990.156740][ T30] 1 lock held by kworker/R-wg-cr/7976: [ 990.162221][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 990.172497][ T30] 1 lock held by kworker/R-wg-cr/7977: [ 990.178201][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 990.188553][ T30] 1 lock held by kworker/R-wg-cr/7978: [ 990.194126][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 990.204777][ T30] 1 lock held by kworker/R-wg-cr/7980: [ 990.210247][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 990.220524][ T30] 4 locks held by kworker/u8:16/8772: [ 990.225983][ T30] 2 locks held by kworker/1:0/9408: [ 990.231197][ T30] 1 lock held by kworker/R-wg-cr/10320: [ 990.242942][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 990.272793][ T30] 1 lock held by kworker/R-wg-cr/10324: [ 990.278371][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 990.310058][ T30] 1 lock held by kworker/R-wg-cr/10326: [ 990.315854][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 990.326215][ T30] 1 lock held by kworker/R-wg-cr/15193: [ 990.331780][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 990.342445][ T30] 1 lock held by kworker/R-wg-cr/15196: [ 990.362901][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 990.383061][ T30] 1 lock held by kworker/R-wg-cr/15197: [ 990.388651][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 990.416316][ T30] 1 lock held by kworker/R-wg-cr/15972: [ 990.421896][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xaf5/0x10a0 [ 990.447186][ T30] 1 lock held by kworker/R-wg-cr/15974: [ 990.453148][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 990.508379][ T30] 1 lock held by kworker/R-wg-cr/15975: [ 990.553249][ T30] #0: ffffffff8e7e3348 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x31/0x390 [ 990.602264][ T30] 1 lock held by syz.3.3442/16997: [ 990.614536][ T30] 1 lock held by syz.3.3442/16999: [ 990.619678][ T30] #0: ffff8880511032a0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xd4/0x310 [ 990.663411][ T30] 2 locks held by syz.8.3443/17000: [ 990.668841][ T30] 1 lock held by dhcpcd/17123: [ 990.688909][ T30] #0: ffff88809cecc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 990.732901][ T30] 1 lock held by dhcpcd/17124: [ 990.737722][ T30] #0: ffff88809cece258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 990.791975][ T30] 1 lock held by dhcpcd/17125: [ 990.798000][ T30] #0: ffff88809c7fe258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 990.847233][ T30] 1 lock held by dhcpcd/17126: [ 990.852137][ T30] #0: ffff8880970e0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 990.902945][ T30] 1 lock held by dhcpcd/17131: [ 990.907770][ T30] #0: ffff888091142258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 990.949766][ T30] 1 lock held by dhcpcd/17148: [ 990.955600][ T30] #0: ffff88808fdea258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 990.992792][ T30] 1 lock held by dhcpcd/17151: [ 990.997677][ T30] #0: ffff8880b363c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 991.032858][ T30] 1 lock held by dhcpcd/17152: [ 991.053670][ T30] #0: ffff8880b3b3e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 991.092242][ T30] 1 lock held by dhcpcd/17153: [ 991.106584][ T30] #0: ffff88809afd0258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 991.137269][ T30] 1 lock held by dhcpcd/17155: [ 991.142066][ T30] #0: ffff8880b2f2c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 991.193022][ T30] 1 lock held by dhcpcd/17157: [ 991.197921][ T30] #0: ffff88814cd70258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 991.239292][ T30] 1 lock held by dhcpcd/17162: [ 991.262148][ T30] #0: ffff8880af97a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0 [ 991.290306][ T30] [ 991.292665][ T30] ============================================= [ 991.292665][ T30] [ 991.336032][ T30] NMI backtrace for cpu 0 [ 991.340403][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 991.350923][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 991.360993][ T30] Call Trace: [ 991.364285][ T30] [ 991.367228][ T30] dump_stack_lvl+0x241/0x360 [ 991.371977][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 991.377212][ T30] ? __pfx__printk+0x10/0x10 [ 991.381846][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 991.386820][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 991.392303][ T30] ? _printk+0xd5/0x120 [ 991.396491][ T30] ? __pfx__printk+0x10/0x10 [ 991.401116][ T30] ? __wake_up_klogd+0xcc/0x110 [ 991.405991][ T30] ? __pfx__printk+0x10/0x10 [ 991.410611][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.416353][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 991.421411][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 991.427500][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 991.433512][ T30] watchdog+0xff6/0x1040 [ 991.437792][ T30] ? watchdog+0x1ea/0x1040 [ 991.442243][ T30] ? __pfx_watchdog+0x10/0x10 [ 991.446944][ T30] kthread+0x2f2/0x390 [ 991.451049][ T30] ? __pfx_watchdog+0x10/0x10 [ 991.455754][ T30] ? __pfx_kthread+0x10/0x10 [ 991.460379][ T30] ret_from_fork+0x4d/0x80 [ 991.464817][ T30] ? __pfx_kthread+0x10/0x10 [ 991.469436][ T30] ret_from_fork_asm+0x1a/0x30 [ 991.474236][ T30] [ 991.478617][ T30] Sending NMI from CPU 0 to CPUs 1: [ 991.484134][ C1] NMI backtrace for cpu 1 [ 991.484148][ C1] CPU: 1 UID: 0 PID: 5889 Comm: kworker/1:5 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 991.484174][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 991.484189][ C1] Workqueue: wg-crypt-wg1 wg_packet_decrypt_worker [ 991.484230][ C1] RIP: 0010:srso_alias_safe_ret+0x0/0x7 [ 991.484256][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc <48> 8d 64 24 08 c3 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc [ 991.484275][ C1] RSP: 0018:ffffc90000a18440 EFLAGS: 00000093 [ 991.484294][ C1] RAX: 0000000080000102 RBX: ffffc90000a18530 RCX: 0000000000000102 [ 991.484311][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000001 [ 991.484326][ C1] RBP: ffffc90000a18520 R08: ffffc90000a1857f R09: ffffc90000a18570 [ 991.484344][ C1] R10: dffffc0000000000 R11: fffff520001430b0 R12: dffffc0000000000 [ 991.484362][ C1] R13: ffffc90000a18520 R14: ffffc90000a11000 R15: ffffc90000a18908 [ 991.484383][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 991.484402][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 991.484419][ C1] CR2: 000000110c3b176b CR3: 000000000e736000 CR4: 0000000000350ef0 [ 991.484437][ C1] Call Trace: [ 991.484445][ C1] [ 991.484454][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 991.484483][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 991.484513][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 991.484546][ C1] ? nmi_handle+0x2a/0x5a0 [ 991.484585][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 991.484607][ C1] ? nmi_handle+0x151/0x5a0 [ 991.484635][ C1] ? nmi_handle+0x2a/0x5a0 [ 991.484664][ C1] ? __entry_text_end+0x1020c9/0x1020c9 [ 991.484687][ C1] ? default_do_nmi+0x63/0x160 [ 991.484714][ C1] ? exc_nmi+0x123/0x1f0 [ 991.484738][ C1] ? end_repeat_nmi+0xf/0x53 [ 991.484766][ C1] ? __entry_text_end+0x1020c9/0x1020c9 [ 991.484790][ C1] ? __entry_text_end+0x1020c9/0x1020c9 [ 991.484816][ C1] ? __entry_text_end+0x1020c9/0x1020c9 [ 991.484840][ C1] [ 991.484848][ C1] [ 991.484855][ C1] srso_alias_return_thunk+0x5/0xfbef5 [ 991.484878][ C1] unwind_next_frame+0x18e6/0x22d0 [ 991.484911][ C1] ? __kasan_slab_free+0x59/0x70 [ 991.484940][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 991.484966][ C1] arch_stack_walk+0x11c/0x150 [ 991.484999][ C1] ? kfree+0x196/0x430 [ 991.485031][ C1] stack_trace_save+0x118/0x1d0 [ 991.485055][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 991.485078][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 991.485101][ C1] ? __pfx_lock_release+0x10/0x10 [ 991.485132][ C1] kasan_save_track+0x3f/0x80 [ 991.485155][ C1] ? kasan_save_track+0x3f/0x80 [ 991.485177][ C1] ? kasan_save_free_info+0x40/0x50 [ 991.485210][ C1] ? __kasan_slab_free+0x59/0x70 [ 991.485269][ C1] kasan_save_free_info+0x40/0x50 [ 991.485303][ C1] __kasan_slab_free+0x59/0x70 [ 991.485327][ C1] ? dummy_timer+0x7f4/0x4620 [ 991.485350][ C1] kfree+0x196/0x430 [ 991.485377][ C1] ? dummy_timer+0x7f4/0x4620 [ 991.485402][ C1] dummy_timer+0x7f4/0x4620 [ 991.485424][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.485453][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 991.485504][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.485550][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 991.485578][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 991.485601][ C1] __hrtimer_run_queues+0x59d/0xd30 [ 991.485634][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 991.485673][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 991.485707][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.485729][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.485751][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 991.485783][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 991.485821][ C1] handle_softirqs+0x2d6/0x9b0 [ 991.485856][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.485885][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 991.485922][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 991.485960][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.485982][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 991.486014][ C1] __irq_exit_rcu+0xf7/0x220 [ 991.486048][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 991.486088][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.486113][ C1] irq_exit_rcu+0x9/0x30 [ 991.486146][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 991.486177][ C1] [ 991.486185][ C1] [ 991.486193][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 991.486228][ C1] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 991.486265][ C1] Code: 8c e8 d4 f3 66 0a 65 66 8b 05 f4 10 a2 7e 66 85 c0 75 5d bf 01 00 00 00 e8 5d bd 0b 00 e8 f8 68 45 00 fb 65 8b 05 b8 10 a2 7e <85> c0 75 05 e8 37 82 a8 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 991.486283][ C1] RSP: 0018:ffffc90004a87600 EFLAGS: 00000286 [ 991.486302][ C1] RAX: 0000000080000000 RBX: 1ffff92000950ec4 RCX: ffffffff817b279a [ 991.486319][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5fb060 [ 991.486336][ C1] RBP: ffffc90004a876b0 R08: ffffffff942a4987 R09: 1ffffffff2854930 [ 991.486354][ C1] R10: dffffc0000000000 R11: fffffbfff2854931 R12: dffffc0000000000 [ 991.486372][ C1] R13: 1ffff92000950ec8 R14: ffffc90004a87640 R15: 0000000000000201 [ 991.486395][ C1] ? mark_lock+0x9a/0x360 [ 991.486428][ C1] ? wg_packet_decrypt_worker+0xcde/0xd80 [ 991.486466][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 991.486500][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.486530][ C1] ? wg_packet_decrypt_worker+0x8b3/0xd80 [ 991.486570][ C1] wg_packet_decrypt_worker+0xcde/0xd80 [ 991.486607][ C1] ? __pfx_validate_chain+0x10/0x10 [ 991.486648][ C1] ? __pfx_validate_chain+0x10/0x10 [ 991.486679][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.486702][ C1] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 991.486791][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 991.486814][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 991.486843][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 991.486878][ C1] ? process_scheduled_works+0x976/0x1840 [ 991.486902][ C1] process_scheduled_works+0xa68/0x1840 [ 991.486944][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 991.486973][ C1] ? assign_work+0x364/0x3d0 [ 991.486998][ C1] worker_thread+0x870/0xd30 [ 991.487032][ C1] ? __kthread_parkme+0x169/0x1d0 [ 991.487060][ C1] ? __pfx_worker_thread+0x10/0x10 [ 991.487084][ C1] kthread+0x2f2/0x390 [ 991.487111][ C1] ? __pfx_worker_thread+0x10/0x10 [ 991.487134][ C1] ? __pfx_kthread+0x10/0x10 [ 991.487163][ C1] ret_from_fork+0x4d/0x80 [ 991.487186][ C1] ? __pfx_kthread+0x10/0x10 [ 991.487214][ C1] ret_from_fork_asm+0x1a/0x30 [ 991.487245][ C1] [ 992.625466][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.638030][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 992.644896][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 992.655502][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 992.665573][ T30] Call Trace: [ 992.668863][ T30] [ 992.671807][ T30] dump_stack_lvl+0x241/0x360 [ 992.676530][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.681762][ T30] ? __pfx__printk+0x10/0x10 [ 992.686468][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 992.692487][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.698146][ T30] ? vscnprintf+0x5d/0x90 [ 992.702506][ T30] panic+0x349/0x880 [ 992.706434][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.712089][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 992.718271][ T30] ? __pfx_panic+0x10/0x10 [ 992.722712][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 992.728120][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.733774][ T30] ? __irq_work_queue_local+0x137/0x410 [ 992.739343][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.745081][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 992.750563][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 992.756741][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 992.762920][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 992.768572][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 992.774756][ T30] watchdog+0x1035/0x1040 [ 992.779114][ T30] ? watchdog+0x1ea/0x1040 [ 992.783560][ T30] ? __pfx_watchdog+0x10/0x10 [ 992.788262][ T30] kthread+0x2f2/0x390 [ 992.792357][ T30] ? __pfx_watchdog+0x10/0x10 [ 992.797054][ T30] ? __pfx_kthread+0x10/0x10 [ 992.801673][ T30] ret_from_fork+0x4d/0x80 [ 992.806118][ T30] ? __pfx_kthread+0x10/0x10 [ 992.810739][ T30] ret_from_fork_asm+0x1a/0x30 [ 992.815552][ T30] [ 992.820108][ T30] Kernel Offset: disabled [ 992.824616][ T30] Rebooting in 86400 seconds..