last executing test programs: 5m33.041141797s ago: executing program 32 (id=407): socket$inet6(0xa, 0x3, 0x3c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000097ffffff0000000001"], 0xffe) 5m7.81500537s ago: executing program 0 (id=516): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) (async) r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async) r2 = memfd_create(&(0x7f0000000440)='[\v\xdbX\xae[5\xa9\x90\xbemd\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eF\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1e{\n\x00\x00\x00jS\xd6\x91%||\xa0\x8e]\xc7T\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5\x02nN&\xf8#\x80z8Z\xd2}\xf5\xe4\xdf5\x9b\x01\xf8', 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0xf, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x5, "ab811687fa"}, 0x0}) (async) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) (async) r4 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa8, 0xb8, 0x9b, 0x20, 0x6f8, 0x4, 0xbfe6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x15, 0x0, 0x2, 0x43, 0xb1, 0x24, 0x0, [], [{{0x9, 0x5, 0x3, 0x4, 0x200, 0x3, 0x9, 0x9}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x1, 0x6, 0x8}}]}}]}}]}}, 0x0) (async) getsockopt$packet_int(r4, 0x107, 0xf, 0x0, &(0x7f0000000040)) (async) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) (async) r5 = fsmount(r1, 0x0, 0x1) fchdir(r5) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, &(0x7f00000008c0)) (async, rerun: 32) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x20) (async, rerun: 32) r8 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f00000000c0)=0x1, 0x4) sendfile(r8, r7, &(0x7f00000000c0)=0x4, 0x3) (async) getdents64(r7, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (rerun: 64) 5m7.644349582s ago: executing program 0 (id=518): signalfd(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)=""/248, 0xf8) 5m6.698264892s ago: executing program 0 (id=523): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000000), 0x4) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x88, 0x94, 0x5b, 0x40, 0x46d, 0x8b7, 0xca8e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdd, 0xc5, 0x42}}]}}]}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x80, 0x2e, 0xb, 0x0, 0x0, {0x6}, [@generic="13e32ae9155243f7af7e1b66910ade34ddeee761eae2787b96325be176f20c650dcc4263fb761b293b96b768be4e035f0e3acd2fef04c8147efab96e7ab44d76b053153d7ea4c21b335d2b5e6f77fc51a64092a69c220205dd8dc00a49c83ef03b60c57ce7ac0cafb6"]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x8000) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xb0, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e, 0x3, 0x1, 0x3, 0x80, 0x2d, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x7}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x2, 0x3, 0x0, 0xf1, 0xe2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x8, 0x7, {0x7, 0x25, 0x1, 0x81, 0xa6, 0x7c3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xd, 0x3, 0x9, 0x40, "a46c67bb9e"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x0, 0x9, 0xfc, "1640e67313e8"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x40, 0x2, 0x70, 0x9, "80"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0xe00, 0x1, "39f78eb81a"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x3, 0x34, {0x7, 0x25, 0x1, 0x0, 0x9, 0xb85}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000b80)={0xa, 0x6, 0x310, 0x8, 0xda, 0x2, 0xff, 0xc8}, 0x15, &(0x7f0000000bc0)={0x5, 0xf, 0x15, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x5, 0xfa, 0x2}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x422}}, {0x91, &(0x7f0000000d00)=@string={0x91, 0x3, "c24d5a4145ac051530b3b03e214fffcafd5876c272d0f4b8c888ba9509a9a50cc25d997526a39182765e72417a2aad00e8f23e17d73159c685cd9833deabd15373962fb80b5659aaa2036cfe753bb90f2a682318be004235bf8e1a116696fba3395613f090dbe1dc4c34d1e2a07fba6d29d050f48f8cb42b556eb3eaf54f91af700a45edbaf87f8b886d07f3a3a463"}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x2409}}, {0x1d, &(0x7f0000000e00)=@string={0x1d, 0x3, "cfc1ac91048e84010578c7a8cef9a099e467e6909f27882d82ec64"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x380a}}, {0xad, &(0x7f00000002c0)=@string={0xad, 0x3, "00cd0958e0f99981859c9969f70be97016acd561fbc0304a76366860a5a98950f2691709cd8a5ce71394f2d5c1fbcfe4428a3f3ab2007d5c59673b76551e6874f2d6213d974c5dd62970967109910e2bfb6a5facd345cf787f5f7f339971ec4aa201f045d42eb284dca2aa0a68ebdffa5cb4d98212e692ec4be2403d07dccfbb3614e5d5e0ddd75f2cadae62c3e491a7cbc34e38ab374eb2a4924718c2d998ebb95be971e043665a467c61"}}, {0xcb, &(0x7f0000000380)=@string={0xcb, 0x3, "3e1f9253d24d90d1325e79f3947ab346b36c58ba9bbb822af20483b8b6a4ee0a2be0715af2f11668b9156f6b427ccec6cd5b6a8ecadb6932c9b4ecba88b657543981a0248e3ac7d8701b79dbabf40879fc70f8cfc066629dcf32c46705fb1ec13c1af597f5390bf7187708096daeef6345af82edd7ccff7d26a4f0c4551c1931bda1addf59109b45a76b0022bc5bdb0fe352b0e36aa6535d380acf63ef61dc2cd9dd4f5f38f9a47bcc6296297210744a6230366fb2bba4c5fa6bf140267f7ec379cd1e2977fcf9b7ce"}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="2016490000007bf016fe41851c0aa8b473d22cd0def986f22557feb592995cb141281cca042eedebd264393b4e338d956cda9803b96dd1ea4f26912b1ba7e56c3ce3506535ee062d5197d43da6d54663c44e203b28f917ac72b1da8122c2d04099686dbf2b6c38f763c7d6a31b0d3a95218074f71112246bdcbc282df0d942369579bae5212fbae609de93367b3d"], 0x0, 0x0, 0x0, 0x0, 0x0}) 5m4.763160992s ago: executing program 0 (id=531): signalfd(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)=""/248, 0xf8) 5m4.430595812s ago: executing program 0 (id=532): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz1\x00', {0x4f36, 0x2ac4, 0x1}, 0x18, [0x100, 0x1ff, 0x8, 0x0, 0x3, 0x10, 0x1800000, 0x7, 0xfffffff5, 0x4, 0x2d25aaaf, 0x6, 0x0, 0x61, 0x7, 0x9a, 0x37c, 0x8, 0x7, 0x5, 0xb, 0xf, 0xfff, 0x1, 0x0, 0x458a, 0x3, 0x6, 0x3, 0x0, 0x4, 0x101, 0x10001, 0x2, 0x9049, 0x3, 0x0, 0x9, 0x7, 0x1, 0x3, 0x8, 0x40, 0xbdb4, 0x1, 0x9, 0x81, 0x7, 0x62, 0x9, 0x7fffffff, 0x10, 0x2, 0x8, 0x2, 0x8, 0x10000, 0x5, 0x7ff, 0x2, 0x1, 0x1, 0xffff, 0x6], [0x10001, 0x6, 0x4, 0x8, 0x3, 0x6, 0x128f00, 0xb488, 0xfffffff7, 0x0, 0x81, 0x8, 0x4d, 0x7, 0x401, 0xf03, 0x3, 0x1, 0x0, 0x8, 0xb, 0x1, 0xb7b, 0x7, 0x5, 0x4, 0xa1, 0xfffff000, 0x3ff, 0x10000, 0x6, 0x4, 0x7, 0xe, 0x7fffffff, 0x4, 0x5d2acac, 0x0, 0xaed, 0x10001, 0x91f, 0x1000, 0x100, 0x7, 0x4, 0x9, 0x6, 0xc00, 0x10, 0x7, 0x80000000, 0x2, 0x7d76, 0x2, 0x3, 0x5, 0x5, 0xffffffff, 0x4, 0xffff, 0x2, 0x3, 0x4, 0x8], [0x7, 0x5, 0x7fff, 0x1, 0x4, 0xe7c, 0x3ffc000, 0x6, 0x80000000, 0x9, 0x4, 0x7fff, 0x7, 0x4, 0x3, 0x7, 0x5, 0x800, 0x0, 0x10, 0x8, 0x0, 0x400, 0x7, 0x1ff, 0x2, 0x6, 0xfffff000, 0x2, 0x5, 0x0, 0x7, 0x7, 0xcc, 0x2, 0x5, 0x6, 0xf9, 0x8, 0x4, 0x3, 0x7fffffff, 0x1, 0x7, 0xcff, 0xc, 0x66, 0x9, 0x42f, 0x2, 0x4, 0x7f, 0x401, 0x5, 0x1, 0x7ff, 0x9, 0x9, 0x459, 0x5, 0x8, 0x0, 0x3, 0x1ff], [0x1, 0x6b, 0x8, 0x2, 0x6, 0xfffffff9, 0x80, 0x9, 0x6, 0x6, 0x5a666cf9, 0xac0e, 0x2baf, 0x79, 0x1, 0x5, 0x7, 0x2, 0x6, 0x8, 0x8, 0x0, 0x13, 0xfffffff7, 0x4, 0x5, 0x6, 0x8, 0x3, 0x80, 0xffff, 0x29dd, 0x80000001, 0x6, 0x401, 0x7, 0x9, 0x7, 0xb6, 0xfffffffa, 0x6aa0, 0x2, 0x4, 0x800, 0x9, 0x9, 0x6, 0x6, 0x9, 0x1000, 0xc590, 0x6, 0xe679, 0x776, 0x401, 0x100, 0x4, 0x1, 0x200, 0xfffffffb, 0xe8, 0x1, 0x7, 0x5]}, 0x45c) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f0000001680)=""/4121, 0x1019, 0x10001, 0x0, 0x0) 5m3.799523139s ago: executing program 0 (id=536): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x4, "fe211774"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000a80)={0x40, 0xf, 0x4, "68ae5e08"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f00000001c0)={0x40, 0x9, 0xfffffffffffffe78, "eb6b7398"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x18, 0x10d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000000)={0x20, 0x16, 0x4, "c7660ea0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) close(0x3) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5m3.332215244s ago: executing program 33 (id=536): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x4, "fe211774"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000f40)={0x1c, &(0x7f0000000a80)={0x40, 0xf, 0x4, "68ae5e08"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001240)={0x34, &(0x7f00000001c0)={0x40, 0x9, 0xfffffffffffffe78, "eb6b7398"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x18, 0x10d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000ac0)={0x34, &(0x7f0000000000)={0x20, 0x16, 0x4, "c7660ea0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) close(0x3) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2m44.386918152s ago: executing program 3 (id=905): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r0) sendfile(r0, r0, &(0x7f0000000000)=0xa, 0x6) (async) sendfile(r0, r0, &(0x7f0000000000)=0xa, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x404, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x3118, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) (async) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x404, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x3118, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x442000, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x442000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'macsec0\x00', @remote}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$bt_hci(r4, 0x0, 0x2, &(0x7f0000000240)=""/117, &(0x7f00000002c0)=0x75) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) (async) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000440)={0x0, 0xf, 0x10, 0x6, 0x20000}, &(0x7f0000000480)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000004c0)={r7, 0x7, 0x20}, 0xc) recvfrom(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x10021, &(0x7f0000001500)=@can, 0x80) (async) recvfrom(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x10021, &(0x7f0000001500)=@can, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = dup3(r1, r5, 0x80000) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000001580)=0x1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r10, 0x84, 0x22, &(0x7f00000015c0)={0x7920, 0x6, 0x5, 0x1, r7}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001600)=0x0) syz_open_procfs(r11, &(0x7f0000001640)='net/wireless\x00') (async) r12 = syz_open_procfs(r11, &(0x7f0000001640)='net/wireless\x00') ioctl$TCFLSH(r5, 0x540b, 0x2) (async) ioctl$TCFLSH(r5, 0x540b, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r6, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x1c, r6, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) ioctl$EXT4_IOC_GETFSUUID(r8, 0x8008662c, &(0x7f0000001780)) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000017c0)=0x6) r13 = syz_genetlink_get_family_id$team(&(0x7f0000001840), r1) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000001880)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r12, &(0x7f0000003000)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002500)={0xab8, r13, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r14}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0x4, 0x0, 0xfffffffe}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdd6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x3, 0x0, 0x5, 0x9}, {0x5, 0x0, 0xd, 0x7}, {0x8000, 0x8, 0x5, 0x1}, {0x42a7, 0x47, 0x0, 0x4}, {0x9, 0x5, 0x9, 0x7c000000}, {0x9, 0x7, 0x6, 0x5}, {0xff, 0xe, 0x7, 0xe80d}, {0x4, 0x9, 0xf, 0x60d2}]}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xffff, 0x7f, 0x4a, 0x3}, {0x2, 0x9, 0xa5, 0x1}, {0x80, 0x3, 0x2}, {0x7, 0x5, 0xf7, 0x2}, {0x81, 0xbd, 0x2, 0x1}, {0xff, 0x0, 0x81, 0x200}, {0x7fff, 0x5, 0x1, 0x3ff}, {0x0, 0xfd, 0x8, 0x6}, {0x8, 0xe, 0x6b, 0x4}]}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x3, 0x3, 0x37, 0x1}, {0x7, 0x8, 0x3, 0x3}, {0xff, 0x0, 0x9, 0x10001}, {0x8, 0x5, 0x0, 0x1c6}, {0x3, 0x4, 0xf8, 0x3}, {0xc38, 0x5, 0xd, 0x66d65e1a}, {0xfe00, 0x9, 0x0, 0x6}, {0x3ea, 0xfc, 0x9, 0xfffffffb}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x8, 0x4, 0x4}, {0x0, 0x2, 0x81, 0x7}, {0xfffc, 0x7f, 0x4, 0x7}, {0x703, 0x2d, 0x5, 0x98}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4e}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}]}, 0xab8}}, 0x0) (async) sendmsg$TEAM_CMD_NOOP(r12, &(0x7f0000003000)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000002500)={0xab8, r13, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r14}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x40, 0x4, 0x0, 0xfffffffe}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdd6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x3, 0x0, 0x5, 0x9}, {0x5, 0x0, 0xd, 0x7}, {0x8000, 0x8, 0x5, 0x1}, {0x42a7, 0x47, 0x0, 0x4}, {0x9, 0x5, 0x9, 0x7c000000}, {0x9, 0x7, 0x6, 0x5}, {0xff, 0xe, 0x7, 0xe80d}, {0x4, 0x9, 0xf, 0x60d2}]}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xd1}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0xffff, 0x7f, 0x4a, 0x3}, {0x2, 0x9, 0xa5, 0x1}, {0x80, 0x3, 0x2}, {0x7, 0x5, 0xf7, 0x2}, {0x81, 0xbd, 0x2, 0x1}, {0xff, 0x0, 0x81, 0x200}, {0x7fff, 0x5, 0x1, 0x3ff}, {0x0, 0xfd, 0x8, 0x6}, {0x8, 0xe, 0x6b, 0x4}]}}}]}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x3, 0x3, 0x37, 0x1}, {0x7, 0x8, 0x3, 0x3}, {0xff, 0x0, 0x9, 0x10001}, {0x8, 0x5, 0x0, 0x1c6}, {0x3, 0x4, 0xf8, 0x3}, {0xc38, 0x5, 0xd, 0x66d65e1a}, {0xfe00, 0x9, 0x0, 0x6}, {0x3ea, 0xfc, 0x9, 0xfffffffb}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x6, 0x8, 0x4, 0x4}, {0x0, 0x2, 0x81, 0x7}, {0xfffc, 0x7f, 0x4, 0x7}, {0x703, 0x2d, 0x5, 0x98}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4e}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}]}, 0xab8}}, 0x0) 2m44.267628726s ago: executing program 3 (id=906): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080c4}, 0x40004) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbff, 0x2) io_setup(0x5, &(0x7f0000000280)=0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000002740)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xfff, r4, 0x0, 0x0, 0x8}]) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000100)={0x98f907, 0x9}) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x2, 0x9, 0x41, 0x5}]}) timer_delete(r5) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x5, 0x0, &(0x7f0000000000)) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e1d, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}}, 0x24) 2m43.361658525s ago: executing program 3 (id=913): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x10) semget(0x2, 0x4, 0x212) semget(0x2, 0x6, 0x483) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d"], 0x5a) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0xd8d0481}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 2m43.054791399s ago: executing program 3 (id=916): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) (fail_nth: 6) 2m42.519514365s ago: executing program 3 (id=919): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb05, 0x1a30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x33}}}}}]}}]}}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x80000) sendto$inet(r1, &(0x7f0000000140)="d3d333620eab870e55d6927fb47d1ddacb9e9d4db9c7e55a6caa896653abd6846677fcea95a7f6f56ab634e6cad3aa0a6a7c42bfa1f98471747f010a77306c411f70fd524ea81a318e829e1492da6faffe5df5e775c05e88aba8889e868e3d3c03c7d6d537cc892e31cfd869c3cbf13c4b3194eb1f3d6cbde4915e743f4078738f023e5aa28ce391770c9354cf80b878f9274f6e7ae5b9b2275cf319411a331e59c8dcf752a53c6c04a171fdea4c494bb6d14d195d43d9cd41f5e64b86c9e21793404566f8c031fbcaf87145", 0xcc, 0x24000884, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0xed, 0x0, 0x1, [{0xa9, &(0x7f0000000440)=@string={0xa9, 0x3, "7d24574da526d26a275cebd4b6c719a3f1e289eb659582f73a65d85e3e6772d06bc78297796661b078f0fb413369513fab17c77cd70fb069c197b1e5f11afa8936ced72f8a6bb4d6492c071b6821002208d00355115afae38cc1f53bcca4336cff116f23a4d66eecbbfc76d66f8ae8c80de63fced16d29f500f966654c709b21df10e4cff84b2fbdc23ad08a424eac61a60382b03aa9959a60fd5e8b91fa2db1946d855a562085"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2m41.302446261s ago: executing program 3 (id=923): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000391000000910356f90ec2a7c1e1831433babaf60c9213806850d3895db982403f22636b8382a57e0dc961c2dcbfc552e28d3ab8ae15b5be0745544ec88e4c49c96fa8c74461d5aa82e7ee676b0f29a4779d77725c20ec63f4fedeb1d344743d081eba89bfd90ca8d03b101c1bd0f87a6db0ee3a8fec9a5494e91f48ad06d2815b4a48dd7afbaf75fb6c49"], 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000c9ff00", "2809e8dbe108598948224ad558fac11d875397bdb22d0022b45f819e01177d3d45ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m40.965013237s ago: executing program 34 (id=923): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000391000000910356f90ec2a7c1e1831433babaf60c9213806850d3895db982403f22636b8382a57e0dc961c2dcbfc552e28d3ab8ae15b5be0745544ec88e4c49c96fa8c74461d5aa82e7ee676b0f29a4779d77725c20ec63f4fedeb1d344743d081eba89bfd90ca8d03b101c1bd0f87a6db0ee3a8fec9a5494e91f48ad06d2815b4a48dd7afbaf75fb6c49"], 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000c9ff00", "2809e8dbe108598948224ad558fac11d875397bdb22d0022b45f819e01177d3d45ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m26.184067673s ago: executing program 2 (id=979): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x9b3, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0xc0086202, &(0x7f0000000540)=0x1) sendto$packet(r2, 0x0, 0x0, 0x1, &(0x7f0000000040)={0x11, 0x1b, r1, 0x1, 0x5}, 0x14) io_setup(0x4, &(0x7f0000000040)=0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffff, r7, 0x0, 0x0, 0x10001, 0x0, 0x2}]) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r9) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r9) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000002080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r12, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x2c, r13, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x200000d6) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)={0x21c, r11, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7ff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x138, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x26a}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}]}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$NET_DM_CMD_START(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x14, r10, 0x1, 0x70bd2b}, 0x14}}, 0x0) sendmsg$NET_DM_CMD_STOP(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r10, 0x33, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r10, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x8080) 2m26.073753238s ago: executing program 2 (id=980): socket$inet6(0xa, 0x80000, 0x7) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 2m25.372434853s ago: executing program 2 (id=982): ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000002c0)={0xc, r2}) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x1) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f00000001c0)={0x18, 0x1, 0x0, 0x0, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x48, 0xa, r0, 0x0, r2}) 2m25.338136254s ago: executing program 2 (id=983): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x0, r2, 0x1, 0x80000001, 0xb, 0x1fd, 0x1}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd, 0x7}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1, 0x6dc6}}]}, 0xb0}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) 2m25.053136519s ago: executing program 2 (id=984): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x1000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a100000000005000100060000000500050000000000050004000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x4000000) 2m24.152364864s ago: executing program 2 (id=985): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0xf4ff) 2m23.859679571s ago: executing program 35 (id=985): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) llistxattr(&(0x7f0000000000)='./file1\x00', 0x0, 0xf4ff) 1m44.36506803s ago: executing program 7 (id=1258): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)='|', 0x1}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0xc, 0x2) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c9000c000800050007800400ff010600abb509724433b5bc7dfb9324e3097442b978f38dc7a857a991401f9724e3935b3dcdbad76a5e8afcf266fd5f8046d30f72fcdbe9566439b4d69c010b79fbcf3bd3788e0ab9"], 0x11) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) write(r2, 0x0, 0x0) 1m43.27949537s ago: executing program 7 (id=1273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000280)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae8000000000a01010000000000000000050000000900010073797a3000000000ba000600e9eec003775c64e64f439fc0b5fb34bcd039590bba579a25436e11f718b64e3e01796b9e930a3d8eefa0bccf8429a311f3ce5ec5a0a7bb9e08c60e03cbcdd726725fb9b1bd1000cf2a77ab6ab91f2294632773ea59b8de2361cdd8045c5fdb81611e843cb814e4cfe672542287ebd3b2ed48dca1a08690b05bb9bbbcc05551bd05e4c6e0625fcae04323e0f29dbad3c57456d2ca020462188e1236ebe6da1442c71ab0a8ebfaacef2710111417370a0f8cd19c5f9e1a00000900010073797a300000000014010000030a01030000000000000000050000000900010073797a30000000000800054000000000af000c008451bef8928cf9ec5c3c0fca5cedf6b9ae811484cd4abbaec9eba3118a64f7b105ab0e5c8e377ddaf98490703415da6a50c72a1434c93ef4daa32cd2b643c4ab99e8adc29f67b58cd27b71b30213e6acd60b8fa2190c3fd64f382e41b97f4b12379ce9470cbfdb02cc2a2d8e0e7aec144e2df705b37b99cafc9b141b0f3176897eba9802e14cc423ecff994b4ff320f5786bd4fba343449446d922b94ac3f8621197db4c2dc061e9278f5a000900030073797a32000000000b00070066696c746572000024000480080002406b10a6210800014000000004"], 0x238}}, 0x0) 1m43.124341983s ago: executing program 7 (id=1274): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000180)={0x29}, 0x8) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYRES64=r3], 0x114}], 0x1, 0x0, 0x0, 0x44004}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}, 0x1e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'sit0\x00'}}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f00000000c0)=0x58, 0x7) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd70100407000088463651"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) getpeername$inet(r5, &(0x7f0000000240)={0x2, 0x0, @loopback}, &(0x7f00000002c0)=0x10) 1m43.069745983s ago: executing program 7 (id=1275): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r1, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000007c0)="a960e57530b65741465209e7c6235055450b1ed3da8592b928d8e20971659d8e3ca392643af5fa7ae0e3455099a5f7b857afa34cbf9962bdc9db46a15e7dcf9412a2b98b6ae75ca1bd7eae82d94855e9ced28430f77527b7c0b999eab05883ce32fa9b99187b196d53939db62b2b37c0cd0dea2a1be6f97dbcd0937bb416c3fb74a9d08d9afa4c86a507485b0e6821ba9d82e6b8522a6eba1734eccbc5659567aa08b5b93be09bc2a6d6319acbd1aeb751f8e9b7ce9e2f42", 0xb8}, {&(0x7f0000001400)="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", 0xb4b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb", 0x55}, {&(0x7f0000000a40)}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000080)="f78d7c0d", 0xfffffffffffffe9e}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935846098ed884e7cb51726b360fbb37b4fe035bbb095873058", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459beb1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x2000}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) getsockopt$ax25_int(r3, 0x101, 0x1, &(0x7f0000000500), &(0x7f0000000040)=0x4) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000680)={0x1, 0x6}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000940)={'bond0\x00', &(0x7f0000000900)=@ethtool_eee={0x44, 0x7, 0x10, 0x8, 0x0, 0x800, 0x2, 0x9, [0x5, 0x8000]}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) r6 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5c6fca00) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000bc0)=0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000b80)={&(0x7f0000000640), 0xc, &(0x7f0000000b40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="28020000078b48e1f5e993b6832db80bb1cb605cccf21e9fe99be792e80bc286", @ANYRES16=r5, @ANYBLOB="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"], 0x228}}, 0x20000044) r8 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffffffffffb, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101b, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000980)=ANY=[@ANYRES64=r6, @ANYRES16=r5, @ANYRES16=r7, @ANYRES16=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x20008004) 1m42.992246044s ago: executing program 7 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x410000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001b00fe"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) io_setup(0x8f0, &(0x7f0000002400)=0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c521c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) io_submit(r3, 0x1, &(0x7f0000000900)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r5 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2600, 0x175) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000000c0)={0x10000, 0x8000, 0x1}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000002c0)={0x72, 0x4, r9, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x800}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000240)={0x28, 0x3, r9, 0x0, &(0x7f0000000380)="f3", 0x1, 0xfffffffffffffc01}) prctl$PR_SCHED_CORE(0x46, 0xfffffffe, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r7, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r7, 0x0, &(0x7f0000000300)='O', 0x1, 0xff}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r7, 0x0, &(0x7f0000000500)="0f69", 0x2, 0x7ff}) syz_usb_connect(0x0, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582", @ANYRES32=r0], 0x0) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000001c0)=0x10) io_submit(r3, 0x0, &(0x7f00000001c0)) 1m41.631404536s ago: executing program 7 (id=1287): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x90403, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x6, 0x102, 0x0, {0xfffffffe, 0x2, 0x83, 0x4}}) 1m34.262868287s ago: executing program 4 (id=1328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x0, 0x9, 0x3f8, 0x2, 0x41, 0x0, 0xfd}, 0x9c) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') read$FUSE(r3, 0x0, 0x0) 1m34.056255746s ago: executing program 4 (id=1332): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301010009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0}, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x840000, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0x9, 0x676, 0x5, 0x0, 0x80, "ae3e25ba48f424fa94e166cb269d9462407bab", 0xa718, 0x7}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5015, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x1, 0x7f, {0x9, 0x21, 0x0, 0xe5, 0x1, {0x22, 0x25f}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd, 0x3, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xc2, 0x4, 0xc3}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x0, 0xf8, 0xd0, 0xff, 0x40}, 0xaf, &(0x7f0000000300)={0x5, 0xf, 0xaf, 0x6, [@generic={0xe, 0x10, 0xb, "612ecee8dd7461f994f427"}, @generic={0x70, 0x10, 0x1, "c3ec8d15ce21c1623a6fec1257626260b94d642a47fafc26827ae45751e1b7d41ecf75baf983c14797ac0c88e9c91029e6c26425ea57a6e30e3fd6a0f3fae755772f87d18908bcdcc239c9d3817583546141f133dbb26c45428f66d6b2967a07658867f9f9d5868be8e8fe5136"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "9b2291d689a0689ee2290735694293ad"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2c, 0x1, 0xff, 0xfff, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x6, 0x3}]}, 0x2, [{0x28, &(0x7f00000003c0)=@string={0x28, 0x3, "da593c902f476c29cc607b23b0d34ee7d86ce93a040f6f544533eeedab895f7817cee567d574"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2009}}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/llc/core\x00') ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000006066954000000000000000007000003050001"], 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x24000000) socketpair(0x10, 0x800, 0x1, &(0x7f0000000000)) 1m32.469884321s ago: executing program 4 (id=1339): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, &(0x7f0000000080)={0x80, 0x0, 0x5}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1m30.196375058s ago: executing program 4 (id=1356): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000001f80), 0x1, 0x0) read$char_usb(r1, 0x0, 0x60ff) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e000000000002a1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000140001132bbd7000fcdbdf251040"], 0x24}, 0x1, 0x0, 0x0, 0x20020000}, 0x40880) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r5 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902930003010000000904000000010100000a2401ff0300020102132406040006020000000000000001000000000924030000010000000924050100f8431cfd0924030002030604c006240504000009040100000101", @ANYRESHEX], 0x0) 1m29.448084278s ago: executing program 4 (id=1364): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000001840), 0x1, 0x200) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, 0x0) r2 = memfd_create(&(0x7f0000000400)='-&:\n-\xb2];\x0f\xb2\x86NV6&\xb8=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92\x87#Yg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0x1) r3 = fanotify_init(0x0, 0x1) fanotify_mark(r3, 0x1, 0x1b, r2, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000e40)={0x990a22}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x10f801) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000080)) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000000)={0x7, 'syz0\x00'}) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x6e, 0x40, 0xb7, 0x40, 0x9e1, 0x5121, 0x40c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0xac, 0x24}}]}}]}}, 0x0) 1m28.020439516s ago: executing program 4 (id=1371): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000391000000910356f90ec2a7c1e1831433babaf60c9213806850d3895db982403f22636b8382a57e0dc961c2dcbfc552e28d3ab8ae15b5be0745544ec88e4c49c96fa8c74461d5aa82e7ee676b0f29a4779d77725c20ec63f4fedeb1d344743d081eba89bfd90ca8d03b101c1bd0f87a6db0ee3a8fec9a5494e91f48ad06d2815b4a48dd7afbaf75fb6c49"], 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000041a9e50b00", "2809e8dbe108598948224ad558fac11d875397bdb22d0022b45f819e01177d3d45ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m26.405649213s ago: executing program 36 (id=1287): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x90403, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, 0x0) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x6, 0x102, 0x0, {0xfffffffe, 0x2, 0x83, 0x4}}) 1m12.956585211s ago: executing program 37 (id=1371): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000391000000910356f90ec2a7c1e1831433babaf60c9213806850d3895db982403f22636b8382a57e0dc961c2dcbfc552e28d3ab8ae15b5be0745544ec88e4c49c96fa8c74461d5aa82e7ee676b0f29a4779d77725c20ec63f4fedeb1d344743d081eba89bfd90ca8d03b101c1bd0f87a6db0ee3a8fec9a5494e91f48ad06d2815b4a48dd7afbaf75fb6c49"], 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000041a9e50b00", "2809e8dbe108598948224ad558fac11d875397bdb22d0022b45f819e01177d3d45ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 58.960316107s ago: executing program 6 (id=1532): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="401425"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x20, 0x16, 0x4, "97d3b806"}, 0x0, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6c}, &(0x7f00000007c0)={0x20, 0x0, 0x2}, 0x0, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x8e}}) 58.410702375s ago: executing program 6 (id=1534): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='A', 0x1}], 0x1, &(0x7f0000000900)=ANY=[], 0x18}}], 0x1, 0x0) accept(r1, 0x0, 0x0) 57.519294321s ago: executing program 6 (id=1541): ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0xfffffffc, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x0, 0xec, 0x3, 0x2}, {0x5256, 0x27, 0x9, 0x101}, {0x1, 0x0, 0x47, 0x3}, {0x868b, 0x25, 0x42, 0x6}, {0xa, 0x40, 0x0, 0x3ff}, {0xafa0, 0x6, 0x0, 0xfffffffd}, {0xaa, 0x7, 0x75, 0x4}, {0x7ff, 0x1, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000140)={r3, 0x2, 0xffffffffffffffff, 0x5, 0x80000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r5, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x10}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1000c040}, 0x800) r6 = syz_usb_connect(0x2, 0xce4, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x17, 0xc4, 0xb, 0xff, 0x1b3d, 0x1ab, 0xdeb4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcd2, 0x4, 0x9, 0x40, 0x0, 0xff, [{{0x9, 0x4, 0x15, 0x8, 0x6, 0x9a, 0xf6, 0xd9, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x6}, [@feature_unit={0x11, 0x24, 0x6, 0x4, 0x3, 0x5, [0x8, 0x7, 0x8, 0x5, 0x6], 0x4}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x7, '[ON*'}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0xe}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x303, 0x3, 0x1, 0x3}]}, @generic={0x81, 0xa, "041e2d5127c060edee44917f9cc10c9bf348416b2dc32e34c2fceef1d1e5334287251681bc6d91a3b7c6d1ebc8eeb8b3c54bb6a7227a7a0f61a5c60031f6006c6a125455265b3b3c791baf12d90a3b5177c485015bbcfce0de02a35a0dbddc37878b93f7c1cde2243a540f91c77251321047c746d8bb1eb90dd850332129c0"}], [{{0x9, 0x5, 0x5, 0x2, 0x40, 0x8, 0x2, 0x10, [@generic={0xcb, 0x22, "02e6c8485583604cba74077a030060e8ab0726ceedd703166742803bac1198535736cbf91631879944c3571377018f73d9c4fe370c22f76187273c960d1db1d06c24dec06b289c44b065b7e585ddf3f0414e047e7e426865ee89b1a5fbf8d12bd78752251cd3be24907051be5bacdadf5ee980dd088627358d87aefcacb5e277e95336036ac84534f9d0647e2dbf56459db4cc41a2903131168c55873d76e8d0b6b6c5b833c5d2366a0922ce941a591a7ba5fa285ddad2964adc176ee99e46742ac4098486c31e1a46"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0xc, 0xdb, 0x1, [@generic={0x5a, 0xc, "6a915ee295be0f9c3d2da2076d70c4f059cfc7ee66eae39d4e47861c09e4ff8c0518b6cc9d12a404264fa504ec87df15a7e6b151b69a6447f80fc4b2ee56e75b24d4268a4433a7b07d192abf10e05f00ad626aa5c388027e"}, @generic={0x1a, 0x30, "52ae77697053783c434148cb6537277a6667c759485cce84"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0xdd, 0x4, 0x8c, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x1000}]}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0x4, 0x81, 0x6a, [@generic={0x76, 0x1, "3c06e716a26b52320be9b26232dfb1a2edf23e4782b110ec2c3a5b95561f70432881a477851761571fe88d6545bc89716e118cf349660848f120c0626cffbc91ed991f0fd9bfae1637dd59e5344af1b48cc4cf44ed86f85b046254916f9384c7e598f1d866b395edc1f636fccea65c7fa2cf0bc4"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x6}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x2, 0x5, 0x0, [@generic={0xdb, 0x1, "1f5fe5eb4653aab2eef120ce0ecc3132cb2c79ec70c32b846ea91dd5c98dbd1283e015dbf77b374326597161489dd371152ba475a9772839f65fa6248c88f26927359afbc00d28062762321c2a0955a7dc89d388c20dca86e7ad91a694c1190e6e3ed7f8d9e007956845a9c904d8f15d078cb7abe050ab671beb9cbc25106a2435a9b72eeeada726044d15733f37264451c680d0126bc0b4dabc867b618b15f7f9e26f098b2da6c7f72ba874b6be104a926307cdff7412945c80f64e74c8a657374ef5e4c6c760f03cde1d9af3fc3473aacc8aaf9a6e31de81"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x6, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xff, 0x3}]}}]}}, {{0x9, 0x4, 0xdf, 0x2, 0x9, 0x97, 0xcf, 0xcc, 0xe8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "aa93"}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x7, 0x80}, {0x6, 0x24, 0x1a, 0xfff9, 0x20}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @country_functional={0xa, 0x24, 0x7, 0x40, 0x3, [0xae70, 0x3]}, @call_mgmt={0x5, 0x24, 0x1, 0x5, 0xf6}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}], [{{0x9, 0x5, 0x9, 0x0, 0x400, 0x2, 0x8, 0x4, [@generic={0xc6, 0x22, "d0a7ea7bf13977f66d1edd4eaf4d04af55c536f9688e09048828bc11d5d2a1ba2e944a8109439d93998a60fbca5846d139b94b0aa770da19baba4002a441cb891081d52758368108f6ec38168fc8d593f3311955d9bf99a6cb09a361e1712e34cf2749b7e6acdabdc49069bacd83f9bd2c996e61fc5390a70860dc94a3b037ecb9f2cf8397e496987003dbaf49262e824444f87296349d802cf0ae1d9780bf1578d972f46c480185796e270170a602cb52e88e4fb77daeeaaca6e3d89d0692d0521009a7"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x9, 0x6, 0x26, [@generic={0x69, 0x24, "1b79c5d2da4aa8c48d41f7c9fc89d176e16a715d0e831d0a494da3a0e023530603e484ef5344a4a1eb9287371749e11ba2c7947d9dfbacd659134c6ca8c52f48d9ef3de1e73d626e0950d1fc6acfb28b926dd0055686ed9931e4f47f5d2eea644c1d48d0a4b6de"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0xea, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xfff}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0xfc, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0xffff}]}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x5, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x3}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x4, 0x1, 0x0, [@generic={0xc4, 0x4, "a6b70b7cebe9d3c4d0b5fcdde7aebbc0eabba767273e1773e4a8a82e96d8e403a30318107305203a230779be25e3f5d52cb799b3d242df24f7a2721acb67f59308c13ee1062b423190913cc9de868508e8f405edc46d463e7be97c0005e5fcba2878c5f9d143f7d687ac00b2350ef45ed17e3e0474bfdfa5fb77040f939d8620f7f79a8a6af8c13b87b10327547ca928741f75a110df97a2ea8c7d9a79d695e64799f70313c0ec543a3878407b482960c90935c31fa5a3540eb8548d44026f459853"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x81, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xe, 0x7efb}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x9, 0x2, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc2, 0x80}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x8, 0x75, 0x2, [@generic={0x62, 0x3, "514c7600cd8afc2cce6a147654c975ce45df835755b90672e9acf3ebec75ca710dd1d1e6e20dd1fd06a51d3866b3d22d36c2814bb358a18f999d5b30ea5b1864a550ffd779b85a19efbf6f48a5786799796dceb11610894831f643f58d83089a"}, @generic={0xfa, 0xe, "26d2a60cd4645340a0c026e1a69f21d4f10856b072fda82a30d3ed8e972ddd14320400151f5ec71004fbab3b4aab57fec26c8baefecc2503cef1986f1320b969e6de6e581b0ac8fc532329c6cab0d563698053f8c58168fddfc04904688b88f4e0e22be6ec4bd05980c8c31e4cce62051557fa42268d4b07d1ffddb15dcc2f29405cd23787328de653f4b67c271d4f91dfe1131fa69490485441ee8d28b9210b7a44fdc881ba51962449eee91a98f2f2c0d72c52575bf5b800d670bf20333f8b7bd1a0f9d8b0e210af88bb4ee7e8f2cdb72f1ee33137f7ca04be6f81fee96796ed6b1c9a355f1af70aa0c703e60c56e139e7b60ad30f7028"}]}}]}}, {{0x9, 0x4, 0x45, 0x6, 0x1, 0x41, 0xf4, 0x6d, 0x80, [@hid_hid={0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x47b}}], [{{0x9, 0x5, 0xd, 0x3, 0x8, 0x0, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xcf44ba1dc31c47d7, 0x4, 0x4a8c}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x5}]}}]}}, {{0x9, 0x4, 0x78, 0x5, 0x8, 0x2, 0x6, 0x0, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x400}, [@mixer_unit={0x9, 0x24, 0x4, 0x3, 0x8, "dbfdbd63"}]}], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0x10, 0x7, 0x6d, [@generic={0x68, 0x1, "508fa39342473ab1ec060375dfba9e9fdf536da236f780ceb58b6824dfb55554408eb3b1a30bf1ac47a790f21f838243c594c430ddbdc4406e5a5114b0172703c0148e7fdb1c3805a8ec5e6c4480a0958ee339254c4d5d0bd448deb6075758738adfdd76e064"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x3ff, 0x9, 0x4, 0x5, [@generic={0xf4, 0x23, "fce78cf6479b7e1504fa77f51e0cc913fdb2dd57cc96ec0c5d602787c17e478d80a814c94a501dc0c6fec2e6799c7d951a431cea73f2430329ef075c82c287e1036c35308e23066968cde9bbb939103b2afb75de931fbccc55ee9012004d67acbc307956c4011e67242d56ba681bc91d844d4f0e270d9480e1b01b921cad633bb1b476ad5a712c5a9f5bd98384766e2d27fcbc5f843ea3d8ea6d415883fa313aa65b01933a24bc67b32070b7f30d764279dfd58de3e6d5ffa9611526a412f0dd6bd4fea2a6559fa550bde21f08c4d8e5bac0f98283b5326abb2d81d6f9fc78a0b566c900df8c781779a7ca6b5948815d6ab3"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x5f7, 0x0, 0x4, 0x3, [@generic={0x1e, 0xa, "1f0bb506ddf002369cf9331ce8081ba503685c7f4eebe2254bd75191"}, @generic={0xbc, 0xe, "ccae488544fd361484914ab2e84e9efbee660c6a957e181598408cb8ebd2b60ca96bf84eba812192f161a7e72f1f812b4990e4666941d4c34d3fd3c8b612c7c53442cd6646e30e93aa800bdbf48be0701649e711ffab223481b7948ef95111183335ca0504a3ad13b977b9c98bb3bff89dfdd544d9144237e7fe23eb1a4faf85fb8c6ff6df6175614fff89d2c0c36e623d54d2490e9b230cf17d465541cfeee094e2cc58075a7b0e643a2da511430391417b7023f62e14f148f5"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0xd, 0x3, 0x3, [@generic={0xde, 0x5, "0d83262848c5a6643b5cf9972f852e7c26155773f47c6ffb4a718edb6c871ac45e957598d9e9fc5939212ad0fae28c561d2de1b343fd391c43de988efc8f3f1b34e8fac46c911c3f975c26c034cdb41c062a6a31f611a0fbbe10877ceb031a92736e4cbad46dc5c3974a2e4240fee7a1eacb9eab9a4f019d48a3e6ab0750d21eff2de39ed6a211ac6f9b2e73c508501513379a5af85cbf0bc8dcd7fb06189adacc8d1dde855f6c31f09b22b0d861c8a921b2552ccbcf63e5ebd07d26868e2047ad05163f3f8b671f1d3d2b24a256d40a129cfc95edc8bf4e8984a7b3"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x9, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfffe}]}}, {{0x9, 0x5, 0x6, 0x0, 0x200, 0x8, 0x30, 0x8, [@generic={0xd8, 0x21, "9455672205b27e9b20956be8e9a6e18c5aeb15a72b5c4ae04082bafaf72ca0cdf045bde3c72b2c80535f9ae15f507205acbf57016a5e84d84f7f966d991424ef98861621d9ee989355eece0c653a4d3354ba2645af27e75f97be5dbe7e2fe9157a7e51fd2a84be2b2699c6235d728447c6342f7f2f6feb67eb288dde647fbc72aeddf6906cdb581a116e915df6ed283eebad9ba1d5d2b91ef368ed3d4867029a9075d307003e703fc03998c4e73c85fee67b54ba2605117b9a545afe3f6ccd7294afba7da29772a08c3af27b78ce3452c1b6c235f163"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x20, 0x0, 0x5, 0x2, [@generic={0x9b, 0x7, "d4531678556b471e59e6692f0fc779c1bd100bfae386d35aad87f9a3ef0f11eea633be2671a1c28ccf0ebda9d0526a211d3dec902f72a298b39a18be2f56f72a5b0205f8792b3b586665a69dc44f4d572129b4c9f4ba68eb28d27023b60729a7de509352836b705cb413b3c58828af25fbb6753c6184a66fc246b90d34701747f20d8acb7aad72afea4e8c13597c0f1a0b744b25997717e2a9"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x4}]}}, {{0x9, 0x5, 0x2, 0x15, 0x400, 0xea, 0x0, 0xd7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x7}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x310, 0x7, 0x80, 0xe, 0x10, 0x7}, 0x8, &(0x7f00000010c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x5d, &(0x7f0000001100)=@string={0x5d, 0x3, "cdc6fb32fe430b48faae381810d8d8894de7cef88e5df025629f9c4b36c4776753cdf2e41e742d12eb7791d6cfa638040bbd3d590c5ce8b601ca653b7de0b5509c37ceaebdb4c97d16407459038db126c322e09a6c85e21df3b164"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x1407}}]}) syz_usb_control_io$hid(r6, &(0x7f0000001400)={0x24, &(0x7f0000001240)={0x20, 0x9, 0xd7, {0xd7, 0x7, "c8178576ddcc5eb6a82f80ccc6f953c2b7dadcab9968339d276b22a0bd6398660d891a9a979b5ec93dc99bd123da8b10dee57acb0a086653e32f705331dee4baf6f96d5482a9d21a34f9301d4cba135e78d0323a8017027bd9b613ad79162cf6147e4a21993b6a7afedc49c84405fa0b270c70e7fe5c1e69ec9d24db9f05f92f5c6109368a6f7b70fb0c2becb2a87c7e560b8f179751cd897a9b114f2b23c4d9bb54e7307b3a072871cb6079351ad3e3c5797818f2b77ee3d04dbcfd01ab9735ea22f771745ca301e68c04612c681e4b8fe9bff1d6"}}, &(0x7f0000001340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000001380)={0x0, 0x22, 0x13, {[@main=@item_4={0x3, 0x0, 0xc, "a62564c0"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4={0x3, 0x0, 0x83c5d4720bcdbeb4, "07a849fa"}, @main=@item_012={0x1, 0x0, 0x9, '7'}, @local=@item_4={0x3, 0x2, 0x1, "abd7f948"}, @local=@item_012={0x0, 0x2, 0x2}]}}, &(0x7f00000013c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0xc52}}}}, &(0x7f00000015c0)={0x2c, &(0x7f0000001440)={0x0, 0xc, 0x6e, "53319f65812049fcd15fde127273a88546918a8b52f36adca301ac42245c73bdd26c71e95f134704b45119d35bdceedb7e97b610771247ed4220c0d5987131a8fd860b72f9253c6aae710bd331bd07ef1542dd36ec8581392b1b9d980f86bc3bbd84a6dba3ebc3628f4f403e9b39"}, &(0x7f00000014c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000001500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001540)={0x20, 0x1, 0x36, "4ca3f2fa329ee8028fccba714928fcb637895e77758a73fcabcdc3df648ab717ff4d671c29d401e14d394c5a8cdfe20b70d095f31ae1"}, &(0x7f0000001580)={0x20, 0x3, 0x1}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0x90, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1a4}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x53382780}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x55}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2a6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xcc}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) r9 = accept4$x25(0xffffffffffffffff, &(0x7f0000001800), &(0x7f0000001840)=0x12, 0x80000) ioctl$sock_x25_SIOCDELRT(r9, 0x890c, &(0x7f0000001880)={@null, 0xe, 'vlan0\x00'}) r10 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000001980)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r10, &(0x7f0000001a80)={0x14, &(0x7f00000019c0)={0x0, 0x30, 0x67, {0x67, 0x5, "29912bdf9ee292ce8573c3bf34f643625eafff0a4fb8ccb45c598e1e1009b225199a575e0312be0a5cc50760c9482b50fde0afac6d546ae3b6b795a373577ca4c4b7500fa3829db38a24e8c15ca8d6562a3cf84b1b038cdc2e74607ef4dc66383fe48507c4"}}, &(0x7f0000001a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41a}}}, &(0x7f0000001cc0)={0x34, &(0x7f0000001ac0)={0x20, 0xb, 0xaf, "f5177a72e35d7c168a8bb4202bd1f8dfe165d1252379cb8f102432596dcc71aab9454b474dfd46277dee9d3227f3df204bf2b3f9bb9d9efc68420c291b28db71caee6b871d22d39649a193c2722a908359586665edec388cda21e900654ef9b55b541132c1f50dfacd39bd8ff599febc9496feee51ba988b8ba0ecf5ddc0a71e35a1967af409d9e8e1a083e56723ba8afb56a4e47fd0483e640b9d9bb033d6adaf0118f333818517d1cc91891c2c74"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001c00)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000001c40)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000001c80)={0xc0, 0xa2, 0x2f, "2e18cc0d624ea3d250388fb623fb16e20da7ce6f779fa16545cf24f41e28ddf795f2844d901e26822df81becba8b12"}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001d00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r11, 0x8983, &(0x7f0000001d40)={0x8, 'pimreg1\x00', {'pimreg\x00'}, 0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001e40)={'gretap0\x00', &(0x7f0000001dc0)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x0, 0xe9bb, {{0x12, 0x4, 0x1, 0x6, 0x48, 0x65, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x34, 0xea, 0x3, 0x7, [{@rand_addr=0x64010102, 0xf554}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x5e08}, {@broadcast, 0xbc000000}, {@multicast1, 0x6}, {@private=0xa010100, 0x5}]}]}}}}}) sendmsg$nl_route_sched_retired(r4, &(0x7f0000003200)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000031c0)={&(0x7f0000001e80)=@newtfilter={0x1320, 0x2c, 0x8, 0x70bd2a, 0x6, {0x0, 0x0, 0x0, r12, {0xfff4, 0xf}, {0xf, 0xfff3}, {0x4, 0xffff}}, [@f_rsvp6={{0xa}, {0x38, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0xff, 0x101}, {0xffff, 0x100, 0xffff}, 0x0, 0xa, 0x9}}, @TCA_RSVP_SRC={0x14, 0x3, @remote}]}}, @f_rsvp6={{0xa}, {0x12ac, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xffff, 0x8c, 0x7}, {0x4, 0x9c9, 0x8cf2}, 0x67, 0x9, 0xd}}, @TCA_RSVP_ACT={0x1280, 0x6, [@m_gact={0x13c, 0x19, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x21df, 0x8}}]}, {0x103, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_connmark={0xec, 0x3, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x7, 0xffffffffeffffffd, 0x3, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x5, 0x79c8, 0xd9c1}, 0x1}}]}, {0x84, 0x6, "11c06bfedd70c42ec79161bd37634df126d48395b0b99362dddaa1f2cb2a7ddd7777ea6cf7da00e0bf69474fb990778d6b1cc51ad5e3856c9e057f0f51cec3ff0360830e50b8e82e975ade4346de3750bcc629b252de8ddb536a5ab85fbdc344c34e39671546ca1307170e588143eb43111d91d93c8e254f2d502ac415308c5d"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x1054, 0xd, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x39ce, 0x6, 0x1, 0x6, 0x6959879b}, @loopback, @dev={0xac, 0x14, 0x14, 0x1e}, 0xff000000, 0x1}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff2, 0x4}}]}}]}, 0x1320}, 0x1, 0x0, 0x0, 0x80004}, 0x4004080) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_SOCK_GET(r13, &(0x7f0000003340)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003300)={&(0x7f0000003280)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x2040000) syz_usb_control_io(r10, &(0x7f0000003680)={0x2c, &(0x7f0000003380)={0x20, 0x8, 0xee, {0xee, 0x11, "0da0c539328b5ca452f0ab329a1bf97d637e84b8ea7151e07c6daefe2f64a07b954bdd8d7c4dd4034ddb7e703b4be166ede77ac93417ac003153cc9e52b8a591491b512b2af9f409d9a82131fbee139e2857971bbbf29ed8e4671c7e5aa22e1e710895eb0bdf717577f491b100843391bf97cad3fb12176783bf1e9f401e45110b1710633e8542c3f95d2416368864b98c7ce79132d3fd31aed89d660395a8644d7de262097a3c5b96281455389ebf0a25968b425a6f371c55f429de89cbd675c5fb71017cf0c49c04a6731cb28412354dc454138148680b8bf5ca2847c7b1ac9cdd513bce129273eae8c743"}}, &(0x7f0000003480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44f}}, &(0x7f00000034c0)={0x0, 0xf, 0x122, {0x5, 0xf, 0x122, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "f1dab6796fe7c231412995a0012a0918"}, @generic={0xc9, 0x10, 0xa, "e235ad5fe609f6f9a783837e68999e658e3d085a99208e5b2ee2d067565669fa17128cdb77336b38ed59e7c16ba1db6a4ae52304c2f36e3291c6115024cefa00050e47eb3cc1723ef17d13d3a48428f5e50f12981385bf8ee1fcff296c4c65dcc49020dc40b761b2704a07c962f378b6cccbe4b17c3ecebc4cafde348c8802a801cb6b12c7ddb4c2083aefc8bb23d12283b7f641fb05934a0fba1bb06efa1883b7df16cdee82d36c6779ac4920c912d4a3126d6e9d7e9b7fbd6fd5fcd433803e16fbb044dfcc"}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x1, 0x7, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x0, 0xf0f, 0xa, [0x3ff0, 0xc0, 0xff00cf, 0xf, 0xc0]}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ad6d800da1cd1ff0e9072c8c61b39adb"}]}}, &(0x7f0000003600)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0xab, 0x7f, "d9e12999", "bf279cfd"}}, &(0x7f0000003640)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x2, 0x6, 0x5, 0x3, 0x5c55}}}, &(0x7f0000003b40)={0x84, &(0x7f00000036c0)={0x0, 0xf, 0x89, "edec3dd88cb803e6246229558ec18034d3f09b0b6ce0eb9c0ee7bb79f12dbb1edb9d0281e014e596bfc359beaaa103e2c5f3811a27d88725cbafe76477197b765bf578863989133a58761f578c7c1286528d07cb46be58eecc147eeab9a09739cd858d387830e16514281f86a333754ed1a31d068d19b6ec18f1a8dfa917276bb0d2b86a0be642ade1"}, &(0x7f0000003780)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000037c0)={0x0, 0x8, 0x1}, &(0x7f0000003800)={0x20, 0x0, 0x4, {0x187a6a8633b43d45, 0x3}}, &(0x7f0000003840)={0x20, 0x0, 0x8, {0x800, 0x1, [0xf0]}}, &(0x7f0000003880)={0x40, 0x7, 0x2}, &(0x7f00000038c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000003900)={0x40, 0xb, 0x2, "92f0"}, &(0x7f0000003940)={0x40, 0xf, 0x2, 0xc}, &(0x7f0000003980)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, &(0x7f00000039c0)={0x40, 0x17, 0x6, @remote}, &(0x7f0000003a00)={0x40, 0x19, 0x2, "c5ee"}, &(0x7f0000003a40)={0x40, 0x1a, 0x2, 0xa610}, &(0x7f0000003a80)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000003ac0)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000003b00)={0x40, 0x21, 0x1, 0xf7}}) r14 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000003c00), 0x1, 0x0) sendmsg$nl_route_sched_retired(r14, &(0x7f0000003d40)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0xd0000404}, 0xc, &(0x7f0000003d00)={&(0x7f0000003c80)=@newqdisc={0x64, 0x24, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x3, 0xe}, {0x1, 0x2}, {0xffff, 0xffe0}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x21}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040081}, 0x50000) 56.722571765s ago: executing program 6 (id=1545): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x121400, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f00000001c0)={0x6e, &(0x7f0000000440)="92ead262f4a7f51102f8b272893754f6c99f396b41498491216f7beb23b033804b88ca7bdee34d700b668219370000245058a76743e789d79892d05bf9fd935a24312f8415327fc782e5fa4940af57923bc4ea5d3cf66b608cba3324d366c31e1647a398442ea2c8c529cad86600"}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = syz_clone(0x2100200, &(0x7f00000002c0)="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", 0x141, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000200)="68fd98fb276443be202992dd90d5bcff1604617d452d00d9aa16372b1c2b0e36a1b092c5fb7256aebb3c6e98d74df2440eeddcc91bb71696df56499ca1424b6e0280f099742fa7500dd58577c50f0c9613524e3d6790cec31fe5825110278048d194d00ff411d562d2fee3c06e1bf87ceca8e61ddbdf6f6d837ff5ba5f5544f63ad2fa251d981b373eda1355cdbbac99980b863b07184ec9ac71c7") r2 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x4, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x8) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) syz_open_procfs(r1, &(0x7f00000000c0)='ns\x00') r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000140)=0x5) 55.728693822s ago: executing program 6 (id=1551): socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xb0}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x20, 0x0) fstat(r0, &(0x7f0000000340)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa37", @ANYBLOB=',rootmode=00000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYBLOB=',']) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000540)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r9 = fcntl$dupfd(r2, 0x0, r2) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x1) sendmmsg$inet6(r9, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) 53.640073798s ago: executing program 6 (id=1562): pause() (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r1 = socket(0x25, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003240000000008000140"], 0x80}}, 0x0) (async) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) getdents64(r4, &(0x7f0000000080)=""/212, 0xd4) (async) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) (async) r5 = syz_open_dev$swradio(&(0x7f0000001180), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000001280)={0xb, @sdr={0x38305543}}) (async) dup2(r0, r1) (async) ioctl$VIDIOC_DBG_G_REGISTER(r5, 0xc0385650, &(0x7f0000000180)={{0x0, @name="4b4b58ea8d69c064a9279941d98a53c20742f432167d55fafad1e80da4756c07"}, 0x8, 0x7, 0x4}) 53.327689037s ago: executing program 38 (id=1562): pause() (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r1 = socket(0x25, 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003240000000008000140"], 0x80}}, 0x0) (async) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x5) fchdir(r4) getdents64(r4, &(0x7f0000000080)=""/212, 0xd4) (async) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4600010002"], 0x8) (async) r5 = syz_open_dev$swradio(&(0x7f0000001180), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000001280)={0xb, @sdr={0x38305543}}) (async) dup2(r0, r1) (async) ioctl$VIDIOC_DBG_G_REGISTER(r5, 0xc0385650, &(0x7f0000000180)={{0x0, @name="4b4b58ea8d69c064a9279941d98a53c20742f432167d55fafad1e80da4756c07"}, 0x8, 0x7, 0x4}) 7.401525757s ago: executing program 9 (id=1820): r0 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{}, {r0, 0x5000}, {r0, 0x400}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)={[0xa0]}, 0x8) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x40) read$dsp(r0, &(0x7f0000000340)=""/100, 0x64) 6.412078615s ago: executing program 9 (id=1822): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/if_inet6\x00') r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x301180, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)={0x29, 0x6, 0x0, {0x4, 0x5}}, 0x29) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18, 0x4014}, 0x2c0408d0) preadv(r0, &(0x7f0000005380)=[{&(0x7f0000000000)=""/254, 0xfe}], 0x1, 0x9, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/if_inet6\x00') (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x301180, 0x0) (async) write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000001c0)={0x29, 0x6, 0x0, {0x4, 0x5}}, 0x29) (async) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000180)=[@prinfo={0x18, 0x84, 0x5, {0x30}}], 0x18, 0x4014}, 0x2c0408d0) (async) preadv(r0, &(0x7f0000005380)=[{&(0x7f0000000000)=""/254, 0xfe}], 0x1, 0x9, 0x1) (async) 6.371905529s ago: executing program 9 (id=1823): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid}], [], 0x6b}}) (async) syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0x0) (async) set_mempolicy(0x4, 0x0, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_int(r3, 0x11a, 0x2, &(0x7f0000000380)=0x304, 0x4) (async) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000640)=""/147, 0x93}], 0x1, 0x0, 0xfff) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000000}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0x6a, 0xa, 0xbcf3}, {0x6, 0xf, 0xac, 0xc}]}) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000000000)="e0309b", 0x3) 6.253973112s ago: executing program 9 (id=1824): syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100021d1ba4100e1e070000000000000009021b004bd4737801ba601020"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x96, &(0x7f0000000180)=@string={0x96, 0x3, "12eca0dede537f872348ffe4315bdc78df131b1515286b5b95888a20bc15e2471d8b7dd382f8814f32b1c9f7d26594e982cea08f97280fce80071bbd062c1c962a703f2ed9a5f423a90120e6e0baef4e25a34e4d449c1d82ba54d3887d4f5f7ab6f9610935d0e37f3012c2e1ced82904a88cbcae6352e8a9a25e6c3589c398a1b22e562f12328deec1caedebca3736ec94dd8bd5"}}]}) r0 = socket(0x10, 0x803, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0xb25, 0x1}, 0x18, 0x0) r2 = signalfd4(r1, &(0x7f0000000000)={[0x2000000000]}, 0x8, 0x80000) write(r2, &(0x7f0000000040)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pread64(r4, 0x0, 0x0, 0x1) r5 = socket$inet(0x2, 0x2, 0x0) memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x5) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x11) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x3, 0x6, @random="cea0300a1672"}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r9) socket$packet(0x11, 0x3, 0x300) r10 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r10, 0x400, 0x1) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) socket$l2tp6(0xa, 0x2, 0x73) futex(&(0x7f0000000000), 0x86, 0x2, &(0x7f0000000100), 0x0, 0x2) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) 5.950937482s ago: executing program 8 (id=1826): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3]}, 0x8) getdents64(r1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x19) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 5.811462989s ago: executing program 8 (id=1827): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r1, &(0x7f0000000100)=@abs={0x27}, 0x6e) syz_usb_control_io$printer(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010300000a24"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000080), 0x10400, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0x4, 0x6, &(0x7f0000000000)={0x18, "96ab8cb18a5722d2da3a03f39f5eaee2555800"}}) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x250942, 0x1cd) lchown(&(0x7f00000001c0)='./file1\x00', 0x0, 0xee01) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000901, 0xee00, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="401425"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14, 0x81000) fcntl$setpipe(r4, 0x407, 0x8) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB="201604f3000097d3b806"], 0x0, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6c}, &(0x7f00000007c0)={0x20, 0x0, 0x2}, 0x0, 0x0}) 3.64336555s ago: executing program 5 (id=1833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0xfffffcdc, &(0x7f00000000c0)=[{&(0x7f0000000300)="173b2f570b35b48ea8fc66e9bf821395befbdfade652da5c60ab05000000a78af8c03f4722450baece00403c04", 0x2d}], 0x1, 0x0, 0xffffffe0}}], 0x1, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @empty}, {0xa, 0xfffe, 0xfffffffd, @empty}, 0x3}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x4c51, &(0x7f00000021c0)=[{0x4, 0xffffffff}], 0x1, 0xe1}) splice(r2, &(0x7f0000000140)=0x3, r3, 0x0, 0x81, 0x4) fchmodat(r3, &(0x7f0000000140)='./file0\x00', 0xd0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = dup2(r1, r3) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e20, 0x9, @empty, 0x9}, {0xa, 0x4e20, 0x4, @remote, 0x7269}, 0x1, {[0x3, 0x88b4, 0x6, 0xfff, 0x7, 0x80, 0x6, 0x3bf]}}, 0x5c) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84000, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) 3.524347086s ago: executing program 5 (id=1834): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}]}}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000500)={0x34, &(0x7f0000000240)={0x20, 0x8, 0x64, "74679c09a3e295e105ed98adc4367b9db4acef572dfe6de69840d3ae93e4a686c19164b39aa8b6aee45a4f03c8d3e99353400720bfabe56b1e95c54bdec883abfb590a892882eb0382c085cd4e87c9c1021a94823ee76ec540fc3e65ecda9772ff27914c"}, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xc2, {0xc0, "42ff9dabc2b2348c5f90161ad4ef84a9c351d29e5a213281bc3c5fa9cb4bf09da043a2e696a976e5f024ca882283d5b78958a7f0f31cb1d3aa33c06f9ca99e183f39c113f9d605cef826d89afb34417be5556e0168aa4ebb24600ec697dea9b99c7cf9a632edf4c02783a21503c9bb3f4a802f042bd89df78bae5fbe8c6729c2877de81ad1af9fb6ff4d81aea9e697965f4eef81475a20db2401347861659bf1f7ab4b8aad6d93636935d1204b57f76d3b1275472d40bcdba8e670d0f9308eec"}}, 0x0, 0x0}) 3.172173166s ago: executing program 9 (id=1839): syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="000391000000910356f90ec2a7c1e1831433babaf60c9213806850d3895db982403f22636b8382a57e0dc961c2dcbfc552e28d3ab8ae15b5be0745544ec88e4c49c96fa8c74461d5aa82e7ee676b0f29a4779d77725c20ec63f4fedeb1d344743d081eba89bfd90ca8d03b101c1bd0f87a6db0ee3a8fec9a5494e91f48ad06d2815b4a48dd7afbaf75fb6c49"], 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000500", "2809e8dbe108598948224ad558fac11d875397bdb22d0022b45f819e01177d3d45ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.104254878s ago: executing program 8 (id=1840): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)={[0xa0]}, 0x8) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x40) read$dsp(r0, &(0x7f0000000340)=""/100, 0x64) 2.961248833s ago: executing program 1 (id=1842): r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc1105511, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @rand_addr=0x64010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) getsockopt$inet_buf(r3, 0x0, 0x30, &(0x7f0000000340)=""/222, &(0x7f0000000180)=0xde) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r5, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x2, @local}}, 0x80) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0x4, r7, 0xfffffffd}, 0x10) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 2.844505502s ago: executing program 5 (id=1843): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) syz_clone3(&(0x7f0000002500)={0x2000100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x20, 0x0, 0x0}, 0x58) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) (async) syz_clone3(&(0x7f0000002500)={0x2000100, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x20, 0x0, 0x0}, 0x58) (async) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) 2.830398819s ago: executing program 5 (id=1844): syz_usb_connect(0x2, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120110018236a0080d04013863c10102030109027d0002a240003f09046004036724895b0a24010d00060201020c240805060007250a329ce2090586100004f408040905001c40008103ff072501031000600905091b08000c27800904880104979cd603090509000000030004090502020002f7810609050303ff030840040705a6c6415a9f0905850340000b020b"], 0x0) 2.714780509s ago: executing program 1 (id=1845): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}, {&(0x7f0000000000)="960d2ba888b339243766d9c55cc9128a076d522e2e65245d03467a1d7a4a4563b942580e316c5779805f087ebc2d5b661cf133d167b56f41b39439fcb38ad2f0b28888e8909912ef769e697dab1c6a5b4affc697e8613dc51801e9ee8274772be3", 0x61}], 0x2}, 0x4000000) r0 = memfd_secret(0x80000) ftruncate(r0, 0x3) ftruncate(r0, 0x1ff) sendto$llc(r0, &(0x7f0000000100)="d35f266baf89bd390bf6c29e125783ccc20905e49cc3fb246ae56b941ce09d943be4f20f205f42ec95e2813257be871f54888ac2f2aadb1f4f7e8a5b77235963345f05d1c4fd795e9d9e95cb245cef27ed35f5a0ec3e076c8f0298858baf5e0bcd4747f8bef7b6cc4831da7ce54bffa20a34626283770e9be581", 0x7a, 0x810, 0x0, 0x0) 2.612498653s ago: executing program 1 (id=1846): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x564) r1 = socket$netlink(0x10, 0x3, 0x0) (async) getuid() (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpgid(r2) (async) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x14) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)={0xb0, 0x76, 0x31f, 0xfffffffe, 0x0, "", [@nested={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0x70, 0x0, 0x1, [@typed={0x8, 0x14e, 0x0, 0x0, @u32=0x5}]}]}, @generic="5981604119fca6b433ea6042dff04243907f4a495d001d2415cbdace3087e6a0c7c6301aa8d5661262cbcb2bf5e47d23a81c2cd0d688d15cc4081016755c8e36a0e464763e2607880aed446fffd41e124e91d653ac1927146910c5329af323d7daa0c53eeb12b3b4a9c53339e48c36365ec6007bc0c825b2e5eaee781ae2307d55251b8dc7523f84a34d4d098b8bc1"]}, 0xb0}], 0x1, 0x0, 0x0, 0x4045}, 0x80) (async) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14, 0x800) sendto$packet(r4, &(0x7f00000004c0)="fca9135d8f3a3881a3ae42c165464496ceb54a46b6f3ad1d530745ccc7698a354bdce03d21d9579ccfee388f3fe1c834f4e50cbb355aea3081f778bb42ff46caaab01a8148", 0x45, 0x0, 0x0, 0x0) 2.583128518s ago: executing program 1 (id=1847): epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1, &(0x7f0000000080)={[0x4bd4]}, 0x8) r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2010}) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x158, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}, {0x6, 0x11, 0x300}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x70b}, {0x6, 0x11, 0x400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x78}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffc}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x24c}, {0x6, 0x11, 0x8}}]}, 0x158}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4001) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000380)) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000003c0)=0x4) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000480)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f00000004c0)={r4, r5, 0x0, 0x2f, 0x2}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000580)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000001580)={{r7, 0x10, 0xfffffffffffffffb, 0x31b, 0xffffffff, 0x7, 0x6, 0x9, 0x3, 0x80000000, 0x9, 0xfffffffffffffc00, 0x5, 0x1, 0x8}, 0x8, [0x0]}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001600)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r10, &(0x7f0000001900)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)={0x1fc, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_HOOK={0x188, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044805) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000001940)={0x0, 0x1d, 0x3, 0x676d, 0x0, [0x0, 0x0], [0x4, 0x5, 0x1, 0x8000], [0x7a5, 0xfffffffb, 0x7fffffff, 0x8], [0x6, 0x3, 0x2, 0x4000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000019c0)={r11, 0x80000}) pipe(&(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r13, 0x4008af00, &(0x7f0000001a40)=0x1000000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r13, 0x8983, &(0x7f0000001a80)={0x3, 'pimreg0\x00', {0x18dc}, 0x3}) ioctl$PPPIOCSMAXCID(r12, 0x40047451, &(0x7f0000001ac0)) ioctl$KDGKBENT(r12, 0x4b46, &(0x7f0000001b00)={0x1, 0xd6, 0x1000}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001b40)={{r6}, 0x0, 0x6, @unused=[0xc4b9, 0x4, 0x0, 0x5], @subvolid=0x9}) 2.516825471s ago: executing program 9 (id=1848): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)={0x0, 0x2, 0x6, "92afc102df3e"}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x84, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x1, 0x1, 0x2, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "c8a6"}, {0x5, 0x24, 0x0, 0xfe00}, {0xd, 0x24, 0xf, 0x1, 0x6b, 0x5, 0x7, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x8abb, 0x82, 0xebfa}, @mdlm={0x15, 0x24, 0x12, 0x90a4}, @country_functional={0xa, 0x24, 0x7, 0x5, 0xffff, [0x6, 0x5]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xbb, 0xe, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xc, 0x8, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x7, 0xf, 0x8}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x10, 0x5b, 0x2, 0xd4a3a19d2bb4f965, 0x9}, 0x5f, &(0x7f0000000180)={0x5, 0xf, 0x5f, 0x5, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7ffa7d2, 0xf000, 0x2, [0xffc000, 0x0, 0x3f00, 0x3f1e]}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x2, 0xff0f, 0x1, [0x3f00, 0xff0000, 0xff3f00, 0x1fe0000, 0xf0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x22, 0x5, 0xeb}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0xa5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x5, 0x7f, 0x1}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x403}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="401425"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x20, 0x16, 0x4, "97d3b806"}, 0x0, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6c}, &(0x7f00000007c0)={0x20, 0x0, 0x2}, 0x0, 0x0}) 2.4602055s ago: executing program 1 (id=1849): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000080)={{r0}, 0x7, &(0x7f0000000040)=[0x4, 0x1, 0x4, 0x4, 0x7, 0x80, 0x80000000], 0xfffffffffffffff8, 0xe, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000300)={{0x2, 0x4e23, @private=0xa010102}, {0x1, @remote}, 0x6, {0x2, 0x4e24, @rand_addr=0x64010100}, 'wlan0\x00'}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000280)={{0x4, 0x3ff}, 0x100, './file0\x00'}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x2, 0x0, 0xfe, 'h\x00'}, 0x0, 0x2, {}, 0x20800}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040ac05abc2a89f1128afb90902240001002408000000000000000002950921fcff0001226f0109058103000001000d"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x0, 0x5, 0x1000, 0x1000, &(0x7f0000400000/0x1000)=nil}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000004c0)={r5, 0x80, 0x2, 0xfffffffe}, 0x10) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE(r6, &(0x7f00000004c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000003c0)=""/230, 0xe6, 0x0, 0x6, 0x8001, 0x7, 0x1}}, 0x120) 2.271977591s ago: executing program 5 (id=1850): r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000000)={0x7}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) (async) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000000000/0xc00000)=nil, 0xc00000}) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (rerun: 32) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r7}) 2.170984655s ago: executing program 8 (id=1851): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x124, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4fe1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce14}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x124, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4fe1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce14}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@hopopts_2292={{0x30, 0x29, 0xb, {0x0, 0x2, '\x00', [@hao={0xc9, 0x10, @local}]}}}], 0x30}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4040, 0xd) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='hpfs\x00', 0x0, 0x0) 1.968067608s ago: executing program 8 (id=1852): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1}) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000200)=""/66, 0x42}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f00000014c0)=""/258, 0x102}, {&(0x7f00000004c0)=""/4082, 0xff2}], 0x4}}], 0x1, 0x40030002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f00000001c0)={0x0, 0x80000000}, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000100)="98cabca5", 0x4) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000001d00)={0x0, 0x9, 0x2, "1e84d371de9f846a771156105f6fc587877b756b9180039d6c4e17d9fb7faebc"}) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x960, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TCSETSF2(r6, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x7, 0x8, 0x7, 0x7, "0000fd000000000009e49200", 0x802046, 0x200068e}) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380004, @loopback}, 0x1c) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000001680)=0x0) sendmsg$nl_generic(r2, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000016c0)={&(0x7f00000039c0)={0x11ec, 0x27, 0x4, 0x70bd26, 0x25dfdbfd, {0x18}, [@nested={0xc, 0x123, 0x0, 0x1, [@nested={0x4, 0xed}, @nested={0x4, 0xf4}]}, @typed={0x8, 0x86, 0x0, 0x0, @ipv4=@local}, @nested={0x1024, 0x87, 0x0, 0x1, [@typed={0xb, 0xfb, 0x0, 0x0, @str='%-M$+\x87\x00'}, @typed={0x8, 0x5b, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x4, 0x77}, @nested={0x4, 0x8e}, @nested={0x4, 0x38d6}, @generic="2a0f8422bcf9db04789310a946a3b8b466671225e23cc7f8ce9c17b7e4125384bffdea1f8a54bf64306f837c0951a4759f59eee8ce990373ee831eaa751b458925c34982b4fa18003921d1b1b6dee9ba7beafa8a9f43b3688f922352e1daba17a7b0e6163c69f50e261b37b245d3fdea90c467c72480c9c59442fb7d3f763000921837ac1898277a54798879ef942562bc2da28ec705fc7a7a98dcc034c298c9afcf6a38676d324b1a3534765b610271849415220eaebfba11b18cf1df7462d285f500768d10103ccca592dd5e42bfb89dfbecfbaf86b68ed1b54cbd8fdc4715d3fe234f632abf9d03d8e6b9a7f11889c4c65e5a52e8cafebff3d7217181068216db0a3c81d6832b3520a5822218e5face9976ba94e76002db7c8bfc84a4612c132527376f5faddf8b91ca26c2688743b791d366c84430bdba1998fdc92c1b2bee6ad0cd0939a6239f570b5df5a320c50d4c78dab70da8d2b4284a0a0c0b41335ab4b71bd13fec8b151d0c4371738c029f5e74389aeb98189eac4252f78397db226b35381746f790505e985e6e2b11e44143ef7777a62d7923b89920ffdfbe8a7f6f67005ebbe3f8191f9aa57b2bc5ee548fea2e77444e7e3424b2c5ea84abfdb324a3474f473d1ed91b1b84f7d0aa6d1ff700cbcd7d673a559017f9eb8d9132c5446e8f1c99eeb62a4db6e9daaa981670ad98e36a49c6dd8bf4a9c9059b0b49bda34763c67394bc20495c10d6785f29d0442b8375dbf4dd5ebc3f72175dc77cff1c0e89adec5435c64daedc958e4c0bdc639cbf0082378d8e6ef54a8155b26b70b88cd9609e8508bb78a6a4cc634bef0347057a180695b1d2fb51497fa5df4ad4916f34d493112165c4d291aec5bfa79a6dda9a579937ba282dd4f156c5f74bff897dff8c5a4fc98821294ca39bf93734105304d21bbae5146e080d7ab4b536a78bc5a37290a6679af46a4fffe99939747afa06441124728a3c717b8035436c9f3ba626986c5374996bd6f899e76f3cc21bebc8c7180dd261d4995afa28d03d8557a31964f5f7bbb3de0a078e11ef4d5f68d235951913694e070eebab727447e5dbe6ff509d94e112bf6a042b070c90ded2c65511862ea66dad3a3b84394ae51ed1bab8938517c182f1999eb4d7156477ec18bd0f637b26ea120b3db9dca41f09ffb300e9c01f3b6675279d3c9adf7632ce13dfc22b9d44fb929a1725d3e661cb0e8386509c31cad1787d7462649fade34a4b031c3496ed9df1c057360ff1d3cdc2a449f90478c24cf253965add08afddd2f04643bc180ae2211ff278bec6e7a105de5d3d793e593d1fccfeb19a79c2821f657db01b625b8fe5ff765b411df4ee2c95cb45309d3a909780e3ef0c37e2cb137341113185f221dcbdce7b30c291a7f754030ebfa85d30f93308860c0c118074cf1bbf916e1a744dfe0ae64c9b6fbdc76931f178122d89e8ac89177161c8d6cf0a5d449f1bc905c4855488d605c0b4811a159c4fa408c28831310b2ea66adc1f9d8835fbbf6d519aea852b450adba9e57c3556fe19a574a1fce6e751f214cda1e31d49af9daa2f103e2c3847e39c1a7931da5357e7be8d57a2709085fcb7a5f691f8614579908711ea95d129e09fcaf2d3f8f071695c3b4bce56e5821acd366a81a5cb30920731413dd4ec0c4978676aac50e5c8c4d38388c5ec56c4aeca2ea67ff663d32a10548e694ba391e54e53f2543911c23dc81f6176ad3c1be9b862c8c6ed657debc5676489d7a8e658376c4812ff9b61fa0e144a28616a7567f7a2fafc261fc8a5bccc3807aebc3b43b39d461842ac66f9090fdf9cfef380860fe9b7ceae4315eb9c69fb642dbf5ade01047df6a2ca9814b435dcbd1e3cf812c7dba049e22da92105dc5be32c5adb6b2cc28038017d2db6734b5ca178961b936a447c1a114e6a6868ac828ca8595b99d8f0b4a133bade91af699a14693445d8c16fe0ce436081fd546bc79327a9db6a1b8860ae257e7906fb8121af9f6ce78e588be2afe25c6b97536f4788883289a224cde96b6b65ea6cf97c58de796fcb837b467a496e7c820dc0651da0ebbf3c2579d9b12cd093949dfc88d203ccb0433fc9989ff5706ea7b0dabae0b8adbc2deeb77a0712bff1dd4037b8bafbe3b5b195360a5c8e56bbb36bdd2f333da11f315c08fc80583aa05d22e3dc9836b94836fec5d302c4c95d0ec188ee0e56f73f1075743c7f8314dfe04f7b34eade5339f63da91477be08d3508a3691f3ab394eff89b9bf2fa458a1d60751ff1064693866edeca0919bf892ec472bc0496688c5328b5031aead0b896197f151590ba31abb246fa8fa11e6d3d6a89674efef9d4039058d4389f56b920489c0dd9cf99e555045463a25e8e4203de658956ca6dbe576c3383e081706e076110bf56c2d70da259e70c6b007b51a02959b09bb8517c153679df478549cc563419b18088e3070bcf3cb6f6baa8e150c25240e7368d4f691e209bb6b98e6e2d703ec2688369e2fd6fa2422fcacdef084e57179f58fe7effe29fda0b6ad731f8087ef66f51f9366cefb8aaf7c77bb0dcb6e777146e4da4a2e8452b8273cd58c9ad7e1ea64bb921228c8d83d026ce891cba5b6dfbdc2873a922ea9f126765a69cd5e9f81ba5415aeb6f72bb4bb55c3214792d48a06be20a57b198a32b9d3485e8bf5570a5d485a094b427407ff5cf02174fd01ecb587cafef8bc28ec9f9cdc7ee78bdd73310e2c955201e02d8d6c2215b40a661bc0c9537ac17c08c772266611d6b131b436e43df778e107b45919667148debd8d811487cc73fe8e2467e4c293abb2ff361d25ba5c9915d77dc3bbb41dc3b8ac62ab2f370cdad77c2b1e9028071c07a746be12d4bb85e96eeb6a4ef451792b7333af116927d2fbc80e8d6712c95c7d62ca586efeb3737a7077e92429f62c41ec0c06e0dfd08c48d43cdc4c0a50abc8f7497513941d89f71df2ad98aa7c3c7591c2a31278bf00df43df50c15ec5d1025e70dba07738cfc83806807c320ed5ab8dd2be5b74460abef4ac0cf6f521442a6f6dc1bf0757a441ed8df68231562014e4666055876a7ec07ef48a143bd171f032eccb09c0c13ba1d09faba7702c091d1cd11e6a5c2b1e0cc00fd2e50ef81c0609767f2a01ba68ae1d9a636ab9535902717b1bbfaa6f82c812b56265a3c7093a2f1799252e42f0e3a689364eb7983c4227ee25ba65f361265861732e4db9a78396495c4a8587522111a21402b066ee759d13ec99f84b7fbd287603712f6a638420df6120eb8fc542c178154382145ef8861d507030521a116ee9cc86ea8d37c759f59a37519cc457b840e76a621676d0d66ab1490925ff93b2898a947a8280289c1af841414fba2502408c2eb2e2ab437c5300c2907662cd69efb4f39cb395c41182f252c24341956e7023c803c190bb9cb6519c0a35dcf6f914c9cc0fcc2d02ff4922f268b03357fe806072a5067628d0efae524353f0e593f71605113e8ba89ed625331813234ac07c659507558bf1900f35a0cf7dd4f3e0d66dabc94549b00ccec375c8f5b1f7d01212538618c50b27e59e642326ff19d0452612cc9f2419b658fc5150b8f54254e6cd954402c30d9f5612b0c447045ae984c97a138717202ad4f82a90702c8672818f6ae378492112a2f3e9ec5e8d5467285cd8d62ec75d2ea4430accc967f28e32a481a4ad46e32a0524d2432c734083d6d010727e1e1d16947d86058e0f6e7e1dd77fe6f4aef35c4b2b6269144a82338fa79ef70f5f0d0dd5c2fe7503f0d2455314dee9c8f481d11863d1224e8b16d24abd2e19af89870411c9e5b9942df9e8a7ad74484b42bfc4a35b9ab2689077364e42be387709d599ab8f268a131b29eb13744913e6e9187b5d329a7a23d117f6cd725bb74b7ffb5e52cf3df873bec180d7599f02e95a2d176d234be047b62feb5b264e24f808f7f7f2ef5f265ec8d0b97bed963fd6bd40ead5c3597d6ec4b55126ccdb8e6108cc841f80146a2df521f44cee83ce6d89889c4593a29a13393f3cd4e63331ecb37838acc7222bdc4133dd9d7614711271ee4c535ea9fe2eefc0530161f23a4b30dc2d874faa5a964e85e397d9807660f3bb30032e76d2844c37e4828e07ea4979ced2be6b16f12f570bfb49d22ab35507e62a5d45f25090145fbc11d9fe6b21904e776c50b46de6a54356bab41f458f7f5ff2b65ad20bb927df82733b28f6c974ded9bde59de96c8e92b7c27cf4a1e3ba8628996e209dede084189f0710fca8abfb9b6eaff4ddbcb93f881a96761c47061bb1b0eed973d46ab8d64aa3686c2fec5a7639608bfb139eb5b04bcecc559b20d8e7a64532b216435bc7cf80fed5ca7f5c171008dc6ca0b98532b7bbd330195299dbb9bf50913e20d5f762f7b8c9171d965760ba5b984b0a0a514f276d4bf7f7da5ed711ea492bf6117904b043b3952c274749a5af61f37044a62097a5f4fd58cf333f3714f15ef0370aac12ed088d811e8f282dbfe6ff0bbeb874ec717f336a8c71c6a758757e83be345821a9587ab3358a6e6712bcb882a39260927dabb204bb539c3f93e1e127281a27ca269e63ac96f4703d60611a27a6fd5af2221ca4bdd12a041f4eb134efc2225e61740300f1c75beb97e3238dc026d82c7df1d9f12a7d13fe3fd14268d38c8a4548af26a5ce0b2c7a96a86da0ce526083beecb4aeefb0fdd1d312f48b8ad403f20a06435f70b98477cdd046ce402f6f3c1994e5bfe3fbb94aaa83003eb7af53a412721faf14b0ebabf6b8c350ffa0ad5102f9a2234434047aab9ba34f7bf665789d4b6553efeecd4d37374912fbaf8d669bf01a70d617fc0aa2221d26a8c26a72fb2506fccadceeb454a241e67fe583f930e05a92161d6323cbc7d2203e47929ea71e5e32aca33838e9d335b6b2615cab6c92bcca69ff89e9176540ab78d6a5f352cdc8dc8f3142a346992a2f670bc0f4a84087921fdd9922e60fe4ad510c288b62dd6b9673908f961b117e083fea0bf48914ca0be71b24a1dee87438ed7c37b12be912693fa1e963b3adb8e8ac29463e658d3fa505c0c2874da162958051c69cacb5b5298cc86de36ebd7f831d429780e7abeafee59952f2976abd275358ce764d163c91ba7e69683f873fb97e3fcae91b2fba25cac661da84698d2d09d5ea50b96e298e7ebb6e6406a7ae41042c423345f3e6852cd7951280e94e8c6dc37f0e6570ba9acded2705e70fc2d7abda7926452c3f5895a696ae04e6e161bc77477bb1f9f778286e7e1e7e6313dd2a9097b90cf316550d0a7a4a2232fe2bc82c650cef2027e9f1b1492e987858b0f01ef63c9847cb21acc3717ab737f81a6671b7d2e1b0ce09b0af06c6e1cc0eef6b0a8115fde210d622e45636ee908f01c674422d9ee18f7d4171898cb39aa1f7db7fdcca2fd69c1724933d29f7948fe011c651106503f1ec3bf930ffe7aebb8a3b7dacb9bec95a72fab7cc8d3220f16f453fa1f8f4ebacdbc54184ead5bbf87d4d2b854c672607670ece7da93a82f012450885139941d48831f740f783f20a5b806959a93c6e1c193e7c8c4177fb323916071f4c3a8852563eb04e62e2c6b88ebcddff98a24a2f9d958638d288e74d7987fe7f8b9965db540981518c67c837e00269c94a75531d3cad2ce929b921b28fd39009340571460544da58b2816b44f9da569300fc0a91fe00eebceb50b69f01725a91f2629f4395fd9a77c61cf91e7800e96ae8b33c42e52613d2d18eb4ed4c37fda929335c15bc795a1c3f0a23474263231fafc05babf97dca5ba1f1f34619cd8173"]}, @typed={0xfb, 0x3f, 0x0, 0x0, @binary="ebd2bbf951ed9610cad41b160ecb5b0d9664090e962a5fcd028a4de89eb028315951342a0dbef694f7eae262d34af3e5f985ddb03579904709f8323157f36a9c3c8c47eaa0d8e7d949f37e8d98e5878aad4705065ef197a9e1ac5ffbfff67e507cae8706f8248738ef90a2e6cc9fee0be78a534caededcea1cffef7759c8a1ccb951e89bbb538aa61a6b5cd6f6f4f640b6edb982b89fe19bf71b91efd16863b6bb15c34e27ecf673ddd9edd89cd0f8b2bd5964f871b7a45eeb28f4a3fa128d4bdbec80d71ea2f8d93c93497cacfd5bdbf047651be1abb56b53a5325135a19217ddceb7b51c49b122c7f4a43f72084f106ec82f0fcfe745"}, @typed={0x8, 0xf8, 0x0, 0x0, @pid=r7}, @generic="bbc618187907f0a70081b259c13b782eb1efa59c7ed30c9c3c37058177", @generic="42cf65d54f0c87d190b5db472229c6e6d37c638d9cacee92c523d37af2653b546fc3075900c4cfb8649160ae3a911cf165c3901da77bf2a5004c7a747b78a1c41d3c366dd7bb73b646eab99aa829f949dae6d43f6481dc8fdbbc9e5b62dfc9015076aa1096f6f1d5b82017845d08ea04a279beda", @typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@local}]}, 0x11ec}, 0x1, 0x0, 0x0, 0x4000013}, 0xd0) sendmmsg(r1, &(0x7f0000003980)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000001340)="cb75c73a02d0cf76f049a9e91a3630c9e6cf515b03bf70d20134d1f5bfbaa339b9b931033431640e", 0x28}], 0x1}}], 0x1, 0x85c) 1.835525835s ago: executing program 5 (id=1853): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb6, 0x1b, 0xb2, 0x20, 0x557, 0x2001, 0xdebc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x94, 0x10, 0x0, 0x93, 0x17, 0xa2, 0x8}}]}}]}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fsopen(&(0x7f0000003380)='ocfs2_dlmfs\x00', 0x1) fchdir(r3) syz_usb_disconnect(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000002240)={0x14, &(0x7f0000002140)={0x0, 0xc, 0xa, {0xa, 0xa, "af395239bf6798ab"}}, &(0x7f0000002180)={0x0, 0x3, 0x85, @string={0x85, 0x3, "4fb3f5142d6b67b10dac74f991fe6b4251c2ff518408115719b91000bc531c7755c153684bf1734a424ec4c7149b444fa8ef71cd4cad32808bd7f7df975f4309d986710476e6728113da41c9bb200bbd84a1f55a6392cfb5ddbef3076b820c7fbd32020eaa01ff8f3664e98a6e8e815a1557406cd21efb933bfdc771689cc5325d56b0"}}}, &(0x7f0000002440)={0x34, &(0x7f0000002280)={0x0, 0xc, 0x4f, "efc1f79333e8e5560f88eaf5378b9e2f5e048ed45d83baa1274e579e7f2665d010fe179fad6e008988548906392fd2ba690fbf0c5a365dddef77089e6307c963c3adfaf40389795a255add3755ec14"}, &(0x7f0000002300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002340)={0x0, 0x8, 0x1, 0xb6}, &(0x7f0000002380)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f00000023c0)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000002400)={0xc0, 0xa2, 0x2f, "d466d47f7a457a0c66c19c85ca88db7d10c4916c2baebff5475618e24bfdc0f918882b2e2927873acaf9d2d659d8c5"}}) r4 = syz_open_procfs(r2, &(0x7f0000000100)='numa_maps\x00') readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/85, 0x55}], 0x1) socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/95, 0x5f}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000580)=""/72, 0x48}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000600)=""/61, 0x3d}, {&(0x7f0000000640)=""/224, 0xe0}, {&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f0000000800)=""/181, 0xb5}, {&(0x7f0000001940)=""/120, 0x78}], 0xa, &(0x7f0000000380)=""/162, 0xa2}, 0x40) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x20, 0x23, 0x5d, {0x5d, 0x2, "4b9fd0e797bb3a21030a5aa76f8b9b61fab4e8cf0f4931eb3668ae840896b9b85062370e3c6999ad4f7e21d3492465c1ee37792b796ef849235fb09264db7f3048b63bc254e1677b1397c4aa5e01a5320367e7ff937a95fd60a757"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x20, 0xf, 0x8b, "33de4ac64e4efd0565617c4fa8782369080bb81929c9687c766b004de9ba52e864def53540aae9f0f1cfe9cba8c6c8ff07b3284cb591211fa044438b0aaeb7ec7d8edd07e2321684a961f396d8add1d0bd44405ee32a4565d93d754291dd44bfceb88251d6adfefc2cb8697f05e89ad199505d0a0f639370c684d49e29d9db9b84310ac4c307ab62567a9b"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x1}}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) splice(r7, 0x0, r6, 0x0, 0x406f413, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e0", 0x1}], 0x1}}], 0x1, 0x2000c000) r8 = syz_usb_connect$cdc_ncm(0x4, 0xa6, &(0x7f0000001a80)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x2, 0x1, 0x7, 0x10, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "65d171"}, {0x5, 0x24, 0x0, 0x6b20}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0xc1, 0x2}, {0x6, 0x24, 0x1a, 0x1}, [@acm={0x4, 0x24, 0x2, 0x8}, @country_functional={0x12, 0x24, 0x7, 0x6, 0x8, [0x9, 0x6, 0x1, 0x3, 0x401, 0x6]}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x4, 0xc, 0x9e}, @mbim={0xc, 0x24, 0x1b, 0x9, 0x400, 0x7, 0x3, 0x6, 0x7}, @dmm={0x7, 0x24, 0x14, 0x2, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x1, 0xea}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0xf, 0xf, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x8b, 0xff}}}}}}}]}}, &(0x7f0000001c80)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x201, 0x2, 0x77, 0x1, 0x40, 0x81}, 0x10, &(0x7f0000001b40)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0xfd, 0x7, 0x8001, 0x5}]}, 0x4, [{0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000001bc0)=@lang_id={0x4, 0x3, 0x1001}}, {0x2, &(0x7f0000001c00)=@string={0x2}}, {0x4, &(0x7f0000001c40)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000001dc0)={0x14, &(0x7f0000001d00)={0x20, 0x2, 0x72, {0x72, 0xe, "dc772fe8ec85c8b963f486177a4e54b4ac5dd222c24ec2d31b1f697f3050bdb42a85dff10101c76b2c7176886311f9ef3cd23abae10bf15049aacbde21c5300fc378e1f8d423dad6134d24c502ff53c83f7796fd91e0c9ea7a19438f2d8f487c5d5071af9ddf1e0a4325bc7908d46d78"}}, &(0x7f0000001d80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000020c0)={0x44, &(0x7f0000001e00)={0x20, 0xc, 0xd2, "fb1bde7c049b9c9c2408cf40f2414cff28f190faaab7dbc0109c58fd4358443aa9a3e8baff54b7c7c62bdca51e75e2b13fc1d69c84a92c123f88951120d7b96b5df87adaef0925b80021ed98d4faabdac96e73d232b6e605db3068451f1496328b6f60f959aaadfe8ba9126325c6a51ae7d4fa0898a975316ef7da154c432e9f1ce438684d7930adb9998db066520ae41b200fc2eab3583cec2291ec272317bdd0fc247f709397b130b59f79037998c6e9a7e76d2ca3a5257164b104bf47de2eaf33e8295103784f139267260360e1308b24"}, &(0x7f0000001f00)={0x0, 0xa, 0x1}, &(0x7f0000001f40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001f80)={0x20, 0x80, 0x1c, {0x4dc, 0x3, 0x9, 0x0, 0x8, 0x7, 0x6cc, 0x2, 0x2, 0x1ff, 0x401, 0xe60}}, &(0x7f0000001fc0)={0x20, 0x85, 0x4, 0xb}, &(0x7f0000002000)={0x20, 0x83, 0x2}, &(0x7f0000002040)={0x20, 0x87, 0x2, 0xcec3}, &(0x7f0000002080)={0x20, 0x89, 0x2, 0x1}}) 626.454616ms ago: executing program 1 (id=1854): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020030430600000000000010902240001000000000904010001030000000921000000012202000905810300"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000100)={0x20, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={r5, 0x9, 0x5, 0x4, 0x401, 0x2}, 0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={r5, 0x3, 0x20}, 0xc) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x11, @multicast2, 0x0, 0x0, 'wrr\x00', 0x30, 0x3, 0x4e}, 0x2c) 0s ago: executing program 8 (id=1855): clock_adjtime(0x1, &(0x7f0000000200)={0x6, 0x2, 0x40, 0x7ff, 0x6, 0x1, 0x6, 0x6, 0xcd, 0x9, 0x9, 0x400, 0xffffffffffff4532, 0x1000000000, 0x79, 0xfffffffffffffff9, 0x83, 0x3, 0x1ff, 0x7f, 0xe2, 0x200, 0x9, 0x3, 0xa, 0x6}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"4adcda08"}}}}, 0x3a) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x228500, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x48c, 0x0, 0x6}]}) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) preadv(r10, &(0x7f0000002240)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, 0x7, 0xfff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) writev(r11, &(0x7f0000000c40)=[{&(0x7f0000000480)="dc99eaabcda8b4242fc0a6cb26dcb5b6f4d0c995f395e54e64f60ad4252dc73a2642fd8d39849b22c70f75d24afe5272e0c3886fb55be72d9de0bbc23469894ba9b3e85220608dc4b7738834f87dc8bb2875ad55c4ccb4548635338803c277032453ab4166dee1beae47ad0e0113b9e498011c0d784364c133f0bd9fca2bd59ec026568415ff9e9b1ea81f87e07cdb5277969f6ce59439fdc1c1ebe6d2d5be278a224793469d12c04c6badea260c014fa4b15235110949c00c3a24b9ed9651abc8415feaaa33150a236fca9d9cee6870685279aebe4dfae24bed5bba2a2bb1aa1652fb8b9436", 0xe6}, {&(0x7f0000000580)="73e2db54364f2ff609edd8998bd9b34596d241987a8a88a0e39783bff94c3b2c774a171a75cfe89279bd45018f1d88f8719bf13bf942104d6576b6a60c341918695edfed02c7d340a4b1dd3e554e32e5a6a5f317a32f4a13e69745dfb61d67997ca180c72d2ea146020f119212f5cbb3fa160a613e48f1eb1c6abb65fd24987b57b86a8251a3763eda34ebe9c68731455dc6e64c2fa3539af925f5aef7ac9b7fc7d258f5cbf2d3752bca25727160a8e34cb22fe19453a412c0f5989547024d06e4f43a664d199a544e8f", 0xca}, {&(0x7f00000006c0)="3e21a07b6939f626da31468e022ba84e437c6c2b0964595fe5e5f48e8f396c2d1128b357a9040bbacd11883c2ded428770025adbab5ee69766faecf0a2ad6cda32b3778ffcafde69ecb645df6b9765541a01126f8024b37f5c02cead7e989ac9bba534e1771d475f55e24f0a1d5a0075e85e693bdb170fe63cdc547f2011115f9f84dfd55b94e12bc64fe00b1ed2e81a26c236472856838b4f58d53bacaf85fded09ed7a8751b3c3140a3a31aedcb94637258b59c53ce617f53cc1b4b15e504a4b888e852bdd97498cc9b83c676d6f85e84f40bb", 0xd4}, {&(0x7f0000000980)="9fa283172268da519525497b3b8907c27f179b875e7deb86ff36171c6b81aaacaa4f7c1abf15b9644a9b89823a6df8fcdd503eed008ff5b48393ec684e8a6b4db00a7233629c7b6f0c10766d2acad48f2ffda60b4b13a5380bc930d1d2de8a80e60c45a827a913827c8432c445c27d33a4bff11c3483e84a7f9a7f1e257a23bce0b8906898147da0af14263c36286eba052a24432d9728ccafd4df14fe7f130bafcfbe35c9b9dca8fa58334bc5f60642c191532f500bb548ba716af8c2b1b0cb315bbc59cee4b75dc2cd6c590889c1d10d13f03c6cbe6ba8d2381a803892a2c682aca683f7", 0xe5}, {&(0x7f0000000880)="d6ce2f96274a0036282842a2376b586a856364f1ed6519e05e1dcc6d6a1aa5c3bdb7cef5e6ae47b315e9b669ae6848916efdbfc61cbc5134f0205d9e966f10fd7bcbea113275e2e9f49b3a98857b7ab788e216e03ba4ef499f538e1821eb79bc3bb4d9492e35d79bf004a56c", 0x6c}, {&(0x7f0000000b00)="721ca7903e4083c0a0810273d1d671861799b3ac7d8302c01ed38a1e059dc03e5a85c98b16b88028ca4c3f1340ab0a25bd88a13afa885e71499611ff1f6bc4bdcce32b8151459b82cea0", 0x4a}, {&(0x7f0000000b80)="d3670455ddd88736bd038aced9c158fb63b7fb6318fdb20ff623dc9ea9bb7e43d1fd788f7b6de8f9f4718f19b7e8a09bc565490c78c4e0dbda2d3c402d10e19eba04583564776cfbf855d9011c65fcb1a15177255435386b713e5ae772057dc2c2497cb70a0943394c814645a6aefdd88c3c03c0e980ed161e3c32d2036ebef1155ded457e78ea394e6e6f1449fa5a8f4c73285735a05743d76e5cf9de315cef49e3ccc50211709c0c183c39d5690ccb7f8f5a", 0xb3}], 0x7) r12 = syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x14, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x50, 0x3, 0x7, 0x1, {0x7, 0x25, 0x1, 0x83, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0xf7, 0x0, {0x7, 0x25, 0x1, 0x80, 0x40, 0xff}}}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000380)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_control_io(r12, &(0x7f0000000ac0)={0x2c, 0x0, &(0x7f0000000940)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000001240)='/proc/asound/card3/oss_mixer\x00', 0x2008c1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) kernel console output (not intermixed with test programs): ] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1150'. [ 418.686023][T10534] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1173'. [ 418.703240][T10534] delete_channel: no stack [ 418.707957][T10534] delete_channel: no stack [ 418.763116][T10538] netlink: 6 bytes leftover after parsing attributes in process `syz.6.1175'. [ 419.548231][T10558] tmpfs: Bad value for 'size' [ 419.602733][T10560] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1182'. [ 419.704616][ T5910] usb 8-1: USB disconnect, device number 20 [ 420.188751][T10589] bridge_slave_1: left allmulticast mode [ 420.214988][T10589] bridge_slave_1: left promiscuous mode [ 420.228734][T10589] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.253278][T10589] bridge_slave_0: left allmulticast mode [ 420.283019][T10589] bridge_slave_0: left promiscuous mode [ 420.298107][T10589] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.655998][ T5893] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 420.835945][ T5893] usb 8-1: Using ep0 maxpacket: 16 [ 420.843515][ T5893] usb 8-1: config 0 has an invalid interface number: 48 but max is 0 [ 420.852234][ T5893] usb 8-1: config 0 has no interface number 0 [ 420.858602][ T5893] usb 8-1: config 0 interface 48 has no altsetting 0 [ 420.868133][ T5893] usb 8-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 420.878578][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.887060][ T5893] usb 8-1: Product: syz [ 420.891353][ T5893] usb 8-1: Manufacturer: syz [ 420.899066][ T5893] usb 8-1: SerialNumber: syz [ 420.903802][ T5926] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 420.917487][ T5893] usb 8-1: config 0 descriptor?? [ 420.926747][ T5926] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 420.938859][ T5926] usb 5-1: USB disconnect, device number 33 [ 421.133313][T10597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.147031][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.147214][T10597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.166105][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.175206][ T5147] Bluetooth: hci3: Unknown advertising packet type: 0x35 [ 421.175276][ T5147] Bluetooth: hci3: Malformed LE Event: 0x0d [ 421.180775][ T6092] usb 8-1: USB disconnect, device number 21 [ 421.185018][ T5147] Bluetooth: hci3: Unknown advertising packet type: 0x35 [ 421.194735][ T5147] Bluetooth: hci3: Malformed LE Event: 0x0d [ 421.256206][T10628] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1201'. [ 421.444624][T10641] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1205'. [ 421.625545][T10650] sctp: [Deprecated]: syz.4.1209 (pid 10650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.625545][T10650] Use struct sctp_sack_info instead [ 421.715002][T10653] IPVS: set_ctl: invalid protocol: 92 172.30.0.5:20000 [ 421.965328][T10664] EXT4-fs: Conflicting test_dummy_encryption options [ 422.086234][ T9537] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 422.246856][ T9537] usb 5-1: no configurations [ 422.252305][ T9537] usb 5-1: can't read configurations, error -22 [ 422.385955][ T9537] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 422.443583][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1218'. [ 422.498507][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1219'. [ 422.546910][ T9537] usb 5-1: no configurations [ 422.552372][ T9537] usb 5-1: can't read configurations, error -22 [ 422.560078][ T9537] usb usb5-port1: attempt power cycle [ 422.590457][T10682] netlink: 'syz.6.1220': attribute type 10 has an invalid length. [ 422.603653][T10682] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 422.614462][T10680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.906001][ T9537] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 422.928254][ T9537] usb 5-1: no configurations [ 422.933033][ T9537] usb 5-1: can't read configurations, error -22 [ 423.065935][ T9537] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 423.088119][ T9537] usb 5-1: no configurations [ 423.092780][ T9537] usb 5-1: can't read configurations, error -22 [ 423.099602][ T9537] usb usb5-port1: unable to enumerate USB device [ 423.279010][ T5926] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 423.435953][ T5926] usb 8-1: Using ep0 maxpacket: 16 [ 423.443345][ T5926] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.454981][ T5926] usb 8-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 423.465997][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.476931][ T5926] usb 8-1: config 0 descriptor?? [ 423.895315][ T5926] mcp2200 0003:04D8:00DF.001F: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.7-1/input0 [ 424.300439][ T5893] usb 8-1: USB disconnect, device number 22 [ 424.624678][T10703] netlink: 'syz.6.1227': attribute type 21 has an invalid length. [ 424.635320][T10703] netlink: 14532 bytes leftover after parsing attributes in process `syz.6.1227'. [ 425.246115][ T5873] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 425.265939][ T5893] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 425.288671][T10718] netlink: 'syz.6.1231': attribute type 16 has an invalid length. [ 425.405955][ T5873] usb 8-1: Using ep0 maxpacket: 16 [ 425.413512][ T5873] usb 8-1: config 4 has an invalid interface number: 140 but max is 0 [ 425.422308][ T5873] usb 8-1: config 4 has no interface number 0 [ 425.429896][ T5873] usb 8-1: config 4 interface 140 has no altsetting 0 [ 425.439537][ T5873] usb 8-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=68.3b [ 425.445920][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 425.455162][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.459255][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 425.464932][ T5873] usb 8-1: Product: syz [ 425.475318][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.481818][ T5873] usb 8-1: Manufacturer: syz [ 425.491510][ T5893] usb 5-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 425.502853][ T5873] usb 8-1: SerialNumber: syz [ 425.508373][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.524159][ T5873] ums-cypress 8-1:4.140: USB Mass Storage device detected [ 425.534469][ T5893] usb 5-1: config 0 descriptor?? [ 425.725333][ T9537] usb 8-1: USB disconnect, device number 23 [ 425.982700][ T5893] input: HID 054c:03d5 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:03D5.0020/input/input34 [ 426.075665][ T5893] sony 0003:054C:03D5.0020: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.4-1/input0 [ 426.172394][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.194542][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.231265][ T5893] usb 5-1: USB disconnect, device number 38 [ 426.444698][T10741] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1236'. [ 426.729054][T10760] loop6: detected capacity change from 0 to 7 [ 426.742616][T10760] Dev loop6: unable to read RDB block 7 [ 426.750100][T10760] loop6: AHDI p1 [ 426.761831][T10760] loop6: partition table partially beyond EOD, truncated [ 427.439715][T10781] overlayfs: missing 'lowerdir' [ 427.884221][T10801] loop6: detected capacity change from 0 to 7 [ 427.892953][ T8995] Dev loop6: unable to read RDB block 7 [ 427.904012][ T8995] loop6: AHDI p1 [ 427.909248][ T8995] loop6: partition table partially beyond EOD, truncated [ 427.928616][T10801] Dev loop6: unable to read RDB block 7 [ 427.939206][T10801] loop6: AHDI p1 [ 427.942936][T10801] loop6: partition table partially beyond EOD, truncated [ 428.120327][T10808] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1260'. [ 428.524417][T10818] dvmrp0: entered allmulticast mode [ 428.866307][T10840] netlink: 'syz.4.1268': attribute type 4 has an invalid length. [ 428.990681][T10846] loop6: detected capacity change from 0 to 7 [ 429.000698][T10846] Dev loop6: unable to read RDB block 7 [ 429.011000][T10846] loop6: AHDI p1 [ 429.015088][T10846] loop6: partition table partially beyond EOD, truncated [ 429.158347][ T5147] Bluetooth: hci2: Unknown advertising packet type: 0x35 [ 429.158405][ T5147] Bluetooth: hci2: Malformed LE Event: 0x0d [ 429.159542][T10850] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1273'. [ 429.394346][T10857] netlink: 'syz.7.1276': attribute type 27 has an invalid length. [ 429.409471][T10857] netlink: 56537 bytes leftover after parsing attributes in process `syz.7.1276'. [ 429.656360][ T5893] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 429.805922][ T5893] usb 8-1: Using ep0 maxpacket: 16 [ 429.822748][ T5893] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.837215][ T5893] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 429.848615][ T5893] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 429.860958][ T5893] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 429.876823][ T5893] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 429.886334][ T5893] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 429.894452][ T5893] usb 8-1: Manufacturer: syz [ 429.906923][ T5893] usb 8-1: config 0 descriptor?? [ 429.918361][T10857] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 429.948163][T10879] /dev/nbd6: Can't lookup blockdev [ 430.005971][ T5892] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 430.134699][ T5893] usb 8-1: USB disconnect, device number 24 [ 430.168081][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 430.268427][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 430.278575][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 430.286419][ T5892] usb 5-1: can't read configurations, error -71 [ 431.855971][ T5892] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 432.027924][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.050855][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 432.067332][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 432.077691][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.095002][ T5892] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.104705][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.120065][ T5892] usb 5-1: config 0 descriptor?? [ 432.313523][T10923] netlink: 'syz.5.1298': attribute type 4 has an invalid length. [ 432.337384][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'. [ 432.345413][T10923] netlink: 'syz.5.1298': attribute type 4 has an invalid length. [ 432.578531][ T5892] plantronics 0003:047F:FFFF.0021: ignoring exceeding usage max [ 432.619757][ T5892] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 433.322669][T10951] netlink: 'syz.6.1303': attribute type 1 has an invalid length. [ 434.550233][T10966] loop6: detected capacity change from 0 to 7 [ 434.558326][ T8945] Dev loop6: unable to read RDB block 7 [ 434.564002][ T8945] loop6: AHDI p1 [ 434.568047][ T8945] loop6: partition table partially beyond EOD, truncated [ 434.580264][ T5893] usb 5-1: USB disconnect, device number 41 [ 434.594283][T10966] Dev loop6: unable to read RDB block 7 [ 434.603381][T10966] loop6: AHDI p1 [ 434.608943][T10966] loop6: partition table partially beyond EOD, truncated [ 435.715545][T10985] veth0: mtu less than device minimum [ 435.908248][T10986] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 435.930454][T10979] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 436.246202][ T5893] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 436.422327][ T5893] usb 5-1: Using ep0 maxpacket: 8 [ 436.434313][ T5893] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 436.465985][ T5893] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.496416][ T5893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.517526][ T5893] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.535899][ T5893] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.566388][ T5893] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 436.595934][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.403718][T11021] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 437.419691][T10993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.470497][T10993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.502518][ T5893] usb 5-1: USB disconnect, device number 42 [ 438.597061][ T5873] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 438.777742][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.796178][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.816646][ T5873] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 438.858951][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.899852][ T5873] usb 5-1: config 0 descriptor?? [ 439.329440][T11039] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1332'. [ 439.344822][ T5873] usbhid 5-1:0.0: can't add hid device: -71 [ 439.360792][ T5873] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 439.384015][ T5873] usb 5-1: USB disconnect, device number 43 [ 440.344844][T11081] netlink: 'syz.6.1344': attribute type 46 has an invalid length. [ 442.279493][T11118] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1356'. [ 442.319359][T11120] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1357'. [ 442.340555][T11120] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1357'. [ 442.477545][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1358'. [ 443.265916][ T9537] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 443.451401][ T9537] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 443.462584][ T9537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.472249][ T9537] usb 5-1: Product: syz [ 443.479627][ T9537] usb 5-1: Manufacturer: syz [ 443.485093][ T9537] usb 5-1: SerialNumber: syz [ 443.494523][ T9537] usb 5-1: config 0 descriptor?? [ 443.728655][ T9537] int51x1 5-1:0.0: probe with driver int51x1 failed with error -71 [ 443.760975][ T9537] usb 5-1: USB disconnect, device number 44 [ 444.413505][T11161] netlink: 'syz.6.1372': attribute type 10 has an invalid length. [ 444.429386][T11161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.442283][T11161] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 445.262956][T11172] overlayfs: upper fs does not support tmpfile. [ 446.111859][T11189] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 446.619524][T11202] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 446.632550][T11202] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 446.642334][T11202] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 446.658228][T11202] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 446.668339][T11202] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 446.994299][T11200] chnl_net:caif_netlink_parms(): no params data found [ 447.164764][T11212] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1385'. [ 447.167786][T11200] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.183698][T11200] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.192245][T11200] bridge_slave_0: entered allmulticast mode [ 447.200609][T11200] bridge_slave_0: entered promiscuous mode [ 447.211034][T11200] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.219916][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.227554][T11200] bridge_slave_1: entered allmulticast mode [ 447.249607][T11212] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input35 [ 447.261849][T11200] bridge_slave_1: entered promiscuous mode [ 447.463443][T11200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.491645][T11216] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.514666][T11200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.688338][T11200] team0: Port device team_slave_0 added [ 447.695278][T11218] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1387'. [ 447.708954][T11200] team0: Port device team_slave_1 added [ 447.964286][T11200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.001615][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.094609][T11200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.138245][T11200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.145443][T11200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.260693][T11200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.518102][T11200] hsr_slave_0: entered promiscuous mode [ 448.544833][T11200] hsr_slave_1: entered promiscuous mode [ 448.575982][T11200] debugfs: 'hsr0' already exists in 'hsr' [ 448.592182][T11200] Cannot create hsr debugfs directory [ 448.736992][ T5147] Bluetooth: hci3: command tx timeout [ 449.159181][T11233] netlink: 187320 bytes leftover after parsing attributes in process `syz.6.1393'. [ 449.197158][T11233] netlink: zone id is out of range [ 449.292794][T11200] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 449.322504][T11200] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 449.350355][T11200] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 449.372578][T11200] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 449.631672][T11200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.687314][T11200] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.705662][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.713428][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.736705][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.744463][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.222447][T11200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.573112][T11200] veth0_vlan: entered promiscuous mode [ 450.601755][T11200] veth1_vlan: entered promiscuous mode [ 450.650200][T11200] veth0_macvtap: entered promiscuous mode [ 450.665727][T11200] veth1_macvtap: entered promiscuous mode [ 450.695286][T11200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.712273][T11200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.770417][ T1159] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.789869][ T1159] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.805247][ T1159] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.816351][ T5147] Bluetooth: hci3: command tx timeout [ 450.836605][ T1159] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.977544][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.013687][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.067534][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.077478][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.291057][T11275] dvmrp1: entered allmulticast mode [ 451.320042][T11275] netlink: 'syz.8.1379': attribute type 10 has an invalid length. [ 451.361561][T11275] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 451.623500][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.818705][ T5893] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 451.928106][T11298] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1404'. [ 452.007291][ T5893] usb 9-1: Using ep0 maxpacket: 16 [ 452.014896][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.047461][ T5893] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.076303][ T5893] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.104301][ T5893] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.119497][ T5893] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.137255][ T5893] usb 9-1: config 0 descriptor?? [ 452.365582][T11287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.387899][T11287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.610797][ T5893] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 452.618527][ T5893] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 452.630939][ T5893] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 452.638742][ T5893] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 452.646576][ T5893] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 452.653984][ T5893] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 452.664086][ T5893] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 452.672251][ T5893] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 452.680619][ T5893] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 452.689513][ T5893] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 452.727799][ T5893] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0022/input/input36 [ 452.793250][ T5893] microsoft 0003:045E:07DA.0022: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 452.847583][ T5893] usb 9-1: USB disconnect, device number 2 [ 452.899164][ T5147] Bluetooth: hci3: command tx timeout [ 452.905091][T11316] fido_id[11316]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 453.449677][T11323] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 453.587271][T11327] IPVS: set_ctl: invalid protocol: 29487 47.107.101.114:28261 [ 453.587293][ T5926] IPVS: starting estimator thread 0... [ 453.606385][T11329] IPVS: rr: FWM 3 0x00000003 - no destination available [ 453.747019][T11330] IPVS: using max 27 ests per chain, 64800 per kthread [ 453.788685][T11340] Bluetooth: MGMT ver 1.23 [ 454.979156][ T5147] Bluetooth: hci3: command tx timeout [ 455.085857][ T6092] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 455.247668][ T6092] usb 9-1: Using ep0 maxpacket: 32 [ 455.260317][ T6092] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.286361][ T6092] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.299966][ T6092] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 455.313888][ T6092] usb 9-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 455.329884][ T6092] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.347907][ T6092] usb 9-1: config 0 descriptor?? [ 455.823818][ T6092] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0023/input/input37 [ 455.936951][ T6092] input: HID 0458:5011 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5011.0023/input/input38 [ 456.127518][ T6092] kye 0003:0458:5011.0023: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.8-1/input0 [ 456.203559][ T6092] usb 9-1: USB disconnect, device number 3 [ 456.274309][T11390] fido_id[11390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 457.585862][ T24] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 457.738748][ T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.753801][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 457.766263][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 457.777050][ T24] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 457.792083][ T24] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 457.801840][ T24] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 457.810281][ T24] usb 9-1: Manufacturer: syz [ 457.826996][ T24] usb 9-1: config 0 descriptor?? [ 458.039430][T11441] block nbd8: NBD_DISCONNECT [ 458.145893][ T24] rc_core: IR keymap rc-hauppauge not found [ 458.162080][ T24] Registered IR keymap rc-empty [ 458.186988][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.216284][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.245435][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 458.276843][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input39 [ 458.351272][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.396615][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.437527][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.471959][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.496779][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.515965][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.536436][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.585899][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.607598][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.626260][ T24] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 458.659841][ T24] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 458.677031][ T24] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 458.704724][ T24] usb 9-1: USB disconnect, device number 4 [ 459.076770][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 459.242144][ T24] usb 9-1: config 0 has an invalid interface number: 69 but max is 0 [ 459.263505][ T24] usb 9-1: config 0 has no interface number 0 [ 459.273928][ T24] usb 9-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 459.309061][ T24] usb 9-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.338219][ T24] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 459.355871][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.374616][ T24] usb 9-1: Product: syz [ 459.384749][ T24] usb 9-1: Manufacturer: syz [ 459.394900][ T24] usb 9-1: SerialNumber: syz [ 459.437759][ T24] usb 9-1: config 0 descriptor?? [ 459.458248][T11481] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 459.497808][ T24] cyberjack 9-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 459.560521][ T24] usb 9-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 459.769808][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.796682][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.119196][ T6092] usb 9-1: USB disconnect, device number 5 [ 460.151712][ T6092] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 460.171227][ T6092] cyberjack 9-1:0.69: device disconnected [ 460.272585][T11202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.283450][T11202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.292774][T11202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.302471][T11202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 460.311728][T11202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 460.812330][T11642] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 460.819268][T11642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.892665][T11642] vhci_hcd vhci_hcd.0: Device attached [ 461.003924][T11644] vhci_hcd: connection closed [ 461.020055][ T1095] vhci_hcd: stop threads [ 461.045113][ T1095] vhci_hcd: release socket [ 461.047943][T11537] chnl_net:caif_netlink_parms(): no params data found [ 461.053521][ T1095] vhci_hcd: disconnect device [ 461.087141][ T9] vhci_hcd: vhci_device speed not set [ 461.230831][ T1159] bridge_slave_1: left allmulticast mode [ 461.245924][ T1159] bridge_slave_1: left promiscuous mode [ 461.252175][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.282347][ T1159] bridge_slave_0: left allmulticast mode [ 461.298401][ T1159] bridge_slave_0: left promiscuous mode [ 461.310071][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.667790][T11707] loop6: detected capacity change from 0 to 7 [ 461.699237][T11707] Dev loop6: unable to read RDB block 7 [ 461.704967][T11707] loop6: AHDI p1 [ 461.721603][T11707] loop6: partition table partially beyond EOD, truncated [ 461.915593][ T1159] dvmrp0 (unregistering): left allmulticast mode [ 462.321600][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.363371][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.387992][ T1159] bond0 (unregistering): (slave team0): Releasing backup interface [ 462.416142][T11202] Bluetooth: hci1: command tx timeout [ 462.424798][ T1159] bond0 (unregistering): Released all slaves [ 462.677801][T11747] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1459'. [ 462.735548][T11537] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.756721][T11537] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.764227][T11537] bridge_slave_0: entered allmulticast mode [ 462.783894][T11537] bridge_slave_0: entered promiscuous mode [ 462.811427][T11537] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.820938][T11537] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.835671][T11537] bridge_slave_1: entered allmulticast mode [ 462.846108][T11537] bridge_slave_1: entered promiscuous mode [ 462.982968][T11537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.133484][T11537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.329410][T11537] team0: Port device team_slave_0 added [ 463.374727][T11537] team0: Port device team_slave_1 added [ 463.509561][ T1159] hsr_slave_0: left promiscuous mode [ 463.529764][ T1159] hsr_slave_1: left promiscuous mode [ 463.548490][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.569281][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.944131][T11883] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1471'. [ 463.954236][T11883] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1471'. [ 464.212348][T11895] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1474'. [ 464.221966][T11895] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1474'. [ 464.388535][T11899] loop6: detected capacity change from 0 to 7 [ 464.399578][ T8995] Dev loop6: unable to read RDB block 7 [ 464.411781][ T8995] loop6: AHDI p1 [ 464.425841][ T8995] loop6: partition table partially beyond EOD, truncated [ 464.444862][T11899] Dev loop6: unable to read RDB block 7 [ 464.462715][T11899] loop6: AHDI p1 [ 464.467548][T11899] loop6: partition table partially beyond EOD, truncated [ 464.499941][T11202] Bluetooth: hci1: command tx timeout [ 464.762049][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 464.846767][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 465.595062][T11537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.616390][T11537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.658732][ T9537] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 465.678632][T11537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.744282][T11537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.753336][T11537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.793760][T11537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.812775][ T9537] usb 9-1: device descriptor read/64, error -71 [ 465.920727][T11537] hsr_slave_0: entered promiscuous mode [ 465.951684][T11537] hsr_slave_1: entered promiscuous mode [ 465.970909][T11537] debugfs: 'hsr0' already exists in 'hsr' [ 465.977943][T11537] Cannot create hsr debugfs directory [ 466.056961][ T9537] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 466.196099][ T9537] usb 9-1: device descriptor read/64, error -71 [ 466.323077][ T9537] usb usb9-port1: attempt power cycle [ 466.473045][T11537] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 466.493686][T11537] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 466.528401][T11537] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 466.552171][T11537] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 466.581818][T11202] Bluetooth: hci1: command tx timeout [ 466.685938][ T9537] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 466.716744][ T9537] usb 9-1: device descriptor read/8, error -71 [ 466.939979][T11537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.956219][ T9537] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 466.986952][ T9537] usb 9-1: device descriptor read/8, error -71 [ 467.000512][T11537] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.017155][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.024540][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.041164][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.048591][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.116326][ T9537] usb usb9-port1: unable to enumerate USB device [ 467.395268][T11537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.576171][T12097] netlink: 292 bytes leftover after parsing attributes in process `syz.6.1486'. [ 467.674013][T12100] veth1_vlan: left promiscuous mode [ 467.822728][T12107] netlink: 165 bytes leftover after parsing attributes in process `syz.6.1488'. [ 468.038742][T11537] veth0_vlan: entered promiscuous mode [ 468.063997][T11537] veth1_vlan: entered promiscuous mode [ 468.167276][T11537] veth0_macvtap: entered promiscuous mode [ 468.195406][T11537] veth1_macvtap: entered promiscuous mode [ 468.208250][T12124] futex_wake_op: syz.5.1490 tries to shift op by -1; fix this program [ 468.261039][T11537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.321072][T11537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.368090][ T1105] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.392892][ T1105] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.414735][ T1105] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.425057][ T1105] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.659277][T11202] Bluetooth: hci1: command tx timeout [ 468.666174][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.688660][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.760209][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.774102][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.048854][T12171] netlink: 'syz.6.1494': attribute type 4 has an invalid length. [ 469.048880][T12171] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1494'. [ 469.062632][T12173] netlink: 'syz.6.1494': attribute type 4 has an invalid length. [ 469.092723][T12173] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1494'. [ 469.111785][T12167] team_slave_0: entered allmulticast mode [ 469.131962][T12167] team_slave_0: entered promiscuous mode [ 469.167838][ T5873] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 469.180741][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1446'. [ 469.336491][ T5873] usb 9-1: Using ep0 maxpacket: 32 [ 469.343586][ T5873] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 469.352553][ T5873] usb 9-1: config 0 has no interface number 0 [ 469.363218][ T5873] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 469.372735][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.383470][ T5873] usb 9-1: Product: syz [ 469.388071][ T5873] usb 9-1: Manufacturer: syz [ 469.393701][ T5873] usb 9-1: SerialNumber: syz [ 469.401552][ T5873] usb 9-1: config 0 descriptor?? [ 469.410224][ T5873] smsc95xx v2.0.0 [ 469.436079][ T5910] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 469.601152][ T5910] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 469.611347][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.622203][ T5910] usb 10-1: Product: syz [ 469.627042][ T5910] usb 10-1: Manufacturer: syz [ 469.631916][ T5910] usb 10-1: SerialNumber: syz [ 469.645292][ T5910] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 469.673934][ T24] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 469.822780][ T5873] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 469.851026][ T5873] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 469.942076][T12205] fuse: Unknown parameter 'KC[^k;16bW3NiL ^wWs΄d:ޛ4ۃ8h*7`/BHB*#B1/n10a:HNJ(?fbxI$^0TI-&*$+13co>x' [ 469.969356][T12205] fuse: Bad value for 'fd' [ 470.019630][T12208] sctp: [Deprecated]: syz.6.1500 (pid 12208) Use of int in max_burst socket option deprecated. [ 470.019630][T12208] Use struct sctp_assoc_value instead [ 470.039304][T12208] fuse: Bad value for 'fd' [ 470.065228][ T10] usb 10-1: USB disconnect, device number 2 [ 470.445031][T12223] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1503'. [ 470.744092][ T24] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 470.744265][T12231] syzkaller1: entered promiscuous mode [ 470.757090][ T24] ath9k_htc: Failed to initialize the device [ 470.758904][T12231] syzkaller1: entered allmulticast mode [ 470.768956][ T10] usb 10-1: ath9k_htc: USB layer deinitialized [ 470.910830][ T5873] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 470.943067][ T5873] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 470.984052][ T5873] usb 9-1: USB disconnect, device number 10 [ 471.209292][T12270] netlink: 'syz.5.1510': attribute type 4 has an invalid length. [ 471.237587][T12270] netlink: 'syz.5.1510': attribute type 4 has an invalid length. [ 471.615590][T12291] fuse: Unknown parameter 'Xd' [ 471.796344][T12303] Bluetooth: MGMT ver 1.23 [ 471.824201][T12303] max out of range [ 472.136027][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 472.286100][ T10] usb 9-1: device descriptor read/64, error -71 [ 472.526851][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 472.617164][T12324] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1524'. [ 472.633589][T12327] netlink: 'syz.5.1525': attribute type 2 has an invalid length. [ 472.643101][T12327] netlink: 'syz.5.1525': attribute type 1 has an invalid length. [ 472.652241][T12327] netlink: 'syz.5.1525': attribute type 8 has an invalid length. [ 472.672017][ T10] usb 9-1: device descriptor read/64, error -71 [ 472.681606][T12327] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1525'. [ 472.711011][T12332] netlink: 'syz.6.1526': attribute type 17 has an invalid length. [ 472.719651][T12332] netlink: 'syz.6.1526': attribute type 16 has an invalid length. [ 472.728624][T12332] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1526'. [ 472.775569][T12335] netlink: 22 bytes leftover after parsing attributes in process `syz.5.1527'. [ 472.790132][ T10] usb usb9-port1: attempt power cycle [ 472.853306][T12342] autofs: Unknown parameter 'MY' [ 473.145912][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 473.167111][ T10] usb 9-1: device descriptor read/8, error -71 [ 473.370266][T12347] netlink: 308 bytes leftover after parsing attributes in process `syz.6.1531'. [ 473.405953][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 473.441640][ T10] usb 9-1: device descriptor read/8, error -71 [ 473.556619][ T10] usb usb9-port1: unable to enumerate USB device [ 474.736905][T12367] netlink: zone id is out of range [ 474.742262][T12367] netlink: zone id is out of range [ 474.749094][T12367] netlink: zone id is out of range [ 474.754455][T12367] netlink: zone id is out of range [ 474.762402][T12367] netlink: zone id is out of range [ 474.767766][T12367] netlink: zone id is out of range [ 474.772926][T12367] netlink: zone id is out of range [ 474.780179][T12367] netlink: zone id is out of range [ 474.785358][T12367] netlink: zone id is out of range [ 474.792140][T12367] netlink: zone id is out of range [ 475.079001][T12389] loop7: detected capacity change from 0 to 16384 [ 475.306394][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 475.485931][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 475.486829][T12390] loop7: detected capacity change from 16384 to 0 [ 475.498770][ T10] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 475.511837][ T10] usb 9-1: config 0 has no interface number 0 [ 475.531114][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 475.549683][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.562590][ T10] usb 9-1: Product: syz [ 475.569231][ T10] usb 9-1: Manufacturer: syz [ 475.574290][ T10] usb 9-1: SerialNumber: syz [ 475.590079][ T10] usb 9-1: config 0 descriptor?? [ 475.611812][ T10] smsc95xx v2.0.0 [ 475.682066][T12397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 475.728283][ T31] audit: type=1326 audit(2000000044.840:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12403 comm="syz.6.1545" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ff698eec9 code=0x0 [ 475.939649][T12415] fuse: blksize only supported for fuseblk [ 475.949468][T12415] netlink: 1 bytes leftover after parsing attributes in process `syz.9.1548'. [ 475.962840][T12413] ./bus: Can't lookup blockdev [ 476.037613][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 476.060313][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 476.196629][ T43] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 476.357710][ T43] usb 10-1: config 1 has an invalid interface number: 236 but max is 1 [ 476.375942][ T43] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.395892][ T43] usb 10-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 476.414000][ T43] usb 10-1: config 1 has no interface number 2 [ 476.432723][ T43] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 476.462990][ T43] usb 10-1: config 1 interface 1 has no altsetting 0 [ 476.480578][ T43] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.496303][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.515947][ T43] usb 10-1: Product: syz [ 476.524883][ T43] usb 10-1: Manufacturer: syz [ 476.534965][ T43] usb 10-1: SerialNumber: syz [ 476.561251][T12415] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 476.594246][ T43] cdc_ncm 10-1:1.0: skipping garbage [ 476.621023][ T43] cdc_ncm 10-1:1.0: NCM or ECM functional descriptors missing [ 476.636176][ T43] cdc_ncm 10-1:1.0: bind() failure [ 476.667683][ T43] cdc_ncm 10-1:1.236: CDC Union missing and no IAD found [ 476.687448][ T43] cdc_ncm 10-1:1.236: bind() failure [ 476.806316][T12415] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1548'. [ 476.834280][T12435] overlayfs: failed to resolve './file1': -2 [ 476.836536][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.878709][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.890517][T12415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.919547][T12415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.050578][ T5873] usb 10-1: USB disconnect, device number 3 [ 477.107374][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 477.139553][ T10] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 477.174055][T12455] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20003 [ 477.190928][ T10] usb 9-1: USB disconnect, device number 15 [ 477.777553][T12488] netlink: 220 bytes leftover after parsing attributes in process `syz.9.1557'. [ 477.846915][T12491] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 477.878376][T12491] overlayfs: overlapping lowerdir path [ 478.398966][ T5893] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 478.573878][ T5893] usb 9-1: Using ep0 maxpacket: 32 [ 478.580267][ T5893] usb 9-1: too many configurations: 57, using maximum allowed: 8 [ 478.610651][ T5893] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 478.636018][ T5893] usb 9-1: can't read configurations, error -61 [ 478.796147][ T5893] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 478.813311][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.833349][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.859101][ T1095] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 478.896612][ T1095] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 478.922244][ T1095] bond0 (unregistering): Released all slaves [ 478.958033][ T5893] usb 9-1: Using ep0 maxpacket: 32 [ 478.964260][ T5893] usb 9-1: too many configurations: 57, using maximum allowed: 8 [ 479.004368][ T5893] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 479.034654][ T5893] usb 9-1: can't read configurations, error -61 [ 479.078696][ T5893] usb usb9-port1: attempt power cycle [ 479.447365][ T5893] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 479.509737][ T5893] usb 9-1: Using ep0 maxpacket: 32 [ 479.530005][ T5893] usb 9-1: too many configurations: 57, using maximum allowed: 8 [ 479.561275][ T5893] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 479.589000][ T5893] usb 9-1: can't read configurations, error -61 [ 479.683161][ T1095] hsr_slave_0: left promiscuous mode [ 479.702378][T12534] netlink: 220 bytes leftover after parsing attributes in process `syz.9.1568'. [ 479.716202][ T1095] hsr_slave_1: left promiscuous mode [ 479.723698][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.748781][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.779624][ T5893] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 479.816766][ T5893] usb 9-1: Using ep0 maxpacket: 32 [ 479.837711][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 479.849886][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 479.859575][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 479.869056][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 479.876949][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 479.887528][ T5893] usb 9-1: too many configurations: 57, using maximum allowed: 8 [ 479.898163][ T5893] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 479.929469][ T5893] usb 9-1: can't read configurations, error -61 [ 479.940189][T12548] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1569'. [ 479.969176][ T5893] usb usb9-port1: unable to enumerate USB device [ 479.994018][T12549] netlink: 'syz.9.1569': attribute type 21 has an invalid length. [ 480.572513][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 480.627889][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 481.273811][T12549] netlink: 164 bytes leftover after parsing attributes in process `syz.9.1569'. [ 481.802190][ T1095] IPVS: stop unused estimator thread 0... [ 481.936128][ T5147] Bluetooth: hci2: command tx timeout [ 481.944037][T12537] chnl_net:caif_netlink_parms(): no params data found [ 482.304563][T12728] autofs: Bad value for 'fd' [ 482.334087][T12735] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1579'. [ 482.459364][T12537] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.488946][T12537] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.511548][T12537] bridge_slave_0: entered allmulticast mode [ 482.524455][T12537] bridge_slave_0: entered promiscuous mode [ 482.535040][T12537] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.547333][T12537] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.555144][T12537] bridge_slave_1: entered allmulticast mode [ 482.564592][T12537] bridge_slave_1: entered promiscuous mode [ 482.649759][T12537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.670589][T12537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.732402][ T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 482.756777][T12537] team0: Port device team_slave_0 added [ 482.772074][T12537] team0: Port device team_slave_1 added [ 482.853838][T12537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.866492][T12537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.876023][ T10] usb 10-1: device descriptor read/64, error -71 [ 482.899886][T12537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.917291][T12537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.924814][T12537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.955355][T12537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.063608][T12537] hsr_slave_0: entered promiscuous mode [ 483.080092][T12537] hsr_slave_1: entered promiscuous mode [ 483.102871][T12537] debugfs: 'hsr0' already exists in 'hsr' [ 483.115337][T12537] Cannot create hsr debugfs directory [ 483.156877][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 483.295985][ T10] usb 10-1: device descriptor read/64, error -71 [ 483.408083][ T10] usb usb10-port1: attempt power cycle [ 483.795945][ T10] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 483.868446][ T10] usb 10-1: device descriptor read/8, error -71 [ 484.018541][ T5147] Bluetooth: hci2: command tx timeout [ 484.123915][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 484.166780][ T10] usb 10-1: device descriptor read/8, error -71 [ 484.277025][ T5893] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 484.298544][ T10] usb usb10-port1: unable to enumerate USB device [ 484.459274][ T5893] usb 9-1: Using ep0 maxpacket: 32 [ 484.469113][ T5893] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 484.498098][ T5893] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 484.515991][ T5893] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 484.534702][T12537] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 484.541594][ T5893] usb 9-1: Product: syz [ 484.547773][ T5893] usb 9-1: Manufacturer: syz [ 484.552639][ T5893] usb 9-1: SerialNumber: syz [ 484.569135][T12537] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 484.577129][ T5893] usb 9-1: config 0 descriptor?? [ 484.586512][T12984] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 484.597250][T12537] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 484.619610][T12537] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 484.788371][T12537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.810690][T12984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.828193][T12537] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.831743][T12984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.852707][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.856061][ T6092] usb 9-1: USB disconnect, device number 20 [ 484.860334][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.915039][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.922385][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.254838][T12537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.342255][T12537] veth0_vlan: entered promiscuous mode [ 485.366998][T12537] veth1_vlan: entered promiscuous mode [ 485.512183][T12537] veth0_macvtap: entered promiscuous mode [ 485.520425][T13071] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1595'. [ 485.563460][T12537] veth1_macvtap: entered promiscuous mode [ 485.633119][T12537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.664519][T12537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.694636][T13085] program syz.8.1597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.708155][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.719559][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.738547][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.748865][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.924173][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.936220][ T6092] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 485.955546][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.015362][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.049338][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.096816][ T5147] Bluetooth: hci2: command tx timeout [ 486.097190][T11202] Bluetooth: hci3: command tx timeout [ 486.125942][ T6092] usb 10-1: Using ep0 maxpacket: 32 [ 486.151981][ T6092] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.181791][ T6092] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 486.207214][ T6092] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 486.237415][ T6092] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 486.253766][ T6092] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.299957][ T6092] usb 10-1: config 0 descriptor?? [ 486.306494][T13076] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 486.330732][ T6092] hub 10-1:0.0: USB hub found [ 486.539225][ T6092] hub 10-1:0.0: 2 ports detected [ 486.970078][ T6092] usb 10-1: USB disconnect, device number 8 [ 487.802776][T13188] FAULT_INJECTION: forcing a failure. [ 487.802776][T13188] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 487.845858][T13188] CPU: 0 UID: 0 PID: 13188 Comm: syz.1.1608 Not tainted syzkaller #0 PREEMPT(full) [ 487.845890][T13188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 487.845904][T13188] Call Trace: [ 487.845913][T13188] [ 487.845921][T13188] dump_stack_lvl+0x189/0x250 [ 487.845949][T13188] ? __pfx____ratelimit+0x10/0x10 [ 487.845971][T13188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.845993][T13188] ? __pfx__printk+0x10/0x10 [ 487.846015][T13188] ? fs_reclaim_acquire+0x7d/0x100 [ 487.846048][T13188] should_fail_ex+0x414/0x560 [ 487.846087][T13188] prepare_alloc_pages+0x213/0x610 [ 487.846121][T13188] __alloc_frozen_pages_noprof+0x123/0x370 [ 487.846152][T13188] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 487.846190][T13188] ? policy_nodemask+0x27c/0x720 [ 487.846221][T13188] alloc_pages_mpol+0x232/0x4a0 [ 487.846251][T13188] vma_alloc_folio_noprof+0xe4/0x200 [ 487.846281][T13188] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 487.846320][T13188] folio_prealloc+0x30/0x180 [ 487.846344][T13188] do_wp_page+0x1231/0x5800 [ 487.846398][T13188] ? __pfx_do_wp_page+0x10/0x10 [ 487.846427][T13188] ? do_raw_spin_lock+0x121/0x290 [ 487.846450][T13188] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 487.846481][T13188] __handle_mm_fault+0x1033/0x5400 [ 487.846516][T13188] ? __pfx___handle_mm_fault+0x10/0x10 [ 487.846550][T13188] ? follow_page_pte+0xd03/0x13e0 [ 487.846578][T13188] handle_mm_fault+0x40a/0x8e0 [ 487.846607][T13188] __get_user_pages+0x165c/0x2a00 [ 487.846671][T13188] __gup_longterm_locked+0xde4/0x1660 [ 487.846713][T13188] ? __lock_acquire+0xab9/0xd20 [ 487.846763][T13188] pin_user_pages_remote+0xd4/0x120 [ 487.846800][T13188] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 487.846837][T13188] ? down_read+0x1ad/0x2e0 [ 487.846866][T13188] process_vm_rw+0x593/0xaf0 [ 487.846910][T13188] ? __pfx_process_vm_rw+0x10/0x10 [ 487.846939][T13188] ? rcu_read_lock_any_held+0xb3/0x120 [ 487.847001][T13188] ? __pfx_vfs_write+0x10/0x10 [ 487.847047][T13188] ? ksys_write+0x22a/0x250 [ 487.847070][T13188] ? __pfx_ksys_write+0x10/0x10 [ 487.847094][T13188] __x64_sys_process_vm_writev+0xe0/0x100 [ 487.847131][T13188] do_syscall_64+0xfa/0xfa0 [ 487.847153][T13188] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.847175][T13188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.847196][T13188] ? clear_bhb_loop+0x60/0xb0 [ 487.847221][T13188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.847242][T13188] RIP: 0033:0x7fbc4758eec9 [ 487.847263][T13188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.847281][T13188] RSP: 002b:00007fbc484d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 487.847304][T13188] RAX: ffffffffffffffda RBX: 00007fbc477e6090 RCX: 00007fbc4758eec9 [ 487.847319][T13188] RDX: 0000000000000001 RSI: 0000200000001c80 RDI: 000000000000000c [ 487.847333][T13188] RBP: 00007fbc484d5090 R08: 0000000000000001 R09: 0000000000000000 [ 487.847346][T13188] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 487.847359][T13188] R13: 00007fbc477e6128 R14: 00007fbc477e6090 R15: 00007ffe43be7348 [ 487.847394][T13188] [ 488.176787][T11202] Bluetooth: hci2: command tx timeout [ 488.318116][T13207] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 488.344948][T13207] overlayfs: failed to set xattr on upper [ 488.352002][T13207] overlayfs: ...falling back to redirect_dir=nofollow. [ 488.359116][T13207] overlayfs: ...falling back to index=off. [ 488.365153][T13207] overlayfs: ...falling back to uuid=null. [ 488.373573][T13209] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 489.706099][ T5892] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 489.856655][ T5892] usb 9-1: device descriptor read/64, error -71 [ 489.890040][T13301] netlink: 'syz.9.1627': attribute type 1 has an invalid length. [ 490.106119][ T5892] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 490.261303][ T5892] usb 9-1: device descriptor read/64, error -71 [ 490.276105][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 490.382566][ T5892] usb usb9-port1: attempt power cycle [ 490.446113][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 490.454412][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 490.473537][ T24] usb 10-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 490.487379][ T24] usb 10-1: config 12 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 0 [ 490.498131][ T24] usb 10-1: config 12 interface 0 has no altsetting 0 [ 490.514681][ T24] usb 10-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 490.524251][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.545000][ T24] usb 10-1: Product: syz [ 490.549780][ T24] usb 10-1: Manufacturer: syz [ 490.554752][ T24] usb 10-1: SerialNumber: syz [ 490.736409][ T5892] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 490.765908][ T5893] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 490.785863][ T5892] usb 9-1: device descriptor read/8, error -71 [ 490.946007][ T24] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.953351][ T24] usb 10-1: selecting invalid altsetting 0 [ 490.955919][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 490.980792][ T5893] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 490.994770][ T5893] usb 2-1: config 179 has no interface number 0 [ 491.005340][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 491.017941][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 491.030151][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 491.046586][ T5892] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 491.055372][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 491.082856][ T5893] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 491.099620][ T5892] usb 9-1: device descriptor read/8, error -71 [ 491.109478][ T5893] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 491.110215][ T24] snd-usb-audio 10-1:12.0: probe with driver snd-usb-audio failed with error -12 [ 491.118776][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.150410][T13332] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 491.157770][ T24] usb 10-1: USB disconnect, device number 9 [ 491.217093][ T5892] usb usb9-port1: unable to enumerate USB device [ 491.231891][ T9166] udevd[9166]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.893803][ T31] audit: type=1400 audit(2000000061.010:5716): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=13397 comm="syz.9.1638" [ 492.454241][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1642'. [ 492.474429][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1642'. [ 492.541686][T13433] ipvlan0: entered promiscuous mode [ 492.553237][T13433] ipvlan0: entered allmulticast mode [ 492.559351][T13433] veth0_vlan: entered allmulticast mode [ 492.730203][T13440] trusted_key: syz.9.1645 sent an empty control message without MSG_MORE. [ 493.232244][T13462] loop6: detected capacity change from 0 to 7 [ 493.246647][T13462] Dev loop6: unable to read RDB block 7 [ 493.254551][T13462] loop6: AHDI p1 [ 493.259006][T13462] loop6: partition table partially beyond EOD, truncated [ 493.436770][ T5893] usb 2-1: USB disconnect, device number 35 [ 493.436849][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 493.436907][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 494.266281][ T9812] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 494.439541][ T9812] usb 9-1: unable to get BOS descriptor or descriptor too short [ 494.449212][ T9812] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 494.462833][ T9812] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 494.473698][ T9812] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 494.485192][ T9812] usb 9-1: config 1 has no interface number 1 [ 494.491934][ T9812] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 494.523419][ T9812] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 494.560255][ T9812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.596022][ T9812] usb 9-1: Product: syz [ 494.612753][ T9812] usb 9-1: Manufacturer: syz [ 494.634308][ T9812] usb 9-1: SerialNumber: syz [ 494.955995][ T43] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 495.086003][ T5910] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 495.124197][ T43] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.139702][ T43] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.160873][ T43] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.173332][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.184372][ T43] usb 10-1: Product: syz [ 495.189299][ T43] usb 10-1: Manufacturer: syz [ 495.195635][ T43] usb 10-1: SerialNumber: syz [ 495.221451][ T43] cdc_ncm 10-1:1.0: skipping garbage [ 495.235870][ T43] cdc_ncm 10-1:1.0: NCM or ECM functional descriptors missing [ 495.243830][ T43] cdc_ncm 10-1:1.0: bind() failure [ 495.249286][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 495.260080][ T5910] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 495.275985][ T5910] usb 2-1: config 0 has no interface number 0 [ 495.285475][ T43] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 495.301213][ T5910] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 495.315903][ T43] cdc_ncm 10-1:1.1: bind() failure [ 495.330749][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.356232][ T5910] usb 2-1: Product: syz [ 495.371658][ T5910] usb 2-1: Manufacturer: syz [ 495.383494][ T5910] usb 2-1: SerialNumber: syz [ 495.409754][ T5910] usb 2-1: config 0 descriptor?? [ 495.438702][ T5910] smsc95xx v2.0.0 [ 495.451419][ T43] usb 10-1: USB disconnect, device number 10 [ 495.846159][ T5910] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 495.869034][ T5910] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 496.133819][T13600] netlink: 'syz.9.1656': attribute type 1 has an invalid length. [ 496.157459][T13600] netlink: 16150 bytes leftover after parsing attributes in process `syz.9.1656'. [ 496.900816][ T5910] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 496.956704][ T5910] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 497.015452][ T5910] usb 2-1: USB disconnect, device number 36 [ 497.065058][ T9812] usb 9-1: found format II with max.bitrate = 8, frame size=9 [ 497.098224][ T9812] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 497.168837][ T9812] usb 9-1: USB disconnect, device number 25 [ 497.303121][ T8995] udevd[8995]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.546148][ T9812] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 497.726589][ T9812] usb 9-1: Using ep0 maxpacket: 8 [ 497.732183][T13788] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1662'. [ 497.752308][ T9812] usb 9-1: unable to get BOS descriptor or descriptor too short [ 497.767972][ T9812] usb 9-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 497.791183][ T9812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.807110][ T9812] usb 9-1: Product: syz [ 497.813255][ T9812] usb 9-1: Manufacturer: syz [ 497.828504][ T9812] usb 9-1: SerialNumber: syz [ 498.088089][ T9812] usb 9-1: USB disconnect, device number 26 [ 499.225901][ T9537] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 499.399412][ T9537] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 499.423647][ T9537] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 499.444795][ T9537] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 499.467164][ T9537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.490656][T13842] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 499.513379][ T9537] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 499.727778][T13883] netlink: 220 bytes leftover after parsing attributes in process `syz.8.1672'. [ 499.882436][T13842] can0: slcan on ttyS3. [ 499.947195][T13839] can0 (unregistered): slcan off ttyS3. [ 500.012692][ T5910] usb 2-1: USB disconnect, device number 37 [ 500.593423][T13935] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1680'. [ 500.616144][T13935] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1680'. [ 500.787743][T13945] xt_l2tp: invalid flags combination: 0 [ 500.885337][T13949] loop6: detected capacity change from 0 to 7 [ 500.893989][T13949] Dev loop6: unable to read RDB block 7 [ 500.897851][ T5892] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 500.904615][T13949] loop6: AHDI p1 [ 500.912688][T13949] loop6: partition table partially beyond EOD, truncated [ 501.052076][T13958] netlink: 'syz.8.1685': attribute type 1 has an invalid length. [ 501.062568][T13958] netlink: 'syz.8.1685': attribute type 101 has an invalid length. [ 501.063890][ T5892] usb 2-1: not running at top speed; connect to a high speed hub [ 501.074377][T13958] netlink: 468 bytes leftover after parsing attributes in process `syz.8.1685'. [ 501.081599][ T5892] usb 2-1: config 233 has an invalid interface number: 170 but max is 0 [ 501.098284][ T5892] usb 2-1: config 233 has no interface number 0 [ 501.104628][ T5892] usb 2-1: config 233 interface 170 altsetting 15 endpoint 0xA has invalid maxpacket 967, setting to 64 [ 501.122826][ T5892] usb 2-1: config 233 interface 170 altsetting 15 endpoint 0xC has invalid maxpacket 520, setting to 64 [ 501.134772][ T5892] usb 2-1: config 233 interface 170 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 501.147972][ T5892] usb 2-1: config 233 interface 170 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 501.159314][ T5892] usb 2-1: config 233 interface 170 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 501.171297][ T5892] usb 2-1: config 233 interface 170 altsetting 15 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 501.182955][ T5892] usb 2-1: config 233 interface 170 has no altsetting 0 [ 501.193224][ T5892] usb 2-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=ae.59 [ 501.203076][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.211438][ T5892] usb 2-1: Product: ჻笀킣휏㊁굮첸빟壦凰옪䞷킡뉆脅轅츉䄏关㩦抒놦酰텿뇟墰ẁ⌁쳎ᑹ˟⁃胏䥃຋鬭왌塭횳◇禸㆑跧鸸浐ጊ쟟抉횭樳蓫喨㞣৥㓑꾕畘럲䓾磇蘈墀⴫ጺ䠋䌟询뷵찴岄퐞ꃕ瘝଍펺灃꦳㬔膷 [ 501.239736][ T5892] usb 2-1: Manufacturer: ﴳ欫Ωр쇙憯䠻ᅶ꼥憷폒眦⬩싩쵤౜浒眦ﯦ獣ꃬಆ暳搪䯜솾䜪綖韵ᢜ‖縚㳱쫳ꪮ⿢鳦먗ⲇ䴂棁핳눭మ덥蹞⾜犾嬅엗随팼餍ࠄ꿉⤄렛帋억坐ꜿ煭쑯홻鄳港늡ᐰ茡쳉嚔룠嚞髵佪㈹덞씛 [ 501.267382][ T5892] usb 2-1: SerialNumber: ⹞쫉霊ᙩ덠ᓍ窢M汑摹䘈앤醞Ԉベۛ튁栿ꋻ梔Ṍ쎀ڥ풛㲟䤸磅秘მ娡啛確㦇奤峉׋炌닑热⭖莩穚㙅爷䯍ꈹ蕄璲솯絢㧉Ú쎼穈䳟ࠀ鿬뗭㖉㗨藺轤☑庯♣걺㧮፴빇ﾖ硒䶂ᤜ罱ả뺩Ꙙ석黛ꦤꂴ픥乪臸剂啛軏㍼碿⯟꜐冐 [ 501.365907][ T24] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 501.493263][T13966] loop6: detected capacity change from 0 to 2560 [ 501.500759][T13966] buffer_io_error: 10 callbacks suppressed [ 501.500779][T13966] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.517634][ T24] usb 9-1: device descriptor read/64, error -71 [ 501.524803][T13966] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.527888][ T5892] usbhid 2-1:233.170: couldn't find an input interrupt endpoint [ 501.538413][T13966] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.555502][T13966] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.559542][ T5892] usb 2-1: USB disconnect, device number 38 [ 501.585615][T13966] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.595904][T13966] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.604902][T13966] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.618642][T13966] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.639067][T13966] ldm_validate_partition_table(): Disk read failed. [ 501.650826][T13966] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.660965][T13966] Buffer I/O error on dev loop6, logical block 0, async page read [ 501.671068][T13966] Dev loop6: unable to read RDB block 0 [ 501.679962][T13966] loop6: unable to read partition table [ 501.693956][T13966] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 501.779675][ T24] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 501.916649][ T24] usb 9-1: device descriptor read/64, error -71 [ 502.029976][ T24] usb usb9-port1: attempt power cycle [ 502.086072][ T5892] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 502.173797][T14039] PKCS7: Unknown OID: [4] 6.7 [ 502.191072][T14039] PKCS7: Only support pkcs7_signedData type [ 502.274991][ T5892] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 502.295138][ T5892] usb 10-1: config 0 interface 0 has no altsetting 0 [ 502.304214][ T5892] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 502.313543][ T5892] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 502.322198][ T5892] usb 10-1: Product: syz [ 502.327637][ T5892] usb 10-1: Manufacturer: syz [ 502.332367][ T5892] usb 10-1: SerialNumber: syz [ 502.351261][ T5892] usb 10-1: config 0 descriptor?? [ 502.373421][ T5892] usb 10-1: selecting invalid altsetting 0 [ 502.385874][ T24] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 502.407014][ T24] usb 9-1: device descriptor read/8, error -71 [ 502.468776][ T5893] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 502.634131][ T5911] usb 10-1: USB disconnect, device number 11 [ 502.646443][ T24] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 502.648739][ T5893] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=28.00 [ 502.664291][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.674380][ T5893] usb 2-1: Product: syz [ 502.679130][ T24] usb 9-1: device descriptor read/8, error -71 [ 502.690925][ T5893] usb 2-1: Manufacturer: syz [ 502.695664][ T5893] usb 2-1: SerialNumber: syz [ 502.706800][ T5893] usb 2-1: config 0 descriptor?? [ 502.721571][ T5893] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 502.742540][ T5893] usb 2-1: Detected FT2233HP [ 502.786403][ T24] usb usb9-port1: unable to enumerate USB device [ 502.914916][ T5893] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 502.933039][ T5893] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 502.943494][ T5893] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 502.956675][ T5893] usb 2-1: USB disconnect, device number 39 [ 502.972371][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 502.984417][ T5893] ftdi_sio 2-1:0.0: device disconnected [ 503.735885][ T5893] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 503.747691][T14122] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1699'. [ 503.898696][ T5893] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.910875][ T5893] usb 10-1: config 0 interface 0 has no altsetting 0 [ 503.922387][ T5893] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 503.935453][ T5893] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.946845][ T5893] usb 10-1: Product: syz [ 503.951240][ T5893] usb 10-1: Manufacturer: syz [ 503.956312][ T5893] usb 10-1: SerialNumber: syz [ 503.967511][ T5893] usb 10-1: config 0 descriptor?? [ 503.978063][ T5893] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 503.998036][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 504.009095][ T5893] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 504.019878][ T5893] usb 10-1: media controller created [ 504.059507][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 504.144910][ T5893] DVB: Unable to find symbol tda10046_attach() [ 504.160202][ T5893] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 504.190798][ T5893] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 504.271655][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1700'. [ 505.057855][ T5893] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 505.091702][ T5893] usb 10-1: USB disconnect, device number 12 [ 505.183687][T14184] net_ratelimit: 1 callbacks suppressed [ 505.183708][T14184] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 505.254078][T14189] loop6: detected capacity change from 0 to 7 [ 505.264383][T14189] Dev loop6: unable to read RDB block 7 [ 505.274322][T14189] loop6: AHDI p1 [ 505.278439][T14189] loop6: partition table partially beyond EOD, truncated [ 506.176718][ T5893] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 506.236078][ T5892] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 506.287509][T14249] 9pnet_fd: Insufficient options for proto=fd [ 506.348244][ T5893] usb 2-1: config 0 interface 0 has no altsetting 0 [ 506.355204][ T5893] usb 2-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 506.365001][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.383143][ T5893] usb 2-1: config 0 descriptor?? [ 506.395886][ T5892] usb 10-1: Using ep0 maxpacket: 16 [ 506.414042][ T5892] usb 10-1: unable to get BOS descriptor or descriptor too short [ 506.428918][ T5892] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 506.442204][ T5892] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.457472][ T5892] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.467535][ T5892] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.476521][ T5892] usb 10-1: Product: syz [ 506.481128][ T5892] usb 10-1: Manufacturer: syz [ 506.486105][ T5892] usb 10-1: SerialNumber: syz [ 506.725781][ T5892] usb 10-1: 0:2 : does not exist [ 506.768090][ T5892] usb 10-1: USB disconnect, device number 13 [ 506.823540][ T8995] udevd[8995]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.855029][ T5893] sigmamicro 0003:1C4F:0059.0024: item fetching failed at offset 0/3 [ 506.871832][ T5893] sigmamicro 0003:1C4F:0059.0024: probe with driver sigmamicro failed with error -22 [ 507.150338][ T5910] usb 2-1: USB disconnect, device number 40 [ 507.806313][ T5910] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 507.976018][ T5892] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 507.986201][ T5910] usb 10-1: Using ep0 maxpacket: 32 [ 507.995678][ T5910] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 508.004856][ T5910] usb 10-1: config 0 has no interface number 0 [ 508.014296][ T5910] usb 10-1: config 0 interface 184 has no altsetting 0 [ 508.030644][ T5910] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 508.042254][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.050932][ T5910] usb 10-1: Product: syz [ 508.055229][ T5910] usb 10-1: Manufacturer: syz [ 508.060836][ T5910] usb 10-1: SerialNumber: syz [ 508.069265][ T5910] usb 10-1: config 0 descriptor?? [ 508.086678][ T5910] smsc75xx v1.0.0 [ 508.127954][T14336] team_slave_0: entered allmulticast mode [ 508.142133][T14336] team_slave_0: entered promiscuous mode [ 508.148295][ T5892] usb 2-1: config 0 has an invalid interface number: 71 but max is 0 [ 508.159715][ T5892] usb 2-1: config 0 has no interface number 0 [ 508.167781][ T5892] usb 2-1: config 0 interface 71 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 508.179664][ T5892] usb 2-1: config 0 interface 71 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 508.190854][ T5892] usb 2-1: config 0 interface 71 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 508.206925][ T5892] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0 [ 508.216285][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.224337][ T5892] usb 2-1: Product: syz [ 508.228675][ T5892] usb 2-1: Manufacturer: syz [ 508.233607][ T5892] usb 2-1: SerialNumber: syz [ 508.246692][ T5892] usb 2-1: config 0 descriptor?? [ 508.256879][T14318] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 508.278837][T14341] netlink: 'syz.5.1733': attribute type 19 has an invalid length. [ 508.287363][ T5892] kvaser_usb 2-1:0.71: error -ENODEV: Cannot get usb endpoint(s) [ 508.298979][T14341] netlink: 5 bytes leftover after parsing attributes in process `syz.5.1733'. [ 508.480181][ T9812] usb 2-1: USB disconnect, device number 41 [ 508.966330][T14353] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 509.099643][ T5910] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 509.296034][ T5147] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 509.297988][T11202] Bluetooth: hci4: command 0x1003 tx timeout [ 509.308452][ T5910] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 509.330156][T14308] xt_l2tp: wrong L2TP version: 0 [ 509.358289][ T5910] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 509.399689][ T5910] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 509.426588][ T5910] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 509.447421][ T5910] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71 [ 509.465842][ T5892] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 509.472179][ T5910] usb 10-1: USB disconnect, device number 14 [ 509.635978][ T5892] usb 2-1: Using ep0 maxpacket: 8 [ 509.642652][ T5892] usb 2-1: config 148 has an invalid interface number: 46 but max is 0 [ 509.651096][ T5892] usb 2-1: config 148 has no interface number 0 [ 509.657749][ T5892] usb 2-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=30.8d [ 509.666902][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.835945][ T43] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 509.846317][ T5910] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 509.903300][T14363] tun0: tun_chr_ioctl cmd 21731 [ 509.913770][T14363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.923097][T14363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.934057][ T5892] dvb-usb: found a 'DiBcom TFE7790P reference design' in warm state. [ 509.951018][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 509.961849][ T5892] dvbdev: DVB: registering new adapter (DiBcom TFE7790P reference design) [ 509.971452][ T5892] usb 2-1: media controller created [ 509.991125][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 510.008082][ T5910] usb 10-1: Using ep0 maxpacket: 32 [ 510.026058][ T43] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 510.041219][ T5910] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.055678][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.064179][ T43] usb 9-1: Product: syz [ 510.070537][ T5910] usb 10-1: config 0 interface 0 has no altsetting 0 [ 510.074558][ T5892] DVB: Unable to find symbol dib7000p_attach() [ 510.081317][ T43] usb 9-1: Manufacturer: syz [ 510.088673][ T5892] dvb-usb: no frontend was attached by 'DiBcom TFE7790P reference design' [ 510.091994][ T5910] usb 10-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 510.110645][ T43] usb 9-1: SerialNumber: syz [ 510.117431][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.127083][ T43] usb 9-1: config 0 descriptor?? [ 510.138471][ T43] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 510.162919][ T5910] usb 10-1: config 0 descriptor?? [ 510.183415][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input41 [ 510.199623][ T5892] rc_core: IR keymap rc-dib0700-rc5 not found [ 510.217337][ T5892] Registered IR keymap rc-empty [ 510.222651][ T5892] dvb-usb: could not initialize remote control. [ 510.232756][ T5892] dvb-usb: DiBcom TFE7790P reference design successfully initialized and connected. [ 510.268322][ T5892] usb 2-1: USB disconnect, device number 42 [ 510.341907][ T5892] dvb-usb: DiBcom TFE7790P reference design successfully deinitialized and disconnected. [ 510.577271][ T43] usb 9-1: USB disconnect, device number 31 [ 510.835051][ T5182] bcm5974 10-1:0.0: could not read from device [ 510.844804][ T5892] usb 10-1: USB disconnect, device number 15 [ 510.852825][ T5182] bcm5974 10-1:0.0: could not read from device [ 510.863324][ T8935] bcm5974 10-1:0.0: could not read from device [ 510.889899][ T8935] udevd[8935]: Error opening device "/dev/input/event5": Input/output error [ 510.926746][ T8935] udevd[8935]: Unable to EVIOCGABS device "/dev/input/event5" [ 510.951062][ T8935] udevd[8935]: Unable to EVIOCGABS device "/dev/input/event5" [ 510.971108][ T8935] udevd[8935]: Unable to EVIOCGABS device "/dev/input/event5" [ 510.979312][ T8935] udevd[8935]: Unable to EVIOCGABS device "/dev/input/event5" [ 511.145067][T14477] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 511.217950][T14477] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 511.236428][T14486] netlink: 14212 bytes leftover after parsing attributes in process `syz.5.1748'. [ 511.886075][ T5892] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 512.070448][ T5892] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 512.093823][ T5892] usb 2-1: config 0 has no interface number 0 [ 512.121666][ T5892] usb 2-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 512.175032][ T5892] usb 2-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 512.215836][ T5892] usb 2-1: config 0 interface 48 has no altsetting 0 [ 512.231340][ T5892] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 512.263786][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.301553][ T5892] usb 2-1: config 0 descriptor?? [ 512.544655][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 512.553003][ T5892] usb 2-1: string descriptor 0 read error: -71 [ 512.560345][ T5892] cp210x 2-1:0.48: cp210x converter detected [ 512.580753][ T5892] cp210x 2-1:0.48: failed to get vendor val 0x370b size 1: -71 [ 512.603127][ T5892] cp210x 2-1:0.48: querying part number failed [ 512.620139][ T5892] usb 2-1: cp210x converter now attached to ttyUSB0 [ 512.650149][ T5892] usb 2-1: USB disconnect, device number 43 [ 512.680837][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 512.702343][ T5892] cp210x 2-1:0.48: device disconnected [ 513.073140][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.775982][ T5910] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 513.925933][ T5910] usb 2-1: Using ep0 maxpacket: 8 [ 513.935939][ T5910] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 513.945229][ T5910] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 513.953377][ T5910] usb 2-1: Product: syz [ 513.957745][ T5910] usb 2-1: Manufacturer: syz [ 513.962400][ T5910] usb 2-1: SerialNumber: syz [ 513.970181][ T5910] usb 2-1: config 0 descriptor?? [ 513.982528][ T5910] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 514.364575][T14655] netlink: 'syz.9.1772': attribute type 2 has an invalid length. [ 514.374780][T14655] netlink: 'syz.9.1772': attribute type 1 has an invalid length. [ 514.387585][ T5910] gspca_zc3xx: reg_r err -71 [ 514.400732][ T5910] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 514.420243][ T5910] usb 2-1: USB disconnect, device number 44 [ 514.984905][T14684] loop6: detected capacity change from 0 to 7 [ 514.993382][T14684] Dev loop6: unable to read RDB block 7 [ 514.999380][T14684] loop6: AHDI p1 [ 515.003246][T14684] loop6: partition table partially beyond EOD, truncated [ 515.669645][T14706] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 515.683335][T14706] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 515.698219][T14706] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 515.716047][ T5892] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 515.887622][ T5892] usb 10-1: Using ep0 maxpacket: 32 [ 515.903410][ T5892] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 515.917529][ T5892] usb 10-1: config 0 has no interface number 0 [ 515.937624][ T5892] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 515.947993][ T5892] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.955948][ T5873] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 515.956324][ T5892] usb 10-1: Product: syz [ 515.973369][ T5892] usb 10-1: Manufacturer: syz [ 515.978305][ T5892] usb 10-1: SerialNumber: syz [ 515.990672][ T5892] usb 10-1: config 0 descriptor?? [ 516.012905][ T5892] smsc95xx v2.0.0 [ 516.128317][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 516.138340][ T5873] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 516.148296][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 516.159268][ T5873] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 516.168589][ T5873] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 516.178373][ T5873] usb 2-1: Manufacturer: syz [ 516.187416][ T5873] usb 2-1: config 0 descriptor?? [ 516.202592][ T5873] smsusb:smsusb_probe: board id=9, interface number 0 [ 516.210845][ T5873] smsusb:smsusb_probe: Device initialized with return code -19 [ 516.267512][ T9537] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 516.425102][ T5892] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 516.448485][ T9537] usb 9-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 516.460093][ T5892] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 516.465368][ T5873] usb 2-1: USB disconnect, device number 45 [ 516.471693][ T9537] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 516.489669][ T9537] usb 9-1: New USB device found, idVendor=5543, idProduct=c06e, bcdDevice=ff.ff [ 516.502721][ T9537] usb 9-1: New USB device strings: Mfr=223, Product=0, SerialNumber=0 [ 516.512151][ T9537] usb 9-1: Manufacturer: syz [ 516.537109][ T9537] usb 9-1: config 0 descriptor?? [ 516.895531][T14690] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1779'. [ 517.285904][ T5910] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 517.310375][ T5892] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 517.321657][ T5892] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -61 [ 517.435926][ T5910] usb 2-1: Using ep0 maxpacket: 32 [ 517.442947][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 209, changing to 11 [ 517.454555][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 49976, setting to 1024 [ 517.471015][ T5910] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 517.481409][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.490660][ T5910] usb 2-1: Product: syz [ 517.494886][ T5910] usb 2-1: Manufacturer: syz [ 517.505909][ T5910] usb 2-1: SerialNumber: syz [ 517.519299][ T5910] usb 2-1: config 0 descriptor?? [ 517.532115][ T9537] usb 10-1: USB disconnect, device number 16 [ 517.592092][ T5910] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 517.598537][ T5892] usb 9-1: USB disconnect, device number 32 [ 517.767126][T14756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.788810][T14756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.845276][ T5892] usb 2-1: USB disconnect, device number 46 [ 517.854542][ T13] usb 2-1: Failed to submit usb control message: -71 [ 517.876443][ T13] usb 2-1: unable to send the bmi data to the device: -71 [ 517.883684][ T13] usb 2-1: unable to get target info from device [ 517.905913][ T13] usb 2-1: could not get target info (-71) [ 517.912140][ T13] usb 2-1: could not probe fw (-71) [ 518.253738][ T1086] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.467499][ T1086] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.573969][ T1086] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.671353][ T1086] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.757913][ T5910] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 518.836173][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 518.936126][ T5910] usb 10-1: Using ep0 maxpacket: 8 [ 518.954024][ T5910] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 518.976762][ T5910] usb 10-1: config 179 has no interface number 0 [ 518.988908][ T5910] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 519.002865][ T1086] bridge_slave_1: left allmulticast mode [ 519.015027][ T1086] bridge_slave_1: left promiscuous mode [ 519.016496][ T5910] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 519.024575][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.040673][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 519.051875][ T5910] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 519.058060][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 519.081258][ T5910] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 519.084634][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 519.097014][ T5910] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 519.118697][ T5910] usb 10-1: config 179 interface 65 has no altsetting 0 [ 519.121311][ T1086] bridge_slave_0: left allmulticast mode [ 519.126282][ T5910] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 519.131515][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.131540][ T10] usb 2-1: Product: syz [ 519.141453][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.154465][ T1086] bridge_slave_0: left promiscuous mode [ 519.174362][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.184500][ T10] usb 2-1: Manufacturer: syz [ 519.191614][ T10] usb 2-1: SerialNumber: syz [ 519.208248][ T10] usb 2-1: config 0 descriptor?? [ 519.230215][ T5910] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input42 [ 519.296053][ T5182] input input42: unable to receive magic message: -110 [ 519.320241][ T5182] input input42: unable to receive magic message: -32 [ 519.361907][ T5182] input input42: unable to receive magic message: -32 [ 519.416208][ T5182] input input42: unable to receive magic message: -32 [ 519.428423][T14826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.453760][T14820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.467784][T14826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.488846][T14820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.514367][ T5182] input input42: unable to receive magic message: -32 [ 519.530593][ T5182] input input42: unable to receive magic message: -32 [ 519.650981][T14877] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1799'. [ 519.669320][T14877] netlink: 'syz.5.1799': attribute type 5 has an invalid length. [ 519.687476][ T10] usb 2-1: USB disconnect, device number 47 [ 519.699874][T14877] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1799'. [ 519.740061][T14820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.779221][T14820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.838917][ T8935] udevd[8935]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 519.948286][T11202] Bluetooth: hci2: command 0x0405 tx timeout [ 520.221483][T14903] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1795'. [ 520.613716][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.628810][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.641366][ T1086] bond0 (unregistering): Released all slaves [ 520.683851][T14909] netlink: 'syz.5.1803': attribute type 16 has an invalid length. [ 521.091135][T14934] loop6: detected capacity change from 0 to 7 [ 521.123873][T14934] Dev loop6: unable to read RDB block 7 [ 521.132796][T14934] loop6: AHDI p1 [ 521.137265][T14934] loop6: partition table partially beyond EOD, truncated [ 521.261134][ T1086] hsr_slave_0: left promiscuous mode [ 521.283367][ T1086] hsr_slave_1: left promiscuous mode [ 521.297567][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.308662][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.339649][ T1086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.378223][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.407705][T14948] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1806'. [ 521.455115][ T1086] veth1_macvtap: left promiscuous mode [ 521.486433][ T1086] veth0_macvtap: left promiscuous mode [ 521.499887][ T1086] veth1_vlan: left promiscuous mode [ 521.505329][ T1086] veth0_vlan: left promiscuous mode [ 521.563237][ T9537] usb 10-1: USB disconnect, device number 17 [ 521.563365][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 522.000345][ T9537] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 522.081420][ T5910] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 522.180861][ T9537] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 522.195104][ T9537] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 522.206295][ T9537] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 522.220437][ T9537] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 522.239925][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 522.247552][ T9537] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.258650][ T9537] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.267937][ T9537] usb 10-1: Product: syz [ 522.270813][ T5910] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 522.272303][ T9537] usb 10-1: Manufacturer: syz [ 522.288920][ T9537] usb 10-1: SerialNumber: syz [ 522.306813][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.315488][T14970] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 522.331040][ T5910] usb 2-1: Product: syz [ 522.335276][ T5910] usb 2-1: Manufacturer: syz [ 522.342674][ T5910] usb 2-1: SerialNumber: syz [ 522.352258][ T9537] cdc_mbim 10-1:1.0: skipping garbage [ 522.373994][ T5910] usb 2-1: config 0 descriptor?? [ 522.391156][ T5910] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 522.560484][T14970] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 522.568281][T14970] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 522.623609][ T1086] team0 (unregistering): Port device team_slave_1 removed [ 522.686062][ T5873] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 522.708695][ T1086] team0 (unregistering): Port device team_slave_0 removed [ 522.841687][ T5873] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 522.859227][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.882274][ T5873] usb 9-1: config 0 descriptor?? [ 523.008144][T14970] netlink: 'syz.9.1809': attribute type 10 has an invalid length. [ 523.020204][T14970] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1809'. [ 523.062644][ T5910] usb 2-1: clie_3_5_startup: get interface number failed: -71 [ 523.079833][ T5910] visor 2-1:0.0: probe with driver visor failed with error -71 [ 523.101815][ T5873] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 523.109943][ T5910] usb 2-1: USB disconnect, device number 48 [ 523.261011][T15001] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 523.268787][T15001] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 523.277431][ T9537] cdc_mbim 10-1:1.0: dwNtbInMaxSize=70 is too small. Using 2048 [ 523.285201][ T9537] cdc_mbim 10-1:1.0: setting rx_max = 2048 [ 523.561132][T15006] batadv_slave_1: entered promiscuous mode [ 523.587812][ T9537] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device [ 523.678232][T15010] batadv_slave_1: left promiscuous mode [ 523.708197][ T5873] [drm:udl_init] *ERROR* Selecting channel failed [ 523.758178][ T9537] wwan wwan0: port wwan0mbim0 attached [ 523.789165][ T5873] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 523.809068][ T5873] [drm] Initialized udl on minor 2 [ 523.830738][ T9537] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 12:b3:66:d6:95:32 [ 523.859608][ T5910] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 523.875124][ T5873] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 523.894943][T15038] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1815'. [ 523.914104][ T5873] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 523.922913][ T9537] usb 10-1: USB disconnect, device number 18 [ 523.962137][ T24] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 523.983715][ T9537] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM [ 524.016988][ T24] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 524.034642][ T5873] usb 9-1: USB disconnect, device number 33 [ 524.052708][ T5910] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 524.078819][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.130118][ T5910] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 524.145368][ T5910] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 524.159806][ T9537] wwan wwan0: port wwan0mbim0 disconnected [ 524.189064][ T5910] usb 2-1: Manufacturer: syz [ 524.220236][ T5910] usb 2-1: config 0 descriptor?? [ 524.240505][ T5910] igorplugusb 2-1:0.0: incorrect number of endpoints [ 524.365109][T15082] loop6: detected capacity change from 0 to 7 [ 524.381977][T15082] Dev loop6: unable to read RDB block 7 [ 524.388465][T15082] loop6: AHDI p1 [ 524.392168][T15082] loop6: partition table partially beyond EOD, truncated [ 524.420742][T15087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1818'. [ 524.458723][T15087] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1818'. [ 524.463103][ T6092] usb 2-1: USB disconnect, device number 49 [ 524.476942][T15087] netlink: 'syz.5.1818': attribute type 6 has an invalid length. [ 524.488065][T15087] netlink: 'syz.5.1818': attribute type 5 has an invalid length. [ 524.513639][T15087] netlink: 'syz.5.1818': attribute type 4 has an invalid length. [ 524.521775][ T5873] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 524.686736][ T5873] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 524.697362][ T5873] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.706612][ T5873] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.719905][ T5873] usb 9-1: config 0 interface 0 has no altsetting 0 [ 524.728055][ T5873] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.738342][ T5873] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.752790][ T5873] usb 9-1: config 0 interface 0 has no altsetting 0 [ 524.763274][ T5873] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.772695][ T5873] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.785106][ T5873] usb 9-1: config 0 interface 0 has no altsetting 0 [ 524.802827][ T5873] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.811961][ T5873] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.824037][ T5873] usb 9-1: config 0 interface 0 has no altsetting 0 [ 524.842622][ T5873] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.853469][ T5873] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.867586][ T5873] usb 9-1: config 0 interface 0 has no altsetting 0 [ 524.876397][ T5873] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.891234][ T5873] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.907113][ T5873] usb 9-1: config 0 interface 0 has no altsetting 0 [ 524.929052][ T5873] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 524.943659][ T5873] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 524.966935][ T5873] usb 9-1: config 0 interface 0 has no altsetting 0 [ 524.988971][ T5873] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 525.005834][ T5873] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 525.037071][ T5873] usb 9-1: config 0 interface 0 has no altsetting 0 [ 525.060089][ T5873] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 525.074922][ T5873] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 525.094166][ T5873] usb 9-1: Product: syz [ 525.104674][ T5873] usb 9-1: Manufacturer: syz [ 525.117585][ T5873] usb 9-1: SerialNumber: syz [ 525.134672][ T5873] usb 9-1: config 0 descriptor?? [ 525.170107][ T5873] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 525.384679][T15038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.402530][T15038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.411236][ T5910] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 525.439980][ T5873] usb 9-1: USB disconnect, device number 34 [ 525.463598][ T5873] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 525.576141][ T5910] usb 2-1: Using ep0 maxpacket: 16 [ 525.589787][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.603672][ T5910] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 525.613109][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.633462][ T5910] usb 2-1: config 0 descriptor?? [ 526.051836][T15116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.081233][T15116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.199319][T15181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.212484][T15181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.231386][ T5910] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 526.304487][T15188] fuse: Bad value for 'group_id' [ 526.320233][T15188] fuse: Bad value for 'group_id' [ 526.442766][T15116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.452238][ T6092] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 526.469088][T15116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.621011][ T6092] usb 10-1: not running at top speed; connect to a high speed hub [ 526.649817][ T6092] usb 10-1: no configurations [ 526.660589][ T6092] usb 10-1: can't read configurations, error -22 [ 526.795925][ T6092] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 526.855900][ T10] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 526.958293][ T6092] usb 10-1: not running at top speed; connect to a high speed hub [ 526.967145][ T6092] usb 10-1: no configurations [ 526.972178][ T6092] usb 10-1: can't read configurations, error -22 [ 526.981038][ T6092] usb usb10-port1: attempt power cycle [ 527.016099][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 527.030557][ T10] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 527.038988][ T10] usb 9-1: config 0 has no interface number 0 [ 527.063379][ T10] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 527.073643][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.081822][ T10] usb 9-1: Product: syz [ 527.086204][ T10] usb 9-1: Manufacturer: syz [ 527.090842][ T10] usb 9-1: SerialNumber: syz [ 527.099809][ T10] usb 9-1: config 0 descriptor?? [ 527.115276][ T10] smsc95xx v2.0.0 [ 527.336300][ T6092] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 527.388274][ T6092] usb 10-1: not running at top speed; connect to a high speed hub [ 527.403756][ T6092] usb 10-1: no configurations [ 527.426335][ T6092] usb 10-1: can't read configurations, error -22 [ 527.483329][T15217] loop6: detected capacity change from 0 to 7 [ 527.493225][ T8945] Dev loop6: unable to read RDB block 7 [ 527.500905][ T8945] loop6: AHDI p1 [ 527.504828][ T8945] loop6: partition table partially beyond EOD, truncated [ 527.516431][T15217] Dev loop6: unable to read RDB block 7 [ 527.534644][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 527.534986][T15206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.556830][T15217] loop6: AHDI p1 [ 527.560588][T15217] loop6: partition table partially beyond EOD, truncated [ 527.572040][T15206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.575007][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 527.592199][ T6092] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 527.630929][ T6092] usb 10-1: not running at top speed; connect to a high speed hub [ 527.646727][ T6092] usb 10-1: no configurations [ 527.661330][ T6092] usb 10-1: can't read configurations, error -22 [ 527.688842][ T6092] usb usb10-port1: unable to enumerate USB device [ 528.217847][T15235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.230118][T15235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.365166][ T5910] usb 2-1: USB disconnect, device number 50 [ 528.425510][ T10] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 528.457836][ T10] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -61 [ 528.654568][ T10] usb 9-1: USB disconnect, device number 35 [ 529.163349][T15282] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1838'. [ 529.273662][T15292] loop6: detected capacity change from 0 to 7 [ 529.284417][T15292] Dev loop6: unable to read RDB block 7 [ 529.290579][T15292] loop6: AHDI p1 [ 529.294290][T15292] loop6: partition table partially beyond EOD, truncated [ 529.734211][ T31] audit: type=1400 audit(2000000105.845:5717): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 530.218130][ C1] vkms_vblank_simulate: vblank timer overrun [ 530.231380][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 530.311173][T15340] hpfs: hpfs_map_sector(): read error [ 530.416571][ T10] usb 2-1: too many configurations: 185, using maximum allowed: 8 [ 530.426158][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.436778][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 530.447817][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.458777][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 530.469326][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.479935][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 530.485885][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 530.491420][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.505620][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 530.522249][ T43] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 530.531849][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.543145][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 530.543155][ T43] usb 10-1: config 0 has no interface number 0 [ 530.546524][ T43] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 530.554460][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.578358][ T43] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.578390][ T43] usb 10-1: Product: syz [ 530.578407][ T43] usb 10-1: Manufacturer: syz [ 530.578422][ T43] usb 10-1: SerialNumber: syz [ 530.602558][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 530.603620][ T43] usb 10-1: config 0 descriptor?? [ 530.619691][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.630308][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 530.643226][ T43] smsc95xx v2.0.0 [ 530.650488][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.660829][ T9537] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 530.668911][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 530.681311][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=c2ab, bcdDevice=9f.a8 [ 530.691635][ T10] usb 2-1: New USB device strings: Mfr=17, Product=40, SerialNumber=175 [ 530.700211][ T10] usb 2-1: Product: syz [ 530.704534][ T10] usb 2-1: Manufacturer: syz [ 530.710593][ T10] usb 2-1: SerialNumber: syz [ 530.719079][ T10] usb 2-1: config 0 descriptor?? [ 530.825845][ T9537] usb 9-1: Using ep0 maxpacket: 16 [ 530.833882][ T9537] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.850407][ T9537] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 530.863107][ T9537] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 530.872983][ T9537] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 530.882872][ T9537] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.900411][ T9537] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 530.909657][ T9537] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 530.917898][ T9537] usb 9-1: Manufacturer: syz [ 530.928878][ T9537] usb 9-1: config 0 descriptor?? [ 530.968104][ T5893] hid_parser_main: 3 callbacks suppressed [ 530.968154][ T5893] hid-generic 0000:0006:8001.0026: unknown main item tag 0x0 [ 530.983183][ T5893] hid-generic 0000:0006:8001.0026: unknown main item tag 0x0 [ 530.991635][ T5893] hid-generic 0000:0006:8001.0026: unknown main item tag 0x0 [ 531.000122][ T5893] hid-generic 0000:0006:8001.0026: unknown main item tag 0x0 [ 531.008382][ T5893] hid-generic 0000:0006:8001.0026: unknown main item tag 0x0 [ 531.016120][ T5893] hid-generic 0000:0006:8001.0026: unknown main item tag 0x0 [ 531.024113][ T5893] hid-generic 0000:0006:8001.0026: unknown main item tag 0x0 [ 531.031754][ T5893] hid-generic 0000:0006:8001.0026: unknown main item tag 0x0 [ 531.039755][ T5893] hid-generic 0000:0006:8001.0026: unknown main item tag 0x0 [ 531.047592][ T5893] hid-generic 0000:0006:8001.0026: unknown main item tag 0x0 [ 531.060165][ T43] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 531.077913][ T5893] hid-generic 0000:0006:8001.0026: hidraw0: HID v0.07 Device [syz0] on syz0 [ 531.081958][T15327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.099005][ T43] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 531.111979][T15327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.145410][T15327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.159127][ T10] usb 2-1: USB disconnect, device number 51 [ 531.170492][T15327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.241681][T15362] fido_id[15362]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 531.266337][ T9537] rc_core: IR keymap rc-hauppauge not found [ 531.272463][ T9537] Registered IR keymap rc-empty [ 531.279734][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.305899][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.337834][ T9537] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 531.351895][ T9537] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input43 [ 531.367463][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.388099][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.418267][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.446804][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.476060][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.496079][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.517161][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.535966][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.555898][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.576020][ T9537] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 531.599341][ T9537] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 531.609142][ T9537] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 531.654337][T15345] sp0: Synchronizing with TNC [ 531.757591][ T24] usb 9-1: USB disconnect, device number 36 [ 532.055973][ T9537] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 532.205921][ T9537] usb 2-1: Using ep0 maxpacket: 32 [ 532.211368][ T43] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 532.214414][ T9537] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 532.224272][ T43] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 532.241012][ T9537] usb 2-1: config 0 has no interface number 0 [ 532.247376][ T43] usb 10-1: USB disconnect, device number 23 [ 532.258021][ T9537] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.272723][ T9537] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.285290][ T9537] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 532.295964][ T9537] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.345153][ T9537] usb 2-1: config 0 descriptor?? [ 532.368370][T15418] syzkaller1: entered promiscuous mode [ 532.374167][T15418] syzkaller1: entered allmulticast mode [ 532.389756][T15418] ================================================================== [ 532.389775][T15418] BUG: KASAN: global-out-of-bounds in bit_putcs+0x14d9/0x1bc0 [ 532.389807][T15418] Read of size 1 at addr ffffffff8bc33349 by task syz.8.1855/15418 [ 532.389826][T15418] [ 532.389839][T15418] CPU: 1 UID: 0 PID: 15418 Comm: syz.8.1855 Not tainted syzkaller #0 PREEMPT(full) [ 532.389861][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 532.389873][T15418] Call Trace: [ 532.389881][T15418] [ 532.389890][T15418] dump_stack_lvl+0x189/0x250 [ 532.389913][T15418] ? __kasan_check_byte+0x12/0x40 [ 532.389941][T15418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.389961][T15418] ? lock_release+0x4b/0x3e0 [ 532.389992][T15418] ? __virt_addr_valid+0x4a5/0x5c0 [ 532.390015][T15418] print_report+0xca/0x240 [ 532.390038][T15418] ? bit_putcs+0x14d9/0x1bc0 [ 532.390058][T15418] kasan_report+0x118/0x150 [ 532.390084][T15418] ? bit_putcs+0x14d9/0x1bc0 [ 532.390108][T15418] bit_putcs+0x14d9/0x1bc0 [ 532.390149][T15418] ? __pfx_bit_putcs+0x10/0x10 [ 532.390175][T15418] ? fb_get_color_depth+0x162/0x280 [ 532.390199][T15418] fbcon_putcs+0x3a6/0x580 [ 532.390219][T15418] ? __pfx_bit_putcs+0x10/0x10 [ 532.390240][T15418] do_update_region+0x21c/0x440 [ 532.390271][T15418] update_region+0x1ce/0x490 [ 532.390293][T15418] vcs_write+0xd65/0x1260 [ 532.390329][T15418] ? __pfx_vcs_write+0x10/0x10 [ 532.390353][T15418] ? security_file_permission+0x75/0x290 [ 532.390384][T15418] ? rw_verify_area+0x255/0x4d0 [ 532.390406][T15418] vfs_writev+0x4b6/0x960 [ 532.390434][T15418] ? __pfx_vcs_write+0x10/0x10 [ 532.390458][T15418] ? __pfx_vfs_writev+0x10/0x10 [ 532.390493][T15418] ? __fget_files+0x2a/0x420 [ 532.390519][T15418] ? __fget_files+0x3a0/0x420 [ 532.390541][T15418] ? __fget_files+0x2a/0x420 [ 532.390570][T15418] do_writev+0x14d/0x2d0 [ 532.390608][T15418] ? __pfx_do_writev+0x10/0x10 [ 532.390638][T15418] ? do_syscall_64+0xbe/0xfa0 [ 532.390664][T15418] do_syscall_64+0xfa/0xfa0 [ 532.390685][T15418] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.390708][T15418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.390727][T15418] ? clear_bhb_loop+0x60/0xb0 [ 532.390751][T15418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.390773][T15418] RIP: 0033:0x7fb9c0f8eec9 [ 532.390796][T15418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.390816][T15418] RSP: 002b:00007fb9c1d42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 532.390840][T15418] RAX: ffffffffffffffda RBX: 00007fb9c11e5fa0 RCX: 00007fb9c0f8eec9 [ 532.390856][T15418] RDX: 0000000000000007 RSI: 0000200000000c40 RDI: 000000000000000a [ 532.390870][T15418] RBP: 00007fb9c1011f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.390884][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.390898][T15418] R13: 00007fb9c11e6038 R14: 00007fb9c11e5fa0 R15: 00007fffb621cdf8 [ 532.390923][T15418] [ 532.390932][T15418] [ 532.390939][T15418] The buggy address belongs to the variable: [ 532.390949][T15418] .str.17+0x9/0x20 [ 532.390969][T15418] [ 532.390975][T15418] The buggy address belongs to the physical page: [ 532.390994][T15418] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xbc33 [ 532.391014][T15418] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 532.391044][T15418] raw: 00fff00000002000 ffffea00002f0cc8 ffffea00002f0cc8 0000000000000000 [ 532.391065][T15418] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 532.391078][T15418] page dumped because: kasan: bad access detected [ 532.391095][T15418] page_owner info is not present (never set?) [ 532.391109][T15418] [ 532.391116][T15418] Memory state around the buggy address: [ 532.391130][T15418] ffffffff8bc33200: 03 f9 f9 f9 03 f9 f9 f9 00 00 00 00 03 f9 f9 f9 [ 532.391146][T15418] ffffffff8bc33280: 00 07 f9 f9 00 07 f9 f9 00 06 f9 f9 06 f9 f9 f9 [ 532.391166][T15418] >ffffffff8bc33300: 00 06 f9 f9 07 f9 f9 f9 00 01 f9 f9 00 00 f9 f9 [ 532.391180][T15418] ^ [ 532.391194][T15418] ffffffff8bc33380: 00 00 06 f9 f9 f9 f9 f9 06 f9 f9 f9 05 f9 f9 f9 [ 532.391210][T15418] ffffffff8bc33400: 00 00 00 00 00 00 00 00 00 00 00 00 06 f9 f9 f9 [ 532.391223][T15418] ================================================================== [ 532.391369][T15418] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 532.391387][T15418] CPU: 1 UID: 0 PID: 15418 Comm: syz.8.1855 Not tainted syzkaller #0 PREEMPT(full) [ 532.391413][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 532.391428][T15418] Call Trace: [ 532.391438][T15418] [ 532.391448][T15418] dump_stack_lvl+0x99/0x250 [ 532.391473][T15418] ? __asan_memcpy+0x40/0x70 [ 532.391515][T15418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.391538][T15418] ? __pfx__printk+0x10/0x10 [ 532.391565][T15418] vpanic+0x237/0x6d0 [ 532.391602][T15418] ? __pfx_vpanic+0x10/0x10 [ 532.391631][T15418] ? preempt_schedule+0xae/0xc0 [ 532.391653][T15418] ? __pfx_preempt_schedule+0x10/0x10 [ 532.391680][T15418] panic+0xb9/0xc0 [ 532.391707][T15418] ? __pfx_panic+0x10/0x10 [ 532.391737][T15418] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 532.391763][T15418] ? bit_putcs+0x14d9/0x1bc0 [ 532.391786][T15418] check_panic_on_warn+0x89/0xb0 [ 532.391810][T15418] ? bit_putcs+0x14d9/0x1bc0 [ 532.391832][T15418] end_report+0x78/0x160 [ 532.391856][T15418] kasan_report+0x129/0x150 [ 532.391882][T15418] ? bit_putcs+0x14d9/0x1bc0 [ 532.391909][T15418] bit_putcs+0x14d9/0x1bc0 [ 532.391952][T15418] ? __pfx_bit_putcs+0x10/0x10 [ 532.391977][T15418] ? fb_get_color_depth+0x162/0x280 [ 532.392001][T15418] fbcon_putcs+0x3a6/0x580 [ 532.392021][T15418] ? __pfx_bit_putcs+0x10/0x10 [ 532.392046][T15418] do_update_region+0x21c/0x440 [ 532.392073][T15418] update_region+0x1ce/0x490 [ 532.392097][T15418] vcs_write+0xd65/0x1260 [ 532.392133][T15418] ? __pfx_vcs_write+0x10/0x10 [ 532.392158][T15418] ? security_file_permission+0x75/0x290 [ 532.392202][T15418] ? rw_verify_area+0x255/0x4d0 [ 532.392223][T15418] vfs_writev+0x4b6/0x960 [ 532.392250][T15418] ? __pfx_vcs_write+0x10/0x10 [ 532.392273][T15418] ? __pfx_vfs_writev+0x10/0x10 [ 532.392306][T15418] ? __fget_files+0x2a/0x420 [ 532.392333][T15418] ? __fget_files+0x3a0/0x420 [ 532.392355][T15418] ? __fget_files+0x2a/0x420 [ 532.392381][T15418] do_writev+0x14d/0x2d0 [ 532.392412][T15418] ? __pfx_do_writev+0x10/0x10 [ 532.392439][T15418] ? do_syscall_64+0xbe/0xfa0 [ 532.392465][T15418] do_syscall_64+0xfa/0xfa0 [ 532.392486][T15418] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.392506][T15418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.392526][T15418] ? clear_bhb_loop+0x60/0xb0 [ 532.392550][T15418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.392570][T15418] RIP: 0033:0x7fb9c0f8eec9 [ 532.392590][T15418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.392617][T15418] RSP: 002b:00007fb9c1d42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 532.392641][T15418] RAX: ffffffffffffffda RBX: 00007fb9c11e5fa0 RCX: 00007fb9c0f8eec9 [ 532.392658][T15418] RDX: 0000000000000007 RSI: 0000200000000c40 RDI: 000000000000000a [ 532.392672][T15418] RBP: 00007fb9c1011f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.392688][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.392700][T15418] R13: 00007fb9c11e6038 R14: 00007fb9c11e5fa0 R15: 00007fffb621cdf8 [ 532.392727][T15418] [ 532.392905][T15418] Kernel Offset: disabled