program: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='oom_score_adj\x00') ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000080)={0x1, [[0x3ff, 0x2, 0x6, 0xffffff80, 0x80, 0x511, 0x9, 0xdd8], [0x1, 0x4, 0xadc, 0x8, 0x8000, 0x8, 0x401, 0x80], [0x7, 0x7, 0x5, 0x6a, 0xffffffb1, 0x8, 0x6, 0xfff]], '\x00', [{0x5, 0x7, 0x1, 0x1, 0x0, 0x1}, {0x7, 0xe, 0x0, 0x0, 0x0, 0x1}, {0x7fff, 0x6, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x10000, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x8000, 0x0, 0x0, 0x0, 0x1}, {0x5, 0xd, 0x1, 0x1}, {0x5, 0xb6c, 0x0, 0x0, 0x1}, {0x6, 0x3, 0x1, 0x0, 0x1}, {0x6, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1ff, 0xf86ad853, 0x1, 0x1}, {0x5, 0xe7, 0x0, 0x0, 0x0, 0x1}], '\x00', 0x6}) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='cramfs\x00', 0x0, &(0x7f00000003c0)='!^\x00') syz_open_dev$usbfs(&(0x7f0000000400), 0x1, 0x741081) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='blkio.bfq.io_queued\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r1) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa8, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}, @NL80211_ATTR_BSS_BASIC_RATES={0x17, 0x24, [{0x60}, {0x6c}, {0xc}, {0x24}, {0x6c, 0x1}, {0x5}, {0x6f}, {0x12, 0x1}, {0x36, 0x1}, {0x60}, {0x6c, 0x1}, {0x3, 0x1}, {0x24}, {0x48}, {0x36, 0x1}, {0x16}, {0x4, 0x1}, {0x12}, {0x30, 0x1}]}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x129}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x1c, 0x24, [{0x6}, {0x1b, 0x1}, {0x6, 0x1}, {0x9}, {0x30, 0x1}, {0x24, 0x1}, {0x7d, 0x1}, {0x60, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x47, 0x1}, {0x4, 0x1}, {0x30, 0x1}, {0x3}, {0xc}, {0x3, 0x1}, {0x1b}, {0x1b, 0x1}, {0x30, 0x1}, {0x9}, {0x1b}, {0x18, 0x1}, {0x6c}, {0x6, 0x1}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x1270}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4008080}, 0x48000) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) syz_open_dev$dri(&(0x7f0000000640), 0x7fffffffffffffff, 0x24000) syz_usb_connect(0x5, 0x5bd, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0xcd, 0x5c, 0xa5, 0x20, 0xccd, 0x78, 0xf497, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5ab, 0x4, 0x9, 0x1, 0x10, 0xfa, [{{0x9, 0x4, 0xf9, 0x4, 0x5, 0xcc, 0xd8, 0x4f, 0x2, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "089d2c"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x3}, {0x6, 0x24, 0x1a, 0x6, 0x3}, [@acm={0x4, 0x24, 0x2, 0x2}, @mdlm_detail={0xb2, 0x24, 0x13, 0xcb, "5b5fe108fb0c4552ed1be58b78e0a9f277b30298271819f43f64fcb902ede6b5fd404defe42d3f88898cdc47c890ead195f809797aa266d0e95e224963a6b6ab40544b9a3eb69aa3863961bb988e742f10430069acefa8c8e1764159b613b2dc8f5cdbb893cc12b31f268be56afad4a49e560e4c1677b9cc96d0c29d604d668c468cff5dc6040d317d212c718912fa47efc73ccd7d5b1bbfbc4d79e1b6e05f7b32dcecc50eb3f6761dfe952adebe"}, @mdlm={0x15, 0x24, 0x12, 0x7fff}, @acm={0x4, 0x24, 0x2, 0x4}, @mdlm_detail={0xa5, 0x24, 0x13, 0x7, "c487bd331fc93bf3cfe444be0514554e1b4be377b5dc05be26ddb3f924f62014a26c84e54cd97669d2c0cd8525d87392a4234b86928a207c3de99ec327f6382d475a1c79b837ddb3e641fe5587b2df17f99f69d62a6515f82c69811b5ad99d047ac1a7eea47d1491af7f274cab3ab13dfaeaa43c0bded9298e893f0967949852c190262da8ed8beae7d852b99202686729c32d1b62b5412058ea4348f280d0ccb3"}, @mbim_extended={0x8, 0x24, 0x1c, 0x1ff, 0x1, 0xc3}]}], [{{0x9, 0x5, 0x9, 0x2, 0x3d7, 0x0, 0x1, 0x40}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x5, 0x8, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x3, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x4fd}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x3, 0x7f, 0x55, [@generic={0x7b, 0x3, "e8b2ca4c50f1168d385c213ce930bca3c615b3f0429859e38ae6782bb96bb839c41a8fedc4219596dc6a4682825661d3fcbf4da4ae18740b64736f161b364741ba0101dcbafbf418f8e5cd778f13c3b74ccee43b01865998f8294222fb432109a2755ea77f1bdc79247387a96a3e9bf331a3d4e2017edeca66"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x2, 0x2, 0x4}}]}}, {{0x9, 0x4, 0xf9, 0x7, 0x5, 0xfd, 0xe7, 0x8e, 0xa, [@generic={0x14, 0x9, "7b2e9f73cd52dc91764dc71ba82c08599ba2"}], [{{0x9, 0x5, 0xf, 0x2, 0x40, 0x1c, 0x2, 0x2}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x8, 0x9, 0x9, [@generic={0x42, 0x4, "094e21961b480289922fea330ddb2295c666c37046122b30a5e10689c3a6257686e339151b0beb87ae32ffbe448c3576aeb95314bb5ac3dd3786bf3bb93414ba"}, @generic={0x96, 0x23, "40804c3f6e23831c379498f893ba8dbc1c0c285467ccf630e63c379693e2ce7f2eda1c4a972bb4680f13b42f3ab49ab55257ca86da09f68e7504e746f32ab4980301554df815b918a5da1c420b81a3029d90dcf70185111057de9f2ece0769a9e1ccc625fdb0c9ae15004f90473fb2d50969c8784cd633f7e50cb84630c5e182f8eeea83fde83699229a1720e11152fa3c5cb84d"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x4, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x3, 0x0, 0xee}}, {{0x9, 0x5, 0x0, 0x2927c7ee0f4bc6c1, 0x200, 0xa4, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x20}, @generic={0x3, 0x9, 'T'}]}}]}}, {{0x9, 0x4, 0xdd, 0x9, 0x4, 0x91, 0xad, 0xeb, 0x1, [], [{{0x9, 0x5, 0x1, 0x8, 0x3ff, 0x3e, 0x2}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x80, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x3}, @generic={0x87, 0x10, "9c90e697f2157434e8e38c525fb85962fe98e4d271df325db77e36992dd3789a82bbf15815e15d4abdae1a4d23597836b76d3398167a067d5b387352510a8fdf3773115d36a52fa49b3dbe194fda7517aabbb7f6c0986d3d0088f3d50e2a9dbbeeb5ac0567f6b82408d68c1e9db49fdd38b6ed5a335d1cc939164f18b731626b3f65dfdee4"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x8, 0x87, 0x7, [@generic={0x7a, 0x21, "0bcccd771b898f1e7a2c34e36786c8204073d63fc8e60504cbdb049f76144f96a980501b89b232d2172908ac9286cfb595163f3db5aff5bc16a74fce470a7a2690583f094c6d934fc4675c7e22b5289e843c75de2c370311af2e395d09ca498145692feb73882ab3e6416b02dafd9718368574694a603d6a"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x1}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x24, 0x40, 0xcd}}]}}, {{0x9, 0x4, 0x98, 0x8, 0x7, 0x3, 0x12, 0x2, 0x59, [], [{{0x9, 0x5, 0xf, 0x0, 0x40, 0x7f, 0x7, 0x7c, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x8, 0x9}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3df, 0x7, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xe77}]}}, {{0x9, 0x5, 0x89, 0x3, 0x8, 0x6, 0x4, 0x81, [@generic={0x4a, 0x21, "1045fe7d0a07ee1c59511101f49a21655986dc8b138b36b5ec2c092d336c75dde190e9e1a460500cabf3a6159679b673cf1c8f565ef0003ef24d9f652b2af92fc0498a70551cd307"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x2, 0xd0, 0xd2}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0x9, 0x5, 0x8}}, {{0x9, 0x5, 0x3, 0x0, 0x48, 0x8, 0x5}}, {{0x9, 0x5, 0x5, 0x3, 0x440, 0x9, 0x2, 0x0, [@generic={0x31, 0x24, "d00ed9fd31728cd7dd77d492cfb886ab762b8dbbf5905cf959d60aa12f3e252d95994630a66de6e7b86ba88a8a9a6c"}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000c40)={0xa, 0x6, 0x201, 0x4, 0x8, 0xb, 0xff, 0x2}, 0x29, &(0x7f0000000c80)={0x5, 0xf, 0x29, 0x3, [@ptm_cap={0x3}, @generic={0x17, 0x10, 0x1, "aabbb0834528ff85d039cb1729a027a66e42ee5e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf, 0x1, 0x3}]}, 0x8, [{0xbd, &(0x7f0000000cc0)=@string={0xbd, 0x3, "3f580b02cd54f609b282226157cd80a16ea21d45fb26c57784958e0bafecb9a8a2e9a16147c4fca33bec6330d0250a259d29ab4ab40aaf1709726b9caa6d4ecb98434c222ef3bed67d2aeeac3db63c04a42c7a6da9e2366cbd5e10b7f2e62c0fff5c8dc1053684064776689f8b7f3f8c4a8ed4dfe9c9fc9c2ee180ba10cf3cbfbe5b245422ace6ee9779b7ba363ac23b8c3b68141020305ea994e89a22a571994feca06a223e47403643b80b0c93a9953163ab2d48df7d4dc3b77c"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x2809}}, {0xce, &(0x7f0000000dc0)=@string={0xce, 0x3, "56d00a962685a06ba9c6e8d6f678640001859ccc210a0a22b3121107eeb84433cd5b13e41fd0eeba2a0fcc67ad7ecfff491ab36228e8828266bc3cab2faf007e8317272cbc6905a36d90f612606f8c36b3b4fb0c43081844e2798428abad4cda7d239f73362a487f896d9c3703ede62d4953e653ecae14c3c3d36439514798d9a2c659deff8f663a4b7ea56e5ec091df7a538bc11762265680b7f02b04f9ee459a85d6c3f4cdf03f09756a591805dab7ac7cad718c64f1cfb9e8cbebb88437d84ebb5818a5cb8ff852fd06af"}}, {0x25, &(0x7f0000000ec0)=@string={0x25, 0x3, "4e05858d592855bf0def9d4f68893275ac510471636b307f6ecbc17978479912d910ee"}}, {0x3, &(0x7f0000000f00)=@string={0x3, 0x3, 'd'}}, {0x9d, &(0x7f0000000f40)=@string={0x9d, 0x3, "1fea1e7d02dda9455a02daa3180760873f0ee15ba502af52fc10769f38cf8df8466a4283845b1ab356669aa4bff2cc43f579706eac9000c32ed34511368202ab080f8d9c9fa1c66b8553281e07a805bb85a35cac9c862995c284546a15264e6e1e385e70ac8f893117cab3b24f40d44d7481ec658ed10773b4eca00e6f135d216b67f608ffb9dfbe720e6ec421ec306485d6d554029a198ca1158b"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x843}}, {0x7d, &(0x7f0000001040)=@string={0x7d, 0x3, "6e30a7f8ee5a0d70ff1fb3bd1e1b64cfa4b9aae8ab5f0cbb5fc9d75be86911a15d8afbf4571276366c8ee6ef582dc3b55039dec3ea4152d2080d2ff07079f332ca0f655a64396a0bf84abf9e330a62bb634997407ecb59837eaecc9f594f798d55e3c2c46cf260a1a96e83bb1900fdbced79811ac135c76d290d6d"}}]}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001140)={0x0, @in6={{0xa, 0x4e24, 0x4, @loopback, 0x6}}, 0x8, 0xa, 0x4, 0x7fff, 0x80000000}, &(0x7f0000001200)=0x98) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000001240)=@sack_info={r5, 0x9cf9, 0x9}, 0xc) sendto(r1, &(0x7f0000001280)="eee35d6a861a5830e83c62242e4a19f4d0edaee79dfd01106ca0bdf9310c9e371ffe63c83ce43919b63bb212207c1705babdda9cd75c91518f1824431884e362f9a28d132b413b55bfb6204dcf589063bdce4531ad48372d531c8a845d6858a01364e888827b3290565820901d4a903d63f93ee54575f7ff2faca3530daad8e35e5d365b484dcbdbde7f259caa8f57abe4d881bd3f1332a5c84ce5cb7f20700ee1de4300bc342ce76b888fa922273a0070d61123d5f61848cf8aae40", 0xbc, 0x4c801, &(0x7f0000001340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x4, 0x0, {0xa, 0x4e21, 0x3, @mcast2, 0xd396}}}, 0x80) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000013c0)={0x10, 0x1, "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"}) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000001500), 0x2100, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000001540)={0x7, 0x101, 0x4, {0x1, 0x8, 0x1, 0x5}}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000001580)={{0x33, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e23, 0x3, 'none\x00', 0x2, 0x80, 0x52}, {@empty, 0x4e24, 0x10000, 0x6, 0x2, 0x5}}, 0x44) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000001600)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0xc0, 0x80, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x40, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x300, 0x8, 0x8d, 0x4, 0x10, 0x78}, 0xf2, &(0x7f0000001680)={0x5, 0xf, 0xf2, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x2, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x3f, 0x9, 0x1, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0x9, 0xe, 0x4, 0xd1}, @ptm_cap={0x3}, @generic={0xcd, 0x10, 0x4, "aad9109604d88fcc44c6469414743c9b4c8872deed01b4e6b178aa6d041ee20ac12196bc2ad92daf93d12de8d7f8c404b7eb8a818c9fd578ec34a43cff148371d7da6b9a502c869c8d450c37faafc8072613fd63300687080005a21b8fffe49c099fbd556bfa4bbe71f178bd48ade6ab28a8230914c3605a5e9a1663c5b97e7d25a16c81b137843f72be0deeb7f9925b2e6df127b3ca07c1ace25451e6a97139b3ef437f565162e452e702de3d065e0abd2eb75944484b86e3985c3c7d45db584236275162b8ee5bf607"}]}, 0x4, [{0x2b, &(0x7f0000001780)=@string={0x2b, 0x3, "fdc44c10f60cc8433d07ccbdf1d4b7d5e93801848af5d7e775a594865771401af7c0f69e867bc1c8c5"}}, {0x74, &(0x7f00000017c0)=@string={0x74, 0x3, "1c62946188de6634ca373ef46301838e1c270d3aa3fc7ae6b2ad52d8d6a8f83ea6d33da4024867386bf6f0a292b27fbb90e7e2b0cd442862a25d9fbc871d5ab788769dd7801ffe9f5eed98708c3aee69f24b9e46ea4d69016258d8ee188b3f18d321bd70868184f463e4ac6cbeeeb7ba0465"}}, {0x6d, &(0x7f0000001840)=@string={0x6d, 0x3, "f2a14b3601a01b83c664b9b732dcc2a20a0398fb3ac064434d3acde9543b04c4258f3807f85a507d55a58b64d5976a97490b9b4e5a9a6c3f8088674048e7fab325b520ebda0750136c411d206ab134c0e41035456705420fe0498d0565d2645735ee5ff130ff5eac935d8c"}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x42b}}]}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001980), 0x400000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f00000019c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000001a40)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f0000001ac0)={0x28, 0x0, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000001a80)}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r7, 0x3b65, 0x3) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b40), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x2c, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000001c40)=""/32) mount$9p_xen(&(0x7f0000001c80), &(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00), 0x9000, &(0x7f0000001d40)={'trans=xen,', {[{@access_any}, {@aname={'aname', 0x3d, '\x00'}}, {@directio}], [{@fsname={'fsname', 0x3d, '\x90'}}, {@flag='lazytime'}, {@appraise_type}, {@obj_role={'obj_role', 0x3d, '/dev/dri/card#\x00'}}, {@measure}, {@obj_user={'obj_user', 0x3d, '/dev/dri/card#\x00'}}]}}) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000001e00)={0x2, 0x4a, "2928dcdac1732ef9f325a295683a60a07f058f8076bc29a7d420b0d3c4b8d185ed1fc635b784e66b2525a7c11779e4ef2f6720a55ff2d013ce2dd93116d78cf944c342b65f4f22e3d8c8"}) [ 69.186827][ T4666] Bluetooth: hci0: command tx timeout [ 69.476810][ T5317] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.626759][ T5317] usb 5-1: Using ep0 maxpacket: 32 [ 69.634178][ T5317] usb 5-1: config 9 has an invalid interface number: 249 but max is 3 [ 69.637537][ T5317] usb 5-1: config 9 has an invalid interface number: 249 but max is 3 [ 69.640539][ T5317] usb 5-1: config 9 has an invalid interface number: 9 but max is 3 [ 69.643480][ T5317] usb 5-1: config 9 has an invalid interface number: 221 but max is 3 [ 69.647488][ T5317] usb 5-1: config 9 has an invalid interface number: 152 but max is 3 [ 69.650428][ T5317] usb 5-1: config 9 has no interface number 0 [ 69.652574][ T5317] usb 5-1: config 9 has no interface number 1 [ 69.654744][ T5317] usb 5-1: config 9 has no interface number 2 [ 69.658504][ T5317] usb 5-1: config 9 has no interface number 3 [ 69.661112][ T5317] usb 5-1: config 9 interface 249 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 983 [ 69.664448][ T5317] usb 5-1: config 9 interface 249 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 69.668425][ T5317] usb 5-1: config 9 interface 249 altsetting 7 bulk endpoint 0xF has invalid maxpacket 64 [ 69.671657][ T5317] usb 5-1: config 9 interface 249 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 69.675953][ T5317] usb 5-1: too many endpoints for config 9 interface 9 altsetting 78: 33, using maximum allowed: 30 [ 69.681003][ T5317] usb 5-1: config 9 interface 9 altsetting 78 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 69.685067][ T5317] usb 5-1: config 9 interface 9 altsetting 78 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 69.689997][ T5317] usb 5-1: config 9 interface 9 altsetting 78 has an invalid descriptor for endpoint zero, skipping [ 69.694472][ T5317] usb 5-1: config 9 interface 9 altsetting 78 has 3 endpoint descriptors, different from the interface descriptor's value: 33 [ 69.700942][ T5317] usb 5-1: config 9 interface 221 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 69.704917][ T5317] usb 5-1: config 9 interface 221 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 69.709132][ T5317] usb 5-1: config 9 interface 221 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 69.713075][ T5317] usb 5-1: config 9 interface 152 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 69.718017][ T5317] usb 5-1: config 9 interface 152 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 69.721881][ T5317] usb 5-1: config 9 interface 152 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 69.725947][ T5317] usb 5-1: config 9 interface 152 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 69.730474][ T5317] usb 5-1: config 9 interface 152 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 69.734420][ T5317] usb 5-1: config 9 interface 152 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 69.739879][ T5317] usb 5-1: config 9 interface 249 has no altsetting 0 [ 69.742496][ T5317] usb 5-1: config 9 interface 249 has no altsetting 1 [ 69.744964][ T5317] usb 5-1: config 9 interface 9 has no altsetting 0 [ 69.748102][ T5317] usb 5-1: config 9 interface 221 has no altsetting 0 [ 69.750666][ T5317] usb 5-1: config 9 interface 152 has no altsetting 0 [ 69.755260][ T5317] usb 5-1: Dual-Role OTG device on HNP port [ 69.758574][ T5317] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=f4.97 [ 69.761890][ T5317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.765643][ T5317] usb 5-1: Product: 큖阊蔦殠용훨磶d蔁천ਡ∊ኳܑ룮㍄寍퀟뫮༪柌纭ￏᩉ抳节뱦ꬼ꼯縀ឃⰧ榼ꌅ遭ዶ潠㚌뒳೻ࡃ䐘秢⢄궫⍽玟⨶罈涉㞜ⷦ卉另껬쌔폃㥤䝑욢迿㩦繋溥쁞卺솋戗嘦란⯰滑䗮薚쏖췴㿰甉奪Ԙ럚粬熭撌쿱蒸뭎ᡘ쮥ﵒ꼆 [ 69.776444][ T5317] usb 5-1: Manufacturer: ⠉ [ 69.778911][ T5317] usb 5-1: SerialNumber: Վ超⡙뽕依襨甲冬焄正缰쭮私䝸ኙკ [ 69.792933][ T5319] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 70.009521][ T5319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.015605][ T5319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.045628][ T5317] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 70.058774][ T5317] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 70.062841][ T5317] dib0700: firmware download failed at 7 with -71 [ 70.073283][ T5317] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 70.078217][ T5317] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 70.081266][ T5317] dib0700: firmware download failed at 7 with -71 [ 70.090856][ T5317] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 70.095313][ T5317] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 70.099170][ T5317] dib0700: firmware download failed at 7 with -71 [ 70.107310][ T5317] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 70.111400][ T5317] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 70.114519][ T5317] dib0700: firmware download failed at 7 with -71 [ 70.120036][ T5317] ------------[ cut here ]------------ [ 70.121837][ T5317] UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1025:7 [ 70.124694][ T5317] index 1 is out of range for type 'struct hid_class_descriptor[1]' [ 70.128566][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: kworker/0:5 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 70.132104][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.135919][ T5317] Workqueue: usb_hub_wq hub_event [ 70.137936][ T5317] Call Trace: [ 70.139372][ T5317] [ 70.140677][ T5317] dump_stack_lvl+0x241/0x360 [ 70.142679][ T5317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.144925][ T5317] ? __pfx__printk+0x10/0x10 [ 70.146857][ T5317] ? trace_contention_end+0x3c/0x120 [ 70.149093][ T5317] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 70.151453][ T5317] __ubsan_handle_out_of_bounds+0x121/0x150 [ 70.153785][ T5317] usbhid_parse+0x5a7/0xc80 [ 70.155614][ T5317] ? __pfx_usbhid_parse+0x10/0x10 [ 70.157726][ T5317] ? hid_ignore+0x5dc/0x7a0 [ 70.159440][ T5317] hid_add_device+0x132/0x520 [ 70.161292][ T5317] usbhid_probe+0xb52/0xec0 [ 70.163016][ T5317] usb_probe_interface+0x641/0xbb0 [ 70.164948][ T5317] ? __pfx_usb_probe_interface+0x10/0x10 [ 70.167046][ T5317] really_probe+0x2b8/0xad0 [ 70.169704][ T5317] __driver_probe_device+0x1a2/0x390 [ 70.171631][ T5317] driver_probe_device+0x50/0x430 [ 70.173425][ T5317] __device_attach_driver+0x2d6/0x530 [ 70.175434][ T5317] bus_for_each_drv+0x24e/0x2e0 [ 70.177158][ T5317] ? __pfx___device_attach_driver+0x10/0x10 [ 70.179359][ T5317] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.181418][ T5317] __device_attach+0x333/0x520 [ 70.183260][ T5317] ? __pfx_lock_release+0x10/0x10 [ 70.185284][ T5317] ? __pfx___device_attach+0x10/0x10 [ 70.187312][ T5317] ? do_raw_spin_unlock+0x58/0x8b0 [ 70.189276][ T5317] bus_probe_device+0x189/0x260 [ 70.191251][ T5317] device_add+0x856/0xbf0 [ 70.192782][ T5317] usb_set_configuration+0x1976/0x1fb0 [ 70.194813][ T5317] usb_generic_driver_probe+0x88/0x140 [ 70.196731][ T5317] usb_probe_device+0x1b8/0x380 [ 70.198476][ T5317] ? __pfx_usb_probe_device+0x10/0x10 [ 70.200502][ T5317] really_probe+0x2b8/0xad0 [ 70.202267][ T5317] __driver_probe_device+0x1a2/0x390 [ 70.204236][ T5317] driver_probe_device+0x50/0x430 [ 70.206004][ T5317] __device_attach_driver+0x2d6/0x530 [ 70.207777][ T5317] bus_for_each_drv+0x24e/0x2e0 [ 70.209652][ T5317] ? __pfx___device_attach_driver+0x10/0x10 [ 70.211829][ T5317] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.213860][ T5317] __device_attach+0x333/0x520 [ 70.215861][ T5317] ? __pfx___device_attach+0x10/0x10 [ 70.218142][ T5317] bus_probe_device+0x189/0x260 [ 70.219877][ T5317] device_add+0x856/0xbf0 [ 70.221468][ T5317] usb_new_device+0x104a/0x19a0 [ 70.223294][ T5317] ? __pfx_usb_new_device+0x10/0x10 [ 70.225290][ T5317] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.227292][ T5317] ? lockdep_hardirqs_on+0x99/0x150 [ 70.229380][ T5317] hub_event+0x2d6d/0x5150 [ 70.231202][ T5317] ? __pfx_hub_event+0x10/0x10 [ 70.233097][ T5317] ? __pfx_lock_acquire+0x10/0x10 [ 70.235041][ T5317] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.237303][ T5317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.239804][ T5317] ? process_scheduled_works+0x976/0x1840 [ 70.241994][ T5317] process_scheduled_works+0xa66/0x1840 [ 70.244238][ T5317] ? __pfx_process_scheduled_works+0x10/0x10 [ 70.246642][ T5317] ? assign_work+0x364/0x3d0 [ 70.248903][ T5317] worker_thread+0x870/0xd30 [ 70.250802][ T5317] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 70.253229][ T5317] ? __kthread_parkme+0x169/0x1d0 [ 70.255207][ T5317] ? __pfx_worker_thread+0x10/0x10 [ 70.257086][ T5317] kthread+0x2f0/0x390 [ 70.258741][ T5317] ? __pfx_worker_thread+0x10/0x10 [ 70.260790][ T5317] ? __pfx_kthread+0x10/0x10 [ 70.262665][ T5317] ret_from_fork+0x4b/0x80 [ 70.264405][ T5317] ? __pfx_kthread+0x10/0x10 [ 70.266212][ T5317] ret_from_fork_asm+0x1a/0x30 [ 70.268039][ T5317] [ 70.294906][ T5317] ---[ end trace ]--- [ 70.297179][ T5317] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 70.299569][ T5317] CPU: 0 UID: 0 PID: 5317 Comm: kworker/0:5 Not tainted 6.13.0-rc1-syzkaller-00005-gceb8bf2ceaa7 #0 [ 70.303291][ T5317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.307158][ T5317] Workqueue: usb_hub_wq hub_event [ 70.309067][ T5317] Call Trace: [ 70.310279][ T5317] [ 70.311405][ T5317] dump_stack_lvl+0x241/0x360 [ 70.313122][ T5317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.314975][ T5317] ? __pfx__printk+0x10/0x10 [ 70.316755][ T5317] ? lockdep_hardirqs_on+0x99/0x150 [ 70.318853][ T5317] ? vscnprintf+0x5d/0x90 [ 70.320451][ T5317] panic+0x349/0x880 [ 70.322024][ T5317] ? check_panic_on_warn+0x21/0xb0 [ 70.324032][ T5317] ? __pfx_panic+0x10/0x10 [ 70.325722][ T5317] ? _printk+0xd5/0x120 [ 70.327336][ T5317] ? __pfx__printk+0x10/0x10 [ 70.329189][ T5317] ? trace_contention_end+0x3c/0x120 [ 70.331237][ T5317] check_panic_on_warn+0x86/0xb0 [ 70.333206][ T5317] __ubsan_handle_out_of_bounds+0x141/0x150 [ 70.335640][ T5317] usbhid_parse+0x5a7/0xc80 [ 70.337467][ T5317] ? __pfx_usbhid_parse+0x10/0x10 [ 70.339476][ T5317] ? hid_ignore+0x5dc/0x7a0 [ 70.341293][ T5317] hid_add_device+0x132/0x520 [ 70.343125][ T5317] usbhid_probe+0xb52/0xec0 [ 70.344947][ T5317] usb_probe_interface+0x641/0xbb0 [ 70.346918][ T5317] ? __pfx_usb_probe_interface+0x10/0x10 [ 70.349074][ T5317] really_probe+0x2b8/0xad0 [ 70.350870][ T5317] __driver_probe_device+0x1a2/0x390 [ 70.353034][ T5317] driver_probe_device+0x50/0x430 [ 70.355003][ T5317] __device_attach_driver+0x2d6/0x530 [ 70.357165][ T5317] bus_for_each_drv+0x24e/0x2e0 [ 70.359111][ T5317] ? __pfx___device_attach_driver+0x10/0x10 [ 70.361410][ T5317] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.363483][ T5317] __device_attach+0x333/0x520 [ 70.365330][ T5317] ? __pfx_lock_release+0x10/0x10 [ 70.367244][ T5317] ? __pfx___device_attach+0x10/0x10 [ 70.369352][ T5317] ? do_raw_spin_unlock+0x58/0x8b0 [ 70.371411][ T5317] bus_probe_device+0x189/0x260 [ 70.373331][ T5317] device_add+0x856/0xbf0 [ 70.375042][ T5317] usb_set_configuration+0x1976/0x1fb0 [ 70.377183][ T5317] usb_generic_driver_probe+0x88/0x140 [ 70.379042][ T5317] usb_probe_device+0x1b8/0x380 [ 70.380622][ T5317] ? __pfx_usb_probe_device+0x10/0x10 [ 70.382615][ T5317] really_probe+0x2b8/0xad0 [ 70.384479][ T5317] __driver_probe_device+0x1a2/0x390 [ 70.386246][ T5317] driver_probe_device+0x50/0x430 [ 70.387766][ T5317] __device_attach_driver+0x2d6/0x530 [ 70.389353][ T5317] bus_for_each_drv+0x24e/0x2e0 [ 70.391128][ T5317] ? __pfx___device_attach_driver+0x10/0x10 [ 70.393314][ T5317] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.395191][ T5317] __device_attach+0x333/0x520 [ 70.396982][ T5317] ? __pfx___device_attach+0x10/0x10 [ 70.398977][ T5317] bus_probe_device+0x189/0x260 [ 70.400714][ T5317] device_add+0x856/0xbf0 [ 70.402329][ T5317] usb_new_device+0x104a/0x19a0 [ 70.404091][ T5317] ? __pfx_usb_new_device+0x10/0x10 [ 70.406028][ T5317] ? _raw_spin_unlock_irq+0x23/0x50 [ 70.408098][ T5317] ? lockdep_hardirqs_on+0x99/0x150 [ 70.410123][ T5317] hub_event+0x2d6d/0x5150 [ 70.411809][ T5317] ? __pfx_hub_event+0x10/0x10 [ 70.413657][ T5317] ? __pfx_lock_acquire+0x10/0x10 [ 70.415601][ T5317] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.417728][ T5317] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.420268][ T5317] ? process_scheduled_works+0x976/0x1840 [ 70.422461][ T5317] process_scheduled_works+0xa66/0x1840 [ 70.424595][ T5317] ? __pfx_process_scheduled_works+0x10/0x10 [ 70.426904][ T5317] ? assign_work+0x364/0x3d0 [ 70.428742][ T5317] worker_thread+0x870/0xd30 [ 70.430488][ T5317] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 70.432600][ T5317] ? __kthread_parkme+0x169/0x1d0 [ 70.434609][ T5317] ? __pfx_worker_thread+0x10/0x10 [ 70.436617][ T5317] kthread+0x2f0/0x390 [ 70.438089][ T5317] ? __pfx_worker_thread+0x10/0x10 [ 70.440176][ T5317] ? __pfx_kthread+0x10/0x10 [ 70.442057][ T5317] ret_from_fork+0x4b/0x80 [ 70.443896][ T5317] ? __pfx_kthread+0x10/0x10 [ 70.445793][ T5317] ret_from_fork_asm+0x1a/0x30 [ 70.447699][ T5317] [ 70.449279][ T5317] Kernel Offset: disabled [ 70.451016][ T5317] Rebooting in 86400 seconds..