last executing test programs: 23m38.082345751s ago: executing program 0 (id=7): r0 = syz_io_uring_setup(0x1f73, &(0x7f00000000c0)={0x0, 0xc464, 0x44cc, 0x2, 0xcb}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r0, 0x1256, 0xa26, 0x0, &(0x7f0000000200)={[0x6, 0x2]}, 0x8) r1 = userfaultfd(0x80000) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000001c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r4, @ANYBLOB="0800264f851600000a00180000000000000000001c005a8018000180140002"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x20008010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc31fe084736598c) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000180)={0x73, @multicast2, 0x4e21, 0x3, 'sed\x00', 0x2, 0xb, 0x1c}, 0x2c) r6 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x25, 0x1, 0x0, "732283ef1acb5aa7abe50000000009be908100"}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r7, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) r8 = socket$inet6(0xa, 0x1, 0x2) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x18, 0x11, 0x9, 0x2, 0x25dfdbfb, {0x1c}, [@typed={0x4, 0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r10, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x7, 0x0, 0x8, 0x0}) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0xfc) 23m37.951360241s ago: executing program 4 (id=5): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = socket$inet(0x2, 0x3, 0x4) r4 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0xf0b, 0x2000, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @qdisc_kind_options=@q_pfifo_fast]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0\x00') 23m37.158713293s ago: executing program 0 (id=8): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc45"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto$inet(r1, &(0x7f0000000580)="0094a1", 0x3, 0xd0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c) syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b340000000000000000000009240300000000000009240528d4f8211cfd092403050000000400072405040128"], 0x0) syz_usb_control_io(r2, &(0x7f0000000380)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="200d000000009a0d181828f5be5f92f8e27b167b98186ede78f689af2cc70e48b73c35ef4f0417cbe4fe65feb1b26eb84a7618189a354628257780e11007a4cb9dd4c5b2464b4c71a5f83f7289c759e7289fe8d49e329482e12d18569151fc917f8dcc480d50538bdd2aef66efe632ff45d8ddf84b45c9cfc67c3911e54b990d50825d7f198e75e896e4a58d57362b959c142d397f4b59a3433cccdbfd028bef"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, &(0x7f00000001c0)={0x0, 0xf, 0x150, {0x5, 0xf, 0x150, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x7, 0x90, 0x20}, @ssp_cap={0xc, 0x10, 0xa, 0x84, 0x0, 0x7fffff7, 0xf000, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x2, 0x0, 0xdf41, [0x0, 0x0, 0xc000]}, @generic={0x102, 0x10, 0x3, "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"}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "606dc84d9cd9870906238c23a5c4a348"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x5, 0x9, 0x2}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x4, 0x3f, "479d0c3b", "9a08da7c"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x8, 0x3d, 0x2, 0x25, 0x7}}}, &(0x7f00000007c0)={0x44, &(0x7f00000003c0)={0x40, 0xe, 0x33, "00ee0398b277dbf7b570e8055357df0cab143c06517d141423a0d61a932bd2957fb6609c4c2fffe2ad9fbe465a22a2fad93db5"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x73}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x34}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x10, 0x4}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000540)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000580)={0x40, 0xb, 0x2, ';U'}, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0xbaf}, &(0x7f0000000600)={0x40, 0x13, 0x6}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "08f1"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x26}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x6}}) openat$cgroup_root(0xffffff9c, &(0x7f0000000a40)='./cgroup.net/syz1\x00', 0x200002, 0x0) 23m35.664177098s ago: executing program 4 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 23m35.078759618s ago: executing program 4 (id=15): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x79c301d0, 0x200) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, 0x0, 0xf0}, 0xa46}], 0x1, 0x2102, 0x0) 23m33.704844682s ago: executing program 32 (id=15): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x79c301d0, 0x200) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r5, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, 0x0, 0xf0}, 0xa46}], 0x1, 0x2102, 0x0) 23m33.080242135s ago: executing program 0 (id=20): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup(r3) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000340)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x1, r7}) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000003c0)={0x1, r4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)={@hyper}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000240)={@hyper}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000000300)=0xfffffffd) socket$kcm(0x10, 0x7, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x20000000, 0x82a02) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000340)={{0x2, 0x4}, 0x40002, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 23m32.906732252s ago: executing program 2 (id=21): r0 = openat$autofs(0xffffff9c, &(0x7f0000000140), 0x2c000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x8000000000000000, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fsopen(&(0x7f00000000c0)='bpf\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r7, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)}}], 0x2, 0x4004851) setsockopt(r7, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x2) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x59, r8, 0x5, 0x0, 0xfffffffc, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x40000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_macvtap\x00'}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="e73a6fb2b6c4b82228278fb8c43808a21a932433924cb6486b9d208b5c8e5c26268ef2509fb29fda286a6b1dd91a9ec04180b7498824568421478774c9a19626067fe1de6bf21ee6b1a9abe3ac114cd346cc427f067fd1", 0x57}], 0x1) openat$kvm(0xffffff9c, &(0x7f0000000100), 0x709000, 0x0) 23m32.122898197s ago: executing program 0 (id=22): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = socket$inet(0x2, 0x3, 0x4) r4 = socket(0x10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0xf0b, 0x2000, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @qdisc_kind_options=@q_pfifo_fast]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0\x00') 23m30.247912643s ago: executing program 0 (id=24): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40002) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000180)={0x7b05, 0x1, [{0x7, 0x1}]}) r1 = socket(0x2c, 0x3, 0x0) unshare(0x22020600) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x111, 0x1}}, 0x20) close(r2) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000100)="c21cfb", 0x3}, {&(0x7f0000000140)="1b7d7d5fbd23b0e45b5295d29d3279db07dbf86b364a8e220783d1344036f5cd7ab88d4e2669790c646e5e400830", 0x2e}, {&(0x7f0000000040)="028206a7a6d0e5a4bb5386ae3894e2f29b843c0da0d314b5a9c56f7aee0a588cf10ef6b96986bc5f715c0afefdea0817ccc3e081121181926c70579bf7238cc2a437b8152c7b71be0acb062046abefda0d84960700259609ebcb20169df2c7169204f8f75b9d986d6fb6bd5d802a8ba657635c0784989cbc55628eaadd4e5b305258cb335ea0ee35c88638595b44185d8646d5626dcd8b5b44f27a553bf19070d41f228ff47a0fea82478f6bc173e100000000", 0xb3}], 0x4) 23m30.200616849s ago: executing program 2 (id=25): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffb}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 23m29.514886827s ago: executing program 0 (id=26): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 13) 23m28.450639678s ago: executing program 33 (id=26): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x7, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x5, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 13) 23m27.916784198s ago: executing program 2 (id=30): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x40c0080) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffd27a091, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000000)='nfsd\x00', 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) syz_open_dev$sndctrl(0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 23m23.410081862s ago: executing program 2 (id=36): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0xf0b, 0x2000, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @qdisc_kind_options=@q_pfifo_fast]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0\x00') 23m23.055325949s ago: executing program 2 (id=37): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8000049, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setregid(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x7c81, 0x0) unshare(0x2a020400) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0xfff7}], 0x1f}}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1ba) r5 = socket$inet6(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002080)) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x310) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000880)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000e00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e22, 0x0, @empty}}}, 0x108) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) close(r4) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) 23m22.07783865s ago: executing program 2 (id=39): socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4a, 0x9, 0xb, 0x0, 0x3}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7902, 0x0) sendfile(r0, r0, 0x0, 0x7fffffffffffffff) 23m21.578106849s ago: executing program 34 (id=39): socketpair$unix(0x1, 0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4a, 0x9, 0xb, 0x0, 0x3}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7902, 0x0) sendfile(r0, r0, 0x0, 0x7fffffffffffffff) 20m17.424788052s ago: executing program 1 (id=445): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r2 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0xad42) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000002c0)={0x0, 0x401, 0x2e}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x20000}, 0x18) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f8000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000040a00000000000000000000008040000200000000000008000000000000000000010300440005"], 0xf8}}, 0x0) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x10, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0xf, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102", @ANYRES64], 0x0) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0xf) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 20m17.407090727s ago: executing program 1 (id=451): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x101440, 0x0) syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) pwritev(r2, &(0x7f0000000540)=[{0x0}], 0x1, 0x7, 0x8) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$iommufd(0xffffff9c, &(0x7f0000000100), 0x80400, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) 20m13.860720352s ago: executing program 1 (id=456): r0 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x900, 0x0) r1 = add_key$keyring(&(0x7f0000001500), &(0x7f0000001540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, 0x0, r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x8080) r5 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x101080, 0x80) r6 = socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000140)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80046601, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000180), &(0x7f0000000440)=0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r10, 0x406e, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0xff, 0x0, 0x4, r9}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r9, 0x0, 0x0, 0xfffffffffffffffc}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r12 = syz_open_dev$vim2m(&(0x7f0000000280), 0x774a, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r12, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xffffffb9, 0x1, 0x1c09, 0x31364d59, [0xa8cf, 0x3], [0x1ff, 0x4], 0xfeedcafe}}) r13 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r13, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, {0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x40}, 0xc56f}, r14}}, 0x38) sendmsg$nl_route(r13, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) sendmsg$can_raw(r6, &(0x7f0000000000)={&(0x7f0000000780)={0x1d, r11}, 0x10, &(0x7f0000000200)={&(0x7f0000000080)=@can={{0x0, 0x1, 0x1}, 0x5, 0x3, 0x0, 0x0, "50e0ae9634936246"}, 0x10}}, 0x44001) listen(r13, 0x4) 20m12.555192529s ago: executing program 1 (id=460): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x60}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x118) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', 0x1801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000000), 0x8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d0"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r7, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x411, 0xe00000}, 0x0) unshare(0x40000000) gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) 20m9.224714096s ago: executing program 1 (id=468): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x3, &(0x7f0000000180)=0x9e, 0x4) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000000)=0x2b00, 0x12) r7 = socket$kcm(0x10, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r9, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x6, &(0x7f0000001700)=[&(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, 0x76fa, r2, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x81, r4, &(0x7f0000000600)="81b27318a00b02990e0aadf719860d98af1753d46b8e601b876e4072792be15e064966fddf82471844321f2a54adea1bdede82256b77d842ad6c891725b80b638a3f2176d938778ec2750b3ebd717cbcf990938090402ea90ba75825c4676b6979f7cb3ae3aba5a253e1d5cdecf4e03d742d32e440a78e9f3aa754a2a5b3f00f319ae6a627e150db9e97597063775005fbe70d1fdaf2a39abe715eb6702e72bccfb5b1c584ee84937abecff3e55471db1a92b35b9ba50064d93d039c2dea99acf94aa78d67b3b7e8c388267e3a8c18a5d60675256b0b5ae85bda1cf18d3c473d98ec4dba4cff494f44fb5ccfa1e31d123c0ed9e3862f019260735681d8b20ebad0f8239844ecfcfcfbbca263d98ce5d41c50f289d942e49790944b8a27e174e0ac0dcd4b8711135085310acc212373cc0300b5b3b4e4f83cdfd399b3dbb727a4cb3243ecf737ccc4c8a885bd42626265ee971025618b1e167f2e99d5a95204a1074447013c07837d2da68c5eabb64fd00a7952329524344e01e807598d369c6fe28c9ccdbae5d0ebdfda8e5f69dbf1c76f4b3a4e2b057619b8255215b2272c4ae6484c7c589073f15f44fbbc7909959bb3e22d3735fa2419fdbff32a97ec88acb0c367a7a9178bde767f39a4a5624e5c441025a2226001559d8188e1c88eb3245fb3772ef053e639955720746ed38b421495543ac15005ac1998bb7ac5c6327167897b59879ca9afc4a05a76211d7197448e5c6ed82d7a494c13160ae6396031abc6aecb4fc397b2af93f452b1f953d8ac0c826b58acffbc39bf275bc3a48384996c4ea6f568c3b18c3e4a01c46637c8ff49bd347da1a1c4a2d97d79179e12e41861b0b13063252c202d26b35cb6eab4b95a19b28f9c220aec6e1805898c15561a717731b4dd3d788120135b0677527a4d64b2074493277e5768f1b417743e7b0791c21386a393388fc36310862ee325db79c9dcbd863a7f99b76abf24e4730f927e1c10e3da9c77fad38cdf1e7829fddae2a8a84f37b7c585cb22de57957280f62ab74d83723ba0edf7f1eb581994ae0b6dd2512094eda5aaf40d91a3e08f5bf7c65ad92845e3806be98ba1ce36a24d031be516fe880183ecc73c8760bbc96be2eb1cc32290153ed173915196ffde373821ec1ad7aaabf38dcc85818ff937ecc4f9c6cf6aa2fc43b8958fc93fe1b6bf92724fd4d6f6fb2325e3bf22b3d32007c123e202217a9e9c80453d5705fc722f340aeb8af414fab5c06cb74d94d09796c186a6a0c4a3eca83cf73b3928fd581857cf242b16ad191c4b1ad4ee122d1b1eac9151aa3e1157f026dd2634167ada2d1317b6239fa4b9126729980d628bd0ea6a227b05e4400468252516157674b57d88e5b1b13417289d60022d1a16bae70b8976b0628d1f2396a0142a8bba485ce1cb3179e352fa8cf3c53f0ca41284647af658e92be294864deaa6b1879b387b433d24fd90d44d5ee13f5e14228d57e352116bc28e2e8a667803266ce1eaaf170d7c088e3e2323e5b3c059545ae049243eeab04fdc6dbde3414bae41f3551a3b4c811934871f704e16db7410549072521e480eccd7717fa6bfc38059e140256a64961d92ba2f9bc3eaaf974f2391662e1ef5e3d63b4d8bc7aa49b5bf6947e8a843a244f1fe4cc36025676452ffdeab82f184a5761a93d95fa65b961c985549f61b686ac6cf4cdfd5f9c9a4563dd3285ef28ec3c9e686c4d1d93f8ddcf4c34d3f894583d50ba2074af0d73e2aa0a28bcacfeeff16668e7290a9be735d3391683535703c7df4f5b59e7bff92c84200f8c464728e44ff86e5331bb7294f93d3f5aa3ff4bf34a6b11d141f055465d56c0e480ec15935e06a71c459b5cc3e329ab654bd35b91412c6e550eb432505c3765c2f0e38335511b15fc3d2aab244ac7474f730abbc0270715b638e365840e4d4e5763212dcf35ccd03f0b9ff6715df8b32c056392d25cb5f72039387ff08b99c09904d50b2e0b44b45da945e41e9e5236f9e663fe1fdade5f97e5576ce374e627ed46d3d69135ca1480718bbf72d92e1956b1464d47a4c108efd85891ab8cf6b7551b73f4a6ce749ea7c563f06fc5c39465793fd7a4dbdfb817a9245f7da70c55ae30010eb239aaf8eaf87e71278539dfaa3219e132b2d14a88fdcc493626f61ad86e1c7c2e6bc064ca6c55825c6debdda26d87b28b1e4a43ff79a444f36b21ea4e0146270c518e6b6863a441b6adb49218cd0f3730b6af8920f245be2e655ed82c2de33e51ca232ea7cf0ff6eb0bf0cd33efb3fb116a70c3d538911b7565631d8efee8894e7e504f7a94d34e7e0db1d5028b3570f6cc7a92be52f181489a3376e85d1c2fcbc5355c6ea06b9f3e1f269b3170c55def004d830f89aeeb29cc92f47ad88168fbe6b6bc83aca03b7c28c699dca568671f133cdef5fe38ccb4cbd0433b4b42330acebcbb74ec005e2fbf9f4d6dae7d4d1059c830dd52bed8e2a8dc368644d76d4b59b49c22bc348046022596e9e864402ea705d10b416eb3a1156fe1fec28c7142dbe06734eea72e02cb7b957c9ef4b8e91329cdc467069ae639a071bcdb59c450f38a8761837272144faff5d2d2598377c671f31a65d786fbc0c6614f07bd00ad99adc883ccd98b91578be23b7331bb1da1158d0657b82c8b1b0b8d137b08984b19c8c3f590ab3614a2a4cdb18e4aebc3b99021917aea19abd4ce9655eea0d8cf0d6386e859afc5747245a8b2cba8ad60e8338a5b12e2bbeb7574f98c15040aaf0a2639c02a34d325f103e2677594518ff2fc7ce577023449b9672dfd0dd3279cebe37bda95f4aa2aad7f0c58aede148fb0b5ecf4ad5c00d9c970385232b99b58550e25ea2336dd7744efc61cea42e74829a94c818a1927f53c3a12ddbdcf0585e8bb965296f0e18ccf2ec6a3450fd41613e4d03f9d8042bb0982c0a0f0839b875db1d18328577660b9de05faecb2fea020aba22085e2f02920a55e35e3d11bbd12bf6ceb88e70f0c25a060a368f8efc37ed426b640161fa28772545047ff5016de15efe96bda149a66e8bdea9b3d93b6856dc84da9e5aea1369ce2cf07a5474d5214f89535bca0b75076e7636515d18f7e8694793e17ce2ac35a71d6a5fa0a679416db496b19ddb7ec42a8d9301015651fddfb625145aa38991e82e15ffed2dfd0427701b8b58031fb9e79a9227ed9f4178ea1cedc273d445e14675964de99e9b51d149d504c8a100054b1a9178098ab95d80daf990e50aa0a395aae9e533ecdfee63ce921c59540cbc606c84624ee28c2c7b1848b53a5ad6d126a01e5781a92d2df59bc4feba0024a56e07f2e4d93e55f9e9f2442014a2f3ce0545ac25a0e4854bcde5e550638f25eb78f469a33ffb2b2f3cabe5a4c88147c17af233fda4bcba3d619156d7e28db1e2ceee34500d873409bda56eff6c04e3ad8a589346f8e87411ccf5bc01bf9fe412c6fc5288b2d0dbf553f6e6cbcb8618dc1b5ff1075b36b2d471a6152b9a925a6a585e5085107ab8d112d23019794e8b3695623e1d85b3f3de3c38c1d975a5ced56d0012c4bc28c7001d3e1fbd251550091e45849fb4dd767ae770b6e91abaf8a06d72302124f821d3f7837800c380f94f9e0d6bd223fa2c1df9837d46c2451adeca0d042ffe331ca7bcbb3fb560f5eb7e9b3049b7dc1da0c3e925779258e532c796b18d009f7db58cfc4071850c5797272a92328b995e8f37578b25b1f789f0f02fd3e9db99237f1914e58777d0b652c61953d05afc9e87e494651bf4bc9574332bae43303f05fb08415a695a029325deecdef66d0883635121ef2be56577a2c40d3924c230faf32e33d553eb0451a93af5243a634484fcd2c40b8456bc8de01ee752ef80039224f540d6a87626c20980af5cdd45877d5b17cfa88fd26220bc16143f151759ee09d06317d61bc3890e9d025d7b6738924a1689709ae9c99b1dbf7f5596e1b8abc6e0c17a5133ccc6ef9fbdd8d2d0c79d3a8f888d3515db414424dc320e6d2875f70cd41f97d8ea4cd6030de00df15cfc374317d84698b87faed2192d5836561d958be0d6e8ea669ec6783d2dfe779e3ace87d6d1443a270c5de342bc0b3c1653bc1011511b0bbb972c869b19b91cc77811e3e8a601e1ccdc72b3329db51f3c88ca02fddd1b554e93679bd44906c5da6d32f0a40659235a263894e6dfc2cfac5d7c4c4465103f875945a709b95ec5a7b546c0141925b77b2a3d212e5fc87a5f70b4387daaaf4dd8034e5a111b50933cbed0858696ad8b04d7a5d86ee3adebcdbc8719bd3ea8fbd746ce476fa8850e00cdffd6c51f1996baa89cd49955e62d3714889d0d703c6570e178391e705cf2186b7f3887d7a6ebc6273147fe0d5de34b806e4c61b9a6af636778da861a4f94201c53344495f80d7db82143031fa4ca1a23fc558236966cad0989cc179dcd0c13cd977cfb97c002a45f3e34eb6d4e2270c00ec60b4ed107ba205bfbf0ad8e2e374370b5938f97de50d676f7939f48b750e41fce9e275b61d6b85b0de47b55913cdd4cb428746f733b805afe4d6249a54290fa2e30158c657bf24e6326186b5b2e3b95d4d7691707c87749757bf294f7e827cf5aa69c91f66dcef05675ffb9c418e655499d989e6ce34d377a09554c909937c612e0eff1af1e29b692b66551b56e300ea808e8230e73790adb80946bb609f4fc33ab190b1de763e392f9d3b92bb134e74ca992c7f8f35000608b0df05f853d60c00e2f4eccaed0a7e1a4dc53e561a7983df4f18b09d0207e8d199c32a9832aecb64b1bb0bc978b5624a17e86dd5d653a86c61c205f08cbc80822ae7f86b8daad59f74cca8cc994fffb0cbe3e16c0aa4f97534063ad49fe45382eff1ab7a32e4f45d52b67812a27d983d7a191a4b3872837a7e5c014e1848a743b3cb1acafd2682d8a105ed61202f9982b4bd9e8e01117d0007550b472d8d59020315581aeeb4ca725f375d39ff5fee48e340f5c70f90bb701a87d5dd2df8223f42a1ff64ce3e95226b9eeec004ae80bc30f1a26fdcb286b1939134bd657bd9c717835fd13ea7c520d1928ab67b8201495de59136c4fb4104cd1d08747258512f1c14e189b666d64f759e09ffb41ab127bdba12d1e56c2e756bcbb52a353a816c551c720a1e8c0557c9dec63509e67ee359faa33768300b2d664b26b653360ef7988acbef2e50248f7028290408004e7797ea198f1381234319d3891b3fbdbfe096aa18a962ef7b050faf0c715c1d8cb527e943bd4f76394dace39e53a4c6bdda37c6babc8b0ddaa6e3d526e1e6a51a2120948c579464f64c44b1303355036e405796e4aa8efd7221fd17d0ad5ced4c63eaf608cc41fa1df36bcd2c6a916ec9183d6ec5f4190c8aadf5c0a53152eed669f49bc5bd3999712c6952c2a6c5b48356d0db55db6f8fa5981a59f8e3e25bbe4b5dcd46439a9bf54bb2520f123b02d9c062ad6423a3baa5bacddc73d56387bfa11ab8666fff0af0bfd95c6c3ec33bcb467c76b3a65e569a3d6476cd97c5ae55f7b16073551af90c93d9fab5fdc5b7ae783a055b42772b6abcbe2829acf48c55ac332b35ef2d932acdabefa75e041e08ff56ade27d552f821647f69e6615bdc80db5d4f02322f6ceca1dc04c0e8944ef26885271765c1aeafb08b8ad07190700c5c295ac8100337a3c78e9c5a39e6737351928f00a026a047b18fd8dd97354c43a3448f2ff5f7862b63837fc6091a0602c5586704bb1465760b9e3efded839ac433147b9fe769c86f8f9f71ebd8a0a228a351f56b2e3bc62223256c3f2c65f3738147f696", 0x1000, 0xa174, 0x0, 0x2, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xe, 0x8, r7, &(0x7f0000000300)="3e80c482ee69068d5082dcea9342313af656d8b1141b20cd019ee2654b1218fd6f0fc6dcb3c104db83037d9b69cabf545ab71c114b4ec4603e2906ba5ef6b78b535b6b9697fc7d98394edd1fd20d3a0971a1d1a27df0eaf284e8898e3f555f4f82849113b89d9a6573841362f7ef04d180ea9508e84cae134b2ea54a1eddda3dceecf1f22b8038b25bd1e4e9208bd8733356ad44cf265deca8d726534a9488e1e6598059933bfb1fa840444483784958603d419fc04450c41436ace10d8f562942b531eb166fb27ea08b6d3628a18f634af9edf091", 0xd5, 0x10, 0x0, 0x0, r6}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x8a29, r6, &(0x7f0000000540)="c80a3ffbb9e18d756ce2fc086bf116ef22560bac8d79dfa56100e6d1287c78d268ec1fab33ac154ec4df22bdc303576ec3469976399d1feefdae3730e044d9bf033a4e6c63a2784b3e736b3bbfcc7e4b29", 0x51, 0x4, 0x0, 0x1, r6}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, &(0x7f0000001640)="d081e7b4f30eb3fc460155cad84ab32b143328d7d34edea771f9fda9ce58cccf15f409ba65bc679b67d1478868dbc4483c4676c99c9447c0ecb69652c5511a4513c0d7dca6ed3e7c1f86960d7254", 0x4e, 0x6, 0x0, 0x3, r6}]) 20m9.028878s ago: executing program 5 (id=470): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x22e, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) getpgid(0x0) write$dsp(r5, &(0x7f00000004c0)='\x00', 0x1) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) 20m7.662310803s ago: executing program 5 (id=471): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x1, 0xa81) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x1, 0x0, 0x0, 0x0, 0x2000000, 0xffffffff], [0x1, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe]], '\x00', [{0x1000}, {0x3}, {0x8}, {0xfffffffc, 0x1}, {}, {0x0, 0x80}, {}, {0x20000, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0xfffffffd}, {0xfffffffe}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0x57d4, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) clock_adjtime(0x3, &(0x7f0000000000)={0xfe92, 0x40000001, 0xe, 0x0, 0xb, 0x0, 0x9, 0xc2, 0x8, 0x1, 0xd4b6, 0xf, 0xfffffffc, 0x2, 0x80, 0xdb82, 0x8, 0xfffff001, 0xfffffffa, 0x8, 0x1, 0x7ff, 0x7, 0x7, 0x5, 0x6}) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000), 0x0, 0x1e}) syz_open_dev$sndctrl(0x0, 0x84, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r5, &(0x7f0000000400), 0x2000011a) getsockopt$IP_SET_OP_VERSION(r5, 0x1, 0x53, &(0x7f0000000240), &(0x7f00000002c0)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) userfaultfd(0x1) add_key(0x0, 0x0, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x440c4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(r7) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0xe) 20m7.530305385s ago: executing program 1 (id=472): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x4, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="4da20000004000001c10000000000000a5000000001ed6e695000000000000004e936cda1a42ec65f700cda409e3a8a40f570b79c0c637be262ab9645a27bb950e439579a20436b419b9ff131411e7afda0e3a82dc01422f15a36daff1bcd50c91b26e0eff2abfaf898c107021377a6fc0cc528288e44402864b"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f0000002100)=""/195}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x1de, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4623, 0x0, @local, 0x100000}], 0x38) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e05411, &(0x7f0000001740)) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x356, @remote, 0x2}], 0x1c) unshare(0x2a020400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) read$FUSE(r6, &(0x7f0000002200)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="6583000000000000000001000000080001007400000008002a01", @ANYRES32=0x0, @ANYBLOB="bdfb5918dacb9fbb3d266844f32baae10aa34fd55c2b33e43689f153f7cd946d1c49a3a174ed1e3729d65021a4d59f6cc49adab1ebf58e70a7012d2b8cbd0d8212fb9acbd19814acea521a7b58f9953b96c3a408313d83161f23cac526b41de04e124b79533cd3381f36896871e376cfc1a08f43fd53a834b6308beff38f156e2f162de5ae4267dad4d545be72a966b7ecb1f77e356b3590552bbbe95263e72d51ea63"], 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x50) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000002080), &(0x7f00000020c0)=0xc) close(r6) r11 = openat$rfkill(0xffffff9c, &(0x7f0000000080), 0x840, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) read$rfkill(r11, 0x0, 0x0) 20m6.030971856s ago: executing program 35 (id=472): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socket$inet_sctp(0x2, 0x4, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) ftruncate(r1, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="4da20000004000001c10000000000000a5000000001ed6e695000000000000004e936cda1a42ec65f700cda409e3a8a40f570b79c0c637be262ab9645a27bb950e439579a20436b419b9ff131411e7afda0e3a82dc01422f15a36daff1bcd50c91b26e0eff2abfaf898c107021377a6fc0cc528288e44402864b"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f0000002100)=""/195}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x1de, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, @in6={0xa, 0x4623, 0x0, @local, 0x100000}], 0x38) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e05411, &(0x7f0000001740)) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x356, @remote, 0x2}], 0x1c) unshare(0x2a020400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) read$FUSE(r6, &(0x7f0000002200)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="6583000000000000000001000000080001007400000008002a01", @ANYRES32=0x0, @ANYBLOB="bdfb5918dacb9fbb3d266844f32baae10aa34fd55c2b33e43689f153f7cd946d1c49a3a174ed1e3729d65021a4d59f6cc49adab1ebf58e70a7012d2b8cbd0d8212fb9acbd19814acea521a7b58f9953b96c3a408313d83161f23cac526b41de04e124b79533cd3381f36896871e376cfc1a08f43fd53a834b6308beff38f156e2f162de5ae4267dad4d545be72a966b7ecb1f77e356b3590552bbbe95263e72d51ea63"], 0x24}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10}, 0x50) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000002080), &(0x7f00000020c0)=0xc) close(r6) r11 = openat$rfkill(0xffffff9c, &(0x7f0000000080), 0x840, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f700"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) read$rfkill(r11, 0x0, 0x0) 20m6.012155564s ago: executing program 5 (id=476): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fde9e2", 0x8, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[@routing={0x3b, 0x0, 0x0, 0x3}]}}}}}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) prctl$PR_SET_IO_FLUSHER(0x4a, 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r4, &(0x7f0000000380)) close(r2) 20m2.686762029s ago: executing program 5 (id=479): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x60}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x118) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/../file0/../file0\x00', 0x1801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000000), 0x8) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d0"], 0x0, 0x0, 0x0, 0x0}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_settime(r7, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000040)={0x411, 0xe00000}, 0x0) unshare(0x40000000) gettid() timer_create(0x0, 0x0, &(0x7f0000000000)) 19m58.969174505s ago: executing program 5 (id=485): modify_ldt$write(0x1, &(0x7f0000000240)={0x1000, 0x0, 0x2000}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000080)={0x4, @sdr={0x38414261, 0x400000}}) ioctl$FITRIM(r5, 0xc0185879, &(0x7f00000000c0)={0xfffffffffffffffa, 0xd, 0x8}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000004800018145bd7400fcdbdf250a00800011cc23bc9a3b4df0", @ANYRES32=0x0, @ANYBLOB="050000001400010000000000000000e000000000000000010800020009000000"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x20040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000c050) r8 = socket$alg(0x26, 0x5, 0x0) getrlimit(0xd, &(0x7f0000000100)) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r9, &(0x7f0000000600)=""/4099, 0x1003, 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r10, &(0x7f0000000480)=ANY=[@ANYRES8=r8, @ANYRES8=r3, @ANYRESOCT=r6], 0x240) syz_clone(0x1000, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000280)="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") syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="63202a3a2a20720092adb20e5ae4f5803eee70cd70f1f22a0b01ea90871b1a0b4fe05e231f97c4ba195ce05bfdaa8b2cc879b56c0dbaa4f55f35d9a1e8ab4bcda73702dae0936de792aa12347d4736f3de7a4e3de6c54691f4bf3114913251ffd309e6bbc72456ba"], 0x8) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000400)=@secondary) 19m56.714898738s ago: executing program 5 (id=493): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004b00)=""/200, 0xc8}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/199, 0xc7}], 0x8}}], 0x1, 0x2120, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 19m56.028611242s ago: executing program 36 (id=493): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004b00)=""/200, 0xc8}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/199, 0xc7}], 0x8}}], 0x1, 0x2120, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 11.275034649s ago: executing program 3 (id=4951): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000003c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x2000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 10.049671722s ago: executing program 3 (id=4955): unshare(0x2e000400) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000040)=""/164, &(0x7f0000000180)=0xa4) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) (async) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r2, &(0x7f0000000000)='\"', 0xfdef) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELCHAIN={0xc8, 0x5, 0xa, 0x104, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x41d}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x223}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x86b}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffa53}]}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x2}}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x0, 0x0, 0x0, {0x64516bb61526c4d, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x62c2542e}, @NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x24c}, 0x1, 0x0, 0x0, 0x40004}, 0x84) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) (async) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, 0x0, 0xfdfe}]) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 9.998436064s ago: executing program 9 (id=4956): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058ff0b, &(0x7f0000000200)=@fd={0x0, 0x5, 0xffffffffffffff4b, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, "801dee00"}, 0x4, 0x2, {}, 0x4020800}) 9.911908355s ago: executing program 9 (id=4957): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000140)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffe47, r2) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f020}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x44814) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 9.646809881s ago: executing program 3 (id=4958): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="a090", 0x2}], 0x1}, 0xd0a0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@l2tp6={0xa, 0xb00, 0x0, @dev, 0x0, 0xfffffffc}, 0x80, &(0x7f0000000100)=[{&(0x7f00000001c0)="5b20e8487938", 0x6}], 0x1}, 0x0) 9.457232154s ago: executing program 3 (id=4959): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000140)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@secondary) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffe47, r2) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000000)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x44814) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 8.74806548s ago: executing program 6 (id=4960): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x200, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x20000044) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.590858354s ago: executing program 7 (id=4961): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 7.700549577s ago: executing program 8 (id=4962): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a090a, 0x0, '\x00', @value=0x5}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x80002, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) 6.951644024s ago: executing program 6 (id=4963): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8910, 0x0, 0x0) r2 = syz_open_dev$vbi(0x0, 0x0, 0x2) dup2(0xffffffffffffffff, r2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1a1081, 0x18) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0) capset(0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) bind$packet(r3, &(0x7f0000000080)={0x11, 0xf7, r5, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file2\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CAP_XEN_HVM(0xffffffffffffffff, 0x4068aea3, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x44000000, 0x485, 0x0, 0x0) 6.122578741s ago: executing program 7 (id=4965): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a45321, &(0x7f0000000080)={{0x80}, 'port1\x00'}) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x7, @pix_mp={0x0, 0x5, 0x31424752, 0x6, 0x0, [{0xffffffff, 0x8000}, {0x5, 0x8}, {0x3, 0x101}, {0x89, 0x9d0}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x8c45}, {0x2, 0xc}], 0xb, 0x1}}) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x7, @pix_mp={0x0, 0x5, 0x31424752, 0x6, 0x0, [{0xffffffff, 0x8000}, {0x5, 0x8}, {0x3, 0x101}, {0x89, 0x9d0}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x8c45}, {0x2, 0xc}], 0xb, 0x1}}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="0001b9368366141040206402d14e0102030109021ba90000000003090400000190f19c000905f3ed32affac960c2157f106fe44989d797211151e72f09f8f9bf6c0fbff73ab8a87b36174b35db42c7f570532d53358c6bd0a556abe7cd18664d4791adfd75db4312534f7a5f9c5d94927c583481ec56b104fbe08180876cc00d18b44a6576b60dcc1fb6043be890e9d52f0c790b447c5d47c94e4b18274de6057767af35e78727eb97e83039930a8bd2248e48b20132", @ANYRES8=r1], 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000006c0)={0x5, r1, 'id0\x00'}) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000740)={0xa, {0x4, 0x5, 0x1}}, 0xa) (async) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000740)={0xa, {0x4, 0x5, 0x1}}, 0xa) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="40280000200080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, &(0x7f0000000480)={0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="0023b0000000b04e61d14a9f419fc3d36809bcaa41bb38f3329b45a9a47fd68acc80cbdf134f9cda4ee9a5c8dd3d7434c81c007debaa0b7fc026b33ada9a79dfdcc4821dd6cb38fc1138b2bfa183fa2ca17f540c61fef4dd6ed9fe8a8c17ed8efcf74e6a51cf44675751b5b68a1b4abcf623f5bd616eb5ef5cf71c1b7b2923439f7701a6316a80ad81d30222b3f6ef8ac44ee535a21202b08d5e4b59ec4e8643242447205425a7c53374014ea83725aff535d38b7824d9e8a671140bbb7c4a"], &(0x7f0000000380)={0x0, 0x3, 0x4b, @string={0x4b, 0x3, "6032268f0dd42fe88e104ead8f9bc334b540034313dbd8072ef7d0abe0d3611dfd28f5f9cd14a99e232e285e93b717dc67ca89e8486aa42e2cedb1fd8c01a1f9ac5c8695415952dde0"}}, &(0x7f0000000400)={0x0, 0x22, 0x1b, {[@global=@item_012={0x2, 0x1, 0x0, "dfcc"}, @local=@item_012={0x0, 0x2, 0x9}, @main=@item_4={0x3, 0x0, 0xa, "295eca73"}, @global=@item_012={0x2, 0x1, 0x0, "c91d"}, @global=@item_012={0x1, 0x1, 0x5, '1'}, @local=@item_4={0x3, 0x2, 0x5, "c2f7820f"}, @global=@item_012={0x2, 0x1, 0x2, "9f8e"}, @main=@item_4={0x3, 0x0, 0x8, "b1cf184c"}]}}, &(0x7f0000000440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x52ea, 0xfc, 0x1, {0x22, 0x677}}}}, &(0x7f0000000680)={0x18, &(0x7f00000004c0)={0x40, 0xd, 0x9, "7885b3f299a6bfc76d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000580)={0x20, 0x1, 0x36, "4387bf437b5562f0b8eb8763644511f74c3965f56c6b3e35b64d1d1d078c64e59fffeb1c7d84c0825a8b38fcc8fccb77d75c6c419a05"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xfc}}) 5.794785939s ago: executing program 9 (id=4966): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0xa00882, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x20, 0x16c0023, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="e458bd68c31119140e6997740398ebc16c1e5f20541ba93abf8585a7a4940d82997fbb0fc1dd2186216c6b150f3219f29d2104825281c3a979c42e83368cd02049972bdc93625e0954c7212aa1ef81545a818eebb0d0aec940b37dfa1f9a95540ed038bdc5ad5d226b026e31549d2e4c3b3adf1ef62c3b322041322fc440133e0dd71e9d019549fc486453190ddb4afd8225e0a63c524c09261ebf4af38c4005c0ffed47151c34feb62156c4950418cda28bcd92518d65d3ab9177cea7a92803755cc75d87f517c97e7c081644ea4a445ba9441bd287100006bc473948bd7ed945c4bb85f5e910e6f6299bd9735681a844d01f510277a81c006efdd1388d09099a1041bcb674ed0ecf92aba1f9e8296788c20ee0e8a7b5f9053a89a0f72293d1d1adb25e4f298cc11f80db7ed4fcfa1acd45eb5f74dec5852003184b93ef13237de3ad67088538c8aabb2352433e197cad4c9924b07596aa17dc1c7af4c05e3439999b66118fcc4dda7065af802fb9ff2d924951a348fe1323567f753b707d3f58bdc14e5c10cd070e7fd7562893a32c2b8cf0cfc9a9335e8447c5b15efe5ab2e7dfe6118ab9208451d8ca93bc2fd934d943f6a77f836a364d24e79ac8d563242b8ec4e54e432842534d937a694629848dcd14a41ccb1638f7bc59e9b2c73c5437e6950b1226188fd82fabf1f65043476e7330376d38ab42d8b44eeea57d7afe42f9e16c89d992ccb8eaa8731eab8184e4c4cd6d6ce913745bab9a5f07cb172b7ea2c2e3659914e8c69971871f064d335194224d2c46e4c0a11c2a0ddeb63e43d761af1c490a47e8d4aa5e78dfd5cf6deca496079b686f637e219afed56bb55d36c989a513ae512013e081ca5398b9ef82bbca8cd260180a448db2527ee9a20a2fc5ce1f808e6b8ea855631b615d4014d01fba47cc3d030ee2f9b4ecc35668843228b38825a67267a1df53b53475ca97fb3982601d6f415c1ee72cd864f5ed9ee2366661aaedb5bed37c7123d4a8f3595066c1e4278073ed83678ca05188e42a19d6ca5c0970e4231442b9db0f926d79a784f0bb29d1710b1c1834ee48e3985863a272e659c4fd4147f181f07a730fcb8ca7cc8dfe00a83a76e1ed1dd0e509097afb8d4bf374ff585ea5f0f6094ce7e9b28fa2c8a0add25da64573b74bdb8c421c627a1876c81f571622c56fdefd0840ba807daf8a46dc8075deb4f888209286e2dab26699470a694ca88822c0e34c9d04ebc38fdf9c4f4842a6b2537806f608180f7cea0caddeed063da87f97694816e8f44aef2299dafe7ebc79e1fe0ec5489a08e86402f08f464dfc7662395d7a18f9c9d2ca6442206628ff148c4ecfdcdc26c8865dd1831ec28cd7e65a6bad4690e7e04a89b72963f02f51bcc9e096f74f6a1d6ecf64ffd79c812793b72d4258add44d344fa4ce2142216ff5a0bbf6a4f732c7eee2026656c3e3e6acf11d2117719c5949f16ac3fa4b652f8b4ac6dd973b5a508d1ad02743fc87095c5764f96a96d78fa0aa1601adf714b88fa2bd45a11ed0479ab5efb83cab8c523669078f22fab54c9ae851220bf80c65116bec58fc4a3a9bec07891d13956a1e51d2a40aa5774aaf471e4fadbb6515e6078feed70fca40c6ce2828f38515e2b42dd25ac539489d3b5ca930f16d7f0a314c8636d6ad1f78971094f96a81afa9dd3458b6cd7cb1ec301083cd72530e67e7fa4bcdeebab1e1836ee679b5423447aac9672408be5e97f05458bdea8e62503e2a65430db77556b6ffca1823b80b46936c1e2720aac76f24653a0c670db9953614570d95c68ad688d55af51636c32275252916858da030b5280b5144c275ab10be10e60bc0f9a702bbf3de1f82cec8d65260f2b937e7a11b34b59b4414c66313aaaee04824846da1eca91bfb24c139ce939e352abe48a2c102c48760c358c4c0407e4ca0e8869c2833f3ac4e6352e98d568bdefc2488f20629eb0832578976583c22b8ad142073d8fb32934f061a0b05dd10dcd5c1c15ae38f6ed6fb512c5a556b79ade60855ab1854d372504884a1d0a02a843e16679ff6479bdbd5eaf68d5dd5bd7849535f8b9f96aacad7dba0b6f00abb2f198cbe9ca5124d83c8fea5daf9fe426d1b11d76d14da61059bd894a1f8bec2cf8b24a06aa1a52263f32137c7bf746a2dec6944cf5789672a9cae5ab60c984db488aebf53a9523a9c167d5ec2360174f8f262b469b613fa8f6f074e4c926a2abe2c9ca7daf18c731d4110b21f84a033f6e909a20510ea99b472e096edf6cad7f038f6f9d2a2f090783d3e46312e6e4e94da22f11091a3052add24a73f71b25e9f641184e0e6199eb6a79ac98174d81c6975387fd98020f9124b2ede93d3afa01b2343ebaf1383123440471ad29aa79a567df49209f4987e2713a7dd7e91be7309d0e0bea24501a5f67d4854e9b23b8d83808950038cfdd1b8ee6a5514df3079c81ec09e0ed3bee657863df086be80f8933fe4cc856bce3a4109dee05908cc5807a664af13cabd0b52731ae2c6ed7ff4987caa9c387b359e8ce4a2cb14fc172b38aa9e5675e0db57da7eab1542b158663b6e399042c190cbefff4ac4098c9d257cb751faa5bd0fd0e41ed2578c77f7ad3876a2f25ddabca496d64d56458ca3c754a1b178c76a4af700c22c76cc014ed86cb6c2cd81a8fce6a6ae0060bb565885d4227b53a7389cf44aec52cfb8fd8198695f5eb9879cdaf8bd3975629fd3d5cbd5a15dda9a0e35bc3d261192f23d818fe840a7b08d9cbc9e0e590280e86538dcc515c596530cb820dfeb6b6b9ebf0f0b13f1577de6d638adf459cf31e2403e198aa8097c572c7705040f78e1ad5001e826dc3e33770a0651365da048f664cf5cce55003eaf14daa43692353936c4827a3e0ffc0fc8679e2f5b9bf7bcb267180333afe44a938016107477db2f28eaba90748c0929f60c8aa62fb61e61064c6c8880c72dd635540e1394eea424be07ce0b418e8fbe0e801e146bbcb2744f4a39c7395c170d9302fc1f97b80d1416baf7d1b4bde681d051d27594ae1de282654e02611b761676d3e298fc240dc297bdca517736d6e409ba322c64513b9f61222840c5060738aa130ff73aceeb95e73f06cbb5df4462ea85a7ea2e1ebcff88bd1472c8df3979527e2c35db4c9f33af57b4ccb7e806d527f611e3fd0392aadd501eaf6f24753763ff74ef548e2250a6bb5ca88fc227e3fc7826895032ee0bb45cf11c0b6ac8ed46fa1d3a927d7872e29dfe25d9c2e70933489301b7dd70b4caf4378b4a1fce9e54c90c94aca3efe16eeef49b84bc00e8d79052cfffdeccf00e586482af352a18fdb4f3e22c6ca7a5208645ffc76493b342038f501c72cffd2c8b5fd6b2a53ea389cc8b7088869f7962cf3fd243e3f94f88c8a18904398322102ee52f7b52145b61aba8acf43fc46094dacb8a719babb9d7069fd29846e8164f35e24709c8317ba1198b174a36a8c71659d060b667f8641267b7a6ce872530218b075b6d66570bcd357da8ad5b948900d69681298bacba214f64d3e3dbad5b8a08dd88ef323bae0ec4eb5bcf50d34aa85fe9880eceddfdd43df83228caf1c2247c86324aec9cc1f1323464b062c5e04836ecda5db31b558903982b9395fe61d81a7ac43a9f593b15ec6873ec23490f74da004b7ca19cb4748d7701ee7cd5d221ad077f438e3857154f9656de77bf794110418a5fed68a12303062940cdb49d09efe21354c7a343c81ca7c6e252ac05c2ae059ee6aeb5060a28fce60b7f4252e07ad27281282e8cd09fd91500e069ab0ccabf5abb847b0a68eb51d76313a1caac00624b519f72e00de61a33c03c6aa71d1d4024d6998740fcc02df7d4fdaaf812502009bccd748c670f874f5edc9b3b010000001953e7275c9faa1156cb3e16ee4fd9f79c9fa1238e04e860f7f19e4418555954bfc516456940f14fad0af0346dd19fae8e16068810e3353200135fd8022b473c118e4f8747981c63826d614d9d5da8b5b9962c6ed4b639747833c9aeb98ce731ad4174813227cf66767fce266092896f6ff2d9ffb4e97ccc8f11cd7c8d7d5697416a7134cf3bd8e789cd8274d6332d4df528dbaf9b403d99a7b840973a0814bbd63cd1d68b5c1e5fa4530776f9fa3a4fbdb44d0ad017bda98afb61b140d515562e8110051d236ed8f4cdd17804704d6e90e69c78bf5bcd7e440ab9c151f2002ab0e553b4e49d3737a68f3a97327df3f2c9143c110c8731b67d73770cc7522263edb61dfd5408988c89e1feac6ad148d70e2daf49d3054c9f501b2bd2f1b9d94b93475879292ed680a6e007ed79fb9d621df141b85ef4573c8555d2068d3d315515877a19efc88903b9254481630986b5a2699a1cbcc440cabe16f6622433dfd14066514ebd388a1c4f268f53b69615d663e8ef83461d839fb64aca7685491b983d4defad3dac1ba49680d4f1f814b0a083de2c626704a089494eadcbaac30d8a00107d65b3346cd12ea51a18c2f3cf0b82ed637b50f945b7f15968c2974718ac2560ce835f475459e567d92654b3794c4fb447128846fbac5bf887bf7cc5850d4bf8a7c2b1330555f153281cd08b641a895294fd46370dd9a17f1b463a086e3c36c0c557879ac4a48c1b42ed9c2e1e996cf28d0b77292b035b8938183524dcafb2f2e6d7d354052beb05286660446197bc1187250bba1f73fba5313d788ceb2c3a304ee557ad47ee228a13e1287718e7df55612f9abfc59f098a90f7bb67d59795fd2de5b1fe2b7b71e289e052a598810eee6ba8a80febd59c792d58c3386d30aaa67e374824f8a9ae44d6009173df1bb8f659d61d4050c12fd26573fb846722f7ab9c4b295378c7212d7f521beca8e504f753d3a599e67a90cfb0aa0f9159468a5014c30eda69b5aacb591dab1313a7bef3dd5c01b5de95c3569ca8612d9b031ad2281e46b593f1d536a82300ba5f2cc68b90e2cbc5efdb91c329b478efeb086d90c88ef78187d98eee89eb5df7b2f9389772052c9cf1f3269c2160100a0612663e6a927cc497bbe9f802f77303a320ba6bb437cad37eb5103eba0c04977b0726f6a9baa3feade98838b63dc5a942689fb13d16377a1134a43f8867eac003a1c9de01cb00e297d3cdb9d464fc080626b2c0cf1e9f8b49bfc3ca5bb30e29253f6215dce5a3457209c6dd328c4c1b74f3867cad0c75797a0d30285dc6c81a769841fc77bde0a4f6f32ac9ee22383b4e2638ee0dc17f0825b92d737b3c8aa509f80b934b0a6abb704a638052f7c79230109054c79a0d2972a7039a7897c9c6b8aa2892e5d571b1566274efb803ac02b7e451c79ed3e1533f9301539b5c576c8b8dd1e1a4429799154a0b09abeba747fa6ef6d00c19883d387833f6b0203275a3d759071bd14d80f5d65affc376148a5756c6ae51f3d87871f3b471b87fbdf811ee19612e656bcf297008395a8a9868b2045abbf4f0f1bfd84e68a37ef14633e678296508c4b0fb1f9d50e72d249608596f9456e978f42ce5f25d05d10988d9b8b9199998a372a4b634c4eb31bcf770c0e250ea3be79fc3b96eaef71baa183847ae23d56205babc679c98430a863de00256eda22c117ca643ff7ebbc1aa890dd3e32365d3bfbfab83979bb653cee2222717e6763cf41a56900dc491d9162f35c3dab60f8c0fbf05d320ecd99a0a0aa9e170a081680216c2728535da63b3871424ae90ee13c8275a1a60c180a5b74800518f8525b54adc7e13a51abcb3ba7d018e85be0a941bf3f2f3e2438c135b33461d61ca36631c872c16b92cf6a725a4af8d7229efcc97a86b6946295d94b8391c25d77aaa43fa2b5babba3331edd37a83701f95224aeb717999663cf18edbe8f82c1f109b6b3561a1ef453ab8473e2f9c1bc0aeffe9663d8ce8cfeb60fd440c2cfa7225cdd06276f05ac7737ef736547278e7d9faa4dee64cac41a66534e0545aa1e75f60eb997fcbf00cdc20abf4464082cc34ef6d2df3137a11b8531fbdb28f3485a4f384724b096a4761f76a62f80862892dc25bdf3a8c5f56ebf61d2532a4284a57631b0189391304494a9f63248041236d173e49a60cb59d4f23fc9befd53b5d9d9eaf92d04c1348d33cbd2f5d52f85d23d0301f054cc877266db37b4cae111eda86a5a1446599f67cbc23dd21ecf045f4af0cd4cedd8f8aa9e5f954275b94df39c8c3adeae7ff6a99c5b9ec25c4aaf6b91fecdb9340a6b7c4de1d951b74f166f0a23cd229aaf1cc5ded12c1518cd086262b6db9b557784944fde85bc887f3e26efff2c1deae7f9d40a3dfbb3d1e1a14d353323c329f606201ce098f9e0677d2a3cdea969ebe9a15e425567b143bd3ca4c68259b959e6941f4094542fda0b016221e67625ad906d717895ca8976a494e1f3d96f617023e2e3293b361d2b9eab37369aafba3f3fb0d4d06a0365e7a524b1fb969d6bdf1d6ab4854d0dc4427d62fc59928bbefea0c345911ce85a9c2b95ec2705d6f3e54e3aefe270b9f52846adfd35fc44a75965a8c08ff84e3b01088c72e669664a6188686cf17c62d86035c90c75cb223974163c4650c9981694b0a24ce4d90ea070548c0eb3e7d02ed77542f1c6e6ac859a7e6c07378999b96a9fab07184bd2fc51c8c3558714846076eee9bbd8a47f4e5cb10a53fec228c0b56f91cd13a969a2d47f5a9fad55c19d862f695be174e5e97de5a9494efa184130f260df4edb95c0f3725d70773013f73405ae365b89d863d84e3a4b33b4774df18615e160b84a4ee42a9f23814ce69d491dd6e1bef9f0de771cab1ad29c908d44aa0c4ad184890475034a17382e6f590ff61b2ac0a53e8a2aefdb2ccf449171dc6f30b1f33c71ccf69fcc48778ce8115de485e5247e3a978a89b45a5688904a8b40e98a22f3fffd6d5ed45822525b687d95ae02b4a671f9eb91cd0d06f7aebaec826c9a706a559304cdeb3e861a88857a4a8a7c27de061361b4d1cfda96dda54e6d477004c8d7015211e0c2d27f4e549a8c8d437172501955f1209f27c4f6a32f8b4e24bca5f16d27556ba8a394049e89f3633e594e880822cb28e6fb3c281dd8259afb4aaf2e19e3d951f73b284bcf8057616af31c0e206000382c4193452cb44c7810ed27153deb5ce28a29b9710fcd2fbcf5d08cd63536ee0ea9518d00c87efa5b0c24e2cd2ad48d4cb7fb7b9670f4c1c449198aee64ee26519c6c9fefa3064c9ae1bd2a5e9870bf0f1bb113646b7cddd162a869621f6d641134ee42166ec5e2c679be93dfaabb6d6ced859ca5cbd926781014c2be2f2d2e33a4b235b8330da24799a9420251074656524a04cbe1385f8ec63d0c295443c8137c5b6e6524b11036b1820ec1eb51ac94c430949bf5ebfc6a8d7c59603066fae260bb20aa5f6d26ff63acd7ccb1a1ce5e220b8aad66e8e887b3ffdedf6573639bbc723bba995f2c40480757ff086caed9dcdecb5aff931b2761d1f734c8984fe08970c4d1b65f3b5e89a6c6186ff93365cf40d5f3cc1badf840c56c7571fef5a0e14c528a366f5efcc0af4a3faaa4817dac0f231a86e7d8464c810acc3b008dd68ba203bcd77355911314bf4bd1d74ba6d8cc808723b8b472f66b858e36e6bb0a32d0386155f192cf322ae2b84649fc879271d4df5f7c9cc48573bf6256c756784f8a1629ea65e57149949dc7333277456bd3219ec82928cd183ed7dc2d40e2731596db869840791171f2bed92fe400108b09338fc30936f55b2fcc965c6515f6fb5cc0df1746c5768d717c46dd8f3b5314c3168917e50b29b40a2ed1a8537ecb5529ba4599f94583081e5571d4335ea211d6fac124e3e9a878261d6b60bd3e6ea473bc60a96cda9b3c3aa8f896ea7912c2f8bf296c32dc7edffc06ef6e5129c28d943789234759d2a4e6b6c99cc75a9e547540f10429c29d461f27525275cd7868d82740f2bc82d390fbbf24b014527501b3fdc34d3ed4b0842f22efabe21f77f86c11ad4b6020c5602d80c37993c93523fc51382e85ae98afcf0127ff344895e92f829d5e49d798f97830da46d4041e73bb20971ebc3a1e9ac482f2b5599403b20bb2d49514b40a7a329d705cec500e34390b47037621dbb9eb54de3683f534fecd1fa245a5cfb0a3ef0f7751b9d1f37c97f28ca84dbee58b503f9b73fbb2e0055a8b4996ba3ca4c3060c8fe8fea9c11569e59b7de9780bc01447a9b5ac46dafd804c2f72351a9b3a76e7f8cd0d51f2af490fb25c95c7581795aae95f91cce9dde3a30e968332402ba7b8b8813caf5bde18319e620bcf0dc283c62c3d00631700803fea40307a1a94ae0e3fbf014faa57243326d41dd3e4a5882077cd0ff4dbe5d685b422788d5e675a4782d8df47eeb8de6fddb8f958718adc92f2b26f44aa71868687a78d727f37ea0eabcc80a1f4950c4a098536902429f4447bdac4aa9fc08777f80a644d5d334a0054d9f1006cd03292d69d5987ba760fc0c45707e682de6caa514896355406aca3ab18331b97b6d3ac6f2ed27a55246351563ea832217d92b1ecf28dbef88a292762ddeb412eb326e95362bf8744d3aae229d0cb61cf67f0e07debf6fafa0e7eed678db5bcd1d431000f28b93a65caf71d346de2f45d5f701816f9120c44d983dc88789ae4e1bce46ccae391bcf64a4a89611c00080475885ddb87b79ed72c17f5aa5f9ba284ee0b5154de29e8e230b2096eeced7ff42e0394dc83aeb9102f4e70b7624612b7d4a50ff1f70ee75d5a6e49a5e402a1d572e057831512cc0d5841963fca1cfd992fc2778ab17a1ac88e6f3c612199f91adccc5d3cb6180a311fd928f4802d49bc43be5ab526ef24d18c6629bc46f968f8d8e1dfde46ce1ef7d7f6d33a68104d1a8f3fa4d8e6f72ed52307c492ef60c8f4c739710ab8f67b63cd653daeed02b6b5dc9e29d0993cac49cd0d2bdccc61fef32a760b8e6826ba0187712b3f1620d9a5f86347f3f40dc2b4e5634d13eb82fabbaee3d345a4f879de54ca6e6efe3fe670e5420cc054a80797a5092f40842b7aea4c482df37520368ffc56da626fc5d11d7e5b23dbc50fc35eeb73b1bb46a66690152a3ac399e8c5135928aad67c4ee01f3d2dc5e1624b06c0a5ca37d0593f2ff09b77b39675294f03050326cae2835e8fedb47ec99ee4208e812e6dd3302d240e295fbcb7cb2b84bf669c9eeb626144404f0fe3214a9a0cafc94050e5f475093f82c9727d2db43d8c3bc3f9028b8ed811d738bf98c79f3fa9c46ae98599acbace9105c75c56596666bf21b3911381656e010142f641592a956801d1186cd4d2773d54963444e689df83dd51f5ddcccecf25bd5c98d7ffd12011484572370cb3b812a2c4808a2961d951891e6547072ab18f4b52f2282f4dae41b610ad1720515413a73eff4e03a081b0cc6bfd3bc54a3e11259b90a30c651a3ade80ab3dd185391e5ed90fd2bff9c1ddc8db4f6103784ac11529538cc45e800a765d18b9609c3f9f5534bf037e9fe0448242a06b3e10ecd50832a728322f995d8e7432daea87d4084b8006712dbb5c9686c8cd7ed2a202197ab49ae1a41dc561700b8bd8e2656253d3ec76d003aa2bfe3a07c32c173cedd482bb697c151187fa7579dd052d644b022ebbd4ab83ac97eb5a9aa3929745da91189088c67121f4c5eb82d52b1cac322a6e4df91e4b8a3a7e80f65145b68116358809cd1379c80645bd89a8ef46c597a0f58b9356f6e7a926e482ad82841732e7b77bab77a90e84e1162bfdd6100be1faf0561bf893831b037f5e4aefddd63df24d87c82bea5d6d8edca9286f2ab864b41cb3f3b76d0dfc8b561d96cc07778dac5642cd0da574df251aecc6d26bbf173ea46ade5bf6a2b34a78e55b489fe181819c1599670b0644e973d2c6dbe6185d25030bb7c76eb21be027e0d3f8ac08062f3c274506348c96c058320f63d572b73c444e4e73a6b766ee1c4677dac901928019c55ec1e6c44fe6361a50f25c07c86588193092cb18269b11405c5063bd41ff80f85ab8cc123db6593ddad0c6a56f3a5dc05ba44b30889164d6f5467f6ceb421d8f88831afb438adf76fad65ee613efb7f537715105f3ca3eb00527c7689cd0609e533296a0ac14107a1c5a4d42b848bf03d204ee1fbdb694a73f7f3b8e1cf33df697651338fb1cd497cb1fb24513929871ccbeb5c9e14ae0d286f53de9de2200b59be3889d2f34d0c854937fbf8a2060ed4e62819682fda994e4696b15fc8ba9f3f538b08b63ad079cb70155710e8c16143982b093beb43c88ecfa60c32ea58dd52665083bfa0500065a5f9ba7a312dc2033dc65a7cb12d226c1ed4b250fe866f890f7c4d8c8dd51c718c238d6858f1338ecd0a83f4172b25475a51f541b46e837b59d8f8779786418b8c48f16acbd82d8bed9eee8b20fb200a1f89cf0afe7abe1c0cf2e946f9c3d36f98d8292a312033cca96ab11714c92e8f069340bc5329c026acb9c3539e6df2e9bf6beb40cb39027e3c0d937da4326e2e5a93979d25c2b6db87b312704d2ff5da78c1335dd71a0c88a9b9c55953676bc1f9ec489b1cdbac59ad3ad940c92cb31c403b77e5ad8bab2a7419c1c6e85f4f45fec84215643d9ef084eb8ad9f2680b4a863b7a5f5ca51e7f632b088b75dfa751b93ba8dd029348ad84646b44b1bc229043307f79f261d0b817ca7d5499f79df2b654c527a0ec1e35ee84733f3c1b585714ac2967d9fc9e88a2b45ba1a87b4fc479ca4ffa26b97606defdc5ff6b024de349d95e34cb74eee66e1c4c48dbdf50ad910f68e7a82203a0503283d5c58b728fece4f14cb68e94e71da848d5646507d2d2fa7d384ff29db9252bfdbb44c64b98401a9906c38efee01ebc3e6fe06091ce4e5348994c358ff52319134dc2583af744a803eb051c906bfd60ac9ba1fde32d886f31e0c2c67b4a83290d3d6f63c6a764e5ed9b1892657a5fb6200d693337745d47dd3c8982b62fb56556e214c95b2baf493c3a091c1e6d236354002a25f7bc18cfb82c5b81f757a8eb47d476d27dbb00c6631730e1302acd90be2a7d3b8e16dd50b5c9b1ed5a73bf25384cbb91e40476ef57020772c1045e07eda319d56a9fedc50cf122793cf213ab870fb47609aa8060da37bc88fd0f32e738b14233911d89560b498da9c65437f2dced99db44f6a74b8a9a156a264166abae3403e8f891639f34efd32618a3636a34d5aa80d794f56062d62983806ac4a82014e7690da6e9365c4d75470a57b81733d6f622eb1d1640bd137179c17d9311a43349e3625a8114b20165c3389c5de6a6a55e756c7c05b1996201f69325b5354121069df3cd3ba5a240c4d8b81133230abf7b5c1df6df4988a8758b00f33d48e2fb1483f7b5bf47e662fcc0f8a52036d4a22f20ff707e4b2c8f476809a0106e459b3be29377a849627ff3dd3ade65a7d187573057cf52553563545d17ce8c80ec20ac0bd7e2ccb905bc3fa66345f0e8e0df0c241ff0db6825689740f9a01d1c37fdef5cc7c2e6283dddcb053582739e2cea6e64c4d54e09cffeaa5d61de1fb44675e536cefb4a6c732b8634a014c5daeaeb505c400c3d8c060eec72aeba75394e3113e4ebe05e445a8990a0895e6700", 0x2000, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x90, 0x0, 0x9, {0x8, 0x20000000000000, 0x9, 0xf63, 0xfff, 0xe, {0x6, 0x5, 0x4, 0x2000000000004cc1, 0x80, 0x7fff, 0x81, 0x6bd, 0x3, 0x0, 0x801, r2, 0x0, 0xc, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000000), 0x1, r3}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008054}, 0xc0}, {{&(0x7f00000000c0)=@file={0x1, './file0/file3\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000000)={0x2, 0x435}) 5.502115604s ago: executing program 8 (id=4967): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)=@updsa={0x198, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@local, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@sec_ctx={0xc, 0x8, {0x8}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @tfcpad={0x8}, @algo_aead={0x4c, 0x12, {{'aegis128l-aesni\x00'}, 0xfffffffffffffedd}}, @extra_flags={0x0, 0x18, 0x7}]}, 0x198}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x18}, @exit], &(0x7f00000000c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd33}, 0x94) 5.307366331s ago: executing program 9 (id=4968): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x1, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18021897e33f824c2361bc0200000095f9ffffff00", @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) sendfile(r2, r2, 0x0, 0x8) socket$pptp(0x18, 0x1, 0x2) r3 = dup(r0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0x40, 0x2, 0x11, 0x3000000, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) 5.146902169s ago: executing program 8 (id=4969): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x800) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) unshare(0x2040400) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000000c0), 0xff, r1}, 0x38) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x2279e) 4.943545723s ago: executing program 6 (id=4970): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9a090a, 0x0, '\x00', @value=0x5}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200), 0x80002, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x54, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYRES8=r4, @ANYRES16=r7, @ANYRESOCT=r5, @ANYRES16=r3, @ANYRES32=r4, @ANYRES64, @ANYRESOCT=0x0], 0x20}}, 0x8000) socket$kcm(0x10, 0x2, 0x0) 4.936213017s ago: executing program 7 (id=4971): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000)="82f40380ffff5c35", 0x8, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x300) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x791}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f00000001c0)=0x2001) r4 = fcntl$dupfd(r2, 0x0, r2) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) recvmmsg(r0, &(0x7f00000003c0), 0x1, 0x10162, 0x0) 4.599475476s ago: executing program 8 (id=4972): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x4800}, 0xf461fb7ccd43b8c2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e060c"], 0x9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x3, r4, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 4.596790975s ago: executing program 3 (id=4973): r0 = inotify_init() inotify_rm_watch(r0, 0x0) syz_open_dev$video(0x0, 0x485, 0x40000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) write$cgroup_pid(r2, &(0x7f0000000100)=r3, 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f00000be000/0xd000)=nil, 0xd000, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000200)={r6, 0x1, 0x70a, 0x10001, 0x7}, &(0x7f00000003c0)=0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect$uac1(0x0, 0x83, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000406b1d01014000010203010902710003010b40000904000000010100000a24010000000201c4551531b5dce771e6931aed04020a240702050000ec46530904010000010200000904010101010200000905010900000000000725010000010009040200000102000009040278fe8429cf406c01010102000008240201f001080109058209"], 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000040)={r6, 0x7}, &(0x7f0000000080)=0x8) 4.282549515s ago: executing program 9 (id=4974): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x1000004, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000100)={0x2}) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x4040010) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000000000, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0xff}, 0x18, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 3.465972314s ago: executing program 7 (id=4975): socket$inet6_udplite(0xa, 0x2, 0x88) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) 2.377274993s ago: executing program 6 (id=4976): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000003c0)=@multiplanar_mmap={0x4, 0x9, 0x4, 0x40, 0x7, {0x0, 0x2710}, {0x3, 0x2, 0x7, 0x5, 0x81, 0x9, "1bfe0d1e"}, 0x5, 0x1, {0x0}, 0x2000000}) sync_file_range(r1, 0x8, 0x10000, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0xf}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r6, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='sched\x00') pread64(r7, &(0x7f000001abc0)=""/102385, 0x18ff1, 0x7) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x8f, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0x3}, 0x0) 1.02134452s ago: executing program 8 (id=4977): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x0, 0x0, 0x0) close(r0) pipe(&(0x7f0000000140)) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$netlink(r1, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000000880)=ANY=[], 0x218}, {0x0}], 0x2, 0x0, 0x0, 0x44050}, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=@random={'osx.', '{!-(\xf9\x00'}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000100)=0xfffffffc, 0x0) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="7379737452f76aeb8e6252d34fa6bbda93b053d84096db29ac8667c31dc9d2c086c60b782ccb3b5e80d2d10f4b662ce0a1c614d7e311e91eb31c64a374f905111c11796139b7fe9d5db76f311565c1023a4f36b98dc060b8a1be6de356fe715bb53f4a3a6eb5963958a896a81cb05a9cdedc62d6aa40fdd67de2b072708e3aa619c2c0ee36ac060fd378f2c4db82cab28b1a5ff47d08f124ed219bd9ee975d88cfd383784ec9e9859dc172f249b9063d88f3f2bb746adc272cca35a0b2da11f356d18634f630e63e3f9351227b0076401a739af4090000004e0ffa3b326302c66474ca8301e7fd6d9c389aa65275258a2079c4348009585c08b8fc421b1f23a87752393bbc54930743a65c6fe36ef816c8ba2e68149a6e11740be31b2401064be4928500624841af4871c079584aadc77e1330c86a171974259ee1a51912658aa7222b39ad78c7b1ba324a2d85da39694d2f0775b702590774"], 0x0, 0x0) 926.676636ms ago: executing program 9 (id=4978): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x25eeb3121fc18253}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0xe}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8040081}, 0x20000400) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x10000, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x0, 0xeeee8000, 0x1000, &(0x7f0000001000/0x1000)=nil}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x5d64, 0x0, 0x5, 0x0, 0x4, 0x1, 0x4}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x18c7}, @sack_perm, @timestamp, @window={0x3, 0x8, 0x7c}, @window, @window], 0x6) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000000)={0xdddd0000, 0x2000}) socket(0x10, 0x3, 0x7ff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000202f170109022400010000800009040000010300010009210010060122070009058103000011ff0000000000000000"], 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 894.550175ms ago: executing program 7 (id=4979): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) 618.913407ms ago: executing program 3 (id=4980): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000000f080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700b704000002ec0000850000008200000018110000000000000000", @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r5 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000240081064e810ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fa215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbddd4f644ec7032de8dee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e000000000000000000000000000000004a", 0xd8}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000010002000000fddbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=r2], 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) r7 = landlock_create_ruleset(0x0, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) landlock_restrict_self(r7, 0x0) syz_mount_image$fuse(&(0x7f0000000000), 0x0, 0x20c015, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010004b0400000000fddbdf257a00000097e69777cae5b0b7d253c2d40c0c39129167b96b97343e2fb60ce54c6476353a1f4abe9e96f73de348d4126fe3ce25cfd1e8fcdc19e91f2aac", @ANYRES32=0x0, @ANYBLOB="00060000000000001c0032800b00010062726964676500000c0002800600aaaabb00"/48], 0x48}}, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, &(0x7f0000000480)='\v', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009940)=[{{0x0, 0x0, &(0x7f0000009dc0)=[{&(0x7f0000000700)=""/118, 0x76}], 0x1}}], 0x1, 0x42, 0x0) 258.621349ms ago: executing program 6 (id=4981): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfff, 0x0, 0x2}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x40000, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd0000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) 27.755887ms ago: executing program 6 (id=4982): syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xf0ff}}]}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) (fail_nth: 48) 0s ago: executing program 8 (id=4983): setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) unshare(0x24020400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) timerfd_settime(r1, 0x2, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, 0x0) fsopen(&(0x7f0000000000)='reiserfs\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000094000040000000000000000000000000110d7834120edf72a4ecfa1bfabad131e6a718c9079fec1678a6b744c81bba7b5d721892ecb623d3bd831edbe5a9faf917dc5b000c6af9a0"]) mmap(&(0x7f0000943000/0x4000)=nil, 0x4000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000003240)) kernel console output (not intermixed with test programs): [T22972] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4396'. [ 1338.959198][T15400] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 1338.969376][T15400] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 1338.977507][T15400] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 1338.985590][T15400] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 1338.993458][T15400] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 1339.000343][T22978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.004956][T15400] hid-thrustmaster 0003:044F:B65D.003F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.7-1/input0 [ 1339.022291][T15400] hid-thrustmaster 0003:044F:B65D.003F: Wrong number of endpoints? [ 1339.047268][T22978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.418368][T22974] trusted_key: encrypted_key: insufficient parameters specified [ 1340.134474][ C0] hid-thrustmaster 0003:044F:B65D.003F: Unknown packet type 0x0, unable to proceed further with wheel init [ 1341.015131][ T47] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1341.029855][T23004] loop6: detected capacity change from 0 to 7 [ 1341.037125][T23004] Dev loop6: unable to read RDB block 7 [ 1341.067484][T23004] loop6: AHDI p1 p2 p3 p4 [ 1341.089130][T23004] loop6: partition table partially beyond EOD, truncated [ 1341.147820][T23004] loop6: p1 start 926365495 is beyond EOD, truncated [ 1341.155757][ T47] usb 10-1: device descriptor read/64, error -71 [ 1341.217369][T23004] loop6: p2 size 47 extends beyond EOD, truncated [ 1341.254563][T23004] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1341.465228][ T47] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1341.474214][ T5934] usb 8-1: USB disconnect, device number 35 [ 1341.572457][ T9480] udevd[9480]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 1341.639813][T23017] program syz.3.4411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1341.651210][ T47] usb 10-1: device descriptor read/64, error -71 [ 1341.897325][ T47] usb usb10-port1: attempt power cycle [ 1341.981200][T23023] FAULT_INJECTION: forcing a failure. [ 1341.981200][T23023] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.073564][T23023] CPU: 1 UID: 0 PID: 23023 Comm: syz.6.4413 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1342.073595][T23023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1342.073607][T23023] Call Trace: [ 1342.073616][T23023] [ 1342.073626][T23023] dump_stack_lvl+0x189/0x250 [ 1342.073654][T23023] ? __pfx____ratelimit+0x10/0x10 [ 1342.073681][T23023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1342.073703][T23023] ? __pfx__printk+0x10/0x10 [ 1342.073735][T23023] ? __pfx___might_resched+0x10/0x10 [ 1342.073759][T23023] should_fail_ex+0x414/0x560 [ 1342.073787][T23023] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1342.073815][T23023] should_failslab+0xa8/0x100 [ 1342.073843][T23023] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1342.073868][T23023] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1342.073893][T23023] ? alloc_inode+0x67/0x1b0 [ 1342.073918][T23023] ? __pfx_simple_start_creating+0x10/0x10 [ 1342.073949][T23023] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1342.073974][T23023] alloc_inode+0x67/0x1b0 [ 1342.074002][T23023] new_inode+0x22/0x170 [ 1342.074035][T23023] __debugfs_create_file+0x14d/0x4f0 [ 1342.074068][T23023] debugfs_create_file_full+0x3f/0x60 [ 1342.074097][T23023] ref_tracker_dir_debugfs+0x14e/0x270 [ 1342.074134][T23023] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1342.074189][T23023] ? rcu_is_watching+0x15/0xb0 [ 1342.074206][T23023] ? alloc_netdev_mqs+0xa3/0x1170 [ 1342.074235][T23023] ? __raw_spin_lock_init+0x45/0x100 [ 1342.074262][T23023] alloc_netdev_mqs+0x26f/0x1170 [ 1342.074282][T23023] ? __pfx_hsr_dev_setup+0x10/0x10 [ 1342.074310][T23023] rtnl_create_link+0x31f/0xd10 [ 1342.074342][T23023] rtnl_newlink_create+0x25c/0xb00 [ 1342.074362][T23023] ? __pfx___nla_validate_parse+0x10/0x10 [ 1342.074394][T23023] ? __lock_acquire+0xab9/0xd20 [ 1342.074428][T23023] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1342.074452][T23023] ? __pfx___mutex_lock+0x10/0x10 [ 1342.074489][T23023] ? ns_capable+0x8a/0xf0 [ 1342.074511][T23023] rtnl_newlink+0x16d6/0x1c70 [ 1342.074546][T23023] ? netlink_sendmsg+0x805/0xb30 [ 1342.074588][T23023] ? __pfx_rtnl_newlink+0x10/0x10 [ 1342.074643][T23023] ? kasan_quarantine_put+0xdd/0x220 [ 1342.074666][T23023] ? lockdep_hardirqs_on+0x9c/0x150 [ 1342.074699][T23023] ? nlmon_xmit+0xb0/0x100 [ 1342.074716][T23023] ? kmem_cache_free+0x18f/0x400 [ 1342.074751][T23023] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1342.074771][T23023] ? lockdep_hardirqs_on+0x9c/0x150 [ 1342.074799][T23023] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1342.074819][T23023] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1342.074844][T23023] ? __dev_queue_xmit+0x27b/0x3b50 [ 1342.074866][T23023] ? __dev_queue_xmit+0x27b/0x3b50 [ 1342.074884][T23023] ? __dev_queue_xmit+0x27b/0x3b50 [ 1342.074906][T23023] ? __dev_queue_xmit+0x1d79/0x3b50 [ 1342.074935][T23023] ? __lock_acquire+0xab9/0xd20 [ 1342.074995][T23023] ? __pfx_rtnl_newlink+0x10/0x10 [ 1342.075021][T23023] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1342.075051][T23023] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1342.075078][T23023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1342.075102][T23023] ? ref_tracker_free+0x63a/0x7d0 [ 1342.075138][T23023] ? __asan_memcpy+0x40/0x70 [ 1342.075160][T23023] ? __pfx_ref_tracker_free+0x10/0x10 [ 1342.075185][T23023] ? __skb_clone+0x63/0x7a0 [ 1342.075216][T23023] netlink_rcv_skb+0x208/0x470 [ 1342.075245][T23023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1342.075275][T23023] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1342.075316][T23023] ? netlink_deliver_tap+0x2e/0x1b0 [ 1342.075352][T23023] netlink_unicast+0x82f/0x9e0 [ 1342.075388][T23023] ? __pfx_netlink_unicast+0x10/0x10 [ 1342.075414][T23023] ? netlink_sendmsg+0x642/0xb30 [ 1342.075440][T23023] ? skb_put+0x11b/0x210 [ 1342.075475][T23023] netlink_sendmsg+0x805/0xb30 [ 1342.075515][T23023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1342.075547][T23023] ? __import_iovec+0x5d4/0x7f0 [ 1342.075567][T23023] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1342.075600][T23023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1342.075622][T23023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1342.075652][T23023] __sock_sendmsg+0x21c/0x270 [ 1342.075682][T23023] ____sys_sendmsg+0x505/0x830 [ 1342.075711][T23023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1342.075752][T23023] ___sys_sendmsg+0x21f/0x2a0 [ 1342.075778][T23023] ? __pfx____sys_sendmsg+0x10/0x10 [ 1342.075844][T23023] ? __fget_files+0x2a/0x420 [ 1342.075871][T23023] ? __fget_files+0x3a0/0x420 [ 1342.075913][T23023] __sys_sendmsg+0x164/0x220 [ 1342.075937][T23023] ? __pfx___sys_sendmsg+0x10/0x10 [ 1342.075979][T23023] ? lockdep_hardirqs_on+0x9c/0x150 [ 1342.076010][T23023] __do_fast_syscall_32+0xb6/0x2b0 [ 1342.076040][T23023] ? lockdep_hardirqs_on+0x9c/0x150 [ 1342.076072][T23023] do_fast_syscall_32+0x34/0x80 [ 1342.076100][T23023] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1342.076133][T23023] RIP: 0023:0xf70de539 [ 1342.076152][T23023] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1342.076170][T23023] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1342.076193][T23023] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 1342.076208][T23023] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1342.076221][T23023] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1342.076234][T23023] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1342.076246][T23023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1342.076280][T23023] [ 1342.616377][T23023] debugfs: out of free dentries, can not create file 'netdev@ffff888055d20610' [ 1342.632747][T23023] dummy0: entered promiscuous mode [ 1342.679714][T23023] gretap0: entered promiscuous mode [ 1342.804841][ T47] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1342.825424][ T47] usb 10-1: device descriptor read/8, error -71 [ 1342.903164][T23023] hsr1: entered allmulticast mode [ 1343.064805][ T47] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1343.098337][ T47] usb 10-1: device descriptor read/8, error -71 [ 1343.112984][T23023] dummy0: entered allmulticast mode [ 1343.164896][T23023] gretap0: entered allmulticast mode [ 1343.215916][ T47] usb usb10-port1: unable to enumerate USB device [ 1343.384788][T16179] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1343.596865][T16179] usb 8-1: Using ep0 maxpacket: 8 [ 1343.625137][T16179] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 1343.839981][T16179] usb 8-1: config 2 has no interface number 0 [ 1343.894197][T16179] usb 8-1: config 2 interface 31 has no altsetting 0 [ 1344.446070][T16179] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1344.464210][T16179] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.482924][T16179] usb 8-1: Product: syz [ 1344.492748][T16179] usb 8-1: Manufacturer: syz [ 1344.507650][T16179] usb 8-1: SerialNumber: syz [ 1344.551223][T16179] ch9200 8-1:2.31: probe with driver ch9200 failed with error -22 [ 1345.444883][ T5958] usb 8-1: USB disconnect, device number 36 [ 1347.852191][T23078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1348.584792][T23084] trusted_key: encrypted_key: insufficient parameters specified [ 1348.954844][T16179] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1349.154930][T16179] usb 10-1: config 0 has no interfaces? [ 1349.169388][T16179] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1349.185170][T16179] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.211956][T16179] usb 10-1: Product: syz [ 1349.227894][T16179] usb 10-1: Manufacturer: syz [ 1349.232798][T16179] usb 10-1: SerialNumber: syz [ 1349.253827][T16179] usb 10-1: config 0 descriptor?? [ 1349.421898][T23102] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4432'. [ 1349.555549][T23105] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4434'. [ 1350.635904][T23117] netlink: 'syz.8.4438': attribute type 1 has an invalid length. [ 1351.571687][T16179] usb 10-1: USB disconnect, device number 101 [ 1353.029367][T23150] usb usb8: usbfs: process 23150 (syz.7.4449) did not claim interface 0 before use [ 1353.075122][ T5958] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1353.083658][T23150] netlink: 'syz.7.4449': attribute type 2 has an invalid length. [ 1353.106249][T23151] program syz.9.4448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1353.113512][T23150] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4449'. [ 1353.198997][T23150] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4449'. [ 1353.256668][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1353.286663][ T5958] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1353.325368][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.377573][ T5958] usb 4-1: config 0 descriptor?? [ 1353.665122][ T5958] usbhid 4-1:0.0: can't add hid device: -71 [ 1353.684177][ T5958] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1353.719297][ T5958] usb 4-1: USB disconnect, device number 21 [ 1354.274823][ T5958] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1354.434854][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 1354.509800][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.522158][ T5958] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1354.574779][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.612731][ T5958] usb 4-1: config 0 descriptor?? [ 1354.678619][ T5958] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1354.711335][ T5958] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1356.479854][ T5958] usb 4-1: USB disconnect, device number 22 [ 1356.488094][ T5958] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1356.569012][T23195] IPVS: set_ctl: invalid protocol: 5 0.0.0.0:12336 [ 1356.753205][T23198] syz.3.4461: attempt to access beyond end of device [ 1356.753205][T23198] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1356.869197][T23198] openvswitch: netlink: Multiple metadata blocks provided [ 1356.989440][T23203] program syz.8.4463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1357.104942][ T5934] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1357.124868][ T5958] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1357.264954][ T5958] usb 4-1: device descriptor read/64, error -71 [ 1357.285175][ T5934] usb 10-1: Using ep0 maxpacket: 32 [ 1357.298471][ T5934] usb 10-1: config 0 has an invalid interface number: 89 but max is 0 [ 1357.307045][ T5934] usb 10-1: config 0 has no interface number 0 [ 1357.323835][ T5934] usb 10-1: config 0 interface 89 has no altsetting 0 [ 1357.461629][ T5934] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1357.472273][ T5934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.482764][ T5934] usb 10-1: Product: syz [ 1357.493935][ T5934] usb 10-1: Manufacturer: syz [ 1357.505605][ T5934] usb 10-1: SerialNumber: syz [ 1357.525660][ T5934] usb 10-1: config 0 descriptor?? [ 1357.541662][ T5934] em28xx 10-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1357.584829][ T5958] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1357.592765][ T5934] em28xx 10-1:0.89: Video interface 89 found: bulk [ 1357.682192][T23208] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1357.744941][ T5958] usb 4-1: device descriptor read/64, error -71 [ 1357.886624][ T5958] usb usb4-port1: attempt power cycle [ 1358.165721][ T5934] em28xx 10-1:0.89: unknown em28xx chip ID (0) [ 1358.284979][ T5958] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1358.325751][ T5958] usb 4-1: device descriptor read/8, error -71 [ 1358.376861][ T8939] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1358.555263][ T8939] usb 8-1: Using ep0 maxpacket: 16 [ 1358.583143][ T8939] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1358.595242][ T5958] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1358.604930][ T8939] usb 8-1: config 0 has no interface number 0 [ 1358.611088][ T8939] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1358.665520][ T5958] usb 4-1: device descriptor read/8, error -71 [ 1358.668171][ T8939] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1358.734361][ T8939] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1358.756142][ T8939] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1358.764554][ T8939] usb 8-1: Product: syz [ 1358.775472][ T8939] usb 8-1: SerialNumber: syz [ 1358.776281][ T5958] usb usb4-port1: unable to enumerate USB device [ 1358.783084][ T8939] usb 8-1: config 0 descriptor?? [ 1358.802781][ T8939] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 1358.816271][ T8939] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input70 [ 1359.076231][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1359.275746][ T5934] em28xx 10-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1359.313715][ T5934] em28xx 10-1:0.89: board has no eeprom [ 1359.394847][ T5934] em28xx 10-1:0.89: Identified as Terratec Grabby (card=67) [ 1359.432053][ T5934] em28xx 10-1:0.89: analog set to bulk mode. [ 1359.480109][ T5958] em28xx 10-1:0.89: Registering V4L2 extension [ 1359.537268][ T5934] usb 10-1: USB disconnect, device number 102 [ 1359.579114][ T5934] em28xx 10-1:0.89: Disconnecting em28xx [ 1359.705948][ T5958] em28xx 10-1:0.89: Config register raw data: 0xffffffed [ 1359.772597][ T5958] em28xx 10-1:0.89: AC97 chip type couldn't be determined [ 1359.840170][ T5958] em28xx 10-1:0.89: No AC97 audio processor [ 1359.941994][ T5958] usb 10-1: Decoder not found [ 1360.003687][ T5958] em28xx 10-1:0.89: failed to create media graph [ 1360.019661][ T5958] em28xx 10-1:0.89: V4L2 device video103 deregistered [ 1360.111514][T23238] program syz.6.4474 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1360.113993][ T5958] em28xx 10-1:0.89: Registering snapshot button... [ 1360.210071][ T5958] input: em28xx snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.89/input/input71 [ 1360.270716][ T5958] em28xx 10-1:0.89: Remote control support is not available for this card. [ 1360.298291][ T5934] em28xx 10-1:0.89: Closing input extension [ 1360.366845][ T5934] em28xx 10-1:0.89: Deregistering snapshot button [ 1361.008190][ T5934] em28xx 10-1:0.89: Freeing device [ 1361.812479][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.820898][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.041047][T23257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4480'. [ 1363.415512][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1363.422730][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1363.429960][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1363.438036][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1363.445944][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1363.453326][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1363.461968][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1363.469520][ T8939] usb 8-1: USB disconnect, device number 37 [ 1363.475565][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1363.475583][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1363.586652][ T8939] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1366.331600][T23317] program syz.8.4492 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1368.179814][T23333] tipc: Enabling of bearer rejected, failed to enable media [ 1368.987793][T23345] fuse: Bad value for 'fd' [ 1368.994783][ T5958] usb 10-1: new full-speed USB device number 103 using dummy_hcd [ 1369.353486][ T5958] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1369.373053][ T5958] usb 10-1: config 0 has no interface number 0 [ 1369.403527][ T5958] usb 10-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 1369.460943][ T5958] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.621153][ T5958] usb 10-1: config 0 descriptor?? [ 1369.649003][ T5958] usb 10-1: selecting invalid altsetting 1 [ 1369.685792][ T5958] dvb_ttusb_budget: ttusb_init_controller: error [ 1369.840080][ T5958] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1371.000611][ T5958] DVB: Unable to find symbol ves1820_attach() [ 1371.272244][ T5958] DVB: Unable to find symbol stv0297_attach() [ 1371.295494][ T5958] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 1371.328244][ T5958] usb 10-1: USB disconnect, device number 103 [ 1372.110440][T23383] fuse: Bad value for 'fd' [ 1372.635016][ T5864] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1372.846640][ T5864] usb 9-1: Using ep0 maxpacket: 8 [ 1373.244486][ T5864] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1373.264158][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.312904][ T5864] usb 9-1: Product: syz [ 1373.338069][ T5864] usb 9-1: Manufacturer: syz [ 1373.342739][ T5864] usb 9-1: SerialNumber: syz [ 1373.556147][ T5864] usb 9-1: config 0 descriptor?? [ 1373.581485][ T5864] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1373.593987][ T5864] usb 9-1: setting power ON [ 1373.653800][ T5864] dvb-usb: bulk message failed: -22 (2/0) [ 1373.684873][ T5864] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1373.766337][T23391] dvb-usb: bulk message failed: -22 (3/0) [ 1373.772900][T23393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.783108][T23391] dvb-usb: bulk message failed: -22 (3/0) [ 1373.831226][T23393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.836393][ T5864] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1373.888392][ T5864] usb 9-1: media controller created [ 1374.038975][ T5864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1374.123484][T23413] program syz.3.4520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1374.140437][T23412] CUSE: unknown device info "" [ 1374.164816][T23412] CUSE: zero length info key specified [ 1374.181570][ T5864] usb 9-1: selecting invalid altsetting 6 [ 1374.190617][ T5864] usb 9-1: digital interface selection failed (-22) [ 1374.207573][ T5864] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1374.227777][ T5864] usb 9-1: setting power OFF [ 1374.243350][ T5864] dvb-usb: bulk message failed: -22 (2/0) [ 1374.260162][ T5864] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1374.289362][ T5864] (NULL device *): no alternate interface [ 1374.438096][ T5864] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1374.566315][ T5864] usb 9-1: USB disconnect, device number 6 [ 1374.953611][T23398] trusted_key: encrypted_key: insufficient parameters specified [ 1375.702221][T23436] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4526'. [ 1376.120644][T23446] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4528'. [ 1376.134805][ T5934] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1376.643860][T23447] fuse: Unknown parameter 'dont_hash' [ 1376.684721][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 1376.751640][ T5934] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1376.765160][ T5934] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1376.842196][ T5934] usb 4-1: Product: syz [ 1376.883506][ T5934] usb 4-1: Manufacturer: syz [ 1376.909235][ T5934] usb 4-1: SerialNumber: syz [ 1377.033871][ T5934] usb 4-1: config 0 descriptor?? [ 1377.109524][ T5934] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1377.326573][T23436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4526'. [ 1377.387566][T23436] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1377.394315][T23436] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1377.452503][T23452] tipc: Enabled bearer , priority 0 [ 1377.461497][T23436] vhci_hcd vhci_hcd.0: Device attached [ 1377.461803][T23452] syzkaller0: entered promiscuous mode [ 1377.532160][T23452] syzkaller0: entered allmulticast mode [ 1377.559241][T23463] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4533'. [ 1377.604399][T23463] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4533'. [ 1377.630678][T23465] program syz.6.4534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1377.650842][T23463] binder: 23462:23463 ioctl c0306201 800003c0 returned -14 [ 1377.700918][ T5934] gspca_zc3xx: reg_r err -71 [ 1377.702401][T23460] vhci_hcd: connection closed [ 1377.716715][T16179] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1377.724858][ T3520] vhci_hcd: stop threads [ 1377.733436][ T5934] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1377.750688][ T3520] vhci_hcd: release socket [ 1377.788531][ T3520] vhci_hcd: disconnect device [ 1377.798143][ T5934] usb 4-1: USB disconnect, device number 27 [ 1377.832186][T23448] tipc: Resetting bearer [ 1377.927405][T23448] tipc: Disabling bearer [ 1378.749621][T23481] fuse: Bad value for 'fd' [ 1379.085282][ T8939] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 1379.154846][ T5949] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1379.654837][ T5949] usb 8-1: Using ep0 maxpacket: 8 [ 1379.662463][ T5949] usb 8-1: config 135 has an invalid interface number: 230 but max is 0 [ 1379.684996][ T5949] usb 8-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.730068][ T5949] usb 8-1: config 135 has no interface number 0 [ 1379.744723][ T5949] usb 8-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1379.774702][ T5949] usb 8-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1379.870859][ T5949] usb 8-1: config 135 interface 230 has no altsetting 0 [ 1380.007885][ T5949] usb 8-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1380.054870][ T5864] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1380.075080][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.103678][ T5949] usb 8-1: Product: syz [ 1380.387207][ T5949] usb 8-1: Manufacturer: syz [ 1380.391897][ T5949] usb 8-1: SerialNumber: syz [ 1380.410224][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 1380.421763][ T5949] usb 8-1: Found UVC 0.00 device syz (18ec:3288) [ 1380.443938][ T5949] usb 8-1: No valid video chain found. [ 1380.445653][ T5864] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1380.483654][ T5864] usb 4-1: config 0 has no interface number 0 [ 1380.508623][ T5864] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1380.540569][ T5864] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1380.567669][ T5864] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1380.584781][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1380.601187][ T5864] usb 4-1: Product: syz [ 1380.611336][ T5864] usb 4-1: SerialNumber: syz [ 1380.666867][T23485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.666914][ T5864] usb 4-1: config 0 descriptor?? [ 1380.698879][ T5864] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1380.728488][ T5864] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input73 [ 1380.735259][T23485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.743396][T23497] trusted_key: encrypted_key: insufficient parameters specified [ 1380.798024][ T8939] usb 8-1: USB disconnect, device number 38 [ 1380.878729][T23506] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4547'. [ 1380.955144][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1381.144974][ T5949] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 1381.304937][ T5949] usb 10-1: Using ep0 maxpacket: 8 [ 1381.318175][ T5949] usb 10-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1381.355011][ T5949] usb 10-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1381.391750][ T5949] usb 10-1: Product: syz [ 1381.436984][ T5949] usb 10-1: Manufacturer: syz [ 1381.450439][ T5949] usb 10-1: SerialNumber: syz [ 1381.479210][ T5949] usb 10-1: config 0 descriptor?? [ 1381.525644][ T5949] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1381.650542][T23516] fuse: Bad value for 'fd' [ 1381.784272][T23506] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4547'. [ 1381.838370][T23506] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 1381.845161][T23506] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1381.875896][T23506] vhci_hcd vhci_hcd.0: Device attached [ 1382.090903][T23523] vhci_hcd: connection closed [ 1382.093239][ T5949] gspca_zc3xx: reg_r err -71 [ 1382.105330][ T36] vhci_hcd: stop threads [ 1382.111875][ T5949] gspca_zc3xx 10-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1382.114835][T16172] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 1382.139258][ T5949] usb 10-1: USB disconnect, device number 105 [ 1382.145724][ T36] vhci_hcd: release socket [ 1382.166452][ T36] vhci_hcd: disconnect device [ 1382.898207][T16179] vhci_hcd: vhci_device speed not set [ 1383.434531][T23546] input: syz1 as /devices/virtual/input/input74 [ 1383.794517][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1383.801752][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1383.809665][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1383.818119][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1383.825820][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1383.833595][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1383.841179][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1383.848597][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1383.855771][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1383.863022][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1383.880166][ T5934] usb 4-1: USB disconnect, device number 28 [ 1383.886209][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1383.976067][ T5934] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1384.680185][T23572] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4565'. [ 1384.906152][T16179] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1385.080757][T16179] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1385.109821][T16179] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1385.136644][T16179] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1385.155220][T16179] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1385.163737][T16179] usb 8-1: Manufacturer: syz [ 1385.247881][T16179] usb 8-1: config 0 descriptor?? [ 1385.270185][T16179] igorplugusb 8-1:0.0: incorrect number of endpoints [ 1385.470026][T16179] usb 8-1: USB disconnect, device number 39 [ 1385.834125][T23595] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4570'. [ 1387.294863][T16172] vhci_hcd: vhci_device speed not set [ 1387.723151][T14981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.970648][T23623] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4577'. [ 1388.424834][ T5864] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1388.609325][ T5864] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.713712][ T5864] usb 9-1: config 0 has no interfaces? [ 1388.794251][ T5864] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1388.813576][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.854266][ T5864] usb 9-1: Product: syz [ 1388.911919][ T5864] usb 9-1: Manufacturer: syz [ 1388.929327][ T5864] usb 9-1: SerialNumber: syz [ 1388.962097][ T5864] usb 9-1: config 0 descriptor?? [ 1390.194917][ T5864] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 1390.240143][T23647] fuse: Unknown parameter '0x000000000000000a' [ 1390.256423][T23647] netlink: 'syz.6.4587': attribute type 10 has an invalid length. [ 1390.266068][T23647] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4587'. [ 1390.300396][T23647] batadv0: entered promiscuous mode [ 1390.340265][T23647] batadv0: entered allmulticast mode [ 1390.354809][ T5864] usb 10-1: Using ep0 maxpacket: 32 [ 1390.363366][ T5864] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1390.375010][ T5864] usb 10-1: config 6 has an invalid interface number: 3 but max is 2 [ 1390.383346][ T5864] usb 10-1: config 6 has an invalid interface number: 255 but max is 2 [ 1390.424203][T23647] bridge0: port 3(batadv0) entered blocking state [ 1390.435344][ T5864] usb 10-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.435565][T23647] bridge0: port 3(batadv0) entered disabled state [ 1390.452996][ T5864] usb 10-1: config 6 has no interface number 0 [ 1390.473891][ T5864] usb 10-1: config 6 has no interface number 1 [ 1390.504416][ T5864] usb 10-1: too many endpoints for config 6 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1390.518557][T23647] bridge0: port 3(batadv0) entered blocking state [ 1390.525236][T23647] bridge0: port 3(batadv0) entered forwarding state [ 1390.546226][ T5864] usb 10-1: config 6 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1390.550060][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1390.569813][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1390.594820][ T5864] usb 10-1: config 6 interface 2 has no altsetting 0 [ 1390.602285][T23640] trusted_key: encrypted_key: insufficient parameters specified [ 1390.622747][ T5864] usb 10-1: config 6 interface 255 has no altsetting 0 [ 1390.736854][ T5864] usb 10-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=ec.5b [ 1390.929988][ T5864] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.951982][ T5864] usb 10-1: Product: syz [ 1390.962120][ T5864] usb 10-1: Manufacturer: syz [ 1390.990309][ T5864] usb 10-1: SerialNumber: syz [ 1391.066705][ T5949] usb 9-1: USB disconnect, device number 7 [ 1391.311497][ T5864] usb 10-1: selecting invalid altsetting 0 [ 1391.354833][ T5864] usb 10-1: Could not set interface, error -22 [ 1391.440672][ T5864] usb 10-1: USB disconnect, device number 106 [ 1391.744971][ T5958] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1391.895093][ T5958] usb 8-1: Using ep0 maxpacket: 32 [ 1391.922950][ T5958] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1391.992186][ T5958] usb 8-1: config 0 has no interface number 0 [ 1392.053073][ T5958] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1392.076868][ T5958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.124891][ T5958] usb 8-1: Product: syz [ 1392.143656][ T5958] usb 8-1: Manufacturer: syz [ 1392.174318][ T5958] usb 8-1: SerialNumber: syz [ 1392.225869][ T5958] usb 8-1: config 0 descriptor?? [ 1392.285229][T16172] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1392.293973][ T5958] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1392.360409][ T5958] usb 8-1: selecting invalid altsetting 1 [ 1392.386770][ T5958] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1392.456041][ T5958] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1392.482089][ T5958] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1392.497127][T16172] usb 10-1: Using ep0 maxpacket: 32 [ 1392.518139][T16172] usb 10-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59 [ 1392.529196][T16172] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.537483][ T5958] usb 8-1: media controller created [ 1392.579314][T16172] usb 10-1: Product: syz [ 1392.593978][T16172] usb 10-1: Manufacturer: syz [ 1392.608094][T16172] usb 10-1: SerialNumber: syz [ 1392.640381][T16172] usb 10-1: config 0 descriptor?? [ 1392.702024][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1392.863828][T23669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1392.882984][T23669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1392.970269][T16172] pegasus 10-1:0.0: probe with driver pegasus failed with error -71 [ 1393.016462][T16172] usb 10-1: USB disconnect, device number 107 [ 1393.162491][T23684] pim6reg: entered allmulticast mode [ 1393.176856][T23690] netlink: 'syz.7.4589': attribute type 10 has an invalid length. [ 1393.212642][T23690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.220305][T23690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.350282][T23690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.357724][T23690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1393.365383][T23690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.372669][T23690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1393.427310][T23692] trusted_key: encrypted_key: insufficient parameters specified [ 1393.430944][T23690] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1393.471933][T23684] pim6reg: left allmulticast mode [ 1394.009949][ T5958] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1394.017289][ T5958] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1394.474735][ T5934] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1394.784825][ T5934] usb 4-1: device descriptor read/64, error -71 [ 1395.045243][ T5934] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1395.244799][ T5934] usb 4-1: device descriptor read/64, error -71 [ 1395.377707][ T5934] usb usb4-port1: attempt power cycle [ 1395.550742][ T5864] usb 8-1: USB disconnect, device number 40 [ 1395.754970][ T5934] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1395.797072][ T5934] usb 4-1: device descriptor read/8, error -71 [ 1396.038484][ T5934] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1396.065716][ T5934] usb 4-1: device descriptor read/8, error -71 [ 1396.189418][ T5934] usb usb4-port1: unable to enumerate USB device [ 1396.196310][T23720] netlink: 'syz.9.4611': attribute type 3 has an invalid length. [ 1396.225233][T23720] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4611'. [ 1396.675028][ T5934] usb 10-1: new full-speed USB device number 108 using dummy_hcd [ 1396.999444][ T5934] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1397.020159][ T5934] usb 10-1: config 0 has no interface number 0 [ 1397.029231][ T5934] usb 10-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e [ 1397.060277][ T5934] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.076508][ T5934] usb 10-1: config 0 descriptor?? [ 1397.092620][ T5934] usb 10-1: selecting invalid altsetting 1 [ 1397.123485][ T5934] dvb_ttusb_budget: ttusb_init_controller: error [ 1397.133435][ T5934] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1398.115393][ T5934] DVB: Unable to find symbol ves1820_attach() [ 1398.306013][ T5934] DVB: Unable to find symbol stv0297_attach() [ 1398.312217][ T5934] dvb_ttusb_budget: no frontend driver found for device [0b48:1004] [ 1398.328466][ T5934] usb 10-1: USB disconnect, device number 108 [ 1401.179217][T23773] team0: Device gtp0 is of different type [ 1403.361077][T23754] trusted_key: encrypted_key: insufficient parameters specified [ 1403.747366][T23805] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4634'. [ 1403.799532][T23804] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4635'. [ 1404.074912][ T5949] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1404.235899][ T5949] usb 8-1: Using ep0 maxpacket: 8 [ 1404.285028][ T5949] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1404.304791][ T5949] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1404.326988][ T5949] usb 8-1: Product: syz [ 1404.345135][ T5949] usb 8-1: Manufacturer: syz [ 1404.349783][ T5949] usb 8-1: SerialNumber: syz [ 1404.408407][ T5949] usb 8-1: config 0 descriptor?? [ 1404.430539][ T5949] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1404.515117][T16172] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1404.609379][T23826] FAULT_INJECTION: forcing a failure. [ 1404.609379][T23826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1404.657202][T23804] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4635'. [ 1404.664264][T23826] CPU: 0 UID: 0 PID: 23826 Comm: syz.8.4642 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1404.664302][T23826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1404.664314][T23826] Call Trace: [ 1404.664322][T23826] [ 1404.664331][T23826] dump_stack_lvl+0x189/0x250 [ 1404.664359][T23826] ? __pfx____ratelimit+0x10/0x10 [ 1404.664385][T23826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1404.664406][T23826] ? __pfx__printk+0x10/0x10 [ 1404.664432][T23826] ? __might_fault+0xb0/0x130 [ 1404.664469][T23826] should_fail_ex+0x414/0x560 [ 1404.664498][T23826] _copy_from_user+0x2d/0xb0 [ 1404.664519][T23826] get_compat_msghdr+0xad/0x4a0 [ 1404.664560][T23826] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1404.664601][T23826] ___sys_sendmsg+0x193/0x2a0 [ 1404.664628][T23826] ? __pfx____sys_sendmsg+0x10/0x10 [ 1404.664683][T23826] ? __fget_files+0x2a/0x420 [ 1404.664708][T23826] ? __fget_files+0x3a0/0x420 [ 1404.664746][T23826] __sys_sendmsg+0x164/0x220 [ 1404.664766][T23826] ? __pfx___sys_sendmsg+0x10/0x10 [ 1404.664801][T23826] ? lockdep_hardirqs_on+0x9c/0x150 [ 1404.664829][T23826] __do_fast_syscall_32+0xb6/0x2b0 [ 1404.664856][T23826] ? lockdep_hardirqs_on+0x9c/0x150 [ 1404.664884][T23826] do_fast_syscall_32+0x34/0x80 [ 1404.664909][T23826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1404.664931][T23826] RIP: 0023:0xf70ae539 [ 1404.664948][T23826] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1404.664965][T23826] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1404.664986][T23826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1404.665000][T23826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1404.665011][T23826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1404.665022][T23826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1404.665034][T23826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1404.665061][T23826] [ 1404.814263][T23829] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1404.864808][T16172] usb 10-1: Using ep0 maxpacket: 8 [ 1404.870213][T23829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1404.950717][T23829] vhci_hcd vhci_hcd.0: Device attached [ 1405.020831][ T5949] gspca_zc3xx: reg_w_i err -110 [ 1405.034790][ T5949] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1405.069408][T16172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.094592][T16172] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.125011][T16172] usb 10-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1405.174702][T16172] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.224974][ T5949] usb 47-1: new low-speed USB device number 5 using vhci_hcd [ 1405.233998][T16172] usb 10-1: config 0 descriptor?? [ 1405.732008][T16172] uclogic 0003:5543:0004.0040: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.9-1/input0 [ 1405.947057][T16172] usb 10-1: USB disconnect, device number 109 [ 1406.009570][T23842] fido_id[23842]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1406.275938][T23845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4647'. [ 1406.391310][T23847] tipc: Cannot configure node identity twice [ 1406.753464][T23832] vhci_hcd: connection reset by peer [ 1406.765019][ T47] usb 8-1: USB disconnect, device number 41 [ 1406.784974][ T1144] vhci_hcd: stop threads [ 1406.789287][ T1144] vhci_hcd: release socket [ 1406.814182][ T1144] vhci_hcd: disconnect device [ 1407.503531][T23868] input: syz0 as /devices/virtual/input/input75 [ 1408.587221][T19332] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 1408.600414][T19332] Bluetooth: hci2: unexpected event for opcode 0x2062 [ 1409.266213][T23880] FAULT_INJECTION: forcing a failure. [ 1409.266213][T23880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.357661][T23880] CPU: 1 UID: 0 PID: 23880 Comm: syz.3.4657 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1409.357692][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1409.357704][T23880] Call Trace: [ 1409.357712][T23880] [ 1409.357721][T23880] dump_stack_lvl+0x189/0x250 [ 1409.357752][T23880] ? __pfx____ratelimit+0x10/0x10 [ 1409.357793][T23880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1409.357817][T23880] ? __pfx__printk+0x10/0x10 [ 1409.357845][T23880] ? __might_fault+0xb0/0x130 [ 1409.357884][T23880] should_fail_ex+0x414/0x560 [ 1409.357914][T23880] _copy_from_user+0x2d/0xb0 [ 1409.357938][T23880] __sys_sendto+0x25c/0x520 [ 1409.357971][T23880] ? __pfx___sys_sendto+0x10/0x10 [ 1409.358016][T23880] ? __might_fault+0xb0/0x130 [ 1409.358068][T23880] __ia32_compat_sys_socketcall+0x71c/0x9c0 [ 1409.358090][T23880] ? __fget_files+0x3a0/0x420 [ 1409.358124][T23880] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 1409.358145][T23880] ? fput+0xa0/0xd0 [ 1409.358167][T23880] ? ksys_write+0x22a/0x250 [ 1409.358203][T23880] ? lockdep_hardirqs_on+0x9c/0x150 [ 1409.358232][T23880] __do_fast_syscall_32+0xb6/0x2b0 [ 1409.358262][T23880] ? lockdep_hardirqs_on+0x9c/0x150 [ 1409.358293][T23880] do_fast_syscall_32+0x34/0x80 [ 1409.358321][T23880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1409.358345][T23880] RIP: 0023:0xf709e539 [ 1409.358364][T23880] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1409.358382][T23880] RSP: 002b:00000000f548d430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1409.358406][T23880] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f548d444 [ 1409.358421][T23880] RDX: 0000000000000000 RSI: 00000000f548d560 RDI: 00000000f7404ff4 [ 1409.358434][T23880] RBP: 00000000f548d560 R08: 0000000000000000 R09: 0000000000000000 [ 1409.358447][T23880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1409.358460][T23880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1409.358492][T23880] [ 1409.814797][T15400] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1409.963787][T15400] usb 9-1: device descriptor read/64, error -71 [ 1410.152250][T23894] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4661'. [ 1410.234829][T15400] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1410.324880][ T5949] vhci_hcd: vhci_device speed not set [ 1410.376353][T15400] usb 9-1: device descriptor read/64, error -71 [ 1410.447197][ T47] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1410.485568][T15400] usb usb9-port1: attempt power cycle [ 1410.637493][ T47] usb 8-1: Using ep0 maxpacket: 8 [ 1410.649411][ T47] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1410.664891][ T47] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1410.674907][T16179] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1410.696391][ T47] usb 8-1: Product: syz [ 1410.700599][ T47] usb 8-1: Manufacturer: syz [ 1410.721157][ T47] usb 8-1: SerialNumber: syz [ 1410.739982][ T47] usb 8-1: config 0 descriptor?? [ 1410.763789][ T47] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1410.824787][T15400] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1410.869776][T15400] usb 9-1: device descriptor read/8, error -71 [ 1410.874186][T16179] usb 4-1: config index 0 descriptor too short (expected 65134, got 72) [ 1410.926842][T16179] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1410.945884][T16179] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.967796][T16179] usb 4-1: Product: syz [ 1410.972089][T16179] usb 4-1: Manufacturer: syz [ 1410.998814][T23894] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4661'. [ 1411.008130][T16179] usb 4-1: SerialNumber: syz [ 1411.031319][T16179] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1411.050831][T23894] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1411.057499][T23894] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1411.093297][T16172] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1411.114837][T15400] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1411.132364][T23894] vhci_hcd vhci_hcd.0: Device attached [ 1411.157456][T15400] usb 9-1: device descriptor read/8, error -71 [ 1411.307277][T15400] usb usb9-port1: unable to enumerate USB device [ 1411.341748][T23907] vhci_hcd: connection closed [ 1411.343080][ T47] gspca_zc3xx: reg_r err -71 [ 1411.352674][ T47] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1411.362911][T17090] vhci_hcd: stop threads [ 1411.378515][T17090] vhci_hcd: release socket [ 1411.384384][ T47] usb 8-1: USB disconnect, device number 42 [ 1411.422338][T17090] vhci_hcd: disconnect device [ 1411.475109][ T5949] usb 47-1: new low-speed USB device number 6 using vhci_hcd [ 1411.505555][ T5949] usb 47-1: enqueue for inactive port 0 [ 1411.605608][ T5949] vhci_hcd: vhci_device speed not set [ 1412.174499][T16172] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1412.221578][T16172] ath9k_htc: Failed to initialize the device [ 1412.277404][T16172] usb 4-1: ath9k_htc: USB layer deinitialized [ 1412.690385][T19332] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1412.699944][T19332] Bluetooth: hci2: Injecting HCI hardware error event [ 1412.710785][T19332] Bluetooth: hci2: hardware error 0x00 [ 1413.361186][ T5958] usb 4-1: USB disconnect, device number 33 [ 1414.683260][T23939] sctp: [Deprecated]: syz.8.4676 (pid 23939) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1414.683260][T23939] Use struct sctp_sack_info instead [ 1414.737818][T19332] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1414.860220][T23923] trusted_key: encrypted_key: insufficient parameters specified [ 1415.038258][T23946] FAULT_INJECTION: forcing a failure. [ 1415.038258][T23946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.131695][T23946] CPU: 1 UID: 0 PID: 23946 Comm: syz.9.4673 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1415.131726][T23946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1415.131739][T23946] Call Trace: [ 1415.131748][T23946] [ 1415.131757][T23946] dump_stack_lvl+0x189/0x250 [ 1415.131787][T23946] ? __pfx____ratelimit+0x10/0x10 [ 1415.131813][T23946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1415.131837][T23946] ? __pfx__printk+0x10/0x10 [ 1415.131866][T23946] ? __might_fault+0xb0/0x130 [ 1415.131908][T23946] should_fail_ex+0x414/0x560 [ 1415.131941][T23946] _copy_from_user+0x2d/0xb0 [ 1415.131965][T23946] kstrtouint_from_user+0xc4/0x170 [ 1415.131999][T23946] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1415.132050][T23946] proc_fail_nth_write+0x88/0x200 [ 1415.132073][T23946] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1415.132102][T23946] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1415.132127][T23946] vfs_write+0x27b/0xb30 [ 1415.132165][T23946] ? __pfx_vfs_write+0x10/0x10 [ 1415.132193][T23946] ? __fget_files+0x2a/0x420 [ 1415.132229][T23946] ? __fget_files+0x3a0/0x420 [ 1415.132256][T23946] ? __fget_files+0x2a/0x420 [ 1415.132297][T23946] ksys_write+0x145/0x250 [ 1415.132327][T23946] ? __pfx_ksys_write+0x10/0x10 [ 1415.132359][T23946] ? lockdep_hardirqs_on+0x9c/0x150 [ 1415.132390][T23946] __do_fast_syscall_32+0xb6/0x2b0 [ 1415.132420][T23946] ? lockdep_hardirqs_on+0x9c/0x150 [ 1415.132453][T23946] do_fast_syscall_32+0x34/0x80 [ 1415.132481][T23946] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1415.132505][T23946] RIP: 0023:0xf7ff6539 [ 1415.132524][T23946] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1415.132550][T23946] RSP: 002b:00000000f54f5590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1415.132573][T23946] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54f5620 [ 1415.132588][T23946] RDX: 0000000000000001 RSI: 00000000f7484ff4 RDI: 0000000000000000 [ 1415.132601][T23946] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1415.132613][T23946] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1415.132625][T23946] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1415.132658][T23946] [ 1415.460410][T23959] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4680'. [ 1415.471109][ T30] audit: type=1326 audit(1754782212.598:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23953 comm="syz.6.4683" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x0 [ 1415.668387][T23964] FAULT_INJECTION: forcing a failure. [ 1415.668387][T23964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.744845][T15400] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1415.763295][T23964] CPU: 1 UID: 0 PID: 23964 Comm: syz.6.4684 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1415.763327][T23964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1415.763340][T23964] Call Trace: [ 1415.763350][T23964] [ 1415.763359][T23964] dump_stack_lvl+0x189/0x250 [ 1415.763390][T23964] ? __pfx____ratelimit+0x10/0x10 [ 1415.763417][T23964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1415.763441][T23964] ? __pfx__printk+0x10/0x10 [ 1415.763483][T23964] should_fail_ex+0x414/0x560 [ 1415.763515][T23964] _copy_to_user+0x31/0xb0 [ 1415.763542][T23964] video_usercopy+0xeb2/0x14f0 [ 1415.763575][T23964] ? __pfx___video_do_ioctl+0x10/0x10 [ 1415.763593][T23964] ? __pfx_video_usercopy+0x10/0x10 [ 1415.763632][T23964] ? __fget_files+0x2a/0x420 [ 1415.763665][T23964] v4l2_ioctl+0x18d/0x1e0 [ 1415.763700][T23964] v4l2_compat_ioctl32+0x1d4/0x260 [ 1415.763739][T23964] __ia32_compat_sys_ioctl+0x543/0x840 [ 1415.763768][T23964] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1415.763793][T23964] ? __fget_files+0x3a0/0x420 [ 1415.763829][T23964] ? fput+0xa0/0xd0 [ 1415.763851][T23964] ? ksys_write+0x22a/0x250 [ 1415.763889][T23964] ? lockdep_hardirqs_on+0x9c/0x150 [ 1415.763919][T23964] __do_fast_syscall_32+0xb6/0x2b0 [ 1415.763948][T23964] ? lockdep_hardirqs_on+0x9c/0x150 [ 1415.763976][T23964] do_fast_syscall_32+0x34/0x80 [ 1415.764003][T23964] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1415.764027][T23964] RIP: 0023:0xf70de539 [ 1415.764045][T23964] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1415.764061][T23964] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1415.764082][T23964] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05640 [ 1415.764096][T23964] RDX: 0000000080000580 RSI: 0000000000000000 RDI: 0000000000000000 [ 1415.764107][T23964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1415.764116][T23964] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1415.764124][T23964] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1415.764142][T23964] [ 1415.994796][T15400] usb 4-1: Using ep0 maxpacket: 8 [ 1416.016292][T15400] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1416.185543][T15400] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1416.225032][T15400] usb 4-1: Product: syz [ 1416.246650][T15400] usb 4-1: Manufacturer: syz [ 1416.256778][T15400] usb 4-1: SerialNumber: syz [ 1416.282767][T15400] usb 4-1: config 0 descriptor?? [ 1416.286024][T23969] program syz.6.4686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1416.326781][T15400] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1416.542728][T23950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4680'. [ 1416.588043][T23950] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1416.595160][T23950] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1416.605618][T23950] vhci_hcd vhci_hcd.0: Device attached [ 1416.664795][ T8939] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1416.814863][ T8939] usb 10-1: Using ep0 maxpacket: 16 [ 1416.824418][ T8939] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1416.851671][ T8939] usb 10-1: config 0 has no interface number 0 [ 1416.858196][ T5949] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 1416.875942][ T8939] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.894265][T15400] gspca_zc3xx: reg_r err -71 [ 1416.894320][T23975] vhci_hcd: connection reset by peer [ 1416.914453][ T3520] vhci_hcd: stop threads [ 1416.915171][ T8939] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.936885][ T8939] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1416.949032][ T8939] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.975011][T15400] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1416.984723][ T3520] vhci_hcd: release socket [ 1416.990418][ T3520] vhci_hcd: disconnect device [ 1416.998869][ T8939] usb 10-1: config 0 descriptor?? [ 1417.037279][T15400] usb 4-1: USB disconnect, device number 34 [ 1417.626741][T23992] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4691'. [ 1417.664272][ T8939] uclogic 0003:28BD:0071.0041: pen parameters not found [ 1417.690549][ T8939] uclogic 0003:28BD:0071.0041: interface is invalid, ignoring [ 1417.752579][ T8939] usb 10-1: USB disconnect, device number 110 [ 1418.138630][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4697'. [ 1418.416857][T24007] program syz.8.4698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1419.457872][T24021] sg_read: process 1071 (syz.3.4694) changed security contexts after opening file descriptor, this is not allowed. [ 1420.505074][T15400] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1420.745244][T15400] usb 10-1: Using ep0 maxpacket: 16 [ 1420.759195][T15400] usb 10-1: config 0 has no interfaces? [ 1420.782421][T24036] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4704'. [ 1420.785767][T15400] usb 10-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1420.910596][T15400] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.951663][T24012] trusted_key: encrypted_key: insufficient parameters specified [ 1420.966750][T15400] usb 10-1: config 0 descriptor?? [ 1421.115277][ T8939] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1421.280086][ T8939] usb 9-1: Using ep0 maxpacket: 8 [ 1421.302702][ T8939] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1421.322260][ T8939] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1421.331089][ T8939] usb 9-1: Product: syz [ 1421.339018][ T8939] usb 9-1: Manufacturer: syz [ 1421.343706][ T8939] usb 9-1: SerialNumber: syz [ 1421.363073][ T8939] usb 9-1: config 0 descriptor?? [ 1421.377498][ T8939] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1421.646354][T24036] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4704'. [ 1421.773240][T24036] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 1421.780016][T24036] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1421.856705][T24049] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.4707' sets config #-1 [ 1421.872482][T24036] vhci_hcd vhci_hcd.0: Device attached [ 1421.899975][ T8939] gspca_zc3xx: reg_w_i err -110 [ 1421.936059][ T8939] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 1422.021631][ T5949] vhci_hcd: vhci_device speed not set [ 1422.125257][ T47] usb 49-1: new low-speed USB device number 4 using vhci_hcd [ 1422.962703][T15400] usb 10-1: USB disconnect, device number 111 [ 1423.208482][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.215032][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.769726][T16172] usb 9-1: USB disconnect, device number 12 [ 1423.831878][T24051] vhci_hcd: connection reset by peer [ 1423.913432][ T3520] vhci_hcd: stop threads [ 1423.966904][ T3520] vhci_hcd: release socket [ 1423.995696][ T3520] vhci_hcd: disconnect device [ 1424.009568][T24077] program syz.7.4712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1424.296067][T16172] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 1424.531166][T16172] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1424.553895][T16172] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1424.716422][T16172] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1424.854833][T16172] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1424.862351][T16172] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1424.894046][T16172] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1424.908970][T16172] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1424.916606][T16172] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1424.928044][T16172] usb 9-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1424.985416][T16172] usb 9-1: string descriptor 0 read error: -22 [ 1424.993136][T16172] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1425.002422][T16172] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.387658][ T30] audit: type=1326 audit(1754782222.518:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24102 comm="syz.3.4717" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1425.390762][T24103] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1425.447914][T16172] adutux 9-1:168.0: interrupt endpoints not found [ 1425.491281][T24103] audit: out of memory in audit_log_start [ 1425.533402][ T30] audit: type=1326 audit(1754782222.528:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24102 comm="syz.3.4717" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1425.734746][ T30] audit: type=1326 audit(1754782222.528:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24102 comm="syz.3.4717" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1425.880382][ T30] audit: type=1326 audit(1754782222.528:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24102 comm="syz.3.4717" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1426.280798][ T30] audit: type=1326 audit(1754782222.528:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24102 comm="syz.3.4717" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1426.391420][ T30] audit: type=1326 audit(1754782222.528:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24102 comm="syz.3.4717" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1426.414587][ T8939] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1426.514144][ T30] audit: type=1326 audit(1754782222.528:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24102 comm="syz.3.4717" exe="/root/syz-executor" sig=0 arch=40000003 syscall=262 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1426.554741][ T8939] usb 4-1: device descriptor read/64, error -71 [ 1426.611236][ T30] audit: type=1326 audit(1754782222.788:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24102 comm="syz.3.4717" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 1426.822337][ T8939] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1426.830649][ T5934] usb 9-1: USB disconnect, device number 13 [ 1426.984787][ T8939] usb 4-1: device descriptor read/64, error -71 [ 1427.069006][T24111] openvswitch: netlink: Tunnel attr 202 out of range max 16 [ 1427.095096][ T8939] usb usb4-port1: attempt power cycle [ 1427.255511][T24119] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4724'. [ 1427.366177][ T47] vhci_hcd: vhci_device speed not set [ 1427.464743][ T8939] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1427.516313][ T8939] usb 4-1: device descriptor read/8, error -71 [ 1427.575262][ T5949] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1427.656540][T24126] FAULT_INJECTION: forcing a failure. [ 1427.656540][T24126] name failslab, interval 1, probability 0, space 0, times 0 [ 1427.694910][T24126] CPU: 1 UID: 0 PID: 24126 Comm: syz.6.4727 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1427.694942][T24126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1427.694956][T24126] Call Trace: [ 1427.694965][T24126] [ 1427.694974][T24126] dump_stack_lvl+0x189/0x250 [ 1427.695006][T24126] ? __pfx____ratelimit+0x10/0x10 [ 1427.695034][T24126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1427.695059][T24126] ? __pfx__printk+0x10/0x10 [ 1427.695095][T24126] ? __pfx___might_resched+0x10/0x10 [ 1427.695121][T24126] should_fail_ex+0x414/0x560 [ 1427.695153][T24126] should_failslab+0xa8/0x100 [ 1427.695184][T24126] __kmalloc_noprof+0xcb/0x4f0 [ 1427.695209][T24126] ? sock_kmalloc+0xd6/0x160 [ 1427.695235][T24126] sock_kmalloc+0xd6/0x160 [ 1427.695259][T24126] af_alg_alloc_areq+0x8d/0x260 [ 1427.695285][T24126] skcipher_recvmsg+0x356/0x11c0 [ 1427.695316][T24126] ? aa_sk_perm+0x81e/0x950 [ 1427.695358][T24126] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1427.695388][T24126] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1427.695409][T24126] ? security_socket_recvmsg+0x7e/0x2e0 [ 1427.695431][T24126] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1427.695465][T24126] sock_recvmsg+0x22c/0x270 [ 1427.695497][T24126] ____sys_recvmsg+0x1c9/0x460 [ 1427.695530][T24126] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1427.695548][T24126] ? get_compat_msghdr+0x37e/0x4a0 [ 1427.695592][T24126] ? get_pid_task+0x20/0x1f0 [ 1427.695628][T24126] ___sys_recvmsg+0x1b5/0x510 [ 1427.695657][T24126] ? __pfx____sys_recvmsg+0x10/0x10 [ 1427.695708][T24126] ? __fget_files+0x3a0/0x420 [ 1427.695751][T24126] __sys_recvmsg+0x161/0x220 [ 1427.695775][T24126] ? __pfx___sys_recvmsg+0x10/0x10 [ 1427.695817][T24126] ? lockdep_hardirqs_on+0x9c/0x150 [ 1427.695848][T24126] __do_fast_syscall_32+0xb6/0x2b0 [ 1427.695877][T24126] ? lockdep_hardirqs_on+0x9c/0x150 [ 1427.695909][T24126] do_fast_syscall_32+0x34/0x80 [ 1427.695938][T24126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1427.695962][T24126] RIP: 0023:0xf70de539 [ 1427.695981][T24126] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1427.695999][T24126] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 1427.696023][T24126] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0 [ 1427.696039][T24126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1427.696051][T24126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1427.696063][T24126] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1427.696076][T24126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1427.696109][T24126] [ 1427.968578][ C1] vkms_vblank_simulate: vblank timer overrun [ 1428.154806][ T5949] usb 9-1: Using ep0 maxpacket: 8 [ 1428.166071][ T5949] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1428.175753][ T5949] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1428.183796][ T5949] usb 9-1: Product: syz [ 1428.188141][ T5949] usb 9-1: Manufacturer: syz [ 1428.192781][ T5949] usb 9-1: SerialNumber: syz [ 1428.202052][ T5949] usb 9-1: config 0 descriptor?? [ 1428.207198][ T8939] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1428.219919][ T5949] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1428.237008][ T8939] usb 4-1: device descriptor read/8, error -71 [ 1428.360958][ T8939] usb usb4-port1: unable to enumerate USB device [ 1428.445643][T24119] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4724'. [ 1428.469902][T24119] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1428.476553][T24119] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1428.544574][T24119] vhci_hcd vhci_hcd.0: Device attached [ 1428.761251][T24131] vhci_hcd: connection closed [ 1428.761725][ T5949] gspca_zc3xx: reg_r err -71 [ 1428.784135][T10021] vhci_hcd: stop threads [ 1428.804834][ T8939] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 1428.813493][ T5949] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1428.823431][T10021] vhci_hcd: release socket [ 1428.833489][T10021] vhci_hcd: disconnect device [ 1428.838765][ T47] usb 49-1: new low-speed USB device number 5 using vhci_hcd [ 1428.857454][ T5949] usb 9-1: USB disconnect, device number 14 [ 1428.969803][ T8939] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1428.979949][ T8939] usb 10-1: config 1 has no interface number 0 [ 1428.991441][ T8939] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.008311][ T8939] usb 10-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1429.024810][ T8939] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1429.042663][ T8939] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1429.057096][ T8939] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.076846][ T8939] usb 10-1: Product: syz [ 1429.100662][ T8939] usb 10-1: Manufacturer: syz [ 1429.137078][ T8939] usb 10-1: SerialNumber: syz [ 1429.521422][T24148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4731'. [ 1430.116034][ T8939] cdc_ncm 10-1:1.1: bind() failure [ 1430.347894][T24135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1430.358206][T24135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.436194][T24166] loop7: detected capacity change from 0 to 7 [ 1430.494230][ T8939] usb 10-1: USB disconnect, device number 112 [ 1430.500872][ T6990] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.511186][ T6990] buffer_io_error: 9 callbacks suppressed [ 1430.511204][ T6990] Buffer I/O error on dev loop7, logical block 0, async page read [ 1430.527185][T24166] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.541674][T24166] Buffer I/O error on dev loop7, logical block 0, async page read [ 1430.553471][T24166] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.563092][T24166] Buffer I/O error on dev loop7, logical block 0, async page read [ 1430.579069][T24166] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.600994][T24166] Buffer I/O error on dev loop7, logical block 0, async page read [ 1430.615926][T24166] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.702119][T24166] Buffer I/O error on dev loop7, logical block 0, async page read [ 1430.745232][T24166] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.774795][T24166] Buffer I/O error on dev loop7, logical block 0, async page read [ 1430.783554][T24166] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1430.864765][T24166] Buffer I/O error on dev loop7, logical block 0, async page read [ 1430.894993][ T5958] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1430.996404][T24166] ldm_validate_partition_table(): Disk read failed. [ 1431.003534][T24166] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1431.021474][T24166] Buffer I/O error on dev loop7, logical block 0, async page read [ 1431.044902][ T5958] usb 9-1: device descriptor read/64, error -71 [ 1431.062236][T24166] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1431.112600][T24166] Buffer I/O error on dev loop7, logical block 0, async page read [ 1431.180554][T24166] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1431.215855][T24166] Buffer I/O error on dev loop7, logical block 0, async page read [ 1431.224267][T24166] Dev loop7: unable to read RDB block 0 [ 1431.238093][T24166] loop7: unable to read partition table [ 1431.288008][ T5958] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1431.325130][T24166] loop7: partition table beyond EOD, truncated [ 1431.345598][T24166] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1431.413086][T24171] program syz.6.4740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1431.484858][ T5958] usb 9-1: device descriptor read/64, error -71 [ 1431.692239][ T5958] usb usb9-port1: attempt power cycle [ 1431.984898][ T5934] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 1432.075703][ T5958] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1432.124100][ T5958] usb 9-1: device descriptor read/8, error -71 [ 1432.208789][ T5934] usb 10-1: config 0 has no interfaces? [ 1432.322085][ T5934] usb 10-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1432.322121][ T5934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.364536][ T5934] usb 10-1: Product: syz [ 1432.376832][ T5934] usb 10-1: Manufacturer: syz [ 1432.381558][ T5934] usb 10-1: SerialNumber: syz [ 1432.400834][ T5934] usb 10-1: config 0 descriptor?? [ 1432.415261][ T5958] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1432.452740][ T5958] usb 9-1: device descriptor read/8, error -71 [ 1432.532167][T24185] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4742'. [ 1432.575274][ T5958] usb usb9-port1: unable to enumerate USB device [ 1432.704274][T24181] pimreg: entered allmulticast mode [ 1433.210697][ T5949] usb 8-1: new full-speed USB device number 43 using dummy_hcd [ 1433.456656][ T5949] usb 8-1: config 0 has no interfaces? [ 1433.495224][ T5949] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1433.507365][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.543878][ T5949] usb 8-1: Product: syz [ 1433.576905][ T5949] usb 8-1: Manufacturer: syz [ 1433.600552][ T5949] usb 8-1: SerialNumber: syz [ 1433.625651][ T5949] usb 8-1: config 0 descriptor?? [ 1434.005161][ T47] vhci_hcd: vhci_device speed not set [ 1434.794230][T16179] usb 10-1: USB disconnect, device number 113 [ 1436.548999][ T47] usb 8-1: USB disconnect, device number 43 [ 1437.196930][T24229] program syz.3.4752 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1437.563156][T24236] FAULT_INJECTION: forcing a failure. [ 1437.563156][T24236] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.728355][T24236] CPU: 1 UID: 0 PID: 24236 Comm: syz.9.4754 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1437.728387][T24236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1437.728409][T24236] Call Trace: [ 1437.728419][T24236] [ 1437.728428][T24236] dump_stack_lvl+0x189/0x250 [ 1437.728459][T24236] ? __pfx____ratelimit+0x10/0x10 [ 1437.728488][T24236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1437.728513][T24236] ? __pfx__printk+0x10/0x10 [ 1437.728556][T24236] should_fail_ex+0x414/0x560 [ 1437.728588][T24236] should_failslab+0xa8/0x100 [ 1437.728618][T24236] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1437.728646][T24236] ? __alloc_skb+0x112/0x2d0 [ 1437.728680][T24236] __alloc_skb+0x112/0x2d0 [ 1437.728714][T24236] _sctp_make_chunk+0x5e/0x430 [ 1437.728750][T24236] sctp_make_init+0x58b/0xd30 [ 1437.728775][T24236] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1437.728818][T24236] ? __pfx_sctp_make_init+0x10/0x10 [ 1437.728844][T24236] ? rcu_read_unlock_special+0x475/0x5e0 [ 1437.728880][T24236] ? lockdep_hardirqs_on+0x9c/0x150 [ 1437.728916][T24236] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 1437.728943][T24236] sctp_do_sm+0x1e7/0x5a20 [ 1437.728964][T24236] ? __pfx_sctp_pname+0x10/0x10 [ 1437.728991][T24236] ? __pfx_sctp_ulpevent_notify_peer_addr_change+0x10/0x10 [ 1437.729024][T24236] ? sctp_hash_transport+0x17d/0x19c0 [ 1437.729048][T24236] ? __pfx_sctp_ulpevent_notify_peer_addr_change+0x10/0x10 [ 1437.729080][T24236] ? __pfx_sctp_do_sm+0x10/0x10 [ 1437.729103][T24236] ? ip6_mtu+0x7d/0x3f0 [ 1437.729171][T24236] ? sctp_connect_new_asoc+0x3f0/0x690 [ 1437.729205][T24236] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1437.729242][T24236] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1437.729280][T24236] __sctp_connect+0x947/0xd50 [ 1437.729324][T24236] ? __pfx___sctp_connect+0x10/0x10 [ 1437.729367][T24236] sctp_inet_connect+0x12e/0x1e0 [ 1437.729405][T24236] __sys_connect+0x316/0x440 [ 1437.729434][T24236] ? __fget_files+0x3a0/0x420 [ 1437.729465][T24236] ? __pfx___sys_connect+0x10/0x10 [ 1437.729521][T24236] __ia32_sys_connect+0x7a/0x90 [ 1437.729551][T24236] __do_fast_syscall_32+0xb6/0x2b0 [ 1437.729580][T24236] ? lockdep_hardirqs_on+0x9c/0x150 [ 1437.729612][T24236] do_fast_syscall_32+0x34/0x80 [ 1437.729640][T24236] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1437.729664][T24236] RIP: 0023:0xf7ff6539 [ 1437.729683][T24236] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1437.729700][T24236] RSP: 002b:00000000f551655c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 1437.729724][T24236] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 1437.729738][T24236] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 1437.729751][T24236] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1437.729763][T24236] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1437.729776][T24236] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1437.729808][T24236] [ 1437.744560][T24236] ALSA: mixer_oss: invalid OSS volume '' [ 1438.523619][T24241] binder: 24240:24241 ioctl c01cf509 80000040 returned -22 [ 1438.912650][T24247] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4758'. [ 1439.852496][T24261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4763'. [ 1440.289912][T24267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4766'. [ 1440.354963][T16179] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1440.446306][T24269] program syz.9.4767 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1440.535298][T16179] usb 9-1: Using ep0 maxpacket: 32 [ 1440.543072][T16179] usb 9-1: config 0 has an invalid interface number: 9 but max is 0 [ 1440.571936][T16179] usb 9-1: config 0 has no interface number 0 [ 1440.612175][T16179] usb 9-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1440.674947][T16179] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.704370][T16179] usb 9-1: Product: syz [ 1440.743890][T16179] usb 9-1: Manufacturer: syz [ 1440.754070][T16179] usb 9-1: SerialNumber: syz [ 1440.785847][T16179] usb 9-1: config 0 descriptor?? [ 1440.801418][T16179] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1441.990278][T24287] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4770'. [ 1442.250350][T16179] gspca_topro: reg_r err -71 [ 1442.267268][T16179] gspca_topro: Sensor soi763a [ 1442.409615][T16179] usb 9-1: USB disconnect, device number 19 [ 1443.478409][T16179] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1443.647425][T16179] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1443.660148][T16179] usb 9-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1443.744759][T16179] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1443.792298][T16179] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.849452][T16179] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1443.862892][T16179] usb 9-1: invalid MIDI out EP 0 [ 1443.973582][ T9480] udevd[9480]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1444.058680][T16179] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1444.260878][T24319] program syz.3.4780 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1445.975374][T24338] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 1445.987102][T24339] IPVS: stopping backup sync thread 24338 ... [ 1446.064695][T24337] mac80211_hwsim hwsim35 syzkaller0: left promiscuous mode [ 1446.102939][T24337] mac80211_hwsim hwsim35 syzkaller0: left allmulticast mode [ 1446.419235][T24347] veth1_macvtap: left promiscuous mode [ 1446.425368][T24347] macsec0: entered promiscuous mode [ 1446.439344][T24347] veth1_macvtap: entered promiscuous mode [ 1446.445731][T24347] macsec0: left promiscuous mode [ 1446.661054][T24351] FAULT_INJECTION: forcing a failure. [ 1446.661054][T24351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1446.710310][T24351] CPU: 1 UID: 0 PID: 24351 Comm: syz.9.4788 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1446.710331][T24351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1446.710351][T24351] Call Trace: [ 1446.710357][T24351] [ 1446.710364][T24351] dump_stack_lvl+0x189/0x250 [ 1446.710385][T24351] ? __pfx____ratelimit+0x10/0x10 [ 1446.710406][T24351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1446.710421][T24351] ? __pfx__printk+0x10/0x10 [ 1446.710446][T24351] should_fail_ex+0x414/0x560 [ 1446.710465][T24351] _copy_to_user+0x31/0xb0 [ 1446.710485][T24351] simple_read_from_buffer+0xe1/0x170 [ 1446.710505][T24351] proc_fail_nth_read+0x1b3/0x220 [ 1446.710521][T24351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1446.710537][T24351] ? rw_verify_area+0x2a6/0x4d0 [ 1446.710552][T24351] ? __lock_acquire+0xab9/0xd20 [ 1446.710568][T24351] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1446.710582][T24351] vfs_read+0x200/0xa30 [ 1446.710604][T24351] ? fdget_pos+0x247/0x320 [ 1446.710617][T24351] ? __pfx___mutex_lock+0x10/0x10 [ 1446.710635][T24351] ? __pfx_vfs_read+0x10/0x10 [ 1446.710651][T24351] ? __fget_files+0x2a/0x420 [ 1446.710672][T24351] ? __fget_files+0x3a0/0x420 [ 1446.710689][T24351] ? __fget_files+0x2a/0x420 [ 1446.710711][T24351] ksys_read+0x145/0x250 [ 1446.710729][T24351] ? __pfx_ksys_read+0x10/0x10 [ 1446.710746][T24351] ? lockdep_hardirqs_on+0x9c/0x150 [ 1446.710765][T24351] __do_fast_syscall_32+0xb6/0x2b0 [ 1446.710782][T24351] ? lockdep_hardirqs_on+0x9c/0x150 [ 1446.710800][T24351] do_fast_syscall_32+0x34/0x80 [ 1446.710818][T24351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1446.710832][T24351] RIP: 0023:0xf7ff6539 [ 1446.710844][T24351] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1446.710855][T24351] RSP: 002b:00000000f54f5590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1446.710870][T24351] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54f5620 [ 1446.710879][T24351] RDX: 000000000000000f RSI: 00000000f7484ff4 RDI: 0000000000000000 [ 1446.710887][T24351] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1446.710894][T24351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1446.710901][T24351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1446.710919][T24351] [ 1447.858632][ T5934] usb 9-1: USB disconnect, device number 20 [ 1448.968946][T24378] program syz.8.4794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1449.504929][ T5958] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 1449.696881][ T5958] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1449.708965][ T5958] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.730941][ T5958] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1449.737952][T16179] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1450.211559][ T5958] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1450.241782][ T5958] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.296663][T16179] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1450.322782][ T5958] usb 10-1: config 0 descriptor?? [ 1450.737525][T24385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.748363][ T5958] plantronics 0003:047F:FFFF.0043: reserved main item tag 0xd [ 1450.817851][T24385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.311250][ T5958] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1451.372776][ T5958] usb 10-1: USB disconnect, device number 114 [ 1451.754083][T24406] fido_id[24406]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1451.982114][T24408] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4801'. [ 1452.075670][T24408] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4801'. [ 1453.110223][T24425] trusted_key: encrypted_key: insufficient parameters specified [ 1453.627114][T24437] netlink: 136784 bytes leftover after parsing attributes in process `syz.8.4807'. [ 1453.676527][T24437] netlink: zone id is out of range [ 1453.716351][T24439] netlink: 'syz.7.4808': attribute type 10 has an invalid length. [ 1453.784908][T24437] netlink: zone id is out of range [ 1453.794094][T24437] netlink: zone id is out of range [ 1453.801393][T24437] netlink: zone id is out of range [ 1453.809659][T24437] netlink: zone id is out of range [ 1453.816488][T24437] netlink: zone id is out of range [ 1453.823867][T24437] netlink: zone id is out of range [ 1453.831694][T24437] netlink: zone id is out of range [ 1453.837258][T24437] netlink: zone id is out of range [ 1453.842911][T24437] netlink: zone id is out of range [ 1454.471688][T24441] program syz.3.4810 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1456.658039][T24482] tipc: Enabled bearer , priority 10 [ 1458.102407][T24445] delete_channel: no stack [ 1458.506109][T24489] trusted_key: encrypted_key: insufficient parameters specified [ 1459.604910][ T5864] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 1459.925384][ T5864] usb 10-1: Using ep0 maxpacket: 8 [ 1459.933706][ T5864] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1459.968346][ T5864] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1460.050059][ T5864] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1460.092842][ T5864] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1460.133225][ T5864] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1460.198654][ T5864] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1460.276737][ T5864] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 1460.325296][ T5864] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1460.350421][ T5864] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1460.382952][ T5864] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1460.397020][ T5864] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.411230][ T5864] usb 10-1: Product: syz [ 1460.422761][ T5864] usb 10-1: Manufacturer: syz [ 1460.455667][ T5864] usb 10-1: SerialNumber: syz [ 1460.472243][ T5864] usb 10-1: config 0 descriptor?? [ 1460.485787][ T5864] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1460.675225][T24525] netlink: 'syz.7.4830': attribute type 10 has an invalid length. [ 1460.715816][T24525] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1460.724379][ T5864] usb 10-1: USB disconnect, device number 115 [ 1460.810079][ T8482] udevd[8482]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1461.798584][T24549] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4837'. [ 1462.072997][T24559] FAULT_INJECTION: forcing a failure. [ 1462.072997][T24559] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.194807][T24559] CPU: 1 UID: 0 PID: 24559 Comm: syz.3.4839 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1462.194830][T24559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1462.194838][T24559] Call Trace: [ 1462.194843][T24559] [ 1462.194850][T24559] dump_stack_lvl+0x189/0x250 [ 1462.194870][T24559] ? __pfx____ratelimit+0x10/0x10 [ 1462.194888][T24559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1462.194902][T24559] ? __pfx__printk+0x10/0x10 [ 1462.194922][T24559] ? __pfx___might_resched+0x10/0x10 [ 1462.194936][T24559] should_fail_ex+0x414/0x560 [ 1462.194955][T24559] should_failslab+0xa8/0x100 [ 1462.194973][T24559] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1462.194989][T24559] ? getname_flags+0xb8/0x540 [ 1462.195003][T24559] getname_flags+0xb8/0x540 [ 1462.195017][T24559] __ia32_compat_sys_execve+0x79/0xb0 [ 1462.195035][T24559] __do_fast_syscall_32+0xb6/0x2b0 [ 1462.195053][T24559] ? lockdep_hardirqs_on+0x9c/0x150 [ 1462.195071][T24559] do_fast_syscall_32+0x34/0x80 [ 1462.195088][T24559] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1462.195102][T24559] RIP: 0023:0xf709e539 [ 1462.195113][T24559] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1462.195125][T24559] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1462.195139][T24559] RAX: ffffffffffffffda RBX: 0000000080000400 RCX: 0000000000000000 [ 1462.195148][T24559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1462.195155][T24559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1462.195162][T24559] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1462.195170][T24559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1462.195187][T24559] [ 1462.384144][ C1] vkms_vblank_simulate: vblank timer overrun [ 1463.096282][T24561] trusted_key: encrypted_key: insufficient parameters specified [ 1463.395219][T24573] netlink: 'syz.6.4844': attribute type 9 has an invalid length. [ 1463.654916][T15400] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1463.814799][T15400] usb 4-1: device descriptor read/64, error -71 [ 1464.064723][T15400] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1464.344951][T15400] usb 4-1: device descriptor read/64, error -71 [ 1464.486140][T15400] usb usb4-port1: attempt power cycle [ 1464.834746][T15400] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1464.904332][T15400] usb 4-1: device descriptor read/8, error -71 [ 1465.174898][T15400] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1465.268824][T15400] usb 4-1: device descriptor read/8, error -71 [ 1465.405445][T15400] usb usb4-port1: unable to enumerate USB device [ 1465.622010][T24605] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4853'. [ 1466.054932][ T5934] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 1466.294705][ T5934] usb 10-1: Using ep0 maxpacket: 8 [ 1466.326865][ T5934] usb 10-1: config 2 has an invalid interface number: 31 but max is 0 [ 1466.365112][ T5934] usb 10-1: config 2 has no interface number 0 [ 1466.371571][ T5934] usb 10-1: config 2 interface 31 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1466.406855][ T5934] usb 10-1: config 2 interface 31 has no altsetting 0 [ 1467.386589][ T5934] usb 10-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1467.413888][ T5934] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.493729][T24620] netlink: 'syz.7.4856': attribute type 10 has an invalid length. [ 1467.592176][ T5934] usb 10-1: Product: syz [ 1467.598768][T24623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4856'. [ 1467.627279][ T5934] usb 10-1: Manufacturer: syz [ 1467.647104][ T5934] usb 10-1: SerialNumber: syz [ 1467.947262][ T5934] ch9200 10-1:2.31: probe with driver ch9200 failed with error -22 [ 1468.029270][T24620] bond0: (slave team0): Releasing backup interface [ 1469.001130][T24615] trusted_key: encrypted_key: insufficient parameters specified [ 1469.964781][ T5934] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1470.235154][ T5934] usb 8-1: Using ep0 maxpacket: 8 [ 1470.259997][ T5934] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1470.273186][ T5934] usb 8-1: can't read configurations, error -61 [ 1470.454983][ T5934] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1470.607151][T15400] usb 10-1: USB disconnect, device number 116 [ 1470.644966][ T5934] usb 8-1: Using ep0 maxpacket: 8 [ 1470.665326][ T5934] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1470.685602][ T5934] usb 8-1: can't read configurations, error -61 [ 1470.713389][ T5934] usb usb8-port1: attempt power cycle [ 1471.011322][T24638] trusted_key: encrypted_key: insufficient parameters specified [ 1471.192756][ T5934] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1471.274819][ T5934] usb 8-1: Using ep0 maxpacket: 8 [ 1471.302817][ T5934] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1471.360296][ T5934] usb 8-1: can't read configurations, error -61 [ 1471.510664][ T5934] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1471.929151][ T5934] usb 8-1: Using ep0 maxpacket: 8 [ 1471.936174][ T5934] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1471.943910][ T5934] usb 8-1: can't read configurations, error -61 [ 1471.964519][ T5934] usb usb8-port1: unable to enumerate USB device [ 1473.060036][T24672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4870'. [ 1473.894909][ T5958] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1474.385033][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 1474.449670][ T5958] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1474.469122][ T5958] usb 4-1: config 2 has no interface number 0 [ 1474.480815][ T5958] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1474.506798][ T5958] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1474.524666][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.532969][ T5958] usb 4-1: Product: syz [ 1474.539489][ T5958] usb 4-1: Manufacturer: syz [ 1474.545508][ T5958] usb 4-1: SerialNumber: syz [ 1474.589574][ T5958] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 1475.451236][T24695] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4872'. [ 1475.794855][ T5934] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1475.947759][ T5934] usb 8-1: Using ep0 maxpacket: 8 [ 1475.961267][ T5934] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1475.980029][ T5934] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1475.988179][ T5934] usb 8-1: Product: syz [ 1475.992545][ T5934] usb 8-1: Manufacturer: syz [ 1476.000388][ T5934] usb 8-1: SerialNumber: syz [ 1476.021390][ T5934] usb 8-1: config 0 descriptor?? [ 1476.040064][ T5934] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1476.254144][T24695] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4872'. [ 1476.276189][T24695] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1476.282858][T24695] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1476.319974][T24695] vhci_hcd vhci_hcd.0: Device attached [ 1476.537649][T24708] vhci_hcd: connection closed [ 1476.539290][ T5934] gspca_zc3xx: reg_r err -71 [ 1476.556011][ T5958] usb 47-1: new low-speed USB device number 7 using vhci_hcd [ 1476.565538][T24709] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1476.571641][ T4358] vhci_hcd: stop threads [ 1476.577882][ T5934] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1476.590657][ T4358] vhci_hcd: release socket [ 1476.596142][ T4358] vhci_hcd: disconnect device [ 1476.602277][ T5934] usb 8-1: USB disconnect, device number 48 [ 1476.870626][ T5949] usb 4-1: USB disconnect, device number 43 [ 1477.927326][T24725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.987916][T24725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.996212][T17794] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1478.065334][T24727] netlink: 136784 bytes leftover after parsing attributes in process `syz.3.4877'. [ 1478.078397][T24725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.113837][T24725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.136243][T24727] net_ratelimit: 4054 callbacks suppressed [ 1478.137351][T24727] netlink: zone id is out of range [ 1478.171454][T17794] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.184711][ T5934] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 1478.213012][T17794] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1478.216437][T24725] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.4879' resets device [ 1478.233834][T24727] netlink: zone id is out of range [ 1478.239139][T24727] netlink: zone id is out of range [ 1478.270297][T24727] netlink: zone id is out of range [ 1478.278859][T17794] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1478.291126][T17794] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1478.306020][T24727] netlink: zone id is out of range [ 1478.306959][T17794] usb 9-1: SerialNumber: syz [ 1478.320725][T24727] netlink: zone id is out of range [ 1478.330548][T24727] netlink: zone id is out of range [ 1478.336761][T24727] netlink: zone id is out of range [ 1478.342669][T24727] netlink: zone id is out of range [ 1478.348728][T24727] netlink: zone id is out of range [ 1478.374734][ T5934] usb 10-1: device descriptor read/64, error -71 [ 1478.426862][T24725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1478.448027][T24725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1478.509470][T24730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.794896][ T5934] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 1478.812037][T17794] usb 9-1: invalid UAC_HEADER (v1) [ 1478.881991][T24730] tipc: Resetting bearer [ 1478.915534][T24730] tipc: Resetting bearer [ 1479.028161][T17794] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1479.085233][T17794] usb 9-1: USB disconnect, device number 21 [ 1479.106444][T24725] tipc: Resetting bearer [ 1479.161268][ T9480] udevd[9480]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1481.542164][T24758] tipc: Enabling of bearer rejected, failed to enable media [ 1481.686145][ T5958] vhci_hcd: vhci_device speed not set [ 1483.415646][T24777] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4892'. [ 1483.702286][ T8939] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1483.865195][ T8939] usb 8-1: Using ep0 maxpacket: 8 [ 1483.894241][ T8939] usb 8-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1483.937470][ T8939] usb 8-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1483.970442][ T8939] usb 8-1: Product: syz [ 1483.985055][ T8939] usb 8-1: Manufacturer: syz [ 1484.000019][ T8939] usb 8-1: SerialNumber: syz [ 1484.004844][T24793] binder: BINDER_SET_CONTEXT_MGR already set [ 1484.004876][T24793] binder: 24792:24793 ioctl 4018620d 80000040 returned -16 [ 1484.068148][ T8939] usb 8-1: config 0 descriptor?? [ 1484.098724][ T8939] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1484.254749][ T5958] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1484.429446][T24777] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4892'. [ 1484.464569][T24777] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1484.465524][T24800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4898'. [ 1484.471277][T24777] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1484.488383][T24777] vhci_hcd vhci_hcd.0: Device attached [ 1484.489609][ T5958] usb 9-1: Using ep0 maxpacket: 32 [ 1484.559463][ T5958] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.580181][ T5958] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 1484.812771][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.819429][ T5958] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1484.819521][T24803] vhci_hcd: connection closed [ 1484.829498][ T5958] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26 [ 1484.830886][ T5958] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1484.847318][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.852106][ T8939] gspca_zc3xx: reg_r err -71 [ 1484.868711][ T5958] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1484.905901][T14981] vhci_hcd: stop threads [ 1484.924892][ T8939] gspca_zc3xx 8-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1484.933713][T14981] vhci_hcd: release socket [ 1484.944802][ T5949] usb 47-1: new low-speed USB device number 8 using vhci_hcd [ 1484.976939][ T5958] usb 9-1: SerialNumber: syz [ 1484.990689][T14981] vhci_hcd: disconnect device [ 1484.996253][ T8939] usb 8-1: USB disconnect, device number 49 [ 1485.143783][T24794] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1485.287095][T24794] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1485.574303][ T5958] cdc_acm 9-1:1.0: ttyACM0: USB ACM device [ 1485.738034][ T5958] usb 9-1: USB disconnect, device number 22 [ 1487.938789][T24838] fuse: Unknown parameter '0x000000000000000a' [ 1487.951897][T24838] netlink: 'syz.8.4908': attribute type 10 has an invalid length. [ 1487.960404][T24838] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4908'. [ 1487.969545][T24838] batadv0: entered promiscuous mode [ 1487.974875][T24838] batadv0: entered allmulticast mode [ 1487.981888][T24838] bridge0: port 3(batadv0) entered blocking state [ 1487.988707][T24838] bridge0: port 3(batadv0) entered disabled state [ 1488.001709][T24838] bridge0: port 3(batadv0) entered blocking state [ 1488.008391][T24838] bridge0: port 3(batadv0) entered forwarding state [ 1488.212666][ T3520] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1488.222258][ T3520] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1488.794816][ T5934] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1488.944715][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 1488.989916][ T5934] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1489.009159][ T5934] usb 4-1: config 0 has no interface number 0 [ 1489.123438][ T5934] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1489.179608][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.240104][ T5934] usb 4-1: Product: syz [ 1489.244501][ T5934] usb 4-1: Manufacturer: syz [ 1489.294773][ T5934] usb 4-1: SerialNumber: syz [ 1489.315834][ T5934] usb 4-1: config 0 descriptor?? [ 1489.330473][T24862] loop5: detected capacity change from 0 to 2591 [ 1489.354146][ T5934] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1489.458958][ T5934] usb 4-1: selecting invalid altsetting 1 [ 1489.490294][ T5934] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1489.522117][ T5934] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1489.563799][ T5934] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1489.676171][T24866] program syz.7.4915 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1489.715818][ T5934] usb 4-1: media controller created [ 1489.755085][ T9479] buffer_io_error: 5 callbacks suppressed [ 1489.755116][ T9479] Buffer I/O error on dev loop5, logical block 323, async page read [ 1489.823359][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1489.898931][T24871] netlink: 'syz.3.4910': attribute type 10 has an invalid length. [ 1489.921346][T24871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.928982][T24871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.096261][ T5949] vhci_hcd: vhci_device speed not set [ 1490.164746][T16179] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1490.306568][T24874] trusted_key: encrypted_key: insufficient parameters specified [ 1490.400461][T16179] usb 9-1: Using ep0 maxpacket: 32 [ 1490.457283][T16179] usb 9-1: config 15 has an invalid interface number: 2 but max is 0 [ 1490.465721][T16179] usb 9-1: config 15 contains an unexpected descriptor of type 0x2, skipping [ 1490.506978][T16179] usb 9-1: config 15 has no interface number 0 [ 1490.545657][T24871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1490.552933][T24871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1490.560587][T24871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.567894][T24871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1490.606965][T16179] usb 9-1: config 15 interface 2 altsetting 4 endpoint 0x89 has invalid maxpacket 48451, setting to 1024 [ 1490.672348][T24871] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1490.737233][T16179] usb 9-1: config 15 interface 2 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 1490.764680][T16179] usb 9-1: config 15 interface 2 altsetting 4 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 1490.854649][T16179] usb 9-1: config 15 interface 2 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1490.927791][T16179] usb 9-1: config 15 interface 2 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 1491.207768][ T5934] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1491.226085][ T5934] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1491.241321][T16179] usb 9-1: config 15 interface 2 altsetting 4 bulk endpoint 0xF has invalid maxpacket 64 [ 1491.266936][T16179] usb 9-1: config 15 interface 2 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 1491.320489][T16179] usb 9-1: config 15 interface 2 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1491.440191][T16179] usb 9-1: config 15 interface 2 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 1491.536144][T16179] usb 9-1: config 15 interface 2 altsetting 4 has 11 endpoint descriptors, different from the interface descriptor's value: 10 [ 1491.604575][T16179] usb 9-1: config 15 interface 2 has no altsetting 0 [ 1491.663846][T16179] usb 9-1: New USB device found, idVendor=1bc7, idProduct=1201, bcdDevice=e0.ff [ 1491.679996][T16179] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.705997][T16179] usb 9-1: Product: 昮ꕁ핓߉ᓻꁓ豪篩닼絁맀닷趕뜭蹎襟ᣈ닐찖Ǵ㱞옎﫶车⛔೗懶䛻؄讽铑䀞ꌮ℣ﶽꈛ䳪橖ꅫ듍ⓚꨁ綯褶鉿飣곆ۗ묁⥲ٟ钒捀犠䋃듧萼覕ᴡ뭕䉙ᒸ뽼䃙綄ṱꙉ刷圃飡ዾ†栙⇍怯軴叼孓 [ 1491.768599][T16179] usb 9-1: Manufacturer: 东ࡋ顤Ȅ颱洶꼤຀Ͳ嵗ꕁ䂃㐥옟ﯪﴻ又‿ꎟ凈뚞䟐檓ｓ痟檶㷡켱➸뺫ᱠ所ꯘ괷麫ᦘ笪卓䛟植暖权撬⒐豘 [ 1491.801456][T16179] usb 9-1: SerialNumber: 偅৆啼뽞檁액療఼ᥧ㉽疕蹩蒰ᛝ秙哠ഞ⦶ɴ튤侈ھꖭ퓔홙為譳뱰츤尒崵葀ᘭﶘុ糨懽㬝퀴⸄剛襼碥䘟탓厝벗ズ韒檗疦齓꧿ᢲ啴럓ባ烓ᶨﷁ쎉࿌愌於䉲ۛ湸궼㢿諷肳ࡥ㵌ଝ혃ຯ㾐즎麜塛匊둀溩瀾鐒๬蜡 [ 1491.883621][T24867] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1491.893136][T24867] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1491.919510][T24867] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1492.038719][T24883] binder: 24882:24883 ioctl 4018620d 0 returned -22 [ 1492.207407][T16179] usb 9-1: USB disconnect, device number 23 [ 1492.246333][T24885] binder: 24882:24885 ioctl c0306201 80000640 returned -22 [ 1492.415256][ T5949] usb 4-1: USB disconnect, device number 44 [ 1492.903585][T24899] FAULT_INJECTION: forcing a failure. [ 1492.903585][T24899] name failslab, interval 1, probability 0, space 0, times 0 [ 1492.977125][T24899] CPU: 1 UID: 0 PID: 24899 Comm: syz.7.4923 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1492.977155][T24899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1492.977167][T24899] Call Trace: [ 1492.977177][T24899] [ 1492.977186][T24899] dump_stack_lvl+0x189/0x250 [ 1492.977215][T24899] ? __pfx____ratelimit+0x10/0x10 [ 1492.977233][T24899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1492.977247][T24899] ? __pfx__printk+0x10/0x10 [ 1492.977268][T24899] ? __pfx___might_resched+0x10/0x10 [ 1492.977279][T24899] ? fs_reclaim_acquire+0x7d/0x100 [ 1492.977300][T24899] should_fail_ex+0x414/0x560 [ 1492.977320][T24899] should_failslab+0xa8/0x100 [ 1492.977347][T24899] __kmalloc_noprof+0xcb/0x4f0 [ 1492.977362][T24899] ? kfree+0x4d/0x440 [ 1492.977374][T24899] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1492.977391][T24899] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1492.977412][T24899] tomoyo_path2_perm+0x288/0x680 [ 1492.977429][T24899] ? tomoyo_path2_perm+0x235/0x680 [ 1492.977446][T24899] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1492.977494][T24899] tomoyo_path_rename+0x141/0x190 [ 1492.977511][T24899] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 1492.977529][T24899] ? simple_lookup+0x12c/0x1c0 [ 1492.977551][T24899] security_path_rename+0x250/0x490 [ 1492.977567][T24899] do_renameat2+0x52b/0xa80 [ 1492.977595][T24899] ? __pfx_do_renameat2+0x10/0x10 [ 1492.977618][T24899] ? strncpy_from_user+0x150/0x290 [ 1492.977636][T24899] ? getname_flags+0x1e5/0x540 [ 1492.977650][T24899] __ia32_sys_renameat2+0xce/0xe0 [ 1492.977669][T24899] __do_fast_syscall_32+0xb6/0x2b0 [ 1492.977688][T24899] ? lockdep_hardirqs_on+0x9c/0x150 [ 1492.977706][T24899] do_fast_syscall_32+0x34/0x80 [ 1492.977723][T24899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1492.977738][T24899] RIP: 0023:0xf707e539 [ 1492.977750][T24899] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1492.977761][T24899] RSP: 002b:00000000f546e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 1492.977776][T24899] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 1492.977785][T24899] RDX: 0000000000000004 RSI: 00000000800003c0 RDI: 0000000000000000 [ 1492.977793][T24899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1492.977800][T24899] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1492.977807][T24899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1492.977826][T24899] [ 1492.978058][T24899] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1493.376834][T24897] netlink: 'syz.8.4922': attribute type 5 has an invalid length. [ 1494.237263][ T5949] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 1494.518026][ T5949] usb 10-1: Using ep0 maxpacket: 8 [ 1494.536632][ T5949] usb 10-1: config 2 has an invalid interface number: 31 but max is 0 [ 1494.558598][ T5949] usb 10-1: config 2 has no interface number 0 [ 1494.573493][ T5949] usb 10-1: config 2 interface 31 has no altsetting 0 [ 1494.582945][T24923] netlink: 'syz.7.4930': attribute type 2 has an invalid length. [ 1494.600204][T24923] netlink: 'syz.7.4930': attribute type 11 has an invalid length. [ 1494.622437][ T5949] usb 10-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1494.636306][T24923] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4930'. [ 1494.649077][ T5949] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.710366][ T5949] usb 10-1: Product: syz [ 1494.748343][ T5949] usb 10-1: Manufacturer: syz [ 1494.758055][ T5949] usb 10-1: SerialNumber: syz [ 1495.196841][ T5949] ch9200 10-1:2.31: probe with driver ch9200 failed with error -22 [ 1495.405186][ T47] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1495.635420][ T47] usb 9-1: Using ep0 maxpacket: 32 [ 1495.762556][ T47] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 1495.775437][ T47] usb 9-1: config 0 has no interface number 0 [ 1495.804048][ T47] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1495.944151][ T47] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1496.020452][ T47] usb 9-1: config 0 interface 85 has no altsetting 0 [ 1496.112107][ T47] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1496.166924][ T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.186761][ T47] usb 9-1: Product: syz [ 1496.207017][ T47] usb 9-1: Manufacturer: syz [ 1496.211776][ T47] usb 9-1: SerialNumber: syz [ 1496.390043][ T47] usb 9-1: config 0 descriptor?? [ 1497.824471][T24958] FAULT_INJECTION: forcing a failure. [ 1497.824471][T24958] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.837878][T24958] CPU: 0 UID: 0 PID: 24958 Comm: syz.3.4940 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1497.837899][T24958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1497.837907][T24958] Call Trace: [ 1497.837916][T24958] [ 1497.837926][T24958] dump_stack_lvl+0x189/0x250 [ 1497.837957][T24958] ? __pfx____ratelimit+0x10/0x10 [ 1497.837983][T24958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1497.838005][T24958] ? __pfx__printk+0x10/0x10 [ 1497.838034][T24958] should_fail_ex+0x414/0x560 [ 1497.838108][T24958] should_failslab+0xa8/0x100 [ 1497.838139][T24958] __kmalloc_noprof+0xcb/0x4f0 [ 1497.838163][T24958] ? nsim_fib_event_nb+0x295/0x1080 [ 1497.838181][T24958] nsim_fib_event_nb+0x295/0x1080 [ 1497.838198][T24958] notifier_call_chain+0x1b6/0x3e0 [ 1497.838214][T24958] ? atomic_notifier_call_chain+0x26/0x180 [ 1497.838230][T24958] atomic_notifier_call_chain+0xda/0x180 [ 1497.838261][T24958] call_fib_notifiers+0x31/0x60 [ 1497.838292][T24958] fib6_add_rt2node+0x15fb/0x33a0 [ 1497.838329][T24958] ? rcu_is_watching+0x15/0xb0 [ 1497.838342][T24958] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1497.838356][T24958] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 1497.838373][T24958] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 1497.838392][T24958] ? fib6_add_1+0xe7f/0x1460 [ 1497.838431][T24958] fib6_add+0x8da/0x18a0 [ 1497.838465][T24958] ? do_raw_spin_lock+0x121/0x290 [ 1497.838488][T24958] ? __pfx_fib6_add+0x10/0x10 [ 1497.838520][T24958] ? ip6_route_add+0xc9/0x1b0 [ 1497.838546][T24958] ip6_route_add+0xde/0x1b0 [ 1497.838573][T24958] inet6_addr_modify+0xb3d/0x1480 [ 1497.838615][T24958] ? trace_contention_end+0x39/0x120 [ 1497.838636][T24958] ? __pfx_inet6_addr_modify+0x10/0x10 [ 1497.838661][T24958] ? __lock_acquire+0xab9/0xd20 [ 1497.838698][T24958] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 1497.838720][T24958] ? ipv6_mc_up+0x3da/0x580 [ 1497.838752][T24958] inet6_rtm_newaddr+0x900/0xd20 [ 1497.838788][T24958] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 1497.838827][T24958] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 1497.838843][T24958] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1497.838863][T24958] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1497.838887][T24958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1497.838911][T24958] ? ref_tracker_free+0x63a/0x7d0 [ 1497.838937][T24958] ? __asan_memcpy+0x40/0x70 [ 1497.838957][T24958] ? __pfx_ref_tracker_free+0x10/0x10 [ 1497.838975][T24958] ? __skb_clone+0x63/0x7a0 [ 1497.838993][T24958] netlink_rcv_skb+0x208/0x470 [ 1497.839010][T24958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1497.839033][T24958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1497.839084][T24958] ? netlink_deliver_tap+0x2e/0x1b0 [ 1497.839119][T24958] netlink_unicast+0x82f/0x9e0 [ 1497.839140][T24958] ? __pfx_netlink_unicast+0x10/0x10 [ 1497.839156][T24958] ? netlink_sendmsg+0x642/0xb30 [ 1497.839171][T24958] ? skb_put+0x11b/0x210 [ 1497.839201][T24958] netlink_sendmsg+0x805/0xb30 [ 1497.839239][T24958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1497.839268][T24958] ? __import_iovec+0x5d4/0x7f0 [ 1497.839284][T24958] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1497.839306][T24958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1497.839320][T24958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1497.839341][T24958] __sock_sendmsg+0x21c/0x270 [ 1497.839369][T24958] ____sys_sendmsg+0x505/0x830 [ 1497.839396][T24958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1497.839433][T24958] ___sys_sendmsg+0x21f/0x2a0 [ 1497.839450][T24958] ? __pfx____sys_sendmsg+0x10/0x10 [ 1497.839482][T24958] ? __fget_files+0x2a/0x420 [ 1497.839506][T24958] ? __fget_files+0x3a0/0x420 [ 1497.839545][T24958] __sys_sendmsg+0x164/0x220 [ 1497.839569][T24958] ? __pfx___sys_sendmsg+0x10/0x10 [ 1497.839607][T24958] ? lockdep_hardirqs_on+0x9c/0x150 [ 1497.839637][T24958] __do_fast_syscall_32+0xb6/0x2b0 [ 1497.839659][T24958] ? lockdep_hardirqs_on+0x9c/0x150 [ 1497.839689][T24958] do_fast_syscall_32+0x34/0x80 [ 1497.839716][T24958] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1497.839740][T24958] RIP: 0023:0xf709e539 [ 1497.839758][T24958] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1497.839771][T24958] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1497.839785][T24958] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 1497.839803][T24958] RDX: 000000002004c8d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1497.839811][T24958] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1497.839818][T24958] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1497.839830][T24958] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1497.839859][T24958] [ 1498.862933][ T8939] usb 10-1: USB disconnect, device number 119 [ 1499.141940][T24976] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 1499.149189][T24976] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 1499.159455][T24976] net_ratelimit: 4054 callbacks suppressed [ 1499.159469][T24976] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1499.197779][ T47] appletouch 9-1:0.85: Failed to read mode from device. [ 1499.205259][ T47] appletouch 9-1:0.85: probe with driver appletouch failed with error -5 [ 1499.227327][ T47] usb 9-1: USB disconnect, device number 24 [ 1499.354802][ T8939] usb 10-1: new high-speed USB device number 120 using dummy_hcd [ 1499.515547][ T8939] usb 10-1: Using ep0 maxpacket: 32 [ 1499.525309][ T8939] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.546792][ T8939] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.580652][ T8939] usb 10-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1499.594305][ T8939] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.678224][ T8939] usb 10-1: config 0 descriptor?? [ 1499.775251][ T47] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1499.950923][ T47] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.961787][ T47] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1499.974750][ T47] usb 9-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 1499.993088][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.279976][ T8939] aquacomputer_d5next 0003:0C70:F0B6.0044: unknown main item tag 0x2 [ 1500.359832][ T8939] aquacomputer_d5next 0003:0C70:F0B6.0044: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.9-1/input0 [ 1500.404000][ T47] usb 9-1: config 0 descriptor?? [ 1500.517837][T24987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.554972][T24987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.645137][T24979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1500.658872][T24979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1500.687765][ T5949] usb 9-1: USB disconnect, device number 25 [ 1500.701153][ T8939] usb 10-1: USB disconnect, device number 120 [ 1501.200449][T24990] netlink: 'syz.6.4949': attribute type 11 has an invalid length. [ 1501.484787][ T5949] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1501.754711][ T5949] usb 8-1: Using ep0 maxpacket: 8 [ 1501.817680][ T5949] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1501.832110][ T5949] usb 8-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1501.851393][ T5949] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.901849][ T5949] usb 8-1: Product: syz [ 1501.944532][ T5949] usb 8-1: Manufacturer: syz [ 1502.016542][ T5949] usb 8-1: SerialNumber: syz [ 1502.046627][ T5949] usb 8-1: config 0 descriptor?? [ 1502.069129][ T5949] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1502.096982][ T5949] usb 8-1: selecting invalid altsetting 1 [ 1502.263696][ T5949] gspca_stk014: init reg: 0x00 [ 1502.273477][ T5949] stk014 8-1:0.0: probe with driver stk014 failed with error -5 [ 1502.472429][ T8939] usb 8-1: USB disconnect, device number 50 [ 1505.209892][T25018] trusted_key: encrypted_key: insufficient parameters specified [ 1506.423278][T25051] netlink: 'syz.6.4963': attribute type 10 has an invalid length. [ 1506.456637][T25051] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.479772][T25051] bond0: (slave team0): Enslaving as an active interface with an up link [ 1506.657063][T25029] trusted_key: encrypted_key: insufficient parameters specified [ 1506.808404][ T8939] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1507.074682][ T8939] usb 8-1: Using ep0 maxpacket: 16 [ 1507.110422][ T8939] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1507.121092][ T8939] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1507.154197][ T8939] usb 8-1: can't read configurations, error -71 [ 1507.225020][T25058] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4967'. [ 1507.935799][T25068] Lens A: ================= START STATUS ================= [ 1507.982924][T25068] Lens A: Focus, Absolute: 0 [ 1508.064913][T25068] Lens A: ================== END STATUS ================== [ 1508.504779][ T5949] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1508.876419][ T5949] usb 4-1: config 1 has an invalid descriptor of length 83, skipping remainder of the config [ 1508.891192][ T5949] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1508.936757][ T5949] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1509.077922][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.094669][ T5949] usb 4-1: Product: syz [ 1509.110998][ T5949] usb 4-1: Manufacturer: syz [ 1509.119762][ T5949] usb 4-1: SerialNumber: syz [ 1510.918893][T25104] bridge0: port 3(batadv0) entered disabled state [ 1510.926160][T25104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.933495][T25104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.330797][ T5949] usb 4-1: 0:196 : does not exist [ 1511.441308][ T5949] usb 4-1: USB disconnect, device number 45 [ 1511.466705][ T9479] udevd[9479]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 1511.803391][T25104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1511.812705][T25118] binder: BINDER_SET_CONTEXT_MGR already set [ 1511.831706][T25118] binder: 25117:25118 ioctl 4018620d 80000040 returned -16 [ 1511.841125][T25104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1512.024099][T25104] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1512.196117][T14981] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.197631][T22671] usb 10-1: new high-speed USB device number 121 using dummy_hcd [ 1512.290908][T25143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4980'. [ 1512.311603][T14981] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.350713][T14981] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.366972][T14981] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.382151][T25143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4980'. [ 1512.395713][T22671] usb 10-1: Using ep0 maxpacket: 32 [ 1512.409598][T22671] usb 10-1: no configurations [ 1512.422102][T22671] usb 10-1: can't read configurations, error -22 [ 1512.578237][T22671] usb 10-1: new high-speed USB device number 122 using dummy_hcd [ 1512.634420][T25149] [ 1512.636909][T25149] ===================================================== [ 1512.643842][T25149] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1512.651389][T25149] 6.16.0-syzkaller-12250-gc30a13538d9f #0 Not tainted [ 1512.658166][T25149] ----------------------------------------------------- [ 1512.665450][T25149] syz.6.4982/25149 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1512.673188][T25149] ffff8880567857f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1512.682080][T25149] [ 1512.682080][T25149] and this task is already holding: [ 1512.689458][T25149] ffff8880326e3028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1512.699212][T25149] which would create a new lock dependency: [ 1512.705363][T25149] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1512.713459][T25149] [ 1512.713459][T25149] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1512.723012][T25149] (&dev->event_lock#2){..-.}-{3:3} [ 1512.723050][T25149] [ 1512.723050][T25149] ... which became SOFTIRQ-irq-safe at: [ 1512.736087][T25149] lock_acquire+0x120/0x360 [ 1512.740884][T25149] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1512.746175][T25149] input_inject_event+0xa5/0x340 [ 1512.751203][T25149] led_trigger_event+0x138/0x210 [ 1512.756260][T25149] kbd_bh+0x1c6/0x2e0 [ 1512.760505][T25149] tasklet_action_common+0x369/0x580 [ 1512.765887][T25149] handle_softirqs+0x283/0x870 [ 1512.770745][T25149] run_ksoftirqd+0x9b/0x100 [ 1512.775335][T25149] smpboot_thread_fn+0x53f/0xa60 [ 1512.780457][T25149] kthread+0x70e/0x8a0 [ 1512.784791][T25149] ret_from_fork+0x3fc/0x770 [ 1512.789566][T25149] ret_from_fork_asm+0x1a/0x30 [ 1512.794532][T25149] [ 1512.794532][T25149] to a SOFTIRQ-irq-unsafe lock: [ 1512.801684][T25149] (tasklist_lock){.+.+}-{3:3} [ 1512.801718][T25149] [ 1512.801718][T25149] ... which became SOFTIRQ-irq-unsafe at: [ 1512.814375][T25149] ... [ 1512.814389][T25149] lock_acquire+0x120/0x360 [ 1512.821749][T25149] _raw_read_lock+0x36/0x50 [ 1512.826352][T25149] __do_wait+0xde/0x740 [ 1512.830774][T25149] do_wait+0x1f8/0x520 [ 1512.834939][T25149] kernel_wait+0xab/0x170 [ 1512.839362][T25149] call_usermodehelper_exec_work+0xbe/0x230 [ 1512.845350][T25149] process_scheduled_works+0xade/0x17b0 [ 1512.851068][T25149] worker_thread+0x8a0/0xda0 [ 1512.855746][T25149] kthread+0x70e/0x8a0 [ 1512.859929][T25149] ret_from_fork+0x3fc/0x770 [ 1512.864606][T25149] ret_from_fork_asm+0x1a/0x30 [ 1512.869551][T25149] [ 1512.869551][T25149] other info that might help us debug this: [ 1512.869551][T25149] [ 1512.879776][T25149] Chain exists of: [ 1512.879776][T25149] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1512.879776][T25149] [ 1512.893472][T25149] Possible interrupt unsafe locking scenario: [ 1512.893472][T25149] [ 1512.901874][T25149] CPU0 CPU1 [ 1512.907250][T25149] ---- ---- [ 1512.912611][T25149] lock(tasklist_lock); [ 1512.916968][T25149] local_irq_disable(); [ 1512.923808][T25149] lock(&dev->event_lock#2); [ 1512.931095][T25149] lock(&client->buffer_lock); [ 1512.938555][T25149] [ 1512.942093][T25149] lock(&dev->event_lock#2); [ 1512.946952][T25149] [ 1512.946952][T25149] *** DEADLOCK *** [ 1512.946952][T25149] [ 1512.955113][T25149] 7 locks held by syz.6.4982/25149: [ 1512.960303][T25149] #0: ffff8880292ae118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1512.969451][T25149] #1: ffff888146adf230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1512.979593][T25149] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1512.989369][T25149] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1512.999155][T25149] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1513.008392][T25149] #5: ffff8880326e3028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1513.018590][T25149] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1513.027742][T25149] [ 1513.027742][T25149] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1513.038490][T25149] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1513.044587][T25149] IN-SOFTIRQ-W at: [ 1513.048657][T25149] lock_acquire+0x120/0x360 [ 1513.055041][T25149] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1513.062068][T25149] input_inject_event+0xa5/0x340 [ 1513.068840][T25149] led_trigger_event+0x138/0x210 [ 1513.075628][T25149] kbd_bh+0x1c6/0x2e0 [ 1513.081458][T25149] tasklet_action_common+0x369/0x580 [ 1513.088576][T25149] handle_softirqs+0x283/0x870 [ 1513.095164][T25149] run_ksoftirqd+0x9b/0x100 [ 1513.101496][T25149] smpboot_thread_fn+0x53f/0xa60 [ 1513.108267][T25149] kthread+0x70e/0x8a0 [ 1513.114259][T25149] ret_from_fork+0x3fc/0x770 [ 1513.120669][T25149] ret_from_fork_asm+0x1a/0x30 [ 1513.127279][T25149] INITIAL USE at: [ 1513.131273][T25149] lock_acquire+0x120/0x360 [ 1513.137691][T25149] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1513.144628][T25149] input_inject_event+0xa5/0x340 [ 1513.151391][T25149] kbd_led_trigger_activate+0xbc/0x100 [ 1513.158678][T25149] led_trigger_set+0x52d/0x950 [ 1513.165189][T25149] led_trigger_set_default+0x260/0x2a0 [ 1513.172477][T25149] led_classdev_register_ext+0x73d/0x930 [ 1513.179942][T25149] input_leds_connect+0x517/0x790 [ 1513.186756][T25149] input_register_device+0xcfd/0x1140 [ 1513.193874][T25149] atkbd_connect+0x72e/0xa00 [ 1513.200206][T25149] serio_driver_probe+0x82/0xd0 [ 1513.206806][T25149] really_probe+0x26d/0x9e0 [ 1513.213133][T25149] __driver_probe_device+0x18c/0x2f0 [ 1513.220157][T25149] driver_probe_device+0x4f/0x430 [ 1513.226922][T25149] __driver_attach+0x452/0x700 [ 1513.233508][T25149] bus_for_each_dev+0x233/0x2b0 [ 1513.240100][T25149] serio_handle_event+0x1f9/0x8d0 [ 1513.246970][T25149] process_scheduled_works+0xade/0x17b0 [ 1513.254256][T25149] worker_thread+0x8a0/0xda0 [ 1513.260583][T25149] kthread+0x70e/0x8a0 [ 1513.266402][T25149] ret_from_fork+0x3fc/0x770 [ 1513.272728][T25149] ret_from_fork_asm+0x1a/0x30 [ 1513.279235][T25149] } [ 1513.282081][T25149] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1513.291204][T25149] -> (&client->buffer_lock){....}-{3:3} { [ 1513.296944][T25149] INITIAL USE at: [ 1513.300834][T25149] lock_acquire+0x120/0x360 [ 1513.306909][T25149] _raw_spin_lock+0x2e/0x40 [ 1513.313041][T25149] evdev_handle_get_val+0x70/0x9f0 [ 1513.319730][T25149] evdev_ioctl_handler+0x1202/0x1f10 [ 1513.326592][T25149] __ia32_compat_sys_ioctl+0x543/0x840 [ 1513.333617][T25149] __do_fast_syscall_32+0xb6/0x2b0 [ 1513.340479][T25149] do_fast_syscall_32+0x34/0x80 [ 1513.346931][T25149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1513.354842][T25149] } [ 1513.357364][T25149] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1513.365521][T25149] ... acquired at: [ 1513.369338][T25149] lock_acquire+0x120/0x360 [ 1513.374024][T25149] _raw_spin_lock+0x2e/0x40 [ 1513.378878][T25149] evdev_handle_get_val+0x70/0x9f0 [ 1513.384171][T25149] evdev_ioctl_handler+0x1202/0x1f10 [ 1513.389647][T25149] __ia32_compat_sys_ioctl+0x543/0x840 [ 1513.395284][T25149] __do_fast_syscall_32+0xb6/0x2b0 [ 1513.400681][T25149] do_fast_syscall_32+0x34/0x80 [ 1513.405725][T25149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1513.412497][T25149] [ 1513.414827][T25149] [ 1513.414827][T25149] the dependencies between the lock to be acquired [ 1513.414838][T25149] and SOFTIRQ-irq-unsafe lock: [ 1513.428452][T25149] -> (tasklist_lock){.+.+}-{3:3} { [ 1513.433762][T25149] HARDIRQ-ON-R at: [ 1513.437919][T25149] lock_acquire+0x120/0x360 [ 1513.444443][T25149] _raw_read_lock+0x36/0x50 [ 1513.450972][T25149] __do_wait+0xde/0x740 [ 1513.457147][T25149] do_wait+0x1f8/0x520 [ 1513.463222][T25149] kernel_wait+0xab/0x170 [ 1513.469566][T25149] call_usermodehelper_exec_work+0xbe/0x230 [ 1513.477639][T25149] process_scheduled_works+0xade/0x17b0 [ 1513.485183][T25149] worker_thread+0x8a0/0xda0 [ 1513.491775][T25149] kthread+0x70e/0x8a0 [ 1513.497848][T25149] ret_from_fork+0x3fc/0x770 [ 1513.504438][T25149] ret_from_fork_asm+0x1a/0x30 [ 1513.511212][T25149] SOFTIRQ-ON-R at: [ 1513.515368][T25149] lock_acquire+0x120/0x360 [ 1513.521876][T25149] _raw_read_lock+0x36/0x50 [ 1513.528477][T25149] __do_wait+0xde/0x740 [ 1513.534724][T25149] do_wait+0x1f8/0x520 [ 1513.540884][T25149] kernel_wait+0xab/0x170 [ 1513.547215][T25149] call_usermodehelper_exec_work+0xbe/0x230 [ 1513.555201][T25149] process_scheduled_works+0xade/0x17b0 [ 1513.562752][T25149] worker_thread+0x8a0/0xda0 [ 1513.569342][T25149] kthread+0x70e/0x8a0 [ 1513.575418][T25149] ret_from_fork+0x3fc/0x770 [ 1513.582031][T25149] ret_from_fork_asm+0x1a/0x30 [ 1513.588824][T25149] INITIAL USE at: [ 1513.592939][T25149] lock_acquire+0x120/0x360 [ 1513.599373][T25149] _raw_write_lock_irq+0xa2/0xf0 [ 1513.606257][T25149] copy_process+0x224f/0x3c00 [ 1513.612877][T25149] kernel_clone+0x21e/0x840 [ 1513.619317][T25149] user_mode_thread+0xdd/0x140 [ 1513.626005][T25149] rest_init+0x23/0x300 [ 1513.632087][T25149] start_kernel+0x3a9/0x410 [ 1513.638700][T25149] x86_64_start_reservations+0x24/0x30 [ 1513.646086][T25149] x86_64_start_kernel+0x143/0x1c0 [ 1513.653220][T25149] common_startup_64+0x13e/0x147 [ 1513.660081][T25149] INITIAL READ USE at: [ 1513.664588][T25149] lock_acquire+0x120/0x360 [ 1513.671449][T25149] _raw_read_lock+0x36/0x50 [ 1513.678319][T25149] __do_wait+0xde/0x740 [ 1513.684826][T25149] do_wait+0x1f8/0x520 [ 1513.691629][T25149] kernel_wait+0xab/0x170 [ 1513.698443][T25149] call_usermodehelper_exec_work+0xbe/0x230 [ 1513.706711][T25149] process_scheduled_works+0xade/0x17b0 [ 1513.714781][T25149] worker_thread+0x8a0/0xda0 [ 1513.721734][T25149] kthread+0x70e/0x8a0 [ 1513.728153][T25149] ret_from_fork+0x3fc/0x770 [ 1513.735093][T25149] ret_from_fork_asm+0x1a/0x30 [ 1513.742211][T25149] } [ 1513.744886][T25149] ... key at: [] tasklist_lock+0x18/0x40 [ 1513.752783][T25149] ... acquired at: [ 1513.756759][T25149] lock_acquire+0x120/0x360 [ 1513.761532][T25149] _raw_read_lock+0x36/0x50 [ 1513.766299][T25149] send_sigurg+0x12b/0x420 [ 1513.770931][T25149] sk_send_sigurg+0x6c/0x2e0 [ 1513.775701][T25149] queue_oob+0x420/0x4f0 [ 1513.780119][T25149] unix_stream_sendmsg+0xc3f/0xdf0 [ 1513.785430][T25149] __sock_sendmsg+0x21c/0x270 [ 1513.790283][T25149] ____sys_sendmsg+0x52d/0x830 [ 1513.795244][T25149] ___sys_sendmsg+0x21f/0x2a0 [ 1513.800109][T25149] __sys_sendmmsg+0x28e/0x430 [ 1513.804962][T25149] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1513.810789][T25149] __do_fast_syscall_32+0xb6/0x2b0 [ 1513.816106][T25149] do_fast_syscall_32+0x34/0x80 [ 1513.821171][T25149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1513.827693][T25149] [ 1513.830104][T25149] -> (&f_owner->lock){....}-{3:3} { [ 1513.835406][T25149] INITIAL USE at: [ 1513.839400][T25149] lock_acquire+0x120/0x360 [ 1513.845669][T25149] _raw_write_lock_irq+0xa2/0xf0 [ 1513.852356][T25149] __f_setown+0x67/0x370 [ 1513.858340][T25149] f_setown+0x23a/0x300 [ 1513.864237][T25149] do_fcntl+0x11d/0x1910 [ 1513.870305][T25149] do_compat_fcntl64+0x477/0x720 [ 1513.876998][T25149] __do_fast_syscall_32+0xb6/0x2b0 [ 1513.883861][T25149] do_fast_syscall_32+0x34/0x80 [ 1513.890543][T25149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1513.898886][T25149] INITIAL READ USE at: [ 1513.903305][T25149] lock_acquire+0x120/0x360 [ 1513.909983][T25149] _raw_read_lock_irqsave+0xaf/0x100 [ 1513.917474][T25149] send_sigio+0x38/0x370 [ 1513.923975][T25149] kill_fasync+0x24d/0x4d0 [ 1513.930740][T25149] sock_wake_async+0x137/0x160 [ 1513.937768][T25149] sk_wake_async+0x184/0x280 [ 1513.944531][T25149] unix_release_sock+0x768/0xd30 [ 1513.951642][T25149] unix_release+0x92/0xd0 [ 1513.958142][T25149] sock_close+0xc3/0x240 [ 1513.964556][T25149] __fput+0x449/0xa70 [ 1513.970807][T25149] task_work_run+0x1d4/0x260 [ 1513.977574][T25149] get_signal+0x11ed/0x1340 [ 1513.984282][T25149] arch_do_signal_or_restart+0x9a/0x750 [ 1513.992026][T25149] exit_to_user_mode_loop+0x75/0x110 [ 1513.999503][T25149] __do_fast_syscall_32+0x1f4/0x2b0 [ 1514.006892][T25149] do_fast_syscall_32+0x34/0x80 [ 1514.014074][T25149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.022580][T25149] } [ 1514.025177][T25149] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1514.034121][T25149] ... acquired at: [ 1514.038009][T25149] lock_acquire+0x120/0x360 [ 1514.042703][T25149] _raw_read_lock_irqsave+0xaf/0x100 [ 1514.048162][T25149] send_sigio+0x38/0x370 [ 1514.052582][T25149] kill_fasync+0x24d/0x4d0 [ 1514.057174][T25149] sock_wake_async+0x137/0x160 [ 1514.062119][T25149] sk_wake_async+0x184/0x280 [ 1514.066889][T25149] unix_release_sock+0x768/0xd30 [ 1514.072113][T25149] unix_release+0x92/0xd0 [ 1514.076632][T25149] sock_close+0xc3/0x240 [ 1514.081055][T25149] __fput+0x449/0xa70 [ 1514.085217][T25149] task_work_run+0x1d4/0x260 [ 1514.089992][T25149] get_signal+0x11ed/0x1340 [ 1514.094677][T25149] arch_do_signal_or_restart+0x9a/0x750 [ 1514.100401][T25149] exit_to_user_mode_loop+0x75/0x110 [ 1514.105865][T25149] __do_fast_syscall_32+0x1f4/0x2b0 [ 1514.111243][T25149] do_fast_syscall_32+0x34/0x80 [ 1514.116402][T25149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.122902][T25149] [ 1514.125226][T25149] -> (&new->fa_lock){....}-{3:3} { [ 1514.130359][T25149] INITIAL USE at: [ 1514.134278][T25149] lock_acquire+0x120/0x360 [ 1514.140350][T25149] _raw_write_lock_irq+0xa2/0xf0 [ 1514.146857][T25149] fasync_remove_entry+0xf1/0x1c0 [ 1514.153443][T25149] sock_fasync+0x85/0xf0 [ 1514.159247][T25149] __fput+0x8a2/0xa70 [ 1514.164796][T25149] task_work_run+0x1d4/0x260 [ 1514.170954][T25149] do_exit+0x6b5/0x2300 [ 1514.176683][T25149] do_group_exit+0x21c/0x2d0 [ 1514.182840][T25149] get_signal+0x1286/0x1340 [ 1514.188905][T25149] arch_do_signal_or_restart+0x9a/0x750 [ 1514.196287][T25149] exit_to_user_mode_loop+0x75/0x110 [ 1514.203154][T25149] __do_fast_syscall_32+0x1f4/0x2b0 [ 1514.209964][T25149] do_fast_syscall_32+0x34/0x80 [ 1514.216531][T25149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.224429][T25149] INITIAL READ USE at: [ 1514.228778][T25149] lock_acquire+0x120/0x360 [ 1514.235289][T25149] _raw_read_lock_irqsave+0xaf/0x100 [ 1514.242757][T25149] kill_fasync+0x199/0x4d0 [ 1514.249174][T25149] sock_wake_async+0x137/0x160 [ 1514.256091][T25149] sk_wake_async+0x184/0x280 [ 1514.262678][T25149] unix_release_sock+0x768/0xd30 [ 1514.269616][T25149] unix_release+0x92/0xd0 [ 1514.275945][T25149] sock_close+0xc3/0x240 [ 1514.282197][T25149] __fput+0x449/0xa70 [ 1514.288180][T25149] task_work_run+0x1d4/0x260 [ 1514.294782][T25149] get_signal+0x11ed/0x1340 [ 1514.301297][T25149] arch_do_signal_or_restart+0x9a/0x750 [ 1514.308855][T25149] exit_to_user_mode_loop+0x75/0x110 [ 1514.316261][T25149] __do_fast_syscall_32+0x1f4/0x2b0 [ 1514.323573][T25149] do_fast_syscall_32+0x34/0x80 [ 1514.330521][T25149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.338860][T25149] } [ 1514.341357][T25149] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1514.350306][T25149] ... acquired at: [ 1514.354113][T25149] lock_acquire+0x120/0x360 [ 1514.358793][T25149] _raw_read_lock_irqsave+0xaf/0x100 [ 1514.364296][T25149] kill_fasync+0x199/0x4d0 [ 1514.368982][T25149] evdev_pass_values+0x627/0xbd0 [ 1514.374105][T25149] evdev_events+0x1e6/0x340 [ 1514.378878][T25149] input_pass_values+0x285/0x890 [ 1514.383991][T25149] input_event_dispose+0x330/0x6b0 [ 1514.389361][T25149] input_inject_event+0x1dd/0x340 [ 1514.394556][T25149] evdev_write+0x2fc/0x480 [ 1514.399157][T25149] vfs_write+0x27b/0xb30 [ 1514.403577][T25149] ksys_write+0x145/0x250 [ 1514.408084][T25149] __do_fast_syscall_32+0xb6/0x2b0 [ 1514.413478][T25149] do_fast_syscall_32+0x34/0x80 [ 1514.418510][T25149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.425062][T25149] [ 1514.427398][T25149] [ 1514.427398][T25149] stack backtrace: [ 1514.433460][T25149] CPU: 0 UID: 0 PID: 25149 Comm: syz.6.4982 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1514.433482][T25149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1514.433492][T25149] Call Trace: [ 1514.433500][T25149] [ 1514.433507][T25149] dump_stack_lvl+0x189/0x250 [ 1514.433528][T25149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1514.433546][T25149] ? __pfx__printk+0x10/0x10 [ 1514.433571][T25149] validate_chain+0x1f05/0x2140 [ 1514.433595][T25149] __lock_acquire+0xab9/0xd20 [ 1514.433619][T25149] ? kill_fasync+0x199/0x4d0 [ 1514.433636][T25149] lock_acquire+0x120/0x360 [ 1514.433657][T25149] ? kill_fasync+0x199/0x4d0 [ 1514.433678][T25149] _raw_read_lock_irqsave+0xaf/0x100 [ 1514.433698][T25149] ? kill_fasync+0x199/0x4d0 [ 1514.433714][T25149] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1514.433732][T25149] ? do_raw_spin_lock+0x121/0x290 [ 1514.433753][T25149] kill_fasync+0x199/0x4d0 [ 1514.433769][T25149] ? kill_fasync+0x53/0x4d0 [ 1514.433786][T25149] evdev_pass_values+0x627/0xbd0 [ 1514.433810][T25149] ? evdev_pass_values+0x671/0xbd0 [ 1514.433833][T25149] evdev_events+0x1e6/0x340 [ 1514.433853][T25149] ? evdev_events+0x79/0x340 [ 1514.433874][T25149] ? input_pass_values+0x8d/0x890 [ 1514.433894][T25149] input_pass_values+0x285/0x890 [ 1514.433916][T25149] ? input_handle_event+0x70c/0xf30 [ 1514.433934][T25149] input_event_dispose+0x330/0x6b0 [ 1514.433952][T25149] input_inject_event+0x1dd/0x340 [ 1514.433969][T25149] ? input_inject_event+0xb6/0x340 [ 1514.433987][T25149] evdev_write+0x2fc/0x480 [ 1514.434010][T25149] ? __pfx_evdev_write+0x10/0x10 [ 1514.434032][T25149] ? bpf_lsm_file_permission+0x9/0x20 [ 1514.434051][T25149] ? security_file_permission+0x75/0x290 [ 1514.434072][T25149] ? rw_verify_area+0x255/0x4d0 [ 1514.434090][T25149] ? __lock_acquire+0xab9/0xd20 [ 1514.434111][T25149] ? __pfx_evdev_write+0x10/0x10 [ 1514.434132][T25149] vfs_write+0x27b/0xb30 [ 1514.434154][T25149] ? __pfx_vfs_write+0x10/0x10 [ 1514.434174][T25149] ? __fget_files+0x2a/0x420 [ 1514.434198][T25149] ? __fget_files+0x2a/0x420 [ 1514.434219][T25149] ? __fget_files+0x3a0/0x420 [ 1514.434241][T25149] ? __fget_files+0x2a/0x420 [ 1514.434266][T25149] ksys_write+0x145/0x250 [ 1514.434286][T25149] ? __pfx_ksys_write+0x10/0x10 [ 1514.434306][T25149] ? lockdep_hardirqs_on+0x9c/0x150 [ 1514.434334][T25149] __do_fast_syscall_32+0xb6/0x2b0 [ 1514.434356][T25149] ? lockdep_hardirqs_on+0x9c/0x150 [ 1514.434376][T25149] do_fast_syscall_32+0x34/0x80 [ 1514.434398][T25149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.434417][T25149] RIP: 0023:0xf70de539 [ 1514.434431][T25149] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1514.434446][T25149] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1514.434464][T25149] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1514.434476][T25149] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 1514.434485][T25149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1514.434495][T25149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1514.434505][T25149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1514.434519][T25149] [ 1514.769675][T25149] FAULT_INJECTION: forcing a failure. [ 1514.769675][T25149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1514.905444][T25149] CPU: 1 UID: 0 PID: 25149 Comm: syz.6.4982 Not tainted 6.16.0-syzkaller-12250-gc30a13538d9f #0 PREEMPT(full) [ 1514.905476][T25149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1514.905489][T25149] Call Trace: [ 1514.905497][T25149] [ 1514.905506][T25149] dump_stack_lvl+0x189/0x250 [ 1514.905536][T25149] ? __pfx____ratelimit+0x10/0x10 [ 1514.905561][T25149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1514.905585][T25149] ? __pfx__printk+0x10/0x10 [ 1514.905621][T25149] ? __might_fault+0xb0/0x130 [ 1514.905648][T25149] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1514.905671][T25149] ? preempt_schedule+0xae/0xc0 [ 1514.905695][T25149] ? rcu_is_watching+0x15/0xb0 [ 1514.905715][T25149] should_fail_ex+0x414/0x560 [ 1514.905742][T25149] _copy_from_user+0x2d/0xb0 [ 1514.905764][T25149] input_event_from_user+0xf9/0x280 [ 1514.905783][T25149] ? __pfx_input_event_from_user+0x10/0x10 [ 1514.905802][T25149] ? input_inject_event+0xb6/0x340 [ 1514.905825][T25149] evdev_write+0x2a6/0x480 [ 1514.905854][T25149] ? __pfx_evdev_write+0x10/0x10 [ 1514.905879][T25149] ? bpf_lsm_file_permission+0x9/0x20 [ 1514.905903][T25149] ? security_file_permission+0x75/0x290 [ 1514.905926][T25149] ? rw_verify_area+0x255/0x4d0 [ 1514.905947][T25149] ? __lock_acquire+0xab9/0xd20 [ 1514.905972][T25149] ? __pfx_evdev_write+0x10/0x10 [ 1514.906006][T25149] vfs_write+0x27b/0xb30 [ 1514.906032][T25149] ? __pfx_vfs_write+0x10/0x10 [ 1514.906055][T25149] ? __fget_files+0x2a/0x420 [ 1514.906084][T25149] ? __fget_files+0x2a/0x420 [ 1514.906110][T25149] ? __fget_files+0x3a0/0x420 [ 1514.906136][T25149] ? __fget_files+0x2a/0x420 [ 1514.906166][T25149] ksys_write+0x145/0x250 [ 1514.906190][T25149] ? __pfx_ksys_write+0x10/0x10 [ 1514.906215][T25149] ? lockdep_hardirqs_on+0x9c/0x150 [ 1514.906240][T25149] __do_fast_syscall_32+0xb6/0x2b0 [ 1514.906267][T25149] ? lockdep_hardirqs_on+0x9c/0x150 [ 1514.906293][T25149] do_fast_syscall_32+0x34/0x80 [ 1514.906319][T25149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1514.906354][T25149] RIP: 0023:0xf70de539 [ 1514.906371][T25149] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1514.906387][T25149] RSP: 002b:00000000f54ce55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1514.906409][T25149] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1514.906428][T25149] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 1514.906440][T25149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1514.906451][T25149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1514.906464][T25149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1514.906483][T25149] [ 1515.216968][T22671] usb 10-1: Using ep0 maxpacket: 32 [ 1515.240814][T22671] usb 10-1: device descriptor read/all, error -71 [ 1515.255478][T22671] usb usb10-port1: attempt power cycle