last executing test programs: 5m47.503277294s ago: executing program 1 (id=292): ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000340)={{}, "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"}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002800)='lp', 0x2) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 5m47.002088633s ago: executing program 1 (id=297): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r0, &(0x7f0000019b40)=""/102375, 0x18fe7, 0xfffffff2) 5m46.775267207s ago: executing program 1 (id=298): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000340)="82c46a9111cfa72401b91409000000fad9314a03fab933e6bd0beb0134b76f3009ee782973b12dcc1b7b939b84d94a85", 0x30) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56bb6e284f5fab5c66", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x8001, 0x2) 5m46.694244701s ago: executing program 1 (id=300): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0xa}, 0x18) 5m46.518620523s ago: executing program 1 (id=301): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r1, 0x80) accept$netrom(r1, &(0x7f0000000280)={{0x3, @netrom}, [@null, @netrom, @remote, @netrom, @remote, @bcast, @null, @default]}, &(0x7f0000000100)=0x48) 5m46.103001657s ago: executing program 1 (id=305): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) writev(r0, &(0x7f0000001980)=[{&(0x7f0000001880)='e', 0x1}], 0x1) 5m45.764606576s ago: executing program 32 (id=305): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TCSETSW2(r0, 0x5453, 0x0) writev(r0, &(0x7f0000001980)=[{&(0x7f0000001880)='e', 0x1}], 0x1) 4m49.752112637s ago: executing program 3 (id=747): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000240)="96bc1480bb58", 0x6}], 0x2}, 0x40010) 4m49.651073246s ago: executing program 3 (id=748): unshare(0x6060600) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) unshare(0x10000500) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x801) io_setup(0x81, &(0x7f0000000400)) setuid(0xee00) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 4m48.863726821s ago: executing program 3 (id=754): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000340)="5e94") 4m48.747612764s ago: executing program 3 (id=757): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2800) getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000500)) 4m48.670971535s ago: executing program 3 (id=760): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x300) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x1, 0x7fff, 0x8, 0x8000005, 0x20, 0x99, 0xee}, &(0x7f0000000000)=0x9c) bind$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x20, 0x7, 0x96, 0x4, 0x9, @remote}, 0x10) syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0xca43, 0x80, 0x1, 0x3b3}, &(0x7f0000000300), &(0x7f0000000380)) 4m47.749757399s ago: executing program 3 (id=765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 4m32.618686586s ago: executing program 33 (id=765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x0) 3m49.827518182s ago: executing program 0 (id=1187): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r5, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r5, r5, 0xf, 0x3, 0x6d}) 3m48.64337199s ago: executing program 0 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500ffffffff080000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340001010101010100000800c9006c0d000094f396762751ae54a698a7e7b8d9234314b4ab5dd8fe96f6c3e3352c29f3cfec038e369ec16d69352aa1acb29562079d470371d5282d045456c1cacbbb279f3c5dcf52d07bba110290eef4f888c7f1473a791dc8ad746f773e30d74ca13b529a270183bb126084f9553fd38972db0ac4de3892274e68d66abb1bddda81478bc8306d486fac61b590940f367673d350a2a7942ee6ce0a0e9d43c8e81cc0e309c6c7c5b64e5c584d5dd4b9c5557593dc7120ecf1319f0471b7c25517e68dd3f7a6"], 0x30}}, 0x488c0) 3m46.305009098s ago: executing program 0 (id=1195): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 3m46.219314384s ago: executing program 0 (id=1197): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x8, 0x10, 0x80000000, 0x9}}) 3m46.201883254s ago: executing program 0 (id=1198): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') setpgid(r0, 0x0) setpgid(0x0, r0) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3m46.14527684s ago: executing program 0 (id=1199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno', 0xa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0xf, 0x4) 3m30.405976921s ago: executing program 34 (id=1199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno', 0xa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0xf, 0x4) 2m18.679546691s ago: executing program 5 (id=1769): r0 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x22) syz_fuse_handle_req(r1, &(0x7f0000002140)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc662218715be66704be83e9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2afb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952344056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c01002b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x6, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, {0x0, 0x2bb7, 0x4, 0x0, 0x6, 0x1, 0x0, 0x3, 0x0, 0x6000, 0x7ffffffc, 0x0, 0x0, 0x0, 0xfffffffa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000a200)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x88e, {0xffffffffffffffff, 0x0, 0xfffffe, 0x3, 0x3fe, 0xffffffff, {0x5, 0x8000000000000000, 0x2000, 0xfe2b2df, 0x4362d09f, 0x80000000, 0x2, 0x6, 0x0, 0x6000, 0xffffffff, r3, 0x0, 0x4, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4000001}}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1fffffff, 0x48800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r6}) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') syz_usb_connect(0x0, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000f26c44204f080100b8e00102030109021b0001000000000904"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2m17.346974112s ago: executing program 5 (id=1775): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 2m15.845545561s ago: executing program 5 (id=1785): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xf) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x4, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, 0x0}, 0x4000000) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) write$vga_arbiter(r0, 0x0, 0x16) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x7, &(0x7f0000000140)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) write$char_usb(r7, &(0x7f0000000100)="11a3c94179a07568f2a391ccaa75c4bd0213ae0f48fac951c9b2c594f45b7dafe8d14acef95a7602beece9ca54e21fc339", 0x31) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$char_usb(r7, &(0x7f0000000200)=""/73, 0x49) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r9, 0xc0884123, 0x40944f9c780000) 2m12.753466339s ago: executing program 5 (id=1802): r0 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b", 0xb4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'xcbc(aes)\x00'}}) 2m12.642834266s ago: executing program 5 (id=1804): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="400e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') sendmmsg$sock(r0, &(0x7f0000008340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}}], 0x4000000000002a0, 0x40004000) 2m10.242452275s ago: executing program 5 (id=1818): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x4, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x2, 0x1, 0x1, 0x1}}], 0x18) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x24}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x40}}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x5, 0xd9e, [0x0, 0x200000002580, 0x2000000025b0, 0x20000000278c], 0x0, &(0x7f0000000180), &(0x7f0000002580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x2d, 0xf9, 'lo\x00', 'vcan0\x00', 'ip6tnl0\x00', 'vlan1\x00', @random="75be55999754", [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0x5c87d992543b3d25, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz0\x00', {0xffffffffffffffff}}}}}, {0x11, 0x2, 0x88e7, 'vlan0\x00', 'team_slave_1\x00', 'veth0_vlan\x00', 'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x0, "c0f888a75b853f4c7e9abfdd8cd397bdcddb92cb95ba9d16ee6fa9f15e40", 0xc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x6, 0x32, 0x8917, 'caif0\x00', 'veth1_macvtap\x00', 'wg2\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xae, 0xde, 0x10e, [@time={{'time\x00', 0x0, 0x18}, {{0x6, 0x2, 0xb9fc, 0x3adc, 0x2, 0xa, 0x3}}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x11, 0x40, 0xdada, 'dvmrp1\x00', 'virt_wifi0\x00', 'macvlan0\x00', 'dvmrp1\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}, {0x3, 0x6, 0x6000, 'veth1_virt_wifi\x00', 'veth0_to_batadv\x00', 'tunl0\x00', 'veth0_vlan\x00', @random="c912e424842f", [0xff, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x906, 0x936, 0x986, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x6}}}, @among={{'among\x00', 0x0, 0x840}, {{@offset=0xc, @zero, 0x3, {[0xf, 0x30000, 0x100, 0xfffffff0, 0x40, 0x1c1b7d99, 0xffffff80, 0x7f, 0x5, 0x2, 0xd, 0x2, 0x2, 0x4, 0x7f, 0x3, 0x1, 0x100, 0x57, 0x800, 0x4, 0x3, 0x7, 0xffffffff, 0x4, 0x5, 0x8, 0x6, 0x545e, 0x10000, 0x80000000, 0x3, 0x7, 0x6, 0x8000, 0x3, 0x0, 0x100, 0x6, 0x7, 0x6, 0x9224979c, 0x4, 0x3ff, 0x8, 0x61bc0bca, 0x3, 0x3, 0x7fffffff, 0xfffffffb, 0xf, 0x7, 0x5, 0x84, 0xb6bc, 0x1, 0x8, 0x8, 0xc19, 0xfff, 0x4, 0x80000000, 0x51, 0xa54a, 0x5, 0xf35, 0x5, 0xa4, 0x1ff, 0xfffffff4, 0xc3, 0xf, 0x7, 0x4, 0xffffff00, 0xc65d, 0xfffff0cb, 0x6, 0x7fff, 0x3203, 0x40, 0x8, 0xd76, 0xd9e, 0x5ffb2bb9, 0x9, 0x5, 0xaa4, 0xffffffff, 0x10, 0x0, 0x100, 0xa60, 0x6, 0x5, 0x6, 0x3ff, 0xfff, 0x800, 0x9, 0x400, 0x6, 0x7, 0x7fff, 0x6, 0x1, 0x8000, 0x6, 0x10, 0x5, 0x8, 0x935, 0x0, 0x4, 0x7fffffff, 0x7e13, 0xfffffff8, 0x6, 0x9, 0x80, 0xfb46, 0x8, 0xfffff800, 0x1, 0xffffffff, 0x5, 0x5, 0x6, 0xc673, 0x7e56, 0x9, 0x100, 0x3ff, 0x7, 0xfa0, 0x7, 0x384, 0x6, 0x8, 0x2, 0x9, 0x5, 0x5, 0x1, 0x8, 0x40, 0x3ff, 0x5, 0x4, 0x3, 0xffffffff, 0x8001, 0x3, 0xe, 0x1000, 0xc57e, 0x3, 0xbedb, 0x5, 0x800, 0x6, 0x5, 0x5396, 0x10, 0xe, 0x7ff, 0xc0, 0x5, 0x8, 0x8, 0x5, 0x4, 0xa6e, 0xfffffe01, 0x9, 0x101, 0xa3f, 0x5, 0xa, 0x8, 0x5, 0x3, 0x5, 0x8, 0x9, 0x8, 0x200, 0x4, 0x71c1, 0x8, 0x401, 0x55, 0xb, 0xb72, 0xea, 0x2, 0x235, 0xff, 0xfffffffa, 0x3ff, 0x2, 0x3, 0x7, 0xff, 0xfc8b, 0x6, 0xe8bb, 0x9, 0x1ff, 0x8a9, 0x9, 0xd8, 0xe4, 0x401, 0x7f, 0xfffffff8, 0x1, 0x26, 0x1, 0x5, 0x3, 0x2, 0x4, 0x0, 0x4, 0x0, 0x8, 0x77759b39, 0xa78, 0xe7f, 0x4, 0x470, 0x800, 0x1000, 0x4, 0x2, 0x6, 0x7fff, 0x57b3, 0x1, 0x8001, 0x80000001, 0x3, 0x6, 0x6, 0x7, 0xffffffff, 0x0, 0x81, 0x9, 0x5, 0x9, 0x4, 0x3, 0x8, 0x3, 0xff], 0x1, [{[0x609, 0x7fffffff], @loopback}]}, {[0x9, 0x3, 0x8, 0x2, 0xffff, 0xfffeffff, 0x7, 0x9, 0x3, 0x0, 0x6, 0x7, 0x8, 0xe8f, 0x9, 0x5, 0x8, 0x2, 0x865, 0x3, 0x80000000, 0x400, 0x3, 0x8, 0xe52, 0x9, 0xffff, 0x6, 0x10001, 0xc, 0x9, 0x9, 0x7, 0x0, 0x5, 0x3, 0x6, 0xde, 0x9, 0x8, 0x2, 0x5, 0xfffffff9, 0x10000, 0x101, 0x3, 0x10000, 0x1, 0x2174, 0x8, 0x4, 0x5, 0x2, 0x2, 0x6, 0x32, 0x5721e52a, 0x87, 0xaec3, 0x3d, 0x6, 0xc, 0x0, 0x2, 0x7, 0x1000, 0x7, 0x2, 0x4, 0xa51, 0x10000, 0xe, 0x7, 0x3, 0x85f4, 0x1, 0xffff, 0x3ff, 0xfc9, 0x80000000, 0x2, 0x40, 0xc, 0x6, 0x1, 0x1, 0x4, 0xfc4f, 0x9, 0x10001, 0x0, 0x10001, 0x3, 0x8, 0xffff, 0xf96, 0xd, 0x0, 0x6, 0x7, 0x7, 0xf5, 0xffff998e, 0x4, 0x71c, 0xc0, 0x7, 0xb, 0x100, 0x4, 0x1, 0x80000001, 0x80000000, 0xc, 0x3, 0x5, 0x40, 0x1, 0xfffffff4, 0x8, 0xb8f1, 0xffffffff, 0xaded, 0x0, 0x4d2c98e9, 0x184c2f77, 0x7, 0x5, 0xffff000, 0x24, 0x5, 0x2, 0x8, 0x5, 0x100, 0xe, 0x7, 0x7, 0x3, 0x7, 0x4, 0x9, 0x80ed, 0xfffffff8, 0x9, 0x9, 0x1, 0x8, 0xa0b, 0x3, 0x80000001, 0x5, 0x0, 0x0, 0x3, 0x0, 0x9, 0x6, 0x0, 0x1, 0x1ff, 0x4, 0xb7, 0x7, 0x1, 0x0, 0x8, 0x1, 0x7, 0xd, 0xfffffff3, 0x3, 0x400, 0x5, 0x3, 0x590, 0x9, 0x1d6, 0x1, 0x0, 0x8000, 0x5, 0x1, 0x3, 0x1, 0x3b4, 0x9, 0x9c, 0x1, 0x8, 0x7fff, 0x9, 0x2, 0x0, 0x4, 0x1, 0x8, 0x6, 0x2, 0x0, 0x2c, 0x10, 0x80000000, 0xe0000, 0x9, 0xfa, 0x80000001, 0x6, 0x6, 0x2, 0x6, 0x8, 0x5fe9, 0x70, 0x5, 0xffffffc0, 0x3, 0x2, 0x3, 0x9, 0xfffffffb, 0x4fd2, 0x0, 0x5, 0x9, 0x7, 0xb612, 0x4, 0x40, 0x0, 0x4, 0x6141, 0x3a3, 0x1ff, 0x9, 0x400, 0x6, 0x1, 0x2, 0x5, 0x1, 0x0, 0x4, 0x6, 0x0, 0x8, 0x5, 0x3, 0x9, 0x9, 0x3, 0x4, 0x3, 0x40, 0x5, 0x7f, 0x3ff], 0x2, [{[0x7fff, 0x4], @dev={0xac, 0x14, 0x14, 0x40}}, {[0x5, 0x80], @rand_addr=0x64010100}]}}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3ff, 'syz0\x00', {0x8}}}}}]}]}, 0xe16) r7 = syz_open_procfs(r5, &(0x7f00000000c0)='attr/keycreate\x00') socket$packet(0x11, 0x0, 0x300) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 1m55.242748863s ago: executing program 35 (id=1818): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000140)=[{{0x4, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x2, 0x1, 0x1, 0x1}}], 0x18) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x24}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x40}}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x5, 0xd9e, [0x0, 0x200000002580, 0x2000000025b0, 0x20000000278c], 0x0, &(0x7f0000000180), &(0x7f0000002580)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x2d, 0xf9, 'lo\x00', 'vcan0\x00', 'ip6tnl0\x00', 'vlan1\x00', @random="75be55999754", [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0x5c87d992543b3d25, 0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x9e, 0xee, [], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffb}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz0\x00', {0xffffffffffffffff}}}}}, {0x11, 0x2, 0x88e7, 'vlan0\x00', 'team_slave_1\x00', 'veth0_vlan\x00', 'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@log={'log\x00', 0x28, {{0x0, "c0f888a75b853f4c7e9abfdd8cd397bdcddb92cb95ba9d16ee6fa9f15e40", 0xc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x6, 0x32, 0x8917, 'caif0\x00', 'veth1_macvtap\x00', 'wg2\x00', 'batadv0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xae, 0xde, 0x10e, [@time={{'time\x00', 0x0, 0x18}, {{0x6, 0x2, 0xb9fc, 0x3adc, 0x2, 0xa, 0x3}}}], [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}], @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x2, [{0x11, 0x40, 0xdada, 'dvmrp1\x00', 'virt_wifi0\x00', 'macvlan0\x00', 'dvmrp1\x00', @broadcast, [0xff, 0x0, 0x0, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}, {0x3, 0x6, 0x6000, 'veth1_virt_wifi\x00', 'veth0_to_batadv\x00', 'tunl0\x00', 'veth0_vlan\x00', @random="c912e424842f", [0xff, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x906, 0x936, 0x986, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x6}}}, @among={{'among\x00', 0x0, 0x840}, {{@offset=0xc, @zero, 0x3, {[0xf, 0x30000, 0x100, 0xfffffff0, 0x40, 0x1c1b7d99, 0xffffff80, 0x7f, 0x5, 0x2, 0xd, 0x2, 0x2, 0x4, 0x7f, 0x3, 0x1, 0x100, 0x57, 0x800, 0x4, 0x3, 0x7, 0xffffffff, 0x4, 0x5, 0x8, 0x6, 0x545e, 0x10000, 0x80000000, 0x3, 0x7, 0x6, 0x8000, 0x3, 0x0, 0x100, 0x6, 0x7, 0x6, 0x9224979c, 0x4, 0x3ff, 0x8, 0x61bc0bca, 0x3, 0x3, 0x7fffffff, 0xfffffffb, 0xf, 0x7, 0x5, 0x84, 0xb6bc, 0x1, 0x8, 0x8, 0xc19, 0xfff, 0x4, 0x80000000, 0x51, 0xa54a, 0x5, 0xf35, 0x5, 0xa4, 0x1ff, 0xfffffff4, 0xc3, 0xf, 0x7, 0x4, 0xffffff00, 0xc65d, 0xfffff0cb, 0x6, 0x7fff, 0x3203, 0x40, 0x8, 0xd76, 0xd9e, 0x5ffb2bb9, 0x9, 0x5, 0xaa4, 0xffffffff, 0x10, 0x0, 0x100, 0xa60, 0x6, 0x5, 0x6, 0x3ff, 0xfff, 0x800, 0x9, 0x400, 0x6, 0x7, 0x7fff, 0x6, 0x1, 0x8000, 0x6, 0x10, 0x5, 0x8, 0x935, 0x0, 0x4, 0x7fffffff, 0x7e13, 0xfffffff8, 0x6, 0x9, 0x80, 0xfb46, 0x8, 0xfffff800, 0x1, 0xffffffff, 0x5, 0x5, 0x6, 0xc673, 0x7e56, 0x9, 0x100, 0x3ff, 0x7, 0xfa0, 0x7, 0x384, 0x6, 0x8, 0x2, 0x9, 0x5, 0x5, 0x1, 0x8, 0x40, 0x3ff, 0x5, 0x4, 0x3, 0xffffffff, 0x8001, 0x3, 0xe, 0x1000, 0xc57e, 0x3, 0xbedb, 0x5, 0x800, 0x6, 0x5, 0x5396, 0x10, 0xe, 0x7ff, 0xc0, 0x5, 0x8, 0x8, 0x5, 0x4, 0xa6e, 0xfffffe01, 0x9, 0x101, 0xa3f, 0x5, 0xa, 0x8, 0x5, 0x3, 0x5, 0x8, 0x9, 0x8, 0x200, 0x4, 0x71c1, 0x8, 0x401, 0x55, 0xb, 0xb72, 0xea, 0x2, 0x235, 0xff, 0xfffffffa, 0x3ff, 0x2, 0x3, 0x7, 0xff, 0xfc8b, 0x6, 0xe8bb, 0x9, 0x1ff, 0x8a9, 0x9, 0xd8, 0xe4, 0x401, 0x7f, 0xfffffff8, 0x1, 0x26, 0x1, 0x5, 0x3, 0x2, 0x4, 0x0, 0x4, 0x0, 0x8, 0x77759b39, 0xa78, 0xe7f, 0x4, 0x470, 0x800, 0x1000, 0x4, 0x2, 0x6, 0x7fff, 0x57b3, 0x1, 0x8001, 0x80000001, 0x3, 0x6, 0x6, 0x7, 0xffffffff, 0x0, 0x81, 0x9, 0x5, 0x9, 0x4, 0x3, 0x8, 0x3, 0xff], 0x1, [{[0x609, 0x7fffffff], @loopback}]}, {[0x9, 0x3, 0x8, 0x2, 0xffff, 0xfffeffff, 0x7, 0x9, 0x3, 0x0, 0x6, 0x7, 0x8, 0xe8f, 0x9, 0x5, 0x8, 0x2, 0x865, 0x3, 0x80000000, 0x400, 0x3, 0x8, 0xe52, 0x9, 0xffff, 0x6, 0x10001, 0xc, 0x9, 0x9, 0x7, 0x0, 0x5, 0x3, 0x6, 0xde, 0x9, 0x8, 0x2, 0x5, 0xfffffff9, 0x10000, 0x101, 0x3, 0x10000, 0x1, 0x2174, 0x8, 0x4, 0x5, 0x2, 0x2, 0x6, 0x32, 0x5721e52a, 0x87, 0xaec3, 0x3d, 0x6, 0xc, 0x0, 0x2, 0x7, 0x1000, 0x7, 0x2, 0x4, 0xa51, 0x10000, 0xe, 0x7, 0x3, 0x85f4, 0x1, 0xffff, 0x3ff, 0xfc9, 0x80000000, 0x2, 0x40, 0xc, 0x6, 0x1, 0x1, 0x4, 0xfc4f, 0x9, 0x10001, 0x0, 0x10001, 0x3, 0x8, 0xffff, 0xf96, 0xd, 0x0, 0x6, 0x7, 0x7, 0xf5, 0xffff998e, 0x4, 0x71c, 0xc0, 0x7, 0xb, 0x100, 0x4, 0x1, 0x80000001, 0x80000000, 0xc, 0x3, 0x5, 0x40, 0x1, 0xfffffff4, 0x8, 0xb8f1, 0xffffffff, 0xaded, 0x0, 0x4d2c98e9, 0x184c2f77, 0x7, 0x5, 0xffff000, 0x24, 0x5, 0x2, 0x8, 0x5, 0x100, 0xe, 0x7, 0x7, 0x3, 0x7, 0x4, 0x9, 0x80ed, 0xfffffff8, 0x9, 0x9, 0x1, 0x8, 0xa0b, 0x3, 0x80000001, 0x5, 0x0, 0x0, 0x3, 0x0, 0x9, 0x6, 0x0, 0x1, 0x1ff, 0x4, 0xb7, 0x7, 0x1, 0x0, 0x8, 0x1, 0x7, 0xd, 0xfffffff3, 0x3, 0x400, 0x5, 0x3, 0x590, 0x9, 0x1d6, 0x1, 0x0, 0x8000, 0x5, 0x1, 0x3, 0x1, 0x3b4, 0x9, 0x9c, 0x1, 0x8, 0x7fff, 0x9, 0x2, 0x0, 0x4, 0x1, 0x8, 0x6, 0x2, 0x0, 0x2c, 0x10, 0x80000000, 0xe0000, 0x9, 0xfa, 0x80000001, 0x6, 0x6, 0x2, 0x6, 0x8, 0x5fe9, 0x70, 0x5, 0xffffffc0, 0x3, 0x2, 0x3, 0x9, 0xfffffffb, 0x4fd2, 0x0, 0x5, 0x9, 0x7, 0xb612, 0x4, 0x40, 0x0, 0x4, 0x6141, 0x3a3, 0x1ff, 0x9, 0x400, 0x6, 0x1, 0x2, 0x5, 0x1, 0x0, 0x4, 0x6, 0x0, 0x8, 0x5, 0x3, 0x9, 0x9, 0x3, 0x4, 0x3, 0x40, 0x5, 0x7f, 0x3ff], 0x2, [{[0x7fff, 0x4], @dev={0xac, 0x14, 0x14, 0x40}}, {[0x5, 0x80], @rand_addr=0x64010100}]}}}}], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3ff, 'syz0\x00', {0x8}}}}}]}]}, 0xe16) r7 = syz_open_procfs(r5, &(0x7f00000000c0)='attr/keycreate\x00') socket$packet(0x11, 0x0, 0x300) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 32.554024848s ago: executing program 4 (id=2264): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05002abd7000fedbdf254400000008000300040000000000001db0b62295873c5ef197990069b6e4fdde1d9d03da3b53c26d74dd055594826702fc895bd06e594102b95376990ce098e9320225ef0c06177b7ef5eba67a9e142799bf1721b94b92d1f8922ea182033c4dce9612823a502e2eab077c920dfdd927", @ANYRES32=r3, @ANYBLOB="0a00180003030303030300001400700005000800020000000500010001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) r5 = socket$kcm(0x10, 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f00009fc000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fdfffe05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 32.23534269s ago: executing program 4 (id=2267): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000001540)=ANY=[@ANYBLOB="12010002abe7a120b10e077000020102030109022900010cffc0e009040701000005240005000d240f01f90300004000b23d02"], 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)='bars,\x85\x95\x1b\xb6\xe2x\x8aJ\"\xbd\xa1(o\xcc\xb1\xd5\xa4\xabz\xc7\x90\x99\xfe\xe9\r\x8aCX\xd5\x9e\x90\n\xa8\xe8\xff\x8b\xfd^\xb1\xfdw=6\xb5\x18^\x8c}\xad\x7f\xdb\n\x84\x13$\xae\x10y\xb0\x05&\xfa\xcbH\xcc\x95{V\xd4\xb1\x05f\x9a6x\xbe-\xa7\xc9\x9bm\a\xe2\x00TL\x14\xe2\x96Z\x05\xee\xab\xaa\xd6\x9b9\xd0r4\xfc\xd6\a\xef\xc6g\xdcG\xe9\xba\xb8\x19d\x93h\x03[\xfc.\xc8s\xaa\x83$\xfb]8-?`\x8f\xe7\xef\xc5') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2, 0xfd}, {0x6, 0x0, 0x0, 0x10000000}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRESOCT=0x0, @ANYRES16=r1], 0x0, 0x0}) syz_usb_control_io$hid(r6, &(0x7f0000001600)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) r7 = dup(r5) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) mount_setattr(r7, &(0x7f0000000100)='./file0\x00', 0xd100, &(0x7f00000002c0)={0x6, 0x100009, 0xa0000, {r8}}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086605043000000000e4010902240001000000010904000000000003000921d3ef44bd645765000002012205000905"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x63, 0x0, &(0x7f0000000040)) syz_usb_control_io(r9, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000050000000500b16292"], 0x0, 0x0, 0x0, 0x0}, 0x0) 30.904272741s ago: executing program 4 (id=2275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002040)='oom_score_adj\x00') exit(0x2) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000010c0)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5, 0x6}}, 0x30) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') exit(0x1ff) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf25080021"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0xfffffffe, 0x0, 0x2000000, 0xfffffffc, 0x0, 0x80}}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x168, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xd0, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @val={0x5, 0x8d, {0x7, 0x41, 0xc6, "4359e7c430d106d7c28a4252bf3fe4b0929d1b4f19158b6ce42fddbad6b101c33e35ba2c657789ab48f748a187aafb5117eab7b009bde50f724e017b89705405295b2b3398893bf900d6140ea7cf8316c467d5d8b55163d4f104907ec8b8fc669759fcce9ff3a5c6d13d7184f5d27e54401d3d4afe9409cace937d93b2a794818446d50017583cf8d92b"}}, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x63, 0xf, [@ibss={0x6, 0x2, 0x1000}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0xfd, 0x8, @broadcast, 0x0, 0x5, 0x7}}, @random={0xff, 0x3f, "c527c58c93ae48d0c8d4c59cf67c46eb0cc3b4dafe8815c981c05937aafeccd000f9d7fb68511ec9e4672eba19b44fc487ebd6abb987adebbd2f269c6c83ae"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x168}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) socket(0x0, 0x1, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ppoll(&(0x7f00000001c0)=[{r0, 0x2}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={[0x1]}, 0x8) 29.959000432s ago: executing program 4 (id=2276): r0 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r2, 0x8001008000001109, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'xfrm0\x00'}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000180)={{0x4, 0x0, 0x0, 0x0, '\x00', 0xffffffff}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 'syz1\x00', 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x2a000180, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TIOCL_GETSHIFTSTATE(r3, 0x560e, &(0x7f0000000000)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES64=r1], 0x18}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000100)={@my=0x0, 0x2}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r5, 0x0, 0x5002) getdents(r2, &(0x7f00000006c0)=""/4096, 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 29.875640337s ago: executing program 4 (id=2277): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80d03, 0xe0) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0x6fc8, 0x3, 0xf9}, {0x2, 0xa6, 0x6, 0x3}, {0x7, 0x1, 0x7f, 0xb17}, {0x6, 0x6, 0x9, 0x7}]}) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000002c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000300)) mknod$loop(&(0x7f0000000340)='./file1\x00', 0xc000, 0x0) bind$bt_hci(r1, &(0x7f0000000380)={0x1f, 0x3}, 0x6) fspick(r0, &(0x7f00000003c0)='./file0/file0\x00', 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x280280, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {r3}}, './file0/file0\x00'}) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000005c0)=0x4874f487d4f8e622, 0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f0000000600)) timer_create(0x0, &(0x7f00000016c0)={0x0, 0x27, 0x0, @thr={&(0x7f0000000640)="86fcb6447c515a8b2d8b40f408b55a3b89e331987f08bb42465333976ab5ca052ce009df468abd0be13a9ee31fc05cc6b795cbc0aa7e2fee5ff4a2ed8021ba2cdd6868ef9d23a5306f02351f115fa1774da79952a15c560d714056c8057e5c4b2c7b0daf7eb59d1561a0577a574aa980bb", &(0x7f00000006c0)="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"}}, &(0x7f0000001700)) r5 = fsopen(&(0x7f0000001740)='qnx6\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r5, 0x4, &(0x7f0000001780)='/dev/autofs\x00', &(0x7f00000017c0)='./file0\x00', r4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000001800)={{0x1, 0x1, 0x18, r5, {0x7}}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000001840)=0x1, 0x4) epoll_create1(0x0) ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, &(0x7f0000001880)={0x10001, 0xb}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r6) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, r7, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000001a40)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001a00)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000001a80)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x40, @loopback, 0xa}, {0xa, 0x4e21, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x400}, r8, 0x8}}, 0x48) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000001b00), &(0x7f0000001b40), 0x2, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f0000001b80)={@id={0x2, 0x0, @d}}) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000001c40)={0x3, @raw_data="1ca0d152f609972e3edfbcdc07b96a05700e1c20f5a62d2707ce2b389c6d64761917034565c63ad3c4596c8d2d7969bc3069e7f26b2661efcdedf92dc2fb3f325fa251267b4d406491c938e0724fb1e598472ee8379f75b97f6bfad4b49139a398b319fc98ed66d0d8b2d0f47a0633d07fa99e42c0825cc9f3e7f5f746bec4525f321b61a100f4fec274dc9bfcb5b84f84cc1194ac47b7a98d2b891e4f8e466689f5eaa3b726ed9214af86d133c3fd1d35d218fd9c2f03f46690beaa16409b9ca0f540e62797aebb"}) 29.450897853s ago: executing program 4 (id=2280): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8d, 0x870, 0x1, 0x3, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x4, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x1, {0x45, 0x80}, 0xcd, 0x3}}) 29.221404756s ago: executing program 36 (id=2280): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8d, 0x870, 0x1, 0x3, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x4, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x1, {0x45, 0x80}, 0xcd, 0x3}}) 8.841944838s ago: executing program 8 (id=2365): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000011, 0x3, 0x40) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c049", 0x2}], 0x1, 0x0, 0x0, 0x4000004}, 0x404c8c1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x200, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xfa, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0x10001, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x1ff, 0xff], [0x7, 0x4, 0x0, 0x650, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x7c, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0x5, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0xfffffffe, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1d, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xd0, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @device_a, @device_b, @from_mac=@broadcast, {0x0, 0x6}}, 0xfffffffffffffffd, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x4, {0xf4, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x63, 0xf, [@ibss={0x6, 0x2, 0x1000}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0xfd, 0x8, @broadcast, 0x0, 0x4, 0x7}}, @random={0xff, 0x3f, "c527c58c93ae48d0c8d4c59cf67c46eb0cc3b4dafe8815c981c05937aafeccd000f9d7fb68511ec9e4672eba19b44fc487ebd6abb987adebbd2f269c6c83ae"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 8.703053585s ago: executing program 8 (id=2366): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r2, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x160) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000004c0], 0x0, 0x0, 0x0}, 0xe40) r3 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x5, @string={0x5, 0x3, "9f040c"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xbe5, &(0x7f00000000c0)=ANY=[]) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) fchdir(r4) preadv(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000140)=""/89, 0x59}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000000240)=""/32, 0x20}, {&(0x7f0000000280)=""/58, 0x3a}, {&(0x7f0000000340)=""/230, 0xe6}], 0x6, 0x2, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x1bb) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=']) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRES16=r5, @ANYRESDEC=r6, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRES8=r1, @ANYRES8=r4], 0x60}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 8.158137296s ago: executing program 7 (id=2368): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r4 = add_key(&(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x7) keyctl$setperm(0x5, r4, 0x8082008) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) flistxattr(r6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000400)={r3, @in={{0x2, 0x4e22, @empty}}, 0x7f, 0x4, 0x3, 0x100, 0x40, 0xffffffff, 0xa0}, &(0x7f0000000300)=0x9c) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) accept(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 7.744222153s ago: executing program 7 (id=2371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904020101010200001124020306040803000c0000000000000007240116050210090506090002"], 0x0) 5.818834857s ago: executing program 7 (id=2375): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = signalfd(r0, &(0x7f00000000c0)={[0x7fffffff]}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xb, 0xdddd0000, 0x0, r2, 0x4}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000080)) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) 5.751306072s ago: executing program 8 (id=2376): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 5.514011528s ago: executing program 2 (id=2379): mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000000)={0xff, 0xc00000, "2dbf2357d80f0db7e67bb9898b680301db45c4ab65993e48", {0xfffffff0, 0x8}, 0xffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x7f, 0x4, {0xffffffffffffffff}, {0xee00}, 0x8, 0x8}) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@updsa={0x13c, 0x1a, 0x300, 0x70bd26, 0x25dfdbfd, {{@in6=@mcast2, @in6=@loopback, 0x4e20, 0x0, 0x4e24, 0xa7f, 0xa, 0x20, 0x40, 0x3c, r2, r3}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x2b}, @in=@broadcast, {0x4, 0xb, 0x7, 0x2, 0x5, 0x7, 0x4, 0x9}, {0x22, 0x3, 0x8, 0x8}, {0x526, 0xb0b1, 0x81}, 0x70bd2b, 0x3506, 0xa, 0x4, 0x7, 0x40}, [@replay_thresh={0x8, 0xb, 0x3ff}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e21, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}}, @sec_ctx={0x26, 0x8, {0x22, 0x8, 0x1, 0x1, 0x1a, "3c0777765a5421e990b22a0834abad25d4470563a60563ed7f69"}}]}, 0x13c}}, 0x0) 5.455082111s ago: executing program 2 (id=2380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x92f}, @broadcast, @device_b, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0x8}, @val={0x76, 0x6, {0x4, 0x10, 0x7}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20088050) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x48, r4, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x92f}, @broadcast, @device_b, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0x8}, @val={0x76, 0x6, {0x4, 0x10, 0x7}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20088050) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)={0x28, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) (async) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000480)=""/63, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000014c0)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000140)={0x1, r7}) close(0x3) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_GET_STATS_FD_vm(r9, 0xaece) preadv(r10, &(0x7f0000000480)=[{&(0x7f0000000300)=""/221, 0xdd}, {&(0x7f0000000440)=""/63, 0x3f}], 0x2, 0x9, 0x7fffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000040)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000040)) 5.18488589s ago: executing program 2 (id=2383): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x3000000}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000180)=0x8, 0x4) write$cgroup_int(r1, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f00000003c0)={0x2, &(0x7f0000000340)=[{0xffff6a58, 0xae, &(0x7f0000000200)="b254e560742ad943fc89136fd927da114e60cdf0f7218e26b18346247284ecf05c54f8b4b02b621c7c1fdce46ac4e9cec9cf474e6244a3739d09310a0a83814bd8b96456c5421ecf6d8ec3a82d77a10ec010eb17a2a055944400b2f00110674ed8b8bf8e4d33ffac1d4dfeabd5aa2e2dd74bb3ec47281b6f50bc5e73c73a836a3e5c4fbc65fbb4acf4bd9f9dca7de9c42e3bbe57c3965a6ad32fea4d0e017a0a30fa1c746382ea275c4764c02968", 0x1}, {0x8000, 0x19, &(0x7f0000000300)="b784e58eb6eb8dc6a86325b5ebb73bbe338e890b9744056f0f", 0x0, 0x1}]}) syz_usb_connect(0x3, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905"], 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) getgroups(0x1, &(0x7f0000000340)=[0xffffffffffffffff]) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x94, r3, 0x1, 0xffffff83, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x6c, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25e0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8ad8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63f54a7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bee95aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25a0421c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa036}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdcd5}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x67a0}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9760}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76a5a1af}]}]}]}, 0x94}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x48, @tick=0xfffffffa, 0x5, {0x7, 0xe}, 0x4, 0x2, 0x6}) 4.504608254s ago: executing program 8 (id=2389): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e04114098af00000001090212000100000000090400de0082dd9700"], 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, 0x0, 0x0) syz_usb_connect(0x2, 0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003113dbb2012290100e1b50102030109022800aa4d00107b09040b070189d104500a2401ffff0502010209050d02200000050602080230"], &(0x7f0000000f40)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1, 0x0, 0xf6, 0x20, 0x4}, 0x37, &(0x7f0000000bc0)=ANY=[@ANYBLOB="050f370004010004ff5dbc7fc2e0ea9fc5a03dd7044948d22a03100b07100204a900001410040389a541d17efab10faa2a4063a13f8f64"], 0x1, [{0x0, 0x0}]}) 3.799598467s ago: executing program 2 (id=2391): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000340)=0x9) r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000070961c40e90f55dbfb690102c9030902120001000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000003c0)={&(0x7f0000000700)=[{0x0, 0x1601, 0x67, &(0x7f0000000200)="475bbe654338e920c16907578518c8e162266a78ebfd5d371000052b4478daec1aea0deb7b031d6801b7b321e97f9a50e40cf8b414ea3b497de7695428ba42b9b0c9c9a091cce1ed2ccd6f68d3882506d4a62e63c86c7131def01302ee3cdf1e8cc0547d74a5d5"}, {0x0, 0x0, 0x0, 0x0}], 0x2}) syz_usb_connect$cdc_ecm(0x5, 0x80, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010002020000404505a1a440000102030109026e00010100100009040009030206000609240600001fe97a3305240006000d240f0107000000070010000604240200152412f7ffa317a88b045e4f01a607c0ffcb7e392a062407bf0400072414da000300090581031000bfb805090582024000880700090503021000010603c4d9505e5eb3b20ce2303a853ab0d1e2f7f10926dc8b5cdd57b8a3c84b331bd467186a225eed869f8c28eb179f71c8b0cb2ea382211aa3e986f2d386bbc65abd9301c8153554", @ANYRES32=r0, @ANYRES8=r1], &(0x7f00000002c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xb, 0x1, 0x41, 0x10, 0x5}, 0x123, &(0x7f0000000180)={0x5, 0xf, 0x123, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x7, 0xa, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "7c12c02bc3188e25289d6fa6eb880e2a"}, @ssp_cap={0x24, 0x10, 0xa, 0x9c, 0x6, 0x10001, 0x1e000, 0xcb1, [0xc0, 0xc000, 0x0, 0xf, 0x3f00, 0xc000]}, @generic={0xdc, 0x10, 0x4, "72384544d69482f7f932a048c580324e0c1ad244704cd0cfef82fe7f77f7050fa76c3401e77a502153aa9456d456859e4ed0a45b9e67926bd4be1437dd4abafa3cec65ff8912ad9f34462f00cb97cd890bafa718fe63bed6c057c8d93f1ae23ef22be9419cf6022485f41bc86289454e903ae659fdfd3dca9837b07a462aaf49cbc0a470cd68a51c0a26e17acc1e56270b11ea37bbeeeefeca690e510844d7843cc86d25692aa675c57e05c08035fc5237b92aaa9b904c4119b2db03b836aceb018a75249115a87b48a11fb94ba6b2496fe69c3bcfa30b9145"}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xc01}}]}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, &(0x7f00000003c0)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="0036a5b92e0e1be4af3c082900000029247c32a21339625f040044b0380f82789742e068944302656c9f62d8b15f3898f46f53ef18dec5c4"], &(0x7f0000000940)=ANY=[@ANYBLOB="00030400000004031d08a144d89722ec70ecd2f6111aabef23556a4b6d52f00a873f9b5c8ff4a93cb9607008654084b737b5520b1834b69cadd49b4bcc6b593e8b8bbbe43cc1000000c3162b62d1fd387c5cbb560ab762b97ea7cadf2b412474e96b2953a0722765dce0838c7dbd36797ee62ce6f6c0eb77cceafcc1843b4ee3277a289f3961cd36f1f6bf2337e0f830910bbd98bd03b36087e061c5b4ec38fd0267e24ddee945d474025072a9db12c8887cd920222b67e0fc29ebcbdd2fb202f3af331a18648e7ee770816405dfe68def65f896c26e9d342601ac9e"]}, &(0x7f0000000900)={0x1c, &(0x7f0000000400)={0x20, 0xf, 0x42, "a2f18a8637a31d44ca437c51d3b6181e4f4359d5d600d410668b115be3510afd06f015434a896c025e033a4140c02d4a0e5ef5613a38dcbc23f3effe74008ddf52be"}, &(0x7f0000000480)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000008c0)={0x21, 0x0, 0x3, "d31ed0"}}) 3.109957966s ago: executing program 8 (id=2394): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48042) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt(0xffffffffffffffff, 0x3, 0x6, &(0x7f0000000700)="37557bf476e57e3ff487bcca92e2688783c7ffb106450c5928c0b26a8e08fbb2e3deb24243c76131fc4f72dde26ecc0546cfbd3462c851695a0cdcf274b4a1ea364f1b1a5645d744", 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b000000050104000000000000000003000080540201"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x2, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0x7ff, 0x3, 0xb4, 0x7b, 0x1}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r0, 0x0, 0xffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000000000000a004e23000071fc0000000000000000000000000000000800000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000040"], 0x90) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x28040010) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r12, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r13, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x48, r8, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x5, 0x64}}}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x7}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008c0}, 0x20004080) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x4, 0xcc, 0xffffffb9, 0x1a}, 0x9c) syz_usb_connect(0x2, 0x4c, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x42c}}]}) 2.999684467s ago: executing program 6 (id=2395): r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000340), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000080)={0x0, 0x7}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000540)={0x0, 0x3, 0x4, "f2a9e7ed"}, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 2.748464334s ago: executing program 7 (id=2396): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x4, 0x40, 0x1, 0x1000, 0x50, @local, @private1, 0x8, 0x700, 0x401, 0x2}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x77, 0x108d80) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r2, 0xacddf000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000080), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syslog(0x2, 0xfffffffffffffffe, 0x587c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000002e00090025bd70000000000004000000320016"], 0x48}, 0x1, 0x0, 0x0, 0x42804}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000300)) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000de1e661800", @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xdc, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x63, 0xf, [@ibss={0x6, 0x2, 0x1000}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0xfd, 0x8, @broadcast, 0x0, 0x5, 0x7}}, @random={0xff, 0x3f, "c527c58c93ae48d0c8d4c59cf67c46eb0cc3b4dafe8815c981c05937aafeccd000f9d7fb68511ec9e4672eba19b44fc487ebd6abb987adebbd2f269c6c83ae"}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 1.298921936s ago: executing program 7 (id=2397): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000000)) 1.298099306s ago: executing program 6 (id=2398): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[], 0x170}}, 0x0) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) dup2(r1, r2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r4 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) (async) sendmmsg$inet(r4, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="3aae1baf930b45", 0x7}], 0x1, 0x0, 0x0, 0x900}}], 0x1, 0x0) madvise(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0xa) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6(0xa, 0x80002, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r8) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x5, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x2040}, 0x54) (async) r10 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r12, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xe1, 0x0, 0x3ff}]}) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x34, r9, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x19, 0x401, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x40010) recvmmsg(r7, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x60, 0x0) (async) setsockopt(r6, 0x84, 0x80, &(0x7f0000000280)="1a00000002000000", 0x8) r13 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r13, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async, rerun: 32) setsockopt$MRT_FLUSH(r13, 0x0, 0xd1, &(0x7f0000000040)=0x6, 0x4) (rerun: 32) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x800000, &(0x7f0000000300)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@measure}, {@fowner_gt={'fowner>', 0xee01}}, {@context={'context', 0x3d, 'system_u'}}, {@dont_hash}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@appraise_type}]}}) 1.284235824s ago: executing program 6 (id=2399): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x2, 0x20, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x12, &(0x7f0000000080)=0x272) unshare(0x66040600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3f3eb000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000480)={0xbc, 0x0, 0x7}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="012330e0d294f30000401ca0f077"], 0x14}}, 0x20000004) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="8dffffff8d00"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES8], 0x38}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082dbd7000ffdbdf2502000000050004000700b200050003008700000014000900fe8000000000000000000000000000aa04000500050004000000000008000b00", @ANYRES32=r11, @ANYBLOB="04000500"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x92001, 0x0) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2404994}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="74003d238a632b3d529128fd0000", @ANYRESOCT=r2, @ANYBLOB="00082dbd7000fedbdf250000000005000d003000000008000700", @ANYRES32=r3, @ANYBLOB="08000500ac1414bb08000700", @ANYRES32=r9, @ANYBLOB="080009000300000005000d001d00000014000c00fc0100000000000000000000000000000c000300030000000000000008000200010000000800020000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x4010800) 741.246993ms ago: executing program 2 (id=2400): socket(0x3, 0x6, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x0) rmdir(&(0x7f00000001c0)='./file0\x00') 443.080617ms ago: executing program 6 (id=2401): r0 = socket$alg(0x26, 0x5, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000)=0x1, 0x0) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0000000300000026ff00e838c58c949327ef04f800"], 0xc) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)="5aca0897bf4e53167bb669af4781bed0debc3220ae90d2e5b050dde880c2e7156f1a638d330ba0d4870891c6fb32f7ddcaf7c97b7cde979b4502584ec364a552ee7bba459521ab34a18bc2d46555cb6772bd347b0f60b3e3d06c9dda3db97d50", 0x60}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x240008d0}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/91, 0x5b}, {&(0x7f0000000440)=""/120, 0x78}], 0x2}, 0x40) 390.563284ms ago: executing program 2 (id=2402): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000080)=0x8) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0) syz_usb_control_io$sierra_net(r5, &(0x7f0000000040)={0x14, &(0x7f00000000c0)={0x0, 0x21, 0x5, {0x5, 0x11, "abcbd2"}}, 0x0}, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x20, 0x24172b5432907bc, 0x7a, "c052497fd675fae9d93b962bc6103db597c21fd8a5ae37f89a01eec88dbd40d207b0186a055757f79fe15f1c527fc21d9a0500be622398b6acc838289bc6a1f83d596bf964dca01fbb28eafe7f93ae29b7c9365084746743d3acdead60862c74f00dac60342473093f05002216e28f8ff7e406ae5fc72b5c4059"}, &(0x7f00000003c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000300)={0x21, 0x0, 0x2, "1394"}}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x1, 0x40, 0x3fc, 0x4, 0x50}, 0x9c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc00000042000701fefffffffcdbdf25047c000004004580a10001"], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e21, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4000001) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r8, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 199.994027ms ago: executing program 6 (id=2403): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r2, 0xd5026000) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x5c, r3, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x5c}}, 0x0) 83.023384ms ago: executing program 6 (id=2404): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x2400c0d0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40000100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b2a, &(0x7f0000000040)) (async) ioctl(r1, 0x8b2a, &(0x7f0000000040)) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002205000000a19206"], 0x0}, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) 72.460955ms ago: executing program 8 (id=2405): io_setup(0x8f0, &(0x7f0000002400)=0x0) io_destroy(r0) syz_io_uring_setup(0x81e, &(0x7f0000000480)={0x0, 0x40, 0x10, 0xfffffffe, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) io_cancel(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x1}, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001e00), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000001e40)={0x2, 0x2, 0x1, "5e95dddbfaa6280b6b0ea0c99a4a0686b1a21d2417d407755cdffba7e464a4f5", 0x34324948}) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x8001) r10 = getpgid(0x0) fcntl$setownex(r9, 0xf, &(0x7f0000000140)={0x2, r10}) sendmmsg$unix(r8, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) r11 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r6) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r11, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r12, 0x120, 0x101, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x498}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x24000004) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r13) sendmsg$IEEE802154_LLSEC_ADD_DEV(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x4c, r14, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x4c}, 0x4, 0x700000000000000}, 0x40) sendmsg$netlink(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRES32=r3], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 7 (id=2406): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="401608ef", 0x4}], 0x1, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x30}], 0x1, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/30, 0x1e}], 0x1}, 0x2140) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x7fffffff, 0x111a41) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f00000006c0)={0x0, 0x0, r4}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x8000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000040)={0x6f, 0x21, 0x4, 0x3, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0xd, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x5000, 0x58000, 0xe, 0x9, 0x8, 0x3, 0x1, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x58000, 0xdddd1000, 0xb, 0x1, 0x2, 0x0, 0x4, 0x1, 0xe, 0x0, 0xe1, 0x8}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x6, 0xd, 0xe, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0xe, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x3}, {0x100000, 0x8000000, 0xa, 0x0, 0x6, 0x1, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0xb000, 0x4000, 0xa, 0xff, 0x3, 0x1, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xfec00000, 0x8000000, 0xf, 0x2, 0x28, 0x3, 0xa, 0x5, 0x54, 0x1, 0xff, 0x7}, {0xeeef0000, 0x9}, {0x1000, 0x9}, 0x40010000, 0x0, 0x9000, 0x300, 0x7, 0x0, 0xe6e70c00, [0x2, 0x401, 0x7, 0xc5]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4c000) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="1400000010000100000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000000080a050000000000000000000200008a0c00034000000000000000020900020073797a32000000000900010073797a3000000000140000001100010000000000000000000a00000a00000000"], 0x8c}}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0xf2, 0xa, 0xd, 0x0, 0xe94b, 0x0, 0x6, 0x11, 0x1, 0x2, 0x9, 0x4, 0x0, 0x100, 0x0, 0x6, 0x9, 0x3, 0x8, '\x00', 0x0, 0xa7b}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYRES8=r0, @ANYBLOB="05000000540520fb000000000000008cb486", @ANYRESHEX=r7, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) socket$inet6(0xa, 0x80003, 0x6) kernel console output (not intermixed with test programs): ][ T594] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.308302][ T594] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.327699][ T594] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.338149][ T594] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.409629][ T846] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 433.445513][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.456615][ T7749] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 433.479300][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.520473][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.529057][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.588791][ T846] usb 7-1: config 1 has an invalid interface number: 166 but max is 0 [ 433.597331][ T846] usb 7-1: config 1 has no interface number 0 [ 433.603484][ T846] usb 7-1: config 1 interface 166 has no altsetting 0 [ 433.617189][ T7749] usb 8-1: device descriptor read/64, error -71 [ 433.618171][ T846] usb 7-1: New USB device found, idVendor=2040, idProduct=9950, bcdDevice=50.1a [ 433.633250][ T846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.645048][ T846] usb 7-1: Product: syz [ 433.650640][ T846] usb 7-1: Manufacturer: syz [ 433.655369][ T846] usb 7-1: SerialNumber: syz [ 433.856609][ T7749] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 433.986653][ T7749] usb 8-1: device descriptor read/64, error -71 [ 434.078959][ T846] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 434.097153][ T7749] usb usb8-port1: attempt power cycle [ 434.104095][ T846] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 434.114112][ T846] dib0700: firmware download failed at 7 with -22 [ 434.140345][ T846] usb 7-1: USB disconnect, device number 51 [ 434.280114][T12436] autofs: Bad value for 'fd' [ 434.437661][ T7749] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 434.457613][ T7749] usb 8-1: device descriptor read/8, error -71 [ 434.586654][ T5883] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 434.596844][ T846] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 434.698230][ T7749] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 434.727269][ T7749] usb 8-1: device descriptor read/8, error -71 [ 434.739936][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.750364][ T5883] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 434.763768][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 434.766599][ T846] usb 7-1: Using ep0 maxpacket: 32 [ 434.776326][ T5883] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 434.778964][ T846] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 434.785575][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 434.794864][ T846] usb 7-1: config 0 has no interface number 0 [ 434.802365][ T5883] usb 5-1: Product: syz [ 434.809298][ T846] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.812847][ T5883] usb 5-1: Manufacturer: syz [ 434.828373][ T5883] usb 5-1: SerialNumber: syz [ 434.833399][ T846] usb 7-1: config 0 interface 85 has no altsetting 0 [ 434.837889][ T5883] usb 5-1: config 0 descriptor?? [ 434.843279][ T846] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 434.849768][ T7749] usb usb8-port1: unable to enumerate USB device [ 434.857712][ T846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.868795][ T846] usb 7-1: Product: syz [ 434.872965][ T846] usb 7-1: Manufacturer: syz [ 434.880199][ T846] usb 7-1: SerialNumber: syz [ 434.887747][ T846] usb 7-1: config 0 descriptor?? [ 434.917096][ T5883] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 434.946034][ T6376] udevd[6376]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.087811][ T5883] usb 5-1: USB disconnect, device number 71 [ 435.176679][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 435.306023][ T846] appletouch 7-1:0.85: Geyser mode initialized. [ 435.315062][ T846] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input32 [ 435.986593][ T5883] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 436.070769][T12444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.079720][T12444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.156969][ T5883] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 436.167036][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.178523][ T5883] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 436.187818][ T5883] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 436.196521][ T5883] usb 5-1: Manufacturer: syz [ 436.203966][ T5883] usb 5-1: config 0 descriptor?? [ 436.296691][ T5883] rc_core: IR keymap rc-hauppauge not found [ 436.302626][ T5883] Registered IR keymap rc-empty [ 436.312472][ T5883] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 436.330911][ T5883] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input33 [ 436.479068][T12453] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2144'. [ 436.491067][T12453] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2144'. [ 436.502918][T12454] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2144'. [ 436.796005][T12457] lo speed is unknown, defaulting to 1000 [ 436.829177][T12443] loop3: detected capacity change from 0 to 1 [ 436.840245][T12443] Dev loop3: unable to read RDB block 1 [ 436.853005][T12443] loop3: unable to read partition table [ 436.866359][T12443] loop3: partition table beyond EOD, truncated [ 436.883666][T12443] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 436.913432][ T9] usb 5-1: USB disconnect, device number 72 [ 437.260587][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 437.322456][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 437.376536][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 437.385829][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 437.400781][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 437.412163][ T2132] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 437.459408][ T2132] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 437.478092][ T2132] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 437.491629][ T9] usb 7-1: USB disconnect, device number 52 [ 437.499660][ T2132] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 437.550541][ T9] appletouch 7-1:0.85: input: appletouch disconnected [ 437.654879][T12478] kvm: user requested TSC rate below hardware speed [ 437.725434][T12482] futex_wake_op: syz.7.2152 tries to shift op by -1; fix this program [ 438.109936][T12491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2153'. [ 438.971469][ T9] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 439.106785][ T9] usb 8-1: device descriptor read/64, error -71 [ 439.306808][ T5951] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 439.346557][ T9] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 439.456682][ T5951] usb 7-1: Using ep0 maxpacket: 8 [ 439.465787][ T5951] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 439.475134][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.483329][ T9] usb 8-1: device descriptor read/64, error -71 [ 439.489630][ T5951] usb 7-1: Product: syz [ 439.493789][ T5951] usb 7-1: Manufacturer: syz [ 439.498559][ T5951] usb 7-1: SerialNumber: syz [ 439.505516][ T5951] usb 7-1: config 0 descriptor?? [ 439.617651][ T9] usb usb8-port1: attempt power cycle [ 439.714737][ T5951] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 439.969107][ T9] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 439.997386][ T9] usb 8-1: device descriptor read/8, error -71 [ 440.036146][T12541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2169'. [ 440.045748][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 440.058775][T12541] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2169'. [ 440.070121][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 440.081875][T12541] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2169'. [ 440.082125][T12543] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2171'. [ 440.257434][ T9] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 440.288252][ T9] usb 8-1: device descriptor read/8, error -71 [ 440.346633][ T5919] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 440.406962][ T9] usb usb8-port1: unable to enumerate USB device [ 440.516883][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 440.523711][ T5919] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 440.532464][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.543620][ T5919] usb 5-1: config 0 has no interface number 0 [ 440.549863][ T5919] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.564752][ T5919] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 440.574112][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 440.582253][ T5919] usb 5-1: Product: syz [ 440.586433][ T5919] usb 5-1: SerialNumber: syz [ 440.593467][ T5919] usb 5-1: config 0 descriptor?? [ 440.601403][ T5919] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 440.863182][ T846] usb 5-1: USB disconnect, device number 73 [ 441.475307][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 441.485105][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 441.494900][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 441.505137][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 441.514845][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 441.525490][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 441.534805][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 441.544700][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 441.559792][ T5951] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 441.577121][ T5951] dvbdev: DVB: registering new adapter (Terratec H7) [ 441.589589][ T5951] usb 7-1: media controller created [ 441.702868][T12562] __nla_validate_parse: 2 callbacks suppressed [ 441.702902][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2164'. [ 441.858038][ T6512] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 442.017144][ T6512] usb 5-1: Using ep0 maxpacket: 32 [ 442.025132][ T6512] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 442.033190][ T6512] usb 5-1: can't read configurations, error -61 [ 442.116712][ T846] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 442.166713][ T6512] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 442.270410][ T846] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 1.64 [ 442.280633][ T846] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 442.288711][ T846] usb 8-1: Product: syz [ 442.292925][ T846] usb 8-1: SerialNumber: syz [ 442.301243][ T846] usb 8-1: config 0 descriptor?? [ 442.312963][ T846] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 442.322330][ T6512] usb 5-1: Using ep0 maxpacket: 32 [ 442.330150][ T6512] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 442.338829][ T6512] usb 5-1: can't read configurations, error -61 [ 442.346128][ T846] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 442.357078][ T6512] usb usb5-port1: attempt power cycle [ 442.368329][ T846] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 442.524430][ T846] usb 8-1: USB disconnect, device number 37 [ 442.696708][ T6512] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 442.717411][ T6512] usb 5-1: Using ep0 maxpacket: 32 [ 442.725396][ T6512] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 442.733245][ T6512] usb 5-1: can't read configurations, error -61 [ 442.786152][ T5951] usb read operation failed. (-71) [ 442.810844][ T5951] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 442.835889][ T5951] usb 7-1: USB disconnect, device number 53 [ 442.876833][ T30] kauditd_printk_skb: 7543 callbacks suppressed [ 442.876856][ T30] audit: type=1326 audit(1766523204.080:7598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12566 comm="syz.6.2179" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f543478f749 code=0x0 [ 442.879096][ T6512] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 442.927721][ T6512] usb 5-1: Using ep0 maxpacket: 32 [ 442.934539][ T6512] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 442.942367][ T6512] usb 5-1: can't read configurations, error -61 [ 442.949226][ T6512] usb usb5-port1: unable to enumerate USB device [ 443.113522][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 443.123197][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 443.132621][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 443.143248][ T13] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 443.396592][ T6512] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 443.546567][ T6512] usb 8-1: Using ep0 maxpacket: 32 [ 443.554136][ T6512] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 443.562674][ T6512] usb 8-1: config 0 has no interface number 0 [ 443.569283][ T6512] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 443.582068][ T6512] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 443.591188][ T6512] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.599244][ T6512] usb 8-1: Product: syz [ 443.604119][ T6512] usb 8-1: Manufacturer: syz [ 443.608792][ T6512] usb 8-1: SerialNumber: syz [ 443.615268][ T6512] usb 8-1: config 0 descriptor?? [ 443.621807][T12571] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 443.812997][T12575] cgroup: Need name or subsystem set [ 443.840179][T12570] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 444.116582][ T5951] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 444.266747][ T5951] usb 7-1: Using ep0 maxpacket: 8 [ 444.273432][ T5951] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 444.283762][ T5951] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 444.293563][ T5951] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 444.305530][ T5951] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 444.318690][ T5951] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.329544][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.347895][ T5951] usbtmc 7-1:16.0: bulk endpoints not found [ 444.452682][ T6512] asix 8-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 445.466184][ T6512] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 445.478799][ T6512] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 445.489797][ T6512] asix 8-1:0.188: probe with driver asix failed with error -71 [ 445.504168][ T6512] usb 8-1: USB disconnect, device number 38 [ 445.582370][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.709401][ T30] audit: type=1326 audit(1766523206.910:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12584 comm="syz.4.2186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd4c18f749 code=0x0 [ 446.370100][ T5837] Bluetooth: hci4: connection err: -111 [ 446.376333][ T5837] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 446.385609][ T5837] Bluetooth: hci4: unexpected event for opcode 0x2062 [ 446.424846][T12599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.437885][ T5951] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 446.450339][T12599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.610443][ T5951] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 446.622955][ T5951] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 446.634460][ T5951] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 446.644291][ T5951] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 446.656961][ T5951] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 446.671161][ T5951] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 446.680913][ T5951] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 446.688935][ T5951] usb 8-1: Product: syz [ 446.693221][ T5951] usb 8-1: Manufacturer: syz [ 446.704246][ T5951] cdc_wdm 8-1:1.0: skipping garbage [ 446.710203][ T5951] cdc_wdm 8-1:1.0: skipping garbage [ 446.717111][ T5951] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 446.723023][ T5951] cdc_wdm 8-1:1.0: Unknown control protocol [ 446.893556][ T5897] usb 7-1: USB disconnect, device number 54 [ 446.971074][T12607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2190'. [ 447.148875][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2197'. [ 447.162390][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2197'. [ 447.484824][T12622] fuse: Bad value for 'group_id' [ 447.491683][T12622] fuse: Bad value for 'group_id' [ 447.558274][T12623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2200'. [ 447.571378][T12623] overlayfs: failed to resolve './file0/file0': -20 [ 448.306597][ T5897] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 448.466557][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 448.475295][ T5897] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 448.484741][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.492983][ T5897] usb 5-1: Product: syz [ 448.497326][ T5897] usb 5-1: Manufacturer: syz [ 448.501935][ T5897] usb 5-1: SerialNumber: syz [ 448.509339][ T5897] usb 5-1: config 0 descriptor?? [ 448.731727][ T5897] usb_8dev 5-1:0.0 can0: sending command message failed [ 448.740376][ T5897] usb_8dev 5-1:0.0 can0: can't get firmware version [ 448.778487][ T5897] usb_8dev 5-1:0.0: probe with driver usb_8dev failed with error -22 [ 448.794020][ T5897] usb 5-1: USB disconnect, device number 78 [ 449.180178][ T5897] usb 8-1: USB disconnect, device number 39 [ 449.516681][ T5951] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 449.591231][T12644] tmpfs: Unknown parameter 'Zd' [ 449.636795][T12646] 9p: Bad value for 'wfdno' [ 449.669565][T12647] netlink: 'syz.2.2207': attribute type 16 has an invalid length. [ 449.686666][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 449.689641][T12647] netlink: 'syz.2.2207': attribute type 2 has an invalid length. [ 449.700985][T12647] netlink: 'syz.2.2207': attribute type 2 has an invalid length. [ 449.710689][T12647] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.2207'. [ 449.717535][ T5951] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 449.748783][ T5951] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 449.756930][T12650] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 449.759993][ T5951] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 449.780142][T12650] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 449.780858][ T5951] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.803945][ T5951] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.813074][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.828409][ T5951] usbtmc 5-1:16.0: bulk endpoints not found [ 450.126786][ T5951] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 450.276557][ T5951] usb 8-1: Using ep0 maxpacket: 32 [ 450.283179][ T5951] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.294769][ T5951] usb 8-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 450.308484][ T5951] usb 8-1: config 0 interface 0 has no altsetting 0 [ 450.315105][ T5951] usb 8-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 450.324273][ T5951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.334251][ T5951] usb 8-1: config 0 descriptor?? [ 450.421166][T12617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.458096][ T5837] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 450.479347][ T5837] Bluetooth: hci4: Injecting HCI hardware error event [ 450.488928][ T5837] Bluetooth: hci4: hardware error 0x00 [ 450.557905][T12655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.571049][T12655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.786078][ T5951] isku 0003:1E7D:3264.0020: unknown main item tag 0x2 [ 450.798663][ T5951] isku 0003:1E7D:3264.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.7-1/input0 [ 451.190005][ T5951] usb 8-1: USB disconnect, device number 40 [ 452.026716][ T5951] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 452.178742][ T5951] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 452.187190][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.198846][ T5951] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 452.209860][ T5951] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 452.218002][ T5951] usb 8-1: Manufacturer: syz [ 452.224771][ T5951] usb 8-1: config 0 descriptor?? [ 452.278617][ T9] usb 5-1: USB disconnect, device number 79 [ 452.293175][ T5951] rc_core: IR keymap rc-hauppauge not found [ 452.300001][ T5951] Registered IR keymap rc-empty [ 452.311439][ T5951] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 452.337218][ T5951] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input35 [ 452.441026][T12679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.450287][T12679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.459644][ T5951] usb 8-1: USB disconnect, device number 41 [ 452.536646][ T5837] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 452.656774][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 452.826638][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 452.833820][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 452.842279][ T9] usb 5-1: can't read configurations, error -22 [ 452.976637][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 453.156798][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 453.164550][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 453.172845][ T9] usb 5-1: can't read configurations, error -22 [ 453.179859][ T9] usb usb5-port1: attempt power cycle [ 453.423377][T12705] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2226'. [ 453.508219][T12707] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2227'. [ 453.527006][ T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 453.547963][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 453.555469][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 453.563591][ T9] usb 5-1: can't read configurations, error -22 [ 453.700388][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 453.727269][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 453.734646][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 453.743937][ T9] usb 5-1: can't read configurations, error -22 [ 453.750582][ T9] usb usb5-port1: unable to enumerate USB device [ 453.766636][ T846] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 453.916714][ T846] usb 8-1: Using ep0 maxpacket: 32 [ 453.923835][ T846] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 453.932275][ T846] usb 8-1: config 0 has no interface number 0 [ 453.936738][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 453.938439][ T846] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 30309, setting to 64 [ 453.960979][ T846] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 453.970182][ T846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.978322][ T846] usb 8-1: Product: syz [ 453.982524][ T846] usb 8-1: Manufacturer: syz [ 453.987255][ T846] usb 8-1: SerialNumber: syz [ 453.994836][ T846] usb 8-1: config 0 descriptor?? [ 454.003428][ T846] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 454.013334][ T846] em28xx 8-1:0.132: Video interface 132 found: [ 454.106599][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 454.113555][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.123624][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.133409][ T9] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 454.144700][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.158191][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.170682][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.187268][ T9] usbtmc 7-1:16.0: bulk endpoints not found [ 454.220474][T12711] dvmrp6: entered allmulticast mode [ 454.403045][ T846] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 454.791971][T12725] pim6reg: entered allmulticast mode [ 454.798752][T12725] team0: entered allmulticast mode [ 454.803902][T12725] team_slave_0: entered allmulticast mode [ 454.809715][T12725] team_slave_1: entered allmulticast mode [ 454.819363][ T846] em28xx 8-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 454.835938][ T846] em28xx 8-1:0.132: board has no eeprom [ 454.896629][ T846] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 454.904770][ T846] em28xx 8-1:0.132: analog set to bulk mode. [ 454.911513][ T6512] em28xx 8-1:0.132: Registering V4L2 extension [ 454.926875][ T846] usb 8-1: USB disconnect, device number 42 [ 454.945333][ T846] em28xx 8-1:0.132: Disconnecting em28xx [ 455.022886][ T6512] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 455.030515][ T6512] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 455.043739][ T6512] em28xx 8-1:0.132: No AC97 audio processor [ 455.054204][ T6512] usb 8-1: Decoder not found [ 455.058889][ T6512] em28xx 8-1:0.132: failed to create media graph [ 455.065234][ T6512] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 455.074636][ T6512] em28xx 8-1:0.132: Remote control support is not available for this card. [ 455.083414][ T846] em28xx 8-1:0.132: Closing input extension [ 455.092081][ T846] em28xx 8-1:0.132: Freeing device [ 455.510264][T12737] syzkaller1: entered promiscuous mode [ 455.515791][T12737] syzkaller1: entered allmulticast mode [ 455.677357][T12739] openvswitch: netlink: Missing valid actions attribute. [ 455.684515][T12739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.758336][T12745] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 455.768084][ T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 455.781698][T12745] bond0: entered promiscuous mode [ 455.790012][T12745] bond_slave_0: entered promiscuous mode [ 455.795839][T12745] bond_slave_1: entered promiscuous mode [ 455.926565][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 455.926572][ T846] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 455.943491][T12751] loop3: detected capacity change from 0 to 1 [ 455.953803][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 455.963743][T12751] Dev loop3: unable to read RDB block 1 [ 455.963915][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.970634][T12751] loop3: unable to read partition table [ 455.970846][T12751] loop3: partition table beyond EOD, truncated [ 455.971519][T12751] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 455.981451][ T9] usb 5-1: Product: syz [ 456.006617][ T9] usb 5-1: Manufacturer: syz [ 456.012188][ T9] usb 5-1: SerialNumber: syz [ 456.028295][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 456.034570][ T9] r8152-cfgselector 5-1: config 0 descriptor?? [ 456.096636][ T846] usb 8-1: Using ep0 maxpacket: 16 [ 456.103690][ T846] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.114967][ T846] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.125005][ T846] usb 8-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 456.137615][ T846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.149429][ T846] usb 8-1: config 0 descriptor?? [ 456.273709][ T9] r8152-cfgselector 5-1: Unknown version 0x0000 [ 456.292006][ T9] r8152-cfgselector 5-1: bad CDC descriptors [ 456.310486][ T9] r8152-cfgselector 5-1: USB disconnect, device number 84 [ 456.616724][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 456.639248][ T846] usbhid 8-1:0.0: can't add hid device: -71 [ 456.666669][ T846] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 456.691324][ T846] usb 8-1: USB disconnect, device number 43 [ 456.719412][ T5897] usb 7-1: USB disconnect, device number 55 [ 456.787047][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 456.799488][ T9] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 456.816991][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.839815][ T9] usb 5-1: config 0 descriptor?? [ 456.855052][T12772] openvswitch: netlink: Flow actions attr not present in new flow. [ 456.867023][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 456.930359][T12774] ptrace attach of "./syz-executor exec"[9534] was attempted by "./syz-executor exec"[12774] [ 456.967401][T12776] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2249'. [ 457.076577][T12760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.100497][T12760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.176882][ T7749] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 458.338908][ T7749] usb 8-1: Using ep0 maxpacket: 8 [ 458.345902][ T7749] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.359798][ T7749] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.370017][ T7749] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 458.383249][ T7749] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.396563][ T7749] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 458.405641][ T7749] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.420793][ T7749] usbtmc 8-1:16.0: bulk endpoints not found [ 458.731831][ T9] gspca_sunplus: reg_w_riv err -71 [ 458.739496][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 458.750189][ T9] usb 5-1: USB disconnect, device number 85 [ 458.936986][ T5952] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 459.086548][ T5952] usb 7-1: Using ep0 maxpacket: 16 [ 459.100005][ T5952] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 459.108720][ T5952] usb 7-1: config 0 has no interface number 0 [ 459.114848][ T5952] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 459.125266][ T5952] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 459.142973][ T5952] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 459.155435][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.163825][ T5952] usb 7-1: Product: syz [ 459.168866][ T5952] usb 7-1: Manufacturer: syz [ 459.173477][ T5952] usb 7-1: SerialNumber: syz [ 459.180396][ T5952] usb 7-1: config 0 descriptor?? [ 459.186078][T12793] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 459.193853][T12793] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 459.280595][T12798] cgroup: Bad value for 'name' [ 459.402427][T12793] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 459.410227][T12793] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 459.431989][ T5952] asix 7-1:0.251: probe with driver asix failed with error -71 [ 459.459502][ T5952] usb 7-1: USB disconnect, device number 56 [ 459.536729][ T9] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 459.652171][T12811] FAULT_INJECTION: forcing a failure. [ 459.652171][T12811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.671418][T12811] CPU: 0 UID: 0 PID: 12811 Comm: syz.6.2261 Not tainted syzkaller #0 PREEMPT(full) [ 459.671444][T12811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.671455][T12811] Call Trace: [ 459.671465][T12811] [ 459.671475][T12811] dump_stack_lvl+0x189/0x250 [ 459.671498][T12811] ? __pfx____ratelimit+0x10/0x10 [ 459.671517][T12811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.671532][T12811] ? __pfx__printk+0x10/0x10 [ 459.671557][T12811] ? __might_fault+0xb0/0x130 [ 459.671591][T12811] should_fail_ex+0x414/0x560 [ 459.671618][T12811] _copy_from_user+0x2d/0xb0 [ 459.671644][T12811] ___sys_sendmsg+0x158/0x2a0 [ 459.671668][T12811] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.671695][T12811] ? rcu_read_lock_any_held+0xb3/0x120 [ 459.671742][T12811] ? __fget_files+0x2a/0x420 [ 459.671760][T12811] ? __fget_files+0x3a0/0x420 [ 459.671788][T12811] __x64_sys_sendmsg+0x19b/0x260 [ 459.671810][T12811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.671847][T12811] ? __pfx_ksys_write+0x10/0x10 [ 459.671875][T12811] ? do_syscall_64+0xbe/0xf80 [ 459.671898][T12811] do_syscall_64+0xfa/0xf80 [ 459.671918][T12811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.671936][T12811] ? clear_bhb_loop+0x60/0xb0 [ 459.671958][T12811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.671975][T12811] RIP: 0033:0x7f543478f749 [ 459.671993][T12811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.672010][T12811] RSP: 002b:00007f5435601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.672029][T12811] RAX: ffffffffffffffda RBX: 00007f54349e5fa0 RCX: 00007f543478f749 [ 459.672042][T12811] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 459.672054][T12811] RBP: 00007f5435601090 R08: 0000000000000000 R09: 0000000000000000 [ 459.672066][T12811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.672077][T12811] R13: 00007f54349e6038 R14: 00007f54349e5fa0 R15: 00007ffd3fd7c698 [ 459.672107][T12811] [ 459.893155][ T9] usb 5-1: config 0 has no interfaces? [ 459.901937][ T9] usb 5-1: New USB device found, idVendor=1b3d, idProduct=019a, bcdDevice=58.8c [ 459.911526][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.922283][ T9] usb 5-1: Product: syz [ 459.926773][ T9] usb 5-1: Manufacturer: syz [ 459.931437][ T9] usb 5-1: SerialNumber: syz [ 459.953354][ T9] usb 5-1: config 0 descriptor?? [ 460.082852][T12816] syzkaller1: entered promiscuous mode [ 460.089197][T12816] syzkaller1: entered allmulticast mode [ 460.834081][T12819] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2264'. [ 460.977511][ T7749] usb 8-1: USB disconnect, device number 44 [ 461.213287][T12826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.248292][T12826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.422917][T12826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.472465][T12826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.509595][T12826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.522139][T12826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.627506][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 461.647183][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 461.656612][ T846] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 461.670111][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 461.684120][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 461.698240][T12835] FAULT_INJECTION: forcing a failure. [ 461.698240][T12835] name failslab, interval 1, probability 0, space 0, times 0 [ 461.712875][T12835] CPU: 1 UID: 0 PID: 12835 Comm: syz.6.2270 Not tainted syzkaller #0 PREEMPT(full) [ 461.712899][T12835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.712911][T12835] Call Trace: [ 461.712918][T12835] [ 461.712927][T12835] dump_stack_lvl+0x189/0x250 [ 461.712951][T12835] ? __pfx____ratelimit+0x10/0x10 [ 461.712970][T12835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.712987][T12835] ? __pfx__printk+0x10/0x10 [ 461.713015][T12835] ? __pfx___might_resched+0x10/0x10 [ 461.713039][T12835] ? fs_reclaim_acquire+0x7d/0x100 [ 461.713062][T12835] should_fail_ex+0x414/0x560 [ 461.713087][T12835] should_failslab+0xa8/0x100 [ 461.713108][T12835] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 461.713132][T12835] ? __alloc_skb+0x255/0x430 [ 461.713148][T12835] ? napi_skb_cache_get+0x4a5/0x780 [ 461.713164][T12835] ? napi_skb_cache_get+0x151/0x780 [ 461.713186][T12835] __alloc_skb+0x255/0x430 [ 461.713206][T12835] ? __pfx___alloc_skb+0x10/0x10 [ 461.713225][T12835] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 461.713267][T12835] netlink_sendmsg+0x5c6/0xb30 [ 461.713289][T12835] ? aa_sk_perm+0x15f/0x920 [ 461.713317][T12835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.713347][T12835] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 461.713375][T12835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.713395][T12835] sock_sendmsg_nosec+0x18f/0x1d0 [ 461.713421][T12835] ____sys_sendmsg+0x577/0x880 [ 461.713447][T12835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.713476][T12835] ? import_iovec+0x74/0xa0 [ 461.713503][T12835] ___sys_sendmsg+0x21f/0x2a0 [ 461.713525][T12835] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.713551][T12835] ? rcu_read_lock_any_held+0xb3/0x120 [ 461.713596][T12835] ? __fget_files+0x2a/0x420 [ 461.713614][T12835] ? __fget_files+0x3a0/0x420 [ 461.713644][T12835] __x64_sys_sendmsg+0x19b/0x260 [ 461.713666][T12835] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 461.713693][T12835] ? __pfx_ksys_write+0x10/0x10 [ 461.713719][T12835] ? do_syscall_64+0xbe/0xf80 [ 461.713740][T12835] do_syscall_64+0xfa/0xf80 [ 461.713758][T12835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.713776][T12835] ? clear_bhb_loop+0x60/0xb0 [ 461.713797][T12835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.713814][T12835] RIP: 0033:0x7f543478f749 [ 461.713830][T12835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.713844][T12835] RSP: 002b:00007f5435601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.713863][T12835] RAX: ffffffffffffffda RBX: 00007f54349e5fa0 RCX: 00007f543478f749 [ 461.713876][T12835] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 461.713887][T12835] RBP: 00007f5435601090 R08: 0000000000000000 R09: 0000000000000000 [ 461.713898][T12835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.713908][T12835] R13: 00007f54349e6038 R14: 00007f54349e5fa0 R15: 00007ffd3fd7c698 [ 461.713938][T12835] [ 461.744331][ T9] usb 5-1: USB disconnect, device number 86 [ 461.878446][ T846] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.050813][ T846] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.067972][ T846] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 462.077468][ T846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.096823][ T846] usb 8-1: config 0 descriptor?? [ 462.336562][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 462.466664][ T9] usb 7-1: device descriptor read/64, error -71 [ 462.523691][ T846] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 462.534270][ T846] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 462.706567][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 462.719644][ T846] cp2112 0003:10C4:EA90.0021: Part Number: 0x82 Device Version: 0xFE [ 462.836560][ T9] usb 7-1: device descriptor read/64, error -71 [ 462.946817][ T9] usb usb7-port1: attempt power cycle [ 463.296649][ T9] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 463.340186][ T9] usb 7-1: device descriptor read/8, error -71 [ 463.437102][T12829] cp2112 0003:10C4:EA90.0021: Error starting transaction: -38 [ 463.449239][ T846] cp2112 0003:10C4:EA90.0021: error reading lock byte: -71 [ 463.469450][ T846] usb 8-1: USB disconnect, device number 45 [ 463.597646][ T9] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 463.637183][ T9] usb 7-1: device descriptor read/8, error -71 [ 463.755285][ T9] usb usb7-port1: unable to enumerate USB device [ 463.853899][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 463.875083][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.887884][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 463.904402][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 463.919003][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 464.014168][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 464.025861][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.036355][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 464.061640][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 464.081260][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 464.186750][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 464.200586][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.224644][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 464.245073][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 464.261823][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 464.315469][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 464.326286][T12867] netlink: 172 bytes leftover after parsing attributes in process `syz.7.2283'. [ 464.328106][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.353445][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 464.372623][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.373753][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 464.383343][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.402497][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 464.404704][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 464.412826][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.427628][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 464.650197][ T49] bridge_slave_1: left allmulticast mode [ 464.660165][ T49] bridge_slave_1: left promiscuous mode [ 464.665901][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.677845][ T49] bridge_slave_0: left promiscuous mode [ 464.683857][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.776250][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 464.790797][ T5897] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 464.791235][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 464.825236][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 464.835936][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 464.877974][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 464.896640][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 464.910302][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 464.920534][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 464.930309][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 464.940100][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 464.949759][ T5897] usb 7-1: device descriptor read/64, error -71 [ 464.956100][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 464.965711][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 464.975239][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 464.984940][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 464.994319][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 465.004621][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 465.014161][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 465.023940][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 465.034228][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 465.044093][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 465.072663][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 465.085017][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 465.111354][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 465.122786][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 465.227831][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 465.237595][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 465.237958][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.246897][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 465.246933][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 465.283552][ T49] bond0 (unregistering): Released all slaves [ 465.300001][T12870] lo speed is unknown, defaulting to 1000 [ 465.385343][ T49] tipc: Disabling bearer [ 465.394355][ T49] tipc: Left network mode [ 465.410627][ T5897] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 465.458044][ T49] IPVS: stopping backup sync thread 7731 ... [ 465.505927][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 465.526590][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 465.546717][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 465.556148][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 465.576566][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 465.587956][ T5897] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 465.596245][ T5897] usb 7-1: config 179 has no interface number 0 [ 465.602699][ T5897] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 465.613996][ T5897] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 465.628575][ T5897] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 465.639856][ T5897] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 465.670152][ T5897] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 465.684014][ T5897] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 465.693461][ T5897] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.706683][T12878] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 465.714198][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 465.743966][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 465.765404][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 465.778463][ T594] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 466.007175][ T5897] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input37 [ 466.211989][T12878] syzkaller1: entered promiscuous mode [ 466.228039][T12878] syzkaller1: entered allmulticast mode [ 466.238982][T12878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.247975][T12878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.457015][ T5840] Bluetooth: hci0: command tx timeout [ 466.518302][ T9] usb 7-1: USB disconnect, device number 62 [ 466.518302][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 466.518434][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 466.850936][T12919] FAULT_INJECTION: forcing a failure. [ 466.850936][T12919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.900507][T12919] CPU: 1 UID: 0 PID: 12919 Comm: syz.6.2290 Not tainted syzkaller #0 PREEMPT(full) [ 466.900532][T12919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 466.900543][T12919] Call Trace: [ 466.900551][T12919] [ 466.900560][T12919] dump_stack_lvl+0x189/0x250 [ 466.900585][T12919] ? __pfx____ratelimit+0x10/0x10 [ 466.900605][T12919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.900623][T12919] ? __pfx__printk+0x10/0x10 [ 466.900649][T12919] ? __might_fault+0xb0/0x130 [ 466.900682][T12919] should_fail_ex+0x414/0x560 [ 466.900707][T12919] _copy_from_iter+0x1cd/0x1630 [ 466.900732][T12919] ? __build_skb_around+0x22d/0x3c0 [ 466.900756][T12919] ? __pfx__copy_from_iter+0x10/0x10 [ 466.900774][T12919] ? __alloc_skb+0x2f1/0x430 [ 466.900794][T12919] ? __pfx___alloc_skb+0x10/0x10 [ 466.900812][T12919] ? netlink_sendmsg+0x642/0xb30 [ 466.900833][T12919] ? skb_put+0x11b/0x210 [ 466.900854][T12919] netlink_sendmsg+0x6b2/0xb30 [ 466.900874][T12919] ? aa_sk_perm+0x15f/0x920 [ 466.900901][T12919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.900924][T12919] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 466.900951][T12919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 466.900971][T12919] sock_sendmsg_nosec+0x18f/0x1d0 [ 466.900997][T12919] ____sys_sendmsg+0x577/0x880 [ 466.901024][T12919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.901053][T12919] ? import_iovec+0x74/0xa0 [ 466.901086][T12919] ___sys_sendmsg+0x21f/0x2a0 [ 466.901108][T12919] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.901133][T12919] ? rcu_read_lock_any_held+0xb3/0x120 [ 466.901178][T12919] ? __fget_files+0x2a/0x420 [ 466.901195][T12919] ? __fget_files+0x3a0/0x420 [ 466.901221][T12919] __x64_sys_sendmsg+0x19b/0x260 [ 466.901244][T12919] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 466.901273][T12919] ? __pfx_ksys_write+0x10/0x10 [ 466.901302][T12919] ? do_syscall_64+0xbe/0xf80 [ 466.901324][T12919] do_syscall_64+0xfa/0xf80 [ 466.901344][T12919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.901362][T12919] ? clear_bhb_loop+0x60/0xb0 [ 466.901383][T12919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.901400][T12919] RIP: 0033:0x7f543478f749 [ 466.901418][T12919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.901433][T12919] RSP: 002b:00007f54355e0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.901453][T12919] RAX: ffffffffffffffda RBX: 00007f54349e6090 RCX: 00007f543478f749 [ 466.901465][T12919] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 466.901476][T12919] RBP: 00007f54355e0090 R08: 0000000000000000 R09: 0000000000000000 [ 466.901487][T12919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.901498][T12919] R13: 00007f54349e6128 R14: 00007f54349e6090 R15: 00007ffd3fd7c698 [ 466.901528][T12919] [ 467.424732][ T49] hsr_slave_0: left promiscuous mode [ 467.462575][ T49] hsr_slave_1: left promiscuous mode [ 467.551216][ T49] veth1_macvtap: left promiscuous mode [ 467.571559][ T49] veth0_macvtap: left promiscuous mode [ 467.586877][ T49] veth1_vlan: left promiscuous mode [ 467.594809][ T49] veth0_vlan: left promiscuous mode [ 467.607538][ T9] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 467.771256][ T49] pim6reg (unregistering): left allmulticast mode [ 467.779097][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.802547][ T9] usb 8-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=e4.df [ 467.811711][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.811918][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 467.830036][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 467.840214][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 467.841975][ T9] usb 8-1: config 0 descriptor?? [ 467.856334][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 467.870811][ T9] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 467.879792][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 467.889420][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 467.898913][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 467.911190][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 467.926589][ T5897] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 467.934603][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 467.945008][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 467.955302][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 467.968672][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 467.982201][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 467.992729][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.005129][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.014661][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.024953][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.034558][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.044032][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.054038][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.063553][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.075080][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.090728][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.100283][ T5897] usb 7-1: Using ep0 maxpacket: 16 [ 468.106369][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.119260][ T5897] usb 7-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 468.128553][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.136798][ T5897] usb 7-1: Product: syz [ 468.140969][ T5897] usb 7-1: Manufacturer: syz [ 468.145568][ T5897] usb 7-1: SerialNumber: syz [ 468.147902][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.160276][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.162923][ T5897] usb 7-1: config 0 descriptor?? [ 468.176128][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.183892][ T5897] usb-storage 7-1:0.0: USB Mass Storage device detected [ 468.186292][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.203571][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.213865][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.226923][ T5897] usb-storage 7-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 468.234489][ T5897] usb-storage 7-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 468.234489][ T5897] Please send a copy of this message to and [ 468.239685][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.269530][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.292013][ T9] pwc: recv_control_msg error -71 req 02 val 2b00 [ 468.299834][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.302112][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 468.319250][ T9] pwc: recv_control_msg error -71 req 04 val 1700 [ 468.326162][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 468.332769][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.336132][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 468.349756][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 468.356802][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 468.364341][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 468.371479][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 468.377018][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.382306][ T9] pwc: recv_control_msg error -71 req 02 val 2200 [ 468.395392][ T9] pwc: recv_control_msg error -71 req 06 val 0600 [ 468.402854][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 468.410071][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 468.414287][ T5897] usb 7-1: USB disconnect, device number 63 [ 468.420668][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 468.428431][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.434310][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 468.440566][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.447141][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 468.463235][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.473953][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 468.489136][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.489610][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 468.499535][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.507139][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 468.515119][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.540699][ T5840] Bluetooth: hci0: command tx timeout [ 468.546393][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.551916][ T9] pwc: Registered as video103. [ 468.569937][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.580194][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input38 [ 468.590341][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.615371][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.634569][ T9] usb 8-1: USB disconnect, device number 46 [ 468.640929][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.655626][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.674741][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.685160][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.695985][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.715784][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.739144][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.769499][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.780409][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.792259][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.803921][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.813628][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.830588][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.854781][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.866216][ T3545] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.899717][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.916602][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 468.927872][ T49] team_slave_1 (unregistering): left allmulticast mode [ 468.930630][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 468.955240][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 468.965313][ T49] team0 (unregistering): Port device team_slave_1 removed [ 468.980389][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 468.996584][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.011299][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.025510][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.037600][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.047506][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.070279][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.084828][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.104891][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.114835][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.115167][ T49] team_slave_0 (unregistering): left allmulticast mode [ 469.124181][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.124221][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.124298][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.124331][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.124366][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.182518][ T49] team0 (unregistering): Port device team_slave_0 removed [ 469.193190][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.223844][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.233869][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.244511][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.254353][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.263994][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.273496][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.282861][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.292526][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.302851][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.313293][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.322843][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.332326][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.341753][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.351269][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.360611][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.370187][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.379846][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.389304][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.398614][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.409176][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.419820][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.429662][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.436622][ T9] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 469.439140][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.456038][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.465536][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.475457][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.485031][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.494616][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.511217][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.520920][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.530646][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.540641][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.559244][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.569206][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.578596][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.588428][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.598271][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.607891][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.609785][ T9] usb 7-1: device descriptor read/64, error -71 [ 469.618727][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.634075][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.670963][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.706692][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.719920][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.733271][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.752865][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.765064][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.778221][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.790564][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.808758][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.857481][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.869993][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.881135][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.899411][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 469.910096][ T9] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 469.936712][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 469.956648][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 469.967331][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 469.988461][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 470.001205][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 470.011684][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 470.023751][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 470.040434][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 470.050619][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 470.060795][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 470.071060][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 470.082760][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 470.093598][ T9] usb 7-1: device descriptor read/64, error -71 [ 470.107764][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 470.119458][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 470.130487][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 470.141787][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 470.152286][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 470.162176][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 470.173021][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 470.208641][ T9] usb usb7-port1: attempt power cycle [ 470.220220][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 470.233472][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 470.251959][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 470.262417][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 470.363391][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 470.364051][ T49] team0 (unregistering): left allmulticast mode [ 470.375242][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 470.389055][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 470.398547][ T3473] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 470.535407][T12870] chnl_net:caif_netlink_parms(): no params data found [ 470.557529][ T9] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 470.579364][T12953] netlink: 'syz.2.2296': attribute type 10 has an invalid length. [ 470.602383][T12955] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2297'. [ 470.617474][ T9] usb 7-1: device descriptor read/8, error -71 [ 470.618344][ T5840] Bluetooth: hci0: command tx timeout [ 470.828189][T12953] team0 (unregistering): left allmulticast mode [ 470.834667][T12953] team_slave_0: left allmulticast mode [ 470.836653][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 470.840305][T12953] team_slave_1: left allmulticast mode [ 470.850904][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 470.865954][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 470.876610][ T9] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 470.890107][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 470.895062][T12953] team0 (unregistering): Port device team_slave_0 removed [ 470.918429][ T9] usb 7-1: device descriptor read/8, error -71 [ 470.938616][T12953] team0 (unregistering): Port device team_slave_1 removed [ 471.026839][ T9] usb usb7-port1: unable to enumerate USB device [ 471.197196][T12975] FAULT_INJECTION: forcing a failure. [ 471.197196][T12975] name failslab, interval 1, probability 0, space 0, times 0 [ 471.230144][ T6079] usb 3-1: ti_download_firmware - firmware not found [ 471.236937][T12975] CPU: 0 UID: 0 PID: 12975 Comm: syz.7.2299 Not tainted syzkaller #0 PREEMPT(full) [ 471.236958][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 471.236969][T12975] Call Trace: [ 471.236977][T12975] [ 471.236985][T12975] dump_stack_lvl+0x189/0x250 [ 471.237008][T12975] ? __pfx____ratelimit+0x10/0x10 [ 471.237027][T12975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.237046][T12975] ? __pfx__printk+0x10/0x10 [ 471.237068][T12975] ? save_netdev_trace_buffer+0x4b5/0x5a0 [ 471.237108][T12975] should_fail_ex+0x414/0x560 [ 471.237135][T12975] should_failslab+0xa8/0x100 [ 471.237157][T12975] kmem_cache_alloc_noprof+0x88/0x710 [ 471.237180][T12975] ? __netlink_lookup+0xbd/0x8a0 [ 471.237201][T12975] ? skb_clone+0x212/0x3a0 [ 471.237226][T12975] skb_clone+0x212/0x3a0 [ 471.237250][T12975] __netlink_deliver_tap+0x424/0x8b0 [ 471.237284][T12975] ? netlink_deliver_tap+0x2e/0x1b0 [ 471.237307][T12975] netlink_deliver_tap+0x19c/0x1b0 [ 471.237329][T12975] netlink_unicast+0x7fa/0x9e0 [ 471.237365][T12975] ? __pfx_netlink_unicast+0x10/0x10 [ 471.237386][T12975] ? netlink_sendmsg+0x642/0xb30 [ 471.237405][T12975] ? skb_put+0x11b/0x210 [ 471.237426][T12975] netlink_sendmsg+0x805/0xb30 [ 471.237446][T12975] ? aa_sk_perm+0x15f/0x920 [ 471.237472][T12975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.237496][T12975] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 471.237527][T12975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.237547][T12975] sock_sendmsg_nosec+0x18f/0x1d0 [ 471.237574][T12975] ____sys_sendmsg+0x577/0x880 [ 471.237603][T12975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.237630][T12975] ? import_iovec+0x74/0xa0 [ 471.237653][T12975] ___sys_sendmsg+0x21f/0x2a0 [ 471.237672][T12975] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.237697][T12975] ? rcu_read_lock_any_held+0xb3/0x120 [ 471.237739][T12975] ? __fget_files+0x2a/0x420 [ 471.237758][T12975] ? __fget_files+0x3a0/0x420 [ 471.237786][T12975] __x64_sys_sendmsg+0x19b/0x260 [ 471.237808][T12975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.237836][T12975] ? __pfx_ksys_write+0x10/0x10 [ 471.237861][T12975] ? do_syscall_64+0xbe/0xf80 [ 471.237884][T12975] do_syscall_64+0xfa/0xf80 [ 471.237903][T12975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.237919][T12975] ? clear_bhb_loop+0x60/0xb0 [ 471.237938][T12975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.237954][T12975] RIP: 0033:0x7ff410b8f749 [ 471.237970][T12975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.237985][T12975] RSP: 002b:00007ff411a6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.238004][T12975] RAX: ffffffffffffffda RBX: 00007ff410de6090 RCX: 00007ff410b8f749 [ 471.238015][T12975] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 471.238026][T12975] RBP: 00007ff411a6e090 R08: 0000000000000000 R09: 0000000000000000 [ 471.238037][T12975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.238047][T12975] R13: 00007ff410de6128 R14: 00007ff410de6090 R15: 00007ffd9f0d0068 [ 471.238074][T12975] [ 471.246222][ T6079] ti_usb_3410_5052 3-1:1.48: probe with driver ti_usb_3410_5052 failed with error -2 [ 471.571751][T12977] rose0: entered allmulticast mode [ 471.595291][T12870] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.624376][ T6079] usb 3-1: USB disconnect, device number 64 [ 471.630999][T12870] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.641699][T12870] bridge_slave_0: entered allmulticast mode [ 471.657677][ T9] usb 8-1: new low-speed USB device number 47 using dummy_hcd [ 471.671687][T12870] bridge_slave_0: entered promiscuous mode [ 471.691005][T12870] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.699443][T12870] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.708006][T12870] bridge_slave_1: entered allmulticast mode [ 471.715187][T12870] bridge_slave_1: entered promiscuous mode [ 471.775736][T12870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.790369][T12870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.866148][T12870] team0: Port device team_slave_0 added [ 471.875870][T12870] team0: Port device team_slave_1 added [ 471.948394][ T6079] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 471.950850][T12870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.963529][T12870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.999792][T12870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.037374][T12870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.044353][T12870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.082867][T12870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.133207][ T6079] usb 3-1: config 1 has an invalid descriptor of length 58, skipping remainder of the config [ 472.153874][ T6079] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.185534][ T6079] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 472.200284][T12870] hsr_slave_0: entered promiscuous mode [ 472.214747][T12870] hsr_slave_1: entered promiscuous mode [ 472.217959][ T6079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 472.250530][T12870] debugfs: 'hsr0' already exists in 'hsr' [ 472.266603][ T6079] usb 3-1: SerialNumber: syz [ 472.272679][T12870] Cannot create hsr debugfs directory [ 472.542780][ T6079] usb 3-1: 0:2 : does not exist [ 472.548476][ T6079] usb 3-1: unit 5 not found! [ 472.656560][ T6079] usb 3-1: USB disconnect, device number 65 [ 472.696673][ T5840] Bluetooth: hci0: command tx timeout [ 472.733437][ T7360] udevd[7360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.043648][T12870] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 473.069280][T12870] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 473.092342][T12870] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 473.107436][T12870] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 473.329350][T12870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.364629][T13025] program syz.7.2307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 473.365591][T12870] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.405515][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.412705][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.433995][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.441472][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.554890][T13030] FAULT_INJECTION: forcing a failure. [ 473.554890][T13030] name failslab, interval 1, probability 0, space 0, times 0 [ 473.588011][T13030] CPU: 0 UID: 0 PID: 13030 Comm: syz.2.2309 Not tainted syzkaller #0 PREEMPT(full) [ 473.588037][T13030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.588058][T13030] Call Trace: [ 473.588066][T13030] [ 473.588074][T13030] dump_stack_lvl+0x189/0x250 [ 473.588098][T13030] ? __pfx____ratelimit+0x10/0x10 [ 473.588117][T13030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.588134][T13030] ? __pfx__printk+0x10/0x10 [ 473.588165][T13030] ? __pfx___might_resched+0x10/0x10 [ 473.588189][T13030] ? fs_reclaim_acquire+0x7d/0x100 [ 473.588212][T13030] should_fail_ex+0x414/0x560 [ 473.588239][T13030] should_failslab+0xa8/0x100 [ 473.588260][T13030] __kmalloc_noprof+0xdf/0x800 [ 473.588284][T13030] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 473.588309][T13030] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 473.588334][T13030] genl_family_rcv_msg_doit+0xb8/0x300 [ 473.588373][T13030] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 473.588407][T13030] ? apparmor_capable+0x137/0x1a0 [ 473.588439][T13030] ? bpf_lsm_capable+0x9/0x20 [ 473.588457][T13030] ? security_capable+0x7e/0x2e0 [ 473.588480][T13030] genl_rcv_msg+0x60e/0x790 [ 473.588509][T13030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.588529][T13030] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 473.588561][T13030] ? __pfx_nl80211_start_ap+0x10/0x10 [ 473.588584][T13030] ? __pfx_nl80211_post_doit+0x10/0x10 [ 473.588623][T13030] netlink_rcv_skb+0x208/0x470 [ 473.588646][T13030] ? __pfx_genl_rcv_msg+0x10/0x10 [ 473.588671][T13030] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 473.588709][T13030] ? down_read+0x274/0x2e0 [ 473.588728][T13030] ? genl_rcv+0xd/0x40 [ 473.588753][T13030] genl_rcv+0x28/0x40 [ 473.588774][T13030] netlink_unicast+0x82f/0x9e0 [ 473.588802][T13030] ? __pfx_netlink_unicast+0x10/0x10 [ 473.588823][T13030] ? netlink_sendmsg+0x642/0xb30 [ 473.588842][T13030] ? skb_put+0x11b/0x210 [ 473.588864][T13030] netlink_sendmsg+0x805/0xb30 [ 473.588883][T13030] ? aa_sk_perm+0x15f/0x920 [ 473.588910][T13030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.588933][T13030] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 473.588963][T13030] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.588983][T13030] sock_sendmsg_nosec+0x18f/0x1d0 [ 473.589010][T13030] ____sys_sendmsg+0x577/0x880 [ 473.589040][T13030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 473.589069][T13030] ? import_iovec+0x74/0xa0 [ 473.589096][T13030] ___sys_sendmsg+0x21f/0x2a0 [ 473.589118][T13030] ? __pfx____sys_sendmsg+0x10/0x10 [ 473.589145][T13030] ? rcu_read_lock_any_held+0xb3/0x120 [ 473.589193][T13030] ? __fget_files+0x2a/0x420 [ 473.589212][T13030] ? __fget_files+0x3a0/0x420 [ 473.589242][T13030] __x64_sys_sendmsg+0x19b/0x260 [ 473.589265][T13030] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 473.589295][T13030] ? __pfx_ksys_write+0x10/0x10 [ 473.589324][T13030] ? do_syscall_64+0xbe/0xf80 [ 473.589346][T13030] do_syscall_64+0xfa/0xf80 [ 473.589365][T13030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.589389][T13030] ? clear_bhb_loop+0x60/0xb0 [ 473.589410][T13030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.589428][T13030] RIP: 0033:0x7f02f1d8f749 [ 473.589445][T13030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.589460][T13030] RSP: 002b:00007f02f2cca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.589479][T13030] RAX: ffffffffffffffda RBX: 00007f02f1fe5fa0 RCX: 00007f02f1d8f749 [ 473.589491][T13030] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 473.589501][T13030] RBP: 00007f02f2cca090 R08: 0000000000000000 R09: 0000000000000000 [ 473.589511][T13030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.589519][T13030] R13: 00007f02f1fe6038 R14: 00007f02f1fe5fa0 R15: 00007fff257fa9f8 [ 473.589543][T13030] [ 474.159251][T12870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.286902][ T5883] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 474.460828][ T5883] usb 3-1: config 16 has an invalid interface number: 19 but max is 0 [ 474.469356][ T5883] usb 3-1: config 16 has no interface number 0 [ 474.477868][ T5883] usb 3-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 474.495684][ T5883] usb 3-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 474.514619][ T5883] usb 3-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 474.534047][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.554688][ T5883] usb 3-1: Product: syz [ 474.571460][ T5883] usb 3-1: Manufacturer: syz [ 474.581784][ T5883] usb 3-1: SerialNumber: syz [ 474.605748][T12870] veth0_vlan: entered promiscuous mode [ 474.626218][T12870] veth1_vlan: entered promiscuous mode [ 474.671665][T12870] veth0_macvtap: entered promiscuous mode [ 474.688807][T12870] veth1_macvtap: entered promiscuous mode [ 474.717397][T12870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.744602][T12870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.765513][ T3070] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.785193][ T3070] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.796789][ T5952] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 474.840711][ T3070] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.893271][ T5883] usb 3-1: USB disconnect, device number 66 [ 474.930535][ T7360] udevd[7360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:16.19/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.951631][ T3070] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.019983][ T5952] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 475.037119][ T5952] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.053595][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.071059][ T5952] usb 8-1: config 0 descriptor?? [ 475.073954][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.091378][ T5952] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 475.139188][ T594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.158357][ T594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.320113][T13063] ./file0: Can't lookup blockdev [ 475.491599][ T5952] cpia1 8-1:0.0: unexpected state after lo power cmd: 66 [ 475.572707][T13067] netlink: 'syz.2.2315': attribute type 4 has an invalid length. [ 475.892887][ T5952] gspca_cpia1: usb_control_msg 02, error -32 [ 475.911266][ T5952] gspca_cpia1: usb_control_msg 02, error -71 [ 475.924570][ T5952] cpia1 8-1:0.0: only firmware version 1 is supported (got: 156) [ 475.941167][ T5952] usb 8-1: USB disconnect, device number 48 [ 475.987444][ T846] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 476.106609][ T6079] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 476.160662][ T846] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 476.170274][ T846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.179948][ T846] usb 3-1: Product: syz [ 476.184134][ T846] usb 3-1: Manufacturer: syz [ 476.191296][ T846] usb 3-1: SerialNumber: syz [ 476.199013][ T846] usb 3-1: config 0 descriptor?? [ 476.236816][ T6079] usb 9-1: device descriptor read/64, error -71 [ 476.487754][ T6079] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 476.613088][ T846] airspy 3-1:0.0: Board ID: 00 [ 476.619903][ T846] airspy 3-1:0.0: Firmware version: [ 476.631488][ T6079] usb 9-1: device descriptor read/64, error -71 [ 476.655064][ T30] audit: type=1326 audit(1766523237.850:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.7.2321" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff410b8f749 code=0x0 [ 476.735823][T13084] loop6: detected capacity change from 0 to 2640 [ 476.756962][ T6079] usb usb9-port1: attempt power cycle [ 476.765280][ T6376] buffer_io_error: 25 callbacks suppressed [ 476.765291][ T6376] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.782349][ T6376] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.791470][ T6376] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.800077][ T6376] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.808894][ T6376] Buffer I/O error on dev loop6, logical block 0, async page read [ 476.864006][T13088] syzkaller1: entered promiscuous mode [ 476.870387][T13088] syzkaller1: entered allmulticast mode [ 476.956562][ T5952] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 477.098256][ T5952] usb 8-1: device descriptor read/64, error -71 [ 477.116586][ T6079] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 477.137499][ T6079] usb 9-1: device descriptor read/8, error -71 [ 477.227710][ T846] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 477.243033][ T846] airspy 3-1:0.0: Registered as swradio24 [ 477.252908][ T846] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 477.274504][ T846] usb 3-1: USB disconnect, device number 67 [ 477.347636][ T5952] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 477.378182][ T6079] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 477.408710][ T6079] usb 9-1: device descriptor read/8, error -71 [ 477.488170][ T5952] usb 8-1: device descriptor read/64, error -71 [ 477.527021][ T6079] usb usb9-port1: unable to enumerate USB device [ 477.597671][ T5952] usb usb8-port1: attempt power cycle [ 477.946638][ T5952] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 477.977383][ T5952] usb 8-1: device descriptor read/8, error -71 [ 478.226624][ T5952] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 478.248118][ T5952] usb 8-1: device descriptor read/8, error -71 [ 478.357178][ T5952] usb usb8-port1: unable to enumerate USB device [ 478.720282][T13100] netlink: 'syz.2.2326': attribute type 2 has an invalid length. [ 479.024882][T13117] evm: overlay not supported [ 479.296793][ T5919] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 479.304493][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 479.456714][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 479.463610][ T9] usb 9-1: config 0 has an invalid interface number: 54 but max is 0 [ 479.472383][ T9] usb 9-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config [ 479.483564][ T9] usb 9-1: config 0 has no interface number 0 [ 479.489747][ T9] usb 9-1: config 0 interface 54 altsetting 22 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 479.503566][ T9] usb 9-1: config 0 interface 54 has no altsetting 0 [ 479.512917][ T5919] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 479.522164][ T9] usb 9-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 479.531448][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.539564][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.549255][ T5919] usb 3-1: Product: syz [ 479.553425][ T5919] usb 3-1: Manufacturer: syz [ 479.558109][ T9] usb 9-1: Product: syz [ 479.562265][ T9] usb 9-1: Manufacturer: syz [ 479.566902][ T5919] usb 3-1: SerialNumber: syz [ 479.572406][ T9] usb 9-1: SerialNumber: syz [ 479.583964][ T5919] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 479.594639][ T9] usb 9-1: config 0 descriptor?? [ 479.661793][ T5829] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 479.811616][ T9] ums_eneub6250 9-1:0.54: USB Mass Storage device detected [ 479.899924][ T9] usb 9-1: USB disconnect, device number 6 [ 479.903836][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.943655][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.177666][ T9] usb 3-1: USB disconnect, device number 68 [ 480.360079][T13146] afs: Unknown parameter 'afs' [ 480.496751][ T5952] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 480.606652][ T5919] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 480.646555][ T5952] usb 8-1: Using ep0 maxpacket: 32 [ 480.653831][ T5952] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.665225][ T5952] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.676164][ T5952] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 480.685474][ T5952] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.695834][ T5952] usb 8-1: config 0 descriptor?? [ 480.706584][ T5829] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 480.718636][ T5952] hub 8-1:0.0: USB hub found [ 480.719571][ T5829] ath9k_htc: Failed to initialize the device [ 480.732854][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 480.768604][ T5919] usb 9-1: config 1 interface 0 has no altsetting 0 [ 480.786216][ T5919] usb 9-1: New USB device found, idVendor=056a, idProduct=00c7, bcdDevice= 0.40 [ 480.798818][ T5919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.809023][ T5919] usb 9-1: Product: syz [ 480.813209][ T5919] usb 9-1: Manufacturer: 쵺죻㣋䥾뒽릆쟨诸猟肆荳Иᒔ뿣ꇏ촼꫋큒򝦄 [ 480.824013][ T5919] usb 9-1: SerialNumber: syz [ 480.947110][ T5952] hub 8-1:0.0: 10 ports detected [ 480.952663][ T5952] hub 8-1:0.0: insufficient power available to use all downstream ports [ 481.049218][ T5919] usbhid 9-1:1.0: can't add hid device: -71 [ 481.055327][ T5919] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 481.068856][ T5919] usb 9-1: USB disconnect, device number 7 [ 481.148909][ T5952] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 481.156565][ T5952] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 481.168909][ T5952] usbhid 8-1:0.0: can't add hid device: -71 [ 481.174917][ T5952] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 481.207428][ T5952] usb 8-1: USB disconnect, device number 53 [ 481.670220][T13154] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2343'. [ 481.976410][T13171] tmpfs: Unknown parameter 'sizV' [ 482.036687][ T5952] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 482.206559][ T5952] usb 8-1: Using ep0 maxpacket: 8 [ 482.214840][ T5952] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.224790][ T5952] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.234808][ T5952] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.244916][ T5952] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.258197][ T5952] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 482.267386][ T5952] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.366630][ T9] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 482.481089][ T5952] usb 8-1: usb_control_msg returned -32 [ 482.489483][ T5952] usbtmc 8-1:16.0: can't read capabilities [ 482.498475][ T9] usb 3-1: device descriptor read/64, error -71 [ 482.500748][ T5952] usb 8-1: USB disconnect, device number 54 [ 482.746766][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 482.886659][ T9] usb 3-1: device descriptor read/64, error -71 [ 482.958508][ T846] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 482.997044][ T9] usb usb3-port1: attempt power cycle [ 483.128808][ T846] usb 9-1: config 0 interface 0 has no altsetting 0 [ 483.136617][ T846] usb 9-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 483.145781][ T846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.162825][ T846] usb 9-1: config 0 descriptor?? [ 483.336740][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 483.368305][ T9] usb 3-1: device descriptor read/8, error -71 [ 483.442419][T13209] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 483.451246][T13209] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 483.460855][T13209] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 483.469203][T13209] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 483.549597][T13214] pimreg: entered allmulticast mode [ 483.555278][T13209] tipc: Started in network mode [ 483.560341][T13209] tipc: Node identity 8e3fb9856667, cluster identity 4711 [ 483.570915][T13209] tipc: Enabled bearer , priority 0 [ 483.619479][T13211] tipc: Resetting bearer [ 483.641567][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 483.662654][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 483.663584][T13208] tipc: Disabling bearer [ 483.678570][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 483.692420][ T9] usb 3-1: device descriptor read/8, error -71 [ 483.709324][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 483.726269][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 483.807025][ T9] usb usb3-port1: unable to enumerate USB device [ 483.913994][ T846] usb 9-1: string descriptor 0 read error: -71 [ 483.931239][ T846] uclogic 0003:5543:0047.0022: failed retrieving string descriptor #200: -71 [ 483.961130][ T846] uclogic 0003:5543:0047.0022: failed retrieving pen parameters: -71 [ 483.961157][ T846] uclogic 0003:5543:0047.0022: failed probing pen v2 parameters: -71 [ 483.961215][ T846] uclogic 0003:5543:0047.0022: failed probing parameters: -71 [ 483.961319][ T846] uclogic 0003:5543:0047.0022: probe with driver uclogic failed with error -71 [ 483.977101][ T846] usb 9-1: USB disconnect, device number 8 [ 483.987398][ T5897] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 484.146983][ T5897] usb 8-1: Using ep0 maxpacket: 8 [ 484.167870][ T5897] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.195111][ T5897] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 484.231247][ T5897] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 484.258101][ T5897] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.287172][ T5897] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 484.314671][ T5897] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.587549][ T5897] usb 8-1: usb_control_msg returned -32 [ 484.594754][ T5897] usbtmc 8-1:16.0: can't read capabilities [ 484.634648][ T5897] usb 8-1: USB disconnect, device number 55 [ 484.732508][T13240] kvm: pic: non byte read [ 484.752233][T13240] kvm: pic: non byte read [ 484.762333][T13240] kvm: pic: non byte read [ 484.776516][T13240] kvm: pic: non byte read [ 484.792759][T13240] kvm: pic: non byte read [ 484.808419][T13240] kvm: pic: non byte read [ 484.824545][T13240] kvm: pic: non byte read [ 485.288236][T13248] netlink: 'syz.8.2366': attribute type 1 has an invalid length. [ 485.412474][T13269] loop5: detected capacity change from 0 to 7 [ 485.460454][T13269] Dev loop5: unable to read RDB block 7 [ 485.477306][ T5883] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 485.489193][T13269] loop5: AHDI p1 p2 [ 485.502933][T13269] loop5: partition table partially beyond EOD, truncated [ 485.542200][T13269] loop5: p1 start 1702000233 is beyond EOD, truncated [ 485.597534][ T9] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 485.650368][ T5883] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 485.678099][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.711586][ T5883] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 485.730864][ T5883] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 485.748463][ T5883] usb 3-1: Manufacturer: syz [ 485.760634][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.781851][ T5883] usb 3-1: config 0 descriptor?? [ 485.789210][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 485.822782][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 485.845243][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 485.882301][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 485.909809][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 485.936020][ T9] usb 9-1: Manufacturer: syz [ 485.946610][ T5883] rc_core: IR keymap rc-hauppauge not found [ 485.968835][ T9] usb 9-1: config 0 descriptor?? [ 485.975583][ T5883] Registered IR keymap rc-empty [ 485.993902][ T5883] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 486.034203][ T5883] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 486.075162][ T5883] usb 3-1: USB disconnect, device number 73 [ 486.126927][ T10] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 486.309294][ T9] rc_core: IR keymap rc-hauppauge not found [ 486.311782][T13268] syz.6.2370 (13268): drop_caches: 2 [ 486.345841][ T9] Registered IR keymap rc-empty [ 486.351566][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.377116][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.384516][ T10] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 486.396678][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.417777][ T10] usb 8-1: config 1 has no interface number 1 [ 486.425257][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 486.446909][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 486.469257][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input41 [ 486.488018][ T10] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 486.511998][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.549040][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 486.567163][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.574651][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.587357][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.595154][ T10] usb 8-1: Product: syz [ 486.599767][ T10] usb 8-1: Manufacturer: syz [ 486.604557][ T10] usb 8-1: SerialNumber: syz [ 486.614114][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.648345][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.655879][T13278] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 486.675651][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.696776][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.697368][ T5952] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 486.716644][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.747422][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.756179][T13261] 9p: Bad value for 'rfdno' [ 486.786917][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 486.820466][ T9] mceusb 9-1:0.0: Registered ҟ with mce emulator interface version 1 [ 486.841642][ T9] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 486.870430][ T9] usb 9-1: USB disconnect, device number 9 [ 486.886533][ T5952] usb 7-1: Using ep0 maxpacket: 32 [ 486.897653][ T10] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 486.901756][ T5952] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 486.908874][ T10] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 486.948361][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.972845][ T5952] usb 7-1: Product: syz [ 486.981941][ T5952] usb 7-1: Manufacturer: syz [ 486.995780][ T5952] usb 7-1: SerialNumber: syz [ 487.028931][ T5952] usb 7-1: config 0 descriptor?? [ 487.085035][ T10] usb 8-1: USB disconnect, device number 56 [ 487.151480][T10804] udevd[10804]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.260812][ T5952] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 068 [ 487.462966][ T10] usb 7-1: USB disconnect, device number 68 [ 487.806848][ T10] usb 8-1: new full-speed USB device number 57 using dummy_hcd [ 487.846903][ T37] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 487.889251][T13327] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 487.898198][T13326] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 487.966552][ T10] usb 8-1: device descriptor read/64, error -71 [ 487.996759][ T37] usb 9-1: Using ep0 maxpacket: 8 [ 488.008652][ T37] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 488.019929][ T37] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 488.030849][ T37] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 488.040925][ T37] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.055060][ T37] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 488.064319][ T37] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.206643][ T10] usb 8-1: new full-speed USB device number 58 using dummy_hcd [ 488.269613][T13340] overlay: Unknown parameter 'smackfsfloor' [ 488.280934][T13340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 488.290274][ T37] usb 9-1: usb_control_msg returned -32 [ 488.296143][ T37] usbtmc 9-1:16.0: can't read capabilities [ 488.312624][T13342] overlay: Unknown parameter 'smackfsfloor' [ 488.315938][ T37] usb 9-1: USB disconnect, device number 10 [ 488.333061][T13340] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 488.346732][ T10] usb 8-1: device descriptor read/64, error -71 [ 488.427625][ T5952] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 488.458662][ T10] usb usb8-port1: attempt power cycle [ 488.468178][T13345] tipc: Can't bind to reserved service type 0 [ 488.578839][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 488.592632][ T5952] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 488.604948][ T5952] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 488.620357][ T5952] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 100, changing to 10 [ 488.632753][ T5952] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 18268, setting to 1024 [ 488.644623][ T5952] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF [ 488.656315][ T5952] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 488.668718][ T5952] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 488.678648][ T5952] usb 3-1: config 155 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 11 [ 488.697822][ T5952] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 488.707032][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.715033][ T5952] usb 3-1: Product: syz [ 488.719290][ T5952] usb 3-1: Manufacturer: syz [ 488.723900][ T5952] usb 3-1: SerialNumber: syz [ 488.732243][T13338] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 488.764462][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 488.781735][ T5952] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input42 [ 488.791868][T13355] loop5: detected capacity change from 0 to 7 [ 488.817450][ T10] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 488.824165][ C1] blk_print_req_error: 25 callbacks suppressed [ 488.824185][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 488.840937][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 488.852425][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 488.861537][ T10] usb 8-1: device descriptor read/8, error -71 [ 488.862062][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 488.880145][ T5952] imon:send_packet: error submitting urb(-90) [ 488.888133][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 488.897816][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 488.906600][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 488.906627][ T5952] imon 3-1:155.0: panel buttons/knobs setup failed [ 488.916222][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 488.922852][ T5952] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 488.939726][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 488.949384][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 488.957384][ T5952] (id 0x00) [ 488.965392][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 488.975012][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 488.983588][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 488.993270][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 489.001198][T13355] ldm_validate_partition_table(): Disk read failed. [ 489.008077][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.017696][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 489.046906][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.056578][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 489.064757][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 489.074363][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 489.077736][ T5952] rc_core: IR keymap rc-imon-pad not found [ 489.091318][T13355] Dev loop5: unable to read RDB block 0 [ 489.098397][ T5952] Registered IR keymap rc-empty [ 489.103682][ T5952] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 489.109394][T13355] loop5: unable to read partition table [ 489.114755][ T5952] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 489.126250][T13355] loop5: partition table beyond EOD, truncated [ 489.130299][ T846] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 489.135504][T13355] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 489.158699][ T5952] imon:send_packet: error submitting urb(-90) [ 489.173041][ T10] usb 8-1: new full-speed USB device number 60 using dummy_hcd [ 489.176689][ T5952] imon 3-1:155.0: remote input dev register failed [ 489.187695][ T5952] imon 3-1:155.0: imon_init_intf0: rc device setup failed [ 489.217281][ T10] usb 8-1: device descriptor read/8, error -71 [ 489.220061][ T5952] imon 3-1:155.0: unable to initialize intf0, err 0 [ 489.230693][ T5952] imon:imon_probe: failed to initialize context! [ 489.240513][ T5952] imon 3-1:155.0: unable to register, err -19 [ 489.264985][ T5952] usb 3-1: USB disconnect, device number 74 [ 489.319156][ T846] usb 9-1: config 0 interface 0 has no altsetting 0 [ 489.325824][ T846] usb 9-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 489.337557][ T10] usb usb8-port1: unable to enumerate USB device [ 489.340658][ T846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.376404][ T846] usb 9-1: config 0 descriptor?? [ 489.385186][ T846] pwc: Creative Labs Webcam Pro Ex detected. [ 489.588233][T13358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.597209][T13358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.605928][ T846] pwc: Failed to set LED on/off time (-71) [ 489.612694][ T846] pwc: send_video_command error -71 [ 489.618028][ T846] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 489.625755][ T846] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 489.638404][ T846] usb 9-1: USB disconnect, device number 11 [ 489.776706][ T5952] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 489.934125][ T5952] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 489.943726][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 489.952380][ T5952] usb 3-1: Product: syz [ 489.958025][ T5952] usb 3-1: Manufacturer: syz [ 489.962729][ T5952] usb 3-1: SerialNumber: syz [ 489.975392][ T5952] usb 3-1: config 0 descriptor?? [ 489.985012][ T5952] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 489.994435][ T5952] dvb-usb: bulk message failed: -22 (2/0) [ 490.005047][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 490.015706][ T5952] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 490.024052][ T5952] usb 3-1: media controller created [ 490.045249][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 490.185322][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.210487][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.221983][ T5952] dvb-usb: bulk message failed: -22 (1/0) [ 490.234648][T13372] netlink: 2384 bytes leftover after parsing attributes in process `syz.8.2394'. [ 490.273914][ T5952] DVB: Unable to find symbol mt352_attach() [ 490.281114][ T5952] dvb-usb: bulk message failed: -22 (5/0) [ 490.287393][ T5952] zl10353_read_register: readreg error (reg=127, ret==-121) [ 490.295010][ T5952] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 490.378057][ T5952] rc_core: IR keymap rc-dvico-mce not found [ 490.384107][ T5952] Registered IR keymap rc-empty [ 490.392843][ T5952] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 490.404898][ T5952] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input45 [ 490.417320][ T5952] dvb-usb: schedule remote query interval to 100 msecs. [ 490.424460][ T5952] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 490.529242][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 490.589863][ T5952] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 490.607926][ T846] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 490.636581][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 490.654753][T13381] netlink: 'syz.7.2396': attribute type 11 has an invalid length. [ 490.726576][ T5952] usb 9-1: device descriptor read/64, error -71 [ 490.746621][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 490.776706][ T846] usb 7-1: Using ep0 maxpacket: 16 [ 490.783933][ T846] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 490.795568][ T846] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 490.804842][ T846] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.814029][ T846] usb 7-1: Product: syz [ 490.818439][ T846] usb 7-1: Manufacturer: syz [ 490.823050][ T846] usb 7-1: SerialNumber: syz [ 490.831079][ T846] usb 7-1: config 0 descriptor?? [ 490.839927][ T846] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 490.848657][ T846] usb 7-1: Detected FT232R [ 490.856638][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 490.966574][ T5952] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 490.974968][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 491.041274][ T846] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 491.086613][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 491.106642][ T5952] usb 9-1: device descriptor read/64, error -71 [ 491.196537][ T5897] dvb-usb: bulk message failed: -22 (1/0) [ 491.216973][ T5952] usb usb9-port1: attempt power cycle [ 491.254356][ T846] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 491.306551][ T846] dvb-usb: bulk message failed: -22 (1/0) [ 491.416578][ T846] dvb-usb: bulk message failed: -22 (1/0) [ 491.452948][ T10] usb 7-1: USB disconnect, device number 69 [ 491.467233][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 491.480412][ T10] ftdi_sio 7-1:0.0: device disconnected [ 491.527757][ T846] dvb-usb: bulk message failed: -22 (1/0) [ 491.556624][ T5952] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 491.577429][ T5952] usb 9-1: device descriptor read/8, error -71 [ 491.636589][ T846] dvb-usb: bulk message failed: -22 (1/0) [ 491.746603][ T846] dvb-usb: bulk message failed: -22 (1/0) [ 491.816695][ T5952] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 491.836970][ T5952] usb 9-1: device descriptor read/8, error -71 [ 491.857801][ T846] dvb-usb: bulk message failed: -22 (1/0) [ 491.947278][ T5952] usb usb9-port1: unable to enumerate USB device [ 491.966535][ T5952] dvb-usb: bulk message failed: -22 (1/0) [ 492.086927][ T5952] dvb-usb: bulk message failed: -22 (1/0) [ 492.196510][ T5952] dvb-usb: bulk message failed: -22 (1/0) [ 492.246567][ T10] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 492.283433][T13390] lo speed is unknown, defaulting to 1000 [ 492.307015][ T5952] dvb-usb: bulk message failed: -22 (1/0) [ 492.426629][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 492.426748][ T5952] dvb-usb: bulk message failed: -22 (1/0) [ 492.439162][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.449680][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.466811][ T10] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.479122][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.493266][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 492.504311][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.546524][ T5952] dvb-usb: bulk message failed: -22 (1/0) [ 492.564694][ T7749] usb 3-1: USB disconnect, device number 75 [ 492.666375][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 492.679563][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 492.727586][ T10] usb 8-1: usb_control_msg returned -32 [ 492.747313][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 492.759163][ T10] usbtmc 8-1:16.0: can't read capabilities [ 492.790853][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 492.807384][ T7749] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 492.834366][ T10] usb 8-1: USB disconnect, device number 61 [ 492.838309][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 start [ 492.877452][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff88807b1ee000 on ffff8880777b4000 end [ 492.901879][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 start [ 492.917118][ T3442] netdevice_event(NETDEV_UNREGISTER) for ffff888054718000 on ffff88802460c000 end [ 493.337108][ T7749] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 493.405838][T13420] [ 493.408219][T13420] ===================================================== [ 493.415229][T13420] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 493.422857][T13420] syzkaller #0 Not tainted [ 493.427279][T13420] ----------------------------------------------------- [ 493.434227][T13420] syz.8.2405/13420 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 493.441953][T13420] ffffffff8e00c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 493.450754][T13420] [ 493.450754][T13420] and this task is already holding: [ 493.458147][T13420] ffff8880776e5820 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 493.466886][T13420] which would create a new lock dependency: [ 493.472787][T13420] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 493.476717][ T9] usb 7-1: new full-speed USB device number 70 using dummy_hcd [ 493.480389][T13420] [ 493.480389][T13420] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 493.480402][T13420] (&dev->event_lock#2){..-.}-{3:3} [ 493.497395][T13420] [ 493.497395][T13420] ... which became SOFTIRQ-irq-safe at: [ 493.510281][T13420] lock_acquire+0x117/0x340 [ 493.514883][T13420] _raw_spin_lock_irqsave+0xa7/0xf0 [ 493.520161][T13420] input_event+0x76/0xe0 [ 493.524512][T13420] hidinput_hid_event+0x1404/0x1e50 [ 493.529798][T13420] hid_process_event+0x4be/0x620 [ 493.534811][T13420] hid_report_raw_event+0xe91/0x1720 [ 493.540169][T13420] hid_input_report+0x44b/0x580 [ 493.545181][T13420] hid_irq_in+0x47e/0x6d0 [ 493.549667][T13420] __usb_hcd_giveback_urb+0x376/0x540 [ 493.555126][T13420] dummy_timer+0x85f/0x45b0 [ 493.559721][T13420] __hrtimer_run_queues+0x51c/0xc30 [ 493.564997][T13420] hrtimer_run_softirq+0x187/0x2b0 [ 493.570192][T13420] handle_softirqs+0x27d/0x850 [ 493.575094][T13420] __irq_exit_rcu+0xca/0x1f0 [ 493.579772][T13420] irq_exit_rcu+0x9/0x30 [ 493.584104][T13420] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 493.589814][T13420] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 493.595873][T13420] seqcount_lockdep_reader_access+0x17d/0x1c0 [ 493.602031][T13420] __follow_mount_rcu+0x20b/0x5c0 [ 493.607149][T13420] step_into_slowpath+0x4bc/0x7d0 [ 493.612257][T13420] path_openat+0x226d/0x3840 [ 493.616931][T13420] do_filp_open+0x1fa/0x410 [ 493.621569][T13420] do_sys_openat2+0x121/0x200 [ 493.626342][T13420] __x64_sys_openat+0x138/0x170 [ 493.631279][T13420] do_syscall_64+0xfa/0xf80 [ 493.635862][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.641831][T13420] [ 493.641831][T13420] to a SOFTIRQ-irq-unsafe lock: [ 493.648835][T13420] (tasklist_lock){.+.+}-{3:3} [ 493.648863][T13420] [ 493.648863][T13420] ... which became SOFTIRQ-irq-unsafe at: [ 493.661494][T13420] ... [ 493.661581][T13420] lock_acquire+0x117/0x340 [ 493.668757][T13420] _raw_read_lock+0x36/0x50 [ 493.673347][T13420] __do_wait+0xde/0x740 [ 493.677590][T13420] do_wait+0x1e8/0x4f0 [ 493.681750][T13420] kernel_wait+0xab/0x170 [ 493.686158][T13420] call_usermodehelper_exec_work+0xbe/0x230 [ 493.692233][T13420] process_one_work+0x93a/0x15a0 [ 493.697349][T13420] worker_thread+0x9b0/0xee0 [ 493.702030][T13420] kthread+0x711/0x8a0 [ 493.706178][T13420] ret_from_fork+0x599/0xb30 [ 493.710845][T13420] ret_from_fork_asm+0x1a/0x30 [ 493.715686][T13420] [ 493.715686][T13420] other info that might help us debug this: [ 493.715686][T13420] [ 493.725901][T13420] Chain exists of: [ 493.725901][T13420] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 493.725901][T13420] [ 493.738974][T13420] Possible interrupt unsafe locking scenario: [ 493.738974][T13420] [ 493.747299][T13420] CPU0 CPU1 [ 493.752658][T13420] ---- ---- [ 493.758022][T13420] lock(tasklist_lock); [ 493.762262][T13420] local_irq_disable(); [ 493.769008][T13420] lock(&dev->event_lock#2); [ 493.776208][T13420] lock(&f_owner->lock); [ 493.783046][T13420] [ 493.786496][T13420] lock(&dev->event_lock#2); [ 493.791348][T13420] [ 493.791348][T13420] *** DEADLOCK *** [ 493.791348][T13420] [ 493.799480][T13420] 2 locks held by syz.8.2405/13420: [ 493.804662][T13420] #0: ffff88807a9ea9e0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b0/0x4f0 [ 493.813190][T13420] #1: ffff8880776e5820 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 493.822374][T13420] [ 493.822374][T13420] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 493.832768][T13420] -> (&dev->event_lock#2){..-.}-{3:3} { [ 493.838503][T13420] IN-SOFTIRQ-W at: [ 493.842650][T13420] lock_acquire+0x117/0x340 [ 493.849144][T13420] _raw_spin_lock_irqsave+0xa7/0xf0 [ 493.856324][T13420] input_event+0x76/0xe0 [ 493.862638][T13420] hidinput_hid_event+0x1404/0x1e50 [ 493.869830][T13420] hid_process_event+0x4be/0x620 [ 493.876750][T13420] hid_report_raw_event+0xe91/0x1720 [ 493.884016][T13420] hid_input_report+0x44b/0x580 [ 493.890855][T13420] hid_irq_in+0x47e/0x6d0 [ 493.897185][T13420] __usb_hcd_giveback_urb+0x376/0x540 [ 493.904546][T13420] dummy_timer+0x85f/0x45b0 [ 493.911040][T13420] __hrtimer_run_queues+0x51c/0xc30 [ 493.918235][T13420] hrtimer_run_softirq+0x187/0x2b0 [ 493.925337][T13420] handle_softirqs+0x27d/0x850 [ 493.932178][T13420] __irq_exit_rcu+0xca/0x1f0 [ 493.938761][T13420] irq_exit_rcu+0x9/0x30 [ 493.945165][T13420] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 493.952868][T13420] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 493.960903][T13420] seqcount_lockdep_reader_access+0x17d/0x1c0 [ 493.968957][T13420] __follow_mount_rcu+0x20b/0x5c0 [ 493.975976][T13420] step_into_slowpath+0x4bc/0x7d0 [ 493.983078][T13420] path_openat+0x226d/0x3840 [ 493.989672][T13420] do_filp_open+0x1fa/0x410 [ 493.996171][T13420] do_sys_openat2+0x121/0x200 [ 494.002838][T13420] __x64_sys_openat+0x138/0x170 [ 494.009673][T13420] do_syscall_64+0xfa/0xf80 [ 494.016162][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.024040][T13420] INITIAL USE at: [ 494.028173][T13420] lock_acquire+0x117/0x340 [ 494.034584][T13420] _raw_spin_lock_irqsave+0xa7/0xf0 [ 494.041678][T13420] input_inject_event+0xa5/0x340 [ 494.048518][T13420] kbd_led_trigger_activate+0xbc/0x100 [ 494.055894][T13420] led_trigger_set+0x52d/0x950 [ 494.062581][T13420] led_trigger_set_default+0x260/0x2a0 [ 494.069943][T13420] led_classdev_register_ext+0x73d/0x960 [ 494.077481][T13420] input_leds_connect+0x517/0x790 [ 494.084415][T13420] input_register_device+0xd00/0x1170 [ 494.091691][T13420] atkbd_connect+0x73b/0xa50 [ 494.098183][T13420] serio_driver_probe+0x82/0xd0 [ 494.104956][T13420] really_probe+0x26d/0xad0 [ 494.111361][T13420] __driver_probe_device+0x18c/0x320 [ 494.118550][T13420] driver_probe_device+0x4f/0x240 [ 494.125491][T13420] __driver_attach+0x349/0x650 [ 494.132156][T13420] bus_for_each_dev+0x233/0x2b0 [ 494.138997][T13420] serio_handle_event+0x1f9/0x8d0 [ 494.145924][T13420] process_one_work+0x93a/0x15a0 [ 494.152775][T13420] worker_thread+0x9b0/0xee0 [ 494.159265][T13420] kthread+0x711/0x8a0 [ 494.165228][T13420] ret_from_fork+0x599/0xb30 [ 494.171714][T13420] ret_from_fork_asm+0x1a/0x30 [ 494.178375][T13420] } [ 494.181030][T13420] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 494.190437][T13420] -> (&new->fa_lock){...-}-{3:3} { [ 494.195639][T13420] IN-SOFTIRQ-R at: [ 494.199702][T13420] lock_acquire+0x117/0x340 [ 494.206022][T13420] _raw_read_lock_irqsave+0xaf/0x100 [ 494.213118][T13420] kill_fasync+0x199/0x4d0 [ 494.219347][T13420] sock_wake_async+0x137/0x160 [ 494.225930][T13420] sock_def_error_report+0x332/0x390 [ 494.233048][T13420] sk_error_report+0x48/0x270 [ 494.239540][T13420] tcp_validate_incoming+0x15d5/0x22a0 [ 494.246813][T13420] tcp_rcv_established+0xb58/0x2580 [ 494.253823][T13420] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 494.260315][T13420] tcp_v6_rcv+0x2247/0x2ae0 [ 494.266631][T13420] ip6_protocol_deliver_rcu+0xcb0/0x15c0 [ 494.274077][T13420] ip6_input_finish+0x191/0x370 [ 494.280739][T13420] NF_HOOK+0x30c/0x3a0 [ 494.286620][T13420] ip6_input+0x16a/0x270 [ 494.292683][T13420] NF_HOOK+0x30c/0x3a0 [ 494.298576][T13420] __netif_receive_skb+0xd3/0x380 [ 494.305520][T13420] process_backlog+0x622/0x1500 [ 494.312192][T13420] __napi_poll+0xae/0x320 [ 494.318353][T13420] net_rx_action+0x672/0xe50 [ 494.324762][T13420] handle_softirqs+0x27d/0x850 [ 494.331351][T13420] do_softirq+0xec/0x180 [ 494.338522][T13420] __local_bh_enable_ip+0x17d/0x1c0 [ 494.345557][T13420] inet_csk_listen_stop+0x7a0/0xac0 [ 494.352587][T13420] __tcp_close+0xa0/0xfe0 [ 494.358748][T13420] tcp_close+0x28/0x110 [ 494.364720][T13420] inet_release+0x144/0x190 [ 494.371037][T13420] __sock_release+0xb9/0x250 [ 494.377451][T13420] sock_close+0x1c/0x30 [ 494.383436][T13420] __fput+0x44c/0xa70 [ 494.389256][T13420] task_work_run+0x1d4/0x260 [ 494.395674][T13420] exit_to_user_mode_loop+0xff/0x4f0 [ 494.402785][T13420] do_syscall_64+0x2d0/0xf80 [ 494.409202][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.416914][T13420] INITIAL USE at: [ 494.420888][T13420] lock_acquire+0x117/0x340 [ 494.427121][T13420] _raw_write_lock_irq+0xa2/0xf0 [ 494.433793][T13420] fasync_remove_entry+0xf1/0x1c0 [ 494.440661][T13420] sock_fasync+0x85/0xf0 [ 494.446643][T13420] __fput+0x8a2/0xa70 [ 494.452378][T13420] task_work_run+0x1d4/0x260 [ 494.459598][T13420] exit_to_user_mode_loop+0xff/0x4f0 [ 494.466624][T13420] do_syscall_64+0x2d0/0xf80 [ 494.472947][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.480576][T13420] INITIAL READ USE at: [ 494.484999][T13420] lock_acquire+0x117/0x340 [ 494.491676][T13420] _raw_read_lock_irqsave+0xaf/0x100 [ 494.499127][T13420] kill_fasync+0x199/0x4d0 [ 494.505799][T13420] sock_wake_async+0x137/0x160 [ 494.512726][T13420] sk_wake_async+0x189/0x280 [ 494.519475][T13420] tcp_rcv_state_process+0x2a1d/0x4520 [ 494.527093][T13420] tcp_v6_do_rcv+0xbef/0x1ba0 [ 494.533934][T13420] __release_sock+0x1b8/0x3a0 [ 494.540777][T13420] release_sock+0x5f/0x1f0 [ 494.547369][T13420] __inet_stream_connect+0x8df/0xe70 [ 494.554828][T13420] inet_stream_connect+0x66/0xa0 [ 494.561976][T13420] __sys_connect+0x316/0x440 [ 494.568738][T13420] __x64_sys_connect+0x7a/0x90 [ 494.575669][T13420] do_syscall_64+0xfa/0xf80 [ 494.582348][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.590432][T13420] } [ 494.593013][T13420] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 494.601813][T13420] ... acquired at: [ 494.605716][T13420] _raw_read_lock_irqsave+0xaf/0x100 [ 494.611175][T13420] kill_fasync+0x199/0x4d0 [ 494.615775][T13420] mousedev_notify_readers+0x6f1/0xc00 [ 494.621507][T13420] mousedev_event+0x602/0x1320 [ 494.626452][T13420] input_handle_events_default+0xd4/0x1a0 [ 494.632338][T13420] input_pass_values+0x288/0x890 [ 494.637456][T13420] input_event_dispose+0x330/0x6b0 [ 494.642739][T13420] input_inject_event+0x1dd/0x340 [ 494.647929][T13420] evdev_write+0x2fc/0x480 [ 494.652511][T13420] vfs_write+0x27e/0xb30 [ 494.656923][T13420] ksys_write+0x145/0x250 [ 494.661424][T13420] do_syscall_64+0xfa/0xf80 [ 494.666090][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.672147][T13420] [ 494.674461][T13420] -> (&f_owner->lock){....}-{3:3} { [ 494.679665][T13420] INITIAL USE at: [ 494.683560][T13420] lock_acquire+0x117/0x340 [ 494.689621][T13420] _raw_write_lock_irq+0xa2/0xf0 [ 494.696111][T13420] __f_setown+0x67/0x370 [ 494.701910][T13420] fcntl_dirnotify+0x3fa/0x6a0 [ 494.708249][T13420] do_fcntl+0x745/0x1a50 [ 494.714138][T13420] __se_sys_fcntl+0xc8/0x150 [ 494.720285][T13420] do_syscall_64+0xfa/0xf80 [ 494.726344][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.733790][T13420] INITIAL READ USE at: [ 494.738106][T13420] lock_acquire+0x117/0x340 [ 494.744686][T13420] _raw_read_lock_irqsave+0xaf/0x100 [ 494.751953][T13420] send_sigio+0x38/0x370 [ 494.758182][T13420] dnotify_handle_event+0x169/0x440 [ 494.765368][T13420] fsnotify+0x180b/0x1ab0 [ 494.771685][T13420] vfs_readv+0x703/0x850 [ 494.777915][T13420] __x64_sys_preadv+0x197/0x2a0 [ 494.784747][T13420] do_syscall_64+0xfa/0xf80 [ 494.791236][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.799115][T13420] } [ 494.801602][T13420] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 494.810446][T13420] ... acquired at: [ 494.814238][T13420] _raw_read_lock_irqsave+0xaf/0x100 [ 494.819683][T13420] send_sigio+0x38/0x370 [ 494.824102][T13420] kill_fasync+0x24d/0x4d0 [ 494.828681][T13420] lease_break_callback+0x26/0x30 [ 494.833964][T13420] __break_lease+0x864/0x16f0 [ 494.838798][T13420] do_dentry_open+0x1010/0x14e0 [ 494.843809][T13420] vfs_open+0x3b/0x340 [ 494.848035][T13420] path_openat+0x2de0/0x3840 [ 494.852787][T13420] do_filp_open+0x1fa/0x410 [ 494.857451][T13420] do_sys_openat2+0x121/0x200 [ 494.862289][T13420] __x64_sys_openat+0x138/0x170 [ 494.867300][T13420] do_syscall_64+0xfa/0xf80 [ 494.871966][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.878018][T13420] [ 494.880330][T13420] [ 494.880330][T13420] the dependencies between the lock to be acquired [ 494.880337][T13420] and SOFTIRQ-irq-unsafe lock: [ 494.893831][T13420] -> (tasklist_lock){.+.+}-{3:3} { [ 494.898944][T13420] HARDIRQ-ON-R at: [ 494.902912][T13420] lock_acquire+0x117/0x340 [ 494.909059][T13420] _raw_read_lock+0x36/0x50 [ 494.915207][T13420] __do_wait+0xde/0x740 [ 494.921089][T13420] do_wait+0x1e8/0x4f0 [ 494.926802][T13420] kernel_wait+0xab/0x170 [ 494.932769][T13420] call_usermodehelper_exec_work+0xbe/0x230 [ 494.940398][T13420] process_one_work+0x93a/0x15a0 [ 494.947064][T13420] worker_thread+0x9b0/0xee0 [ 494.953296][T13420] kthread+0x711/0x8a0 [ 494.959002][T13420] ret_from_fork+0x599/0xb30 [ 494.965236][T13420] ret_from_fork_asm+0x1a/0x30 [ 494.971640][T13420] SOFTIRQ-ON-R at: [ 494.975607][T13420] lock_acquire+0x117/0x340 [ 494.981788][T13420] _raw_read_lock+0x36/0x50 [ 494.987933][T13420] __do_wait+0xde/0x740 [ 494.993729][T13420] do_wait+0x1e8/0x4f0 [ 494.999435][T13420] kernel_wait+0xab/0x170 [ 495.005401][T13420] call_usermodehelper_exec_work+0xbe/0x230 [ 495.012940][T13420] process_one_work+0x93a/0x15a0 [ 495.019557][T13420] worker_thread+0x9b0/0xee0 [ 495.025800][T13420] kthread+0x711/0x8a0 [ 495.031530][T13420] ret_from_fork+0x599/0xb30 [ 495.037828][T13420] ret_from_fork_asm+0x1a/0x30 [ 495.044268][T13420] INITIAL USE at: [ 495.048196][T13420] lock_acquire+0x117/0x340 [ 495.054309][T13420] _raw_write_lock_irq+0xa2/0xf0 [ 495.060821][T13420] copy_process+0x2185/0x3950 [ 495.067116][T13420] kernel_clone+0x21e/0x820 [ 495.073172][T13420] user_mode_thread+0xdd/0x140 [ 495.079485][T13420] rest_init+0x23/0x300 [ 495.085199][T13420] start_kernel+0x3ac/0x400 [ 495.091279][T13420] x86_64_start_reservations+0x24/0x30 [ 495.098309][T13420] x86_64_start_kernel+0x143/0x1c0 [ 495.104978][T13420] common_startup_64+0x13e/0x147 [ 495.111469][T13420] INITIAL READ USE at: [ 495.115810][T13420] lock_acquire+0x117/0x340 [ 495.122306][T13420] _raw_read_lock+0x36/0x50 [ 495.128799][T13420] __do_wait+0xde/0x740 [ 495.134946][T13420] do_wait+0x1e8/0x4f0 [ 495.141000][T13420] kernel_wait+0xab/0x170 [ 495.147416][T13420] call_usermodehelper_exec_work+0xbe/0x230 [ 495.155311][T13420] process_one_work+0x93a/0x15a0 [ 495.162252][T13420] worker_thread+0x9b0/0xee0 [ 495.168841][T13420] kthread+0x711/0x8a0 [ 495.174906][T13420] ret_from_fork+0x599/0xb30 [ 495.181496][T13420] ret_from_fork_asm+0x1a/0x30 [ 495.188339][T13420] } [ 495.190837][T13420] ... key at: [] tasklist_lock+0x18/0x40 [ 495.198606][T13420] ... acquired at: [ 495.202412][T13420] _raw_read_lock+0x36/0x50 [ 495.207100][T13420] send_sigurg+0x12b/0x420 [ 495.211778][T13420] sk_send_sigurg+0x6c/0x2e0 [ 495.216550][T13420] queue_oob+0x420/0x4f0 [ 495.220981][T13420] unix_stream_sendmsg+0xc32/0xde0 [ 495.226266][T13420] sock_sendmsg_nosec+0x18f/0x1d0 [ 495.231547][T13420] ____sys_sendmsg+0x577/0x880 [ 495.236479][T13420] ___sys_sendmsg+0x21f/0x2a0 [ 495.241327][T13420] __sys_sendmmsg+0x227/0x430 [ 495.246167][T13420] __x64_sys_sendmmsg+0xa0/0xc0 [ 495.251181][T13420] do_syscall_64+0xfa/0xf80 [ 495.255882][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.261938][T13420] [ 495.264251][T13420] [ 495.264251][T13420] stack backtrace: [ 495.270128][T13420] CPU: 1 UID: 49663 PID: 13420 Comm: syz.8.2405 Not tainted syzkaller #0 PREEMPT(full) [ 495.270145][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 495.270155][T13420] Call Trace: [ 495.270162][T13420] [ 495.270169][T13420] dump_stack_lvl+0x189/0x250 [ 495.270187][T13420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.270201][T13420] ? __pfx__printk+0x10/0x10 [ 495.270231][T13420] __lock_acquire+0x2a95/0x2cf0 [ 495.270258][T13420] ? send_sigurg+0x12b/0x420 [ 495.270275][T13420] lock_acquire+0x117/0x340 [ 495.270292][T13420] ? send_sigurg+0x12b/0x420 [ 495.270309][T13420] ? _raw_read_lock_irqsave+0xbb/0x100 [ 495.270325][T13420] _raw_read_lock+0x36/0x50 [ 495.270337][T13420] ? send_sigurg+0x12b/0x420 [ 495.270353][T13420] send_sigurg+0x12b/0x420 [ 495.270370][T13420] sk_send_sigurg+0x6c/0x2e0 [ 495.270389][T13420] queue_oob+0x420/0x4f0 [ 495.270404][T13420] ? __pfx_queue_oob+0x10/0x10 [ 495.270418][T13420] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 495.270439][T13420] unix_stream_sendmsg+0xc32/0xde0 [ 495.270462][T13420] ? finish_task_switch+0x23d/0x940 [ 495.270479][T13420] ? lockdep_hardirqs_on+0x98/0x140 [ 495.270495][T13420] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 495.270513][T13420] ? __lock_acquire+0x6b6/0x2cf0 [ 495.270534][T13420] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 495.270552][T13420] sock_sendmsg_nosec+0x18f/0x1d0 [ 495.270571][T13420] ____sys_sendmsg+0x577/0x880 [ 495.270588][T13420] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.270605][T13420] ? import_iovec+0x74/0xa0 [ 495.270624][T13420] ___sys_sendmsg+0x21f/0x2a0 [ 495.270639][T13420] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.270653][T13420] ? preempt_schedule+0xae/0xc0 [ 495.270666][T13420] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 495.270679][T13420] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 495.270700][T13420] ? __fget_files+0x2a/0x420 [ 495.270714][T13420] ? __fget_files+0x3a0/0x420 [ 495.270731][T13420] __sys_sendmmsg+0x227/0x430 [ 495.270747][T13420] ? __pfx___sys_sendmmsg+0x10/0x10 [ 495.270765][T13420] ? __pfx_do_futex+0x10/0x10 [ 495.270805][T13420] __x64_sys_sendmmsg+0xa0/0xc0 [ 495.270820][T13420] do_syscall_64+0xfa/0xf80 [ 495.270842][T13420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.270855][T13420] ? clear_bhb_loop+0x60/0xb0 [ 495.270870][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.270883][T13420] RIP: 0033:0x7fdc81d8f749 [ 495.270898][T13420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.270910][T13420] RSP: 002b:00007fdc82bd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 495.270926][T13420] RAX: ffffffffffffffda RBX: 00007fdc81fe5fa0 RCX: 00007fdc81d8f749 [ 495.270936][T13420] RDX: 0000000000000001 RSI: 0000200000011500 RDI: 0000000000000009 [ 495.270945][T13420] RBP: 00007fdc81e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 495.270954][T13420] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 495.270963][T13420] R13: 00007fdc81fe6038 R14: 00007fdc81fe5fa0 R15: 00007ffcbaf11648 [ 495.270978][T13420] [ 495.280986][ T7749] usb 3-1: Using ep0 maxpacket: 32 [ 495.595860][ T7749] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 495.604247][ T7749] usb 3-1: config 0 has no interface number 0 [ 495.620011][ T7749] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 495.629850][ T7749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.637965][ T7749] usb 3-1: Product: syz [ 495.642202][ T7749] usb 3-1: Manufacturer: syz [ 495.646939][ T7749] usb 3-1: SerialNumber: syz [ 495.652779][ T7749] usb 3-1: config 0 descriptor?? [ 495.660164][ T7749] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 495.668014][ T7749] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 495.677938][ T9] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 495.689007][ T9] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.702087][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 495.709003][ T9] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 495.718270][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.729103][ T9] usb 7-1: config 0 descriptor?? [ 495.860951][ T7749] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 495.939827][ T9] holtek 0003:1241:5015.0023: unbalanced collection at end of report description [ 495.951015][ T9] holtek 0003:1241:5015.0023: parse failed [ 495.956974][ T9] holtek 0003:1241:5015.0023: probe with driver holtek failed with error -22 [ 496.068285][ T7749] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 496.142234][T13418] pim6reg: entered allmulticast mode [ 496.148789][ T7749] usb 7-1: USB disconnect, device number 70 [ 496.626521][T13429] netlink: 'syz.2.2402': attribute type 1 has an invalid length. [ 496.636396][T13429] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2402'. [ 497.687661][ T5983] usb 3-1: USB disconnect, device number 76 [ 497.693856][ T5983] radio-raremono 3-1:0.35: Thanko's Raremono disconnected