last executing test programs: 22m57.520922995s ago: executing program 32 (id=22): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) io_setup(0x4, 0x0) io_submit(0x0, 0x1, &(0x7f0000000080)=[0x0]) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) (async) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) (async) shutdown(r2, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b000900000000090400"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, '.,\\-\\}d'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0x7, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x90}}, 0x801) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 17m4.490578117s ago: executing program 0 (id=1243): r0 = syz_usb_connect$hid(0x3, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x70, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x7, 0x5, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_io_uring_setup(0x4b6, 0x0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0x6, 0x6, 0x1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0x7, 0x7, {0x7, 0x23, '\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 17m1.339988921s ago: executing program 0 (id=1253): r0 = socket$nl_route(0x10, 0x3, 0x0) setgroups(0x2, &(0x7f0000000000)=[0x0, 0xee01]) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004e80)=@setlink={0x70, 0x13, 0x1, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2006, 0x300}, [@IFLA_PROTO_DOWN={0x5}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}]}]}]}, 0x70}}, 0x0) 17m1.278428589s ago: executing program 0 (id=1254): modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x20000000, 0xffffffffffffffff}, 0x10) modify_ldt$read(0x0, &(0x7f0000001840)=""/4105, 0x1009) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x0, 0x340, 0x2c0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="99bf9518265ddf21d354146f008fac8773a015442305000000000000006dcf6857d754cab841d89b2dd524f8c9fcc62c05cd47ec0c686926c66642fba7421f29924f9538efb95853b0c93d29136023830fd553d88799f9aad8", @ANYBLOB="1cfa6739600cebde383cf4b918b86e039eefbfc9fc466930deb28385b6cc90f77762cfc78121478d73a897cf25d77825be4bd24e14298993a9bc4315deaffef80ccdac32ca75a028be62ebdd42602a6ad80f06786f26932928099a974f4a5cbf934a6d07468156f3e6f39a5789a70aa4", @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000004509010000000000ac00000000000000cd9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) 17m0.820261422s ago: executing program 0 (id=1257): r0 = socket(0x6, 0x80000, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) unshare(0x22020400) fallocate(r0, 0x2a, 0x2, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e, 0x0, 0x80000}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff810000000000000000", @ANYRES32=r8], 0x30}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0000000001010400000000141a00000278b8dbeb6121efddda2a000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007400000"], 0x6c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000200)={r4}) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYBLOB="3800000003010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000a9c1584155977d7f726fa4d4280d51141838f0b9059ea12dd61f9946ac0320c2491f6031f44f9a1cbc5b2cb3664880500179d81a9d27f6c1ba8d72806b4b1471afa42e271accdc79b1c636bc88d46202027c"], 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYRES8=r8], 0x14}}, 0x40c0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f00000005c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c09425, &(0x7f0000001380)={"dd9a64b425b1c69f4e76bb0761597e60", r11, r12, {0x6, 0x80000000}, {0x2, 0x72be}, 0x1, [0x1000005, 0x99, 0x3, 0x10, 0x1000000000000961, 0x4, 0x7c80000, 0x3, 0x5, 0x9, 0xf6a5, 0x9, 0x5, 0x4, 0x6, 0xe]}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000840)={0x0, 0x9, 0x10}, &(0x7f0000000880)=0xc) 16m57.672203326s ago: executing program 0 (id=1266): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200240, 0x0) fallocate(r2, 0x3, 0x100000000, 0x80000000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[], 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x400000000000000, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_QUOTA_CTL(r3, 0xc0109428, &(0x7f00000001c0)={0x1, 0x10001}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000fcdbdf25020000000000000900000000060015000400000014001680100008800c"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendfile(r7, r7, 0x0, 0x24002de8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r9, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) connect$can_j1939(r8, &(0x7f0000000140)={0x1d, r9}, 0x18) sendmmsg(r8, &(0x7f0000004580), 0x654, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) 16m54.546914942s ago: executing program 0 (id=1274): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x40002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b4000040"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700), 0x400000b, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r7 = io_uring_setup(0x200191a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0xc0, 0xc0, 0xc0, 0x158, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x2000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xab, 0x7b}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x1c}}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00', {}, {0xff}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x39}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x40}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffff19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000"], 0xf1, 0x800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16m39.015372937s ago: executing program 33 (id=1274): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x40002) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CAP_HYPERV_SYNIC2(r4, 0x4068aea3, &(0x7f0000000200)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b4000040"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r6, &(0x7f0000003700), 0x400000b, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) r7 = io_uring_setup(0x200191a, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='rw\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0xc0, 0xc0, 0xc0, 0x158, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x98, 0xc0, 0x0, {0x0, 0x2000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xab, 0x7b}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x1c}}}, {{@ip={@broadcast, @private=0xa010101, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00', {}, {0xff}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x39}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x40}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xffffffffffffff19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="030000"], 0xf1, 0x800) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 11m28.293378032s ago: executing program 4 (id=2381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008301}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002b80)=""/4104, 0x1008}, {&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000000a00)=""/218, 0xda}, {&(0x7f0000000340)=""/163, 0xa3}], 0x7}, 0x80000000}], 0x4, 0x10000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x6, 0xff, @scatter={0x0, 0x1200, 0x0}, &(0x7f00000000c0)="eaff48000000", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r2, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000dc0)={0x0, 0x5, 0x7, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000004) 11m27.950914505s ago: executing program 4 (id=2383): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x24102, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) close_range(r0, r2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2, 0x80805, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x141a80, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x12000, 0x0) syz_io_uring_setup(0x69b3, &(0x7f0000000380)={0x0, 0x11ac, 0x1000, 0x1, 0x13a, 0x0, r4}, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000300)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="480000001000010400000000fbdbdf2500000200", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003007465616d30000000000000000000000014001680100001800c000500fbffffff01"], 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x810) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) semop(0x0, &(0x7f0000000280)=[{0x5, 0xb7d0, 0x1000}], 0x1) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) 11m26.699124505s ago: executing program 4 (id=2386): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x2c, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f0000000140), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x10010) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000040)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xf, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x12000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0xfff, 0x4) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0x0, @broadcast}, 'lo\x00'}) 11m23.607505174s ago: executing program 4 (id=2396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) 11m23.411853884s ago: executing program 4 (id=2397): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x1, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) (async) getsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000000)=0x6) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x21c0, 0xc) recvmmsg(r5, 0x0, 0x0, 0x60, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400"], 0x48) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) (async) socket(0xa, 0x3, 0x3a) (async) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) 11m23.244300062s ago: executing program 4 (id=2399): openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/keys\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0xb, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002200)={&(0x7f0000002280)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000003580)=[{&(0x7f0000000000)="351d22bea114b50a3e2c60079da0750b2a0af8ac792dc42e57eae2338b5825a6ea", 0x21}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000000140)="ccc4f75f04166348a33c1c87b0", 0xd}, {&(0x7f0000002300)="00c408e0f1b46754382252140739634366c3d1997cd33b0d39c7bc9a3c3cb55f3dc7f44acf3152a9ceab85594a92db5f9b53551cb92b8624cd0f19cf54fc7b5929830203e5df910e81824c89f2737a0c2b0d68383a8e57457a0261c394716b14d9571f37071fd04d6799195aae1347f39580534eaa71f76d995864e0d9b885cfbe2d94b619c1f7b5f2c6fb061499a78c7da62982e296b271b6711dfa07eb4b9f934cc344113c3e8127392fb500db0541b75e8afd994e", 0xb6}, {&(0x7f0000003500)="845d98fa411c55ac3544f89c04ef4354c48559ea49951c3c66870ca4cb66a8c5cf3160346dcecc44d56baba072289c5e3a73d16fd0f9f53a9c5e52a63390ff0746085fa27745", 0x46}], 0x5, &(0x7f0000003600)=[{0x100, 0x118, 0x9, "70911e8914b462a9f5eacc004232fa89c74df3d7dc8bbe64f2b952e7caecf5157b97b47309fb3b2bcb9ba3a3aa01ce98609bf68c50fbf96cbc482e933a170d65ffa664f496e14e20e0711a0ed4a6afaf146417e8761f96c7d7b1b49143a2a4f7a7ceca38d50a24cbde05a3acad66203a6e64834569b6f8ab6fcb0df0e001056448e0e750c35caa98efd6e0f66eaac5dac573bf5e4740292dd72e7ae377e03e18246d7b446975d6f34da29020c953d3e020247c286341bc89b78a5ceb9223878bdd715fd7cb77e0e4ba39c051765850fb4c55eb4654702e84faf45d8ea732b25e1620279d244b6b297c59e74637958b74"}, {0xe8, 0x109, 0x7, "0328ea8531a2dedc24e6e5b5a5a9239704240aa474321cc7e5f2f759c14537dc9b61df812ddcc982e415061c03cddddba0c43d1ce67ff5ebe308d378d5b3af8c3f18defe538d518ca8c251475bfd821f91d2d0569fbd65375c64b89ec140d548c5533027bbb6e877a77eac48b8129b13bfed58003de0335c2d07ffc955f4fd31ae725733bf6bcd4ac31e99bfd2b1d7f5efdafffad05a61c33910d4c55f907881e56179bb34b74e3f7feb6baf7964bc2f73f5e6d9a4d2898f82559c89acde121eeff8b9e2ae82f3681712a8b69067fbaff7"}, {0x18, 0x29, 0x3, "602dfaa5"}, {0xf8, 0x88, 0x2, "69ec7df3101aad6614ffc42cb94962bfbaeae7907c66bbda0e7f664b8b5017fa0799c7c5e548279349ac481e2be4fb32d11b2aad41ae12da59e890fd5e7cb2e422597f6566119e85613011e1624a984f29eb71c8a4400677fefeb1ed564feee01da531ca7ce63f8c475ee65ef60597935fdfd5e22da42444cc1765470f4e84c171191a48b62aa14907862bb08204dc4f83096aacabccedfb89da4e15b878e8cf37033bf52190a1d4597325cb2006c3d6131a922b8efa06892af20d5fd000c6b7cff122e54001928fba08286a491b6527f60a0277511571c0b7978bd14ba054c857"}, {0x30, 0x6, 0x7ff, "e677ae81c9a1610032089fd8f7495b4c412bb4057aaff91dd086a95e"}, {0x108, 0x114, 0x41ea, "3ddd5127c5a72930c1dade1ef6dba36253476bafcc405d4956507d6fa513266c34d3fc9d44d2fe49fc0f687a6f6451b2388b4ab368f938938703605b6e2c2c93e370f88271357375569b44fd274daf948926000fa02a1de5f12c894de96776cc90893dd32a7d7814847f05c5a9484f718c9764d73477b8cadb607f93c6022989b3087905e9f2569f0d388a866cb239a6c0cd0aa35bf1a3afd8eea4adcfb9b257c7b21dacae86275b758faeae8bd8598191cac5075d2b706eb362bb89c6e6c0e1c4df53c1c3e3d33ec2151264d45f18b7d46b04a8cd5bc721b4b552bd922821d01e45ea67aa9647409c5239f621e39fd3c7a4bd0f7b"}, {0xa8, 0x1, 0x0, "9b635740bed9237a68f9b28a77b7991067e0a91a43b2dd9fedfc0eee958610d63bd3c6dfe814dabd4b2c679b561d70941760df62d65e76f6b51a69227cc3119d213e95d1e6b686971e0ec1822cf1c09cb95b422c205b05d302ffd836cc16df14761809a8c4e4aad675b1e13214bfebbc6d3805fb99a3c2c62d18a00230df6fea1417bc57d0383041711e1827333b6b1652125412"}], 0x4d8}, 0x0, 0x8051, 0x1}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup2(r8, r4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(r9, 0x0, 0xfec7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x4031, 0xffffffffffffffff, 0x0) ioctl$FIOCLEX(r0, 0x5451) read$FUSE(r9, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0xffffffffffffff05) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r12 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x189202) ioctl$SCSI_IOCTL_SEND_COMMAND(r12, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000000000ba"]) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002400)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_role={'obj_role', 0x3d, '/proc/keys\x01'}}, {@appraise}, {@fowner_eq={'fowner', 0x3d, r10}}]}}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(r11, &(0x7f00000021c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 11m7.32818094s ago: executing program 34 (id=2399): openat$procfs(0xffffffffffffff9c, &(0x7f0000002240)='/proc/keys\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet6(0xa, 0x1, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0xb, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002200)={&(0x7f0000002280)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000003580)=[{&(0x7f0000000000)="351d22bea114b50a3e2c60079da0750b2a0af8ac792dc42e57eae2338b5825a6ea", 0x21}, {&(0x7f0000002500)="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", 0x1000}, {&(0x7f0000000140)="ccc4f75f04166348a33c1c87b0", 0xd}, {&(0x7f0000002300)="00c408e0f1b46754382252140739634366c3d1997cd33b0d39c7bc9a3c3cb55f3dc7f44acf3152a9ceab85594a92db5f9b53551cb92b8624cd0f19cf54fc7b5929830203e5df910e81824c89f2737a0c2b0d68383a8e57457a0261c394716b14d9571f37071fd04d6799195aae1347f39580534eaa71f76d995864e0d9b885cfbe2d94b619c1f7b5f2c6fb061499a78c7da62982e296b271b6711dfa07eb4b9f934cc344113c3e8127392fb500db0541b75e8afd994e", 0xb6}, {&(0x7f0000003500)="845d98fa411c55ac3544f89c04ef4354c48559ea49951c3c66870ca4cb66a8c5cf3160346dcecc44d56baba072289c5e3a73d16fd0f9f53a9c5e52a63390ff0746085fa27745", 0x46}], 0x5, &(0x7f0000003600)=[{0x100, 0x118, 0x9, "70911e8914b462a9f5eacc004232fa89c74df3d7dc8bbe64f2b952e7caecf5157b97b47309fb3b2bcb9ba3a3aa01ce98609bf68c50fbf96cbc482e933a170d65ffa664f496e14e20e0711a0ed4a6afaf146417e8761f96c7d7b1b49143a2a4f7a7ceca38d50a24cbde05a3acad66203a6e64834569b6f8ab6fcb0df0e001056448e0e750c35caa98efd6e0f66eaac5dac573bf5e4740292dd72e7ae377e03e18246d7b446975d6f34da29020c953d3e020247c286341bc89b78a5ceb9223878bdd715fd7cb77e0e4ba39c051765850fb4c55eb4654702e84faf45d8ea732b25e1620279d244b6b297c59e74637958b74"}, {0xe8, 0x109, 0x7, "0328ea8531a2dedc24e6e5b5a5a9239704240aa474321cc7e5f2f759c14537dc9b61df812ddcc982e415061c03cddddba0c43d1ce67ff5ebe308d378d5b3af8c3f18defe538d518ca8c251475bfd821f91d2d0569fbd65375c64b89ec140d548c5533027bbb6e877a77eac48b8129b13bfed58003de0335c2d07ffc955f4fd31ae725733bf6bcd4ac31e99bfd2b1d7f5efdafffad05a61c33910d4c55f907881e56179bb34b74e3f7feb6baf7964bc2f73f5e6d9a4d2898f82559c89acde121eeff8b9e2ae82f3681712a8b69067fbaff7"}, {0x18, 0x29, 0x3, "602dfaa5"}, {0xf8, 0x88, 0x2, "69ec7df3101aad6614ffc42cb94962bfbaeae7907c66bbda0e7f664b8b5017fa0799c7c5e548279349ac481e2be4fb32d11b2aad41ae12da59e890fd5e7cb2e422597f6566119e85613011e1624a984f29eb71c8a4400677fefeb1ed564feee01da531ca7ce63f8c475ee65ef60597935fdfd5e22da42444cc1765470f4e84c171191a48b62aa14907862bb08204dc4f83096aacabccedfb89da4e15b878e8cf37033bf52190a1d4597325cb2006c3d6131a922b8efa06892af20d5fd000c6b7cff122e54001928fba08286a491b6527f60a0277511571c0b7978bd14ba054c857"}, {0x30, 0x6, 0x7ff, "e677ae81c9a1610032089fd8f7495b4c412bb4057aaff91dd086a95e"}, {0x108, 0x114, 0x41ea, "3ddd5127c5a72930c1dade1ef6dba36253476bafcc405d4956507d6fa513266c34d3fc9d44d2fe49fc0f687a6f6451b2388b4ab368f938938703605b6e2c2c93e370f88271357375569b44fd274daf948926000fa02a1de5f12c894de96776cc90893dd32a7d7814847f05c5a9484f718c9764d73477b8cadb607f93c6022989b3087905e9f2569f0d388a866cb239a6c0cd0aa35bf1a3afd8eea4adcfb9b257c7b21dacae86275b758faeae8bd8598191cac5075d2b706eb362bb89c6e6c0e1c4df53c1c3e3d33ec2151264d45f18b7d46b04a8cd5bc721b4b552bd922821d01e45ea67aa9647409c5239f621e39fd3c7a4bd0f7b"}, {0xa8, 0x1, 0x0, "9b635740bed9237a68f9b28a77b7991067e0a91a43b2dd9fedfc0eee958610d63bd3c6dfe814dabd4b2c679b561d70941760df62d65e76f6b51a69227cc3119d213e95d1e6b686971e0ec1822cf1c09cb95b422c205b05d302ffd836cc16df14761809a8c4e4aad675b1e13214bfebbc6d3805fb99a3c2c62d18a00230df6fea1417bc57d0383041711e1827333b6b1652125412"}], 0x4d8}, 0x0, 0x8051, 0x1}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = dup2(r8, r4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet6(r9, 0x0, 0xfec7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x4031, 0xffffffffffffffff, 0x0) ioctl$FIOCLEX(r0, 0x5451) read$FUSE(r9, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0}, 0xffffffffffffff05) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r12 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x189202) ioctl$SCSI_IOCTL_SEND_COMMAND(r12, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="8000000000000000ba"]) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000002400)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@dont_measure}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_role={'obj_role', 0x3d, '/proc/keys\x01'}}, {@appraise}, {@fowner_eq={'fowner', 0x3d, r10}}]}}, 0x0, 0x0, 0x0) write$FUSE_LSEEK(r11, &(0x7f00000021c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5m17.103048343s ago: executing program 6 (id=3772): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) landlock_create_ruleset(&(0x7f0000000040)={0xc5, 0x3}, 0x18, 0x0) r0 = gettid() setpgid(0x0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/81, 0x51, 0x1, 0x3c}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x110a, 0x1}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) (async) landlock_create_ruleset(&(0x7f0000000040)={0xc5, 0x3}, 0x18, 0x0) (async) gettid() (async) setpgid(0x0, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r2, r1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/81, 0x51, 0x1, 0x3c}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_binder={0x77622a85, 0x110a, 0x1}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) (async) 5m16.766750315s ago: executing program 6 (id=3773): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00], 0x174}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fcntl$setlease(r4, 0x400, 0x0) 5m15.17954215s ago: executing program 6 (id=3777): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x2, 0x200080) unshare(0x6a040000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149282, 0x10) write$cgroup_int(r2, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 5m14.607113553s ago: executing program 6 (id=3780): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) (async) write$vhost_msg_v2(r1, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x50, 0x20}, {0x6}]}, 0x10) (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20100000811fffe8000000000000000000000000000bbff0200000000000000000000000000014e224e220008907800"/62], 0x0) 5m14.197256712s ago: executing program 6 (id=3781): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffff", 0x41}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 5m13.932386015s ago: executing program 6 (id=3783): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRES64, @ANYRESOCT=0x0], 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x100) r2 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRES64, @ANYRESOCT=0x0], 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x100) (async) syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000001c0)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1) (async) 4m58.494677764s ago: executing program 35 (id=3783): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRES64, @ANYRESOCT=0x0], 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x100) r2 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRES64, @ANYRESOCT=0x0], 0x0) (async) socket$inet6(0xa, 0x5, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) (async) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x100) (async) syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000001c0)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1) (async) 4m1.939868255s ago: executing program 5 (id=4091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x28080, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x2b8bc2, 0x102) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000181001801400020076657468305f746f5f626f6e6400000800000080100069800c000180080001009000"/58], 0x40}}, 0x20000004) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x33, &(0x7f0000000400)={@broadcast, @random="0100008000", @val, {@ipv4}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r7, 0x540b, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000040)=0x1db6, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f00000001c0)={0x1d, r9}, 0x10) sendmsg$can_raw(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@can={{0x0, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "53b488a9ea1f561d"}, 0x10}, 0x1, 0x0, 0x0, 0x4014}, 0x20040000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000140)={0x0, 0x1, 0x5, 0xe, 0x4000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000240)) syz_io_uring_setup(0x343e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10, 0x0, 0x3db, 0x0, r2}, &(0x7f0000000080)=0x0, &(0x7f0000001340)=0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x10, r0, 0x0, 0x0, 0x0, 0x10060, 0x1, {0x2}}) 4m0.211104777s ago: executing program 5 (id=4096): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x47, 0x35, 0xac, 0x40, 0x15ba, 0x2b, 0xd566, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x1, 0xa0, 0xd, [{{0x9, 0x4, 0x1, 0x6, 0x0, 0x78, 0x4b, 0x7e, 0xfc}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x11, &(0x7f0000000600)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7fff088, 0xf000, 0x1}]}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xb0, 0x6, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x100, 0xe, 0x1, {0x22, 0x6a3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xe, 0x13, 0x56}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x110, 0x8, 0x3, 0x9, 0xff, 0xe}, 0xcf, &(0x7f0000000500)={0x5, 0xf, 0xcf, 0x3, [@wireless={0xb, 0x10, 0x1, 0xe, 0x20, 0x0, 0x7, 0xe, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xfe, 0xb, 0x1}, @generic={0xb5, 0x10, 0x1, "5149cef7285458ecf098b258c2f3fc9789be62757f2aa228575d6823caaed7fc43c9dcc76c79e52abe70b4f52b57d7bc98d916e539b09123abc54e5ca15ef2e79395641a4c0416c346fc0f0816a4f9c1e508135d4c4e0490373aac11268f3323cf182f700dffbf1a332c59fa70a61463c7511859957c635d5289523ca2116068f4929108436d0cdce2a84e672bce8d285f27d337fc5204f4b7c2bc2fd13ae892521ab60e317f4116c0ab089025daa4b5c331"}]}, 0x6, [{0x30, &(0x7f0000000640)=@string={0x30, 0x3, "4bea4785dfb94ce460bf123b57954f2d91cfff092e8722398d12520d6a46a6132f42de5cd2f040c5d4528da0672f"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x439}}, {0x0, 0xfffffffffffffffe}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x19, &(0x7f0000000740)=@string={0x19, 0x3, "5824de97d7486d2e8842f5b9917a94dd8c056e1cd1e9a1"}}]}) syz_usb_connect$cdc_ncm(0x7ad013200aaf335f, 0x150, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x6, 0xff, 0xd, 0xff, 0x9}, 0x13, &(0x7f0000000040)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x7, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x5, 0x2}]}, 0x5, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40f}}, {0x46, &(0x7f0000000380)=@string={0x46, 0x3, "d3d5ed413b9fcc573edf0c30c0007bd46aaa0a7fdee51d829a03eb0ca1883c7fb017966dc7e11401d39df426ad0f0d6ac4fdf5d948d760521b5c625b938b50395729ba8f"}}]}) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x305042, 0x0) syz_usb_disconnect(r0) 3m57.932840099s ago: executing program 5 (id=4103): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xa000000}, 0x48) 3m57.718877144s ago: executing program 5 (id=4107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x8, &(0x7f00000000c0)=""/81, &(0x7f0000000040)=0x51) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = syz_io_uring_setup(0x3de6, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x1bb}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x15, &(0x7f00000009c0)=0x5, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r11) sendmsg$NL80211_CMD_GET_INTERFACE(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r13, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000841}, 0x8800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r7, 0x47bc, 0x20, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, r1, 0x7}, 0x14}}, 0x0) 3m56.720232297s ago: executing program 5 (id=4114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x10190}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x3}]}, 0x50}}, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x141) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf4, r3, 0x20, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8041}, 0x10000814) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f00000000c0)={0xdc1, 0x10000}) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16=0x0, @ANYRES64=r0], 0x0) syz_usb_disconnect(r4) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xcf, &(0x7f0000000000)=0xbe00, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0xc0}}, 0x0) mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, 0xffffffffffffffff, 0x80000000) 3m56.10612905s ago: executing program 5 (id=4117): r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000340), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 3m55.56247649s ago: executing program 36 (id=4117): r0 = openat$tcp_congestion(0xffffff9c, &(0x7f0000000340), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 1m59.704753278s ago: executing program 9 (id=4669): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000440)="db17e8", 0x3}], 0x1}, 0x80000e4) ioctl$SIOCSIFHWADDR(r0, 0x541b, &(0x7f0000000340)={'bridge_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 1m59.64372336s ago: executing program 9 (id=4670): memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb', 0x4) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00^\x00'], 0x20}], 0x1}, 0x0) 1m59.566154334s ago: executing program 9 (id=4671): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x82030, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000000206010800000000000000000000004005008645672e0000450005000200000005000400000000000900020073797e31000000000c000780080006400000000311000300686909683a69702c6d61726b00000000f33c28cfaca92d871b303b25834af21b6eab845512b717760cc839dc7de7114989695e8f02000000c195e6321d7c316cc06c3b8501a0cebcc9dce369c035abe1a8273a04bb99d90c5d6cc6cf3e46effd41"], 0x58}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x70, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_ADT={0x48, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffffffff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2c}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) readv(r7, &(0x7f0000000180)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1) 1m58.273659724s ago: executing program 9 (id=4673): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRES8=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dfe70f77f5e27a10300000000fd0700132d521f62f2ee842505cfcdd13ad5b99e4d1b683c18a7aef5f0d905caf79961b7c772bff13006be9342725b39f302d8809d4e6ab94301de40f5d753cc71851db5abe1dfd95052c4233cbf215092c8af88b58fdf89fcb6abf059fdd700000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69b8f6", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69b8f6", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) (async) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r5, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000a4, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000a4, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendto$packet(r7, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d", 0x1a, 0x0, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup(r8, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1m58.027923097s ago: executing program 9 (id=4675): creat(&(0x7f00000001c0)='./file0\x00', 0x8) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206fe"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote={0xfb}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x11}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x4a, 0xaf, 0x36, 0x20, 0x572, 0x58a5, 0x270a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x9, 0x1, 0xa3, 0x7d, 0x7e, 0x3, [], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x4, 0x1, [@generic={0x8, 0xb, "906db7cfad36"}]}}]}}]}}]}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f00000001c0)={0x1, 0x0, [{0x400, 0x1, 0x0, 0x0, @irqchip={0x2, 0x6512}}]}) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x40001) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r4, 0x81785501, &(0x7f0000000100)=""/208) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1m57.933415415s ago: executing program 9 (id=4676): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, 0x0, 0x64}) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x8bb, 0xb5, 0x4, 0x0, 0x8000000000000000, 0x500, 0x3b2, 0x1, 0x80000010000, 0x8, 0x7, 0x7, 0x3, 0x7, 0x200], 0xf000, 0x66000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000003c0)={0x2a6, 0x0, "2dd82129cb82327389c3b42ee17f84200e7484f2b06fa73f76c4a3bb89519ec7f4e86c283a065a0036d64b8068332387a7480dc9962a6d38d39bb67b895f9c3cd96f038080c2c62f9ec93860609c35ff0f48eacd242f9e6ec1d9d2bb1af2f280a03771ae387b444b02406eb2890dcd7c211bea667ba841721bc40864e4eee3399fe804fd89ec4fedfa7496b29e4fce1122d61f1bed350d2e7404962a8284739051bd22963a0f3ee06aedb7c6cb64a61f96647b5b310fd35dd3fd3708c980d14ba87f0becf8c6ee2052eb8fd243ed8bfc3ba48944721e6a5f6d921177e14a6d06492664929f04bf583fe592ed5946f1991bf2a27a2ffa9a2d856e298b54347906"}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c0e243", 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000100)={r5}) socket(0x26, 0x2, 0x4) 1m57.542912332s ago: executing program 37 (id=4676): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, 0x0, 0x64}) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x8bb, 0xb5, 0x4, 0x0, 0x8000000000000000, 0x500, 0x3b2, 0x1, 0x80000010000, 0x8, 0x7, 0x7, 0x3, 0x7, 0x200], 0xf000, 0x66000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000003c0)={0x2a6, 0x0, "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"}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="c0e243", 0x3, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r4, 0xc00464be, &(0x7f0000000100)={r5}) socket(0x26, 0x2, 0x4) 20.984067971s ago: executing program 2 (id=5010): recvmmsg(0xffffffffffffffff, &(0x7f0000003100), 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 20.828130167s ago: executing program 2 (id=5011): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x44c242, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x1, &(0x7f0000000040)=@raw=[@generic={0x3, 0x9, 0x8, 0x1, 0xfff}], &(0x7f0000000080)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x1, 0xe, 0x3}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000140)=[{0x2, 0x3, 0x9, 0x3}, {0x5, 0x5, 0x0, 0xa}, {0x5, 0x1, 0x4, 0x1}, {0x4, 0x2, 0x6, 0xc}, {0x0, 0x2, 0xd, 0x9}, {0x3, 0x3, 0x4, 0x1}, {0x0, 0x5, 0x3, 0x6}, {0x4, 0x1, 0x5, 0x3}, {0x0, 0x2, 0xf, 0x3}, {0x3, 0x1, 0x5, 0x6}], 0x10, 0x3ff, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x21, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x671}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @ringbuf_query]}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000440)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001440)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001480)={0x3, 0xa, 0x7fffffff, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa8be, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001680)={@ifindex=0x0, 0xa, 0x1, 0x7fff, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000015c0)=[0x0, 0x0], &(0x7f0000001600)=[0x0], &(0x7f0000001640)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000016c0)={@fallback=r0, r1, 0x39, 0x2, r2, @void, @value, @void, @void, r4}, 0x20) r5 = syz_io_uring_complete(0x0) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000001700)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000001740)={0x48, 0x2, r6}) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000017c0)='ip6erspan0\x00', 0x10) r8 = socket$netlink(0x10, 0x3, 0x5) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r8, 0x4008941a, &(0x7f0000001800)) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001980)={0x0, 0x8001, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0xd, 0x7, &(0x7f0000001840)=@raw=[@alu={0x0, 0x1, 0xa, 0xa, 0x4, 0x20, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000001880)='GPL\x00', 0x3ff, 0x6, &(0x7f00000018c0)=""/6, 0x41000, 0x4, '\x00', r3, @fallback=0x31, r5, 0x8, &(0x7f0000001900)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001940)={0x2, 0xb, 0x80, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000019c0)=[r9, r5, r5, r5, r5], &(0x7f0000001a00)=[{0x3, 0x5, 0xa, 0x5}, {0x4, 0x2, 0x3, 0x8}, {0x3, 0x2, 0x5, 0x1}, {0x2, 0x3, 0x10, 0x9}, {0x1, 0x3, 0x2, 0xb}], 0x10, 0x0, @void, @value}, 0x94) mknodat$loop(r5, &(0x7f0000001b40)='./file0\x00', 0x400, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000001b80)={0x0, @bt={0x7ff, 0x7, 0x0, 0x1, 0xfffffffffffffff8, 0x3, 0x7, 0x1, 0x7, 0xfffffffb, 0x6, 0x5, 0x1ff, 0x6, 0x0, 0x10, {0x7, 0x5}, 0x0, 0x2}}) connect$can_bcm(r5, &(0x7f0000001c40)={0x1d, r3}, 0x10) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r5, 0x4018aee3, &(0x7f0000001cc0)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000001c80)=0x14}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000001d00)={0x18, 0x1, 0x0, 0x0, r6, 0x1}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r10, 0x80487436, &(0x7f0000001d40)="94748b2560a1eea22d5a49d6710994f83e4601a9a063a01eaf39814ac6c4c4ed023d1221a230298e7d9c2a5736ce2fcd14b5771308fe0213258a1b4c59f6619028d5186c3fda76af5346e7051bd42a11af0a617a71ea52376ca31629c52977d359cda2d3007024a5479d4c1ea17a047e1aa4b0520531d5f3b53dbd0ae06d93738dd0017c94715607b3809375439ff6d6ceecd37552d62ec03c33a70c49e6a15ad87a3ad61b53615cae4be3dce03d018a5f581be4607d918bf93e2b2aac444866742b5688abc14bf52ab3267639") listen(r5, 0x1) splice(r10, &(0x7f0000001e40)=0x3, r2, &(0x7f0000001e80)=0x8000, 0x7fff, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r7, 0x0, 0x41, &(0x7f0000001ec0)={'filter\x00', 0x1a, "39438e3ebbb33f437398cfd1995c28303e6d106601eff42eaeb5"}, &(0x7f0000001f00)=0x3e) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f80), r5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f0000002100)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000020c0)={&(0x7f0000001fc0)={0xc4, r11, 0x10, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xa3}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10001}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xb8f}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}]}, 0xc4}, 0x1, 0x0, 0x0, 0x5a479089f4c34e45}, 0x90) sendmsg$nl_route(r5, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)=@getaddr={0x14, 0x16, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c81d}, 0x80) r12 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) close_range(r12, r12, 0x2) mq_open(&(0x7f0000002240)='{\x00', 0x40, 0x80, &(0x7f0000002280)={0x7, 0x3800000000000000, 0x0, 0xfffffffffffffff4}) 20.462674351s ago: executing program 2 (id=5012): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) socket$kcm(0x29, 0x0, 0x0) 20.072365479s ago: executing program 2 (id=5015): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xd4, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xd4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a4f0ff00000000b7060000080000173c640000000000004504040001ffffffc604000001000a00b7040000000100006a0af2fe00000000850000002f000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000d099d9abc1242d9388b72e45ffc2a09f000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bbfc7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d1a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff14ae9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60c3d494239884363cc0000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') unshare(0x2c020400) syz_io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0xdb0d, 0x3f, 0xfffffffe, 0x24000}, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x8, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIONCLEX(r5, 0x5450) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x6a0dd4a1, 0xfffe, 0x0, 0x20004, 0x4, 0x0, 0x0, 0x100, 0xf}}, 0x50) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x405, 0x3abc4c, 0x2c8240}) getpid() 15.936023149s ago: executing program 2 (id=5026): r0 = fsopen(&(0x7f0000000840)='qnx6\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) syz_usb_connect(0x5, 0x51, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 12.540138323s ago: executing program 2 (id=5038): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 10.875155618s ago: executing program 1 (id=5044): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4050}, 0x26004090) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000002a80)=ANY=[], 0x1c8}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000140), 0x3, 0x40100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9.531738983s ago: executing program 3 (id=5048): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'team_slave_0\x00', 0xc002}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x83) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r5 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffefff) shmctl$IPC_RMID(r5, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0104000000000000000001000000000000000841000100000018ff"], 0x68}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)="27050200340f14000600002fb96dbcf70606000017000000", 0x18}], 0x1}, 0x9cdc2384256b08bc) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x10200, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={&(0x7f0000000580)="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", &(0x7f0000001580)=""/4096, &(0x7f0000000240)="ddf087f46efcbd095e9f2e7ef40a8e6200bcc89f3eae26d1c6c0b6120ba08c466e7c17a05dac71d47637f5966f9be234ed643bc641e1508b54a0e2ea18738001f12107be77fbe5a3258ca027f9e2a6b8287c88a61af7e5f36ee0c3f9b5236de1a2f446b2df95aa637007c3f71c17fa628fca3512", &(0x7f00000002c0)="c4ddca6d79ce628f3ce772c7badefde5b8c1c49a6625331460fb64b298c6846d7574bc8ec7ed8f362e219a9eabf6584c55cb3c40c137853a4131ef695e2a70c396b95d52b6d14610d0e80a30388834dd3b969e5e08078d7a104f7a14a5f32ee248284f1a84cc7728f79382115710819566d14afe3491a3ceaab34efc04a22f6f2cd9f56be55b468a932db476c2465009ccebd47471efbbffcce46773e8ce8086f267385f9137072e88c07591b92c28cf95d49253362c604771d21417e5ef708aacf1b44166929a6c1fdcec1bbcd53a8bb228b11ed3f394b249f4b5c7b88867b63061a6daa6a0df48514eba6a6ad4", 0x3, r9}, 0x38) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000480)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @private2}, {0xa, 0x0, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}}, r8, 0x3}}, 0x48) 9.057258303s ago: executing program 7 (id=5049): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'pim6reg0\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x305) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe, 0x4, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r7 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0xa8c40) ioctl$VIDIOC_S_FMT(r7, 0xc0d05640, &(0x7f0000000180)={0x2, @pix={0x5, 0x4982, 0x56595559, 0x0, 0xffff, 0x3, 0x3, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r3, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 7.711024625s ago: executing program 1 (id=5051): sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00^\x00'], 0x20}], 0x1}, 0x0) 6.71820853s ago: executing program 3 (id=5052): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = socket$netlink(0x10, 0x3, 0x15) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLINK(r4, 0x0, 0x0) writev(r3, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0xd968d5b908ac0cdc, 0x0, {}, {0x3}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r7}) ustat(0x801, &(0x7f0000000300)) 4.913528912s ago: executing program 1 (id=5054): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000000), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xd4, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0xa4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xd4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') unshare(0x2c020400) syz_io_uring_setup(0xf04, &(0x7f0000000180)={0x0, 0xdb0d, 0x3f, 0xfffffffe, 0x24000}, 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x8, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIONCLEX(r5, 0x5450) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$FUSE_INIT(r8, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x6a0dd4a1, 0xfffe, 0x0, 0x20004, 0x4, 0x0, 0x0, 0x100, 0xf}}, 0x50) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x405, 0x3abc4c, 0x2c8240}) getpid() 4.846866646s ago: executing program 7 (id=5055): munmap(&(0x7f0000bff000/0x400000)=nil, 0x400000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/exec\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 4.662552353s ago: executing program 3 (id=5056): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x108}, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f00001b4000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRESOCT=r5], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}}, 0xc804) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000040)={0x40000000, 0x8, 0x2}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4}, {0xac}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x5, 0x4a, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x96, 0xa3, 0x18, 0x20, 0x499, 0x1006, 0xd695, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x6, 0x6, 0xb0, 0x3, [{{0x9, 0x4, 0x42, 0x4, 0x1, 0x5c, 0xe8, 0x87, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4d7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x5, 0x8}, {0x6, 0x24, 0x1a, 0x8, 0x20}}], [{{0x9, 0x5, 0x7dd36f8e8a171989, 0x4, 0x20, 0x10, 0x3, 0x3}}]}}]}}]}}, &(0x7f0000000b80)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r10, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4.519899569s ago: executing program 8 (id=5057): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x68060e00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500010e0e0000000000000007000000", @ANYRES32=r4, @ANYBLOB="200001"], 0x38}}, 0x0) 4.433750339s ago: executing program 7 (id=5058): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffd7e, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "1ae65a95", {0x1, 0xbf9, 0x6, 0x9c, 0x8}}) syz_usb_disconnect(r0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffd7e, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "1ae65a95", {0x1, 0xbf9, 0x6, 0x9c, 0x8}}) (async) syz_usb_disconnect(r0) (async) 2.584095068s ago: executing program 8 (id=5059): madvise(&(0x7f0000bdd000/0x3000)=nil, 0x3000, 0x9) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x80101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) pipe2(&(0x7f0000000140), 0x0) epoll_create(0x2d) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) dup(r2) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x10eacb0, 0x0, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0/file0\x00', &(0x7f00000001c0)={0x40040, 0x32, 0x10}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 2.184047265s ago: executing program 8 (id=5060): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5) (async) r2 = socket$packet(0x11, 0x3, 0x300) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x4, 0x6}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x78, 0x10}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010000d040200"/20, @ANYRES32=r7, @ANYBLOB="00000000040000002c001280110001006272696467655f736c6176650000000014000580060002000000000008002200", @ANYRES32=r7, @ANYBLOB="412bfa0000cc805d0e4169219b260afef70da7ac30a1905139d6336f684156cc6276c1589c6749378071adc44b0d3fd0b9558bf7ab40ceea5c34f71c3c5f9f4db7b205"], 0x4c}, 0x1, 0x0, 0x0, 0x806}, 0x0) 1.83541665s ago: executing program 8 (id=5061): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) statx(0xffffffffffffff9c, &(0x7f0000000080)='\x00', 0x800, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000001c0)=@v3={0x3000000, [{0x275, 0x9}, {0xe, 0xc}], r1}, 0x18, 0x1) 1.363026631s ago: executing program 8 (id=5062): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000180000000001000000b7080000000010007baa00fe00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000058000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) 1.171970918s ago: executing program 7 (id=5063): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r0, 0x40045109, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001f80)=r1, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec97"], 0xfdef) 954.42025ms ago: executing program 1 (id=5064): sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00^\x00'], 0x20}], 0x1}, 0x0) 941.651294ms ago: executing program 8 (id=5065): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x24}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@bridge_getlink={0x34, 0x12, 0xdbf44c00c5896d57, 0x10000010, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xeca}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000084}, 0x40010) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000d40)={{r5}, "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"}) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WAKE(r6, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') fchdir(r7) umount2(&(0x7f0000000100)='./cgroup\x00', 0x2) truncate(&(0x7f0000000000)='./cgroup\x00', 0x80000000) 839.632272ms ago: executing program 3 (id=5066): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4d7}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x34, r12, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}]}, 0x34}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 490.510105ms ago: executing program 1 (id=5067): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000000050000000000000000000000ffff00000000ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000084010500ff010000000000000000000000000001000004d2330000000a000000000000000000000000000000000000000135000001003b00830000000500000007000000fe8000000000000000000000120000aa000004d63c0000000a"], 0x23c}}, 0x4000) 476.999998ms ago: executing program 3 (id=5068): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="bc010000190001000000000000000000fc0200000000000000000000000000007f0000010000000000000000000000000000000300000000020000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fcffffffffffffff0100000000000000000000000000000003000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500fe8000000000000000000000000000aa000000003200000000000000ac1414aa000000000000000000000000013500000300ff00000000002000000001000000fc020000000000000000000000000000000000003200000000000000fc0100000000000000000000000000020735000000000000000000001aa6000000000000fe880000000000000000000000000001000000003c0000000200000000000000000000000000000000000000000000020103000000000000000000000000000000000000000000000000ffff64010101080004d83c00010400000000e00000020000000000000000000000000000000004"], 0x1bc}}, 0x4810) 356.026315ms ago: executing program 7 (id=5069): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_AD_LACP_ACTIVE={0x5}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x4c}}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0xffffffffffffff19}, 0x10}, {{&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x0, 0x0, @private2}}, 0x0, &(0x7f0000000080)=[{0xfffffffffffffffd}, {&(0x7f0000000440)=""/212}], 0x0, &(0x7f0000000340)=""/70}, 0x7}], 0x1, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x1, 0x1, 0x7, 0x4}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x2, 0x4, 0x4}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfe, 0xfc}, {0x3000, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3c, 0x0, 0xff}, {0x0, 0x100000, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x5000, 0xe, 0xfe}, {0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0x8b, 0x0, 0xa, 0x26, 0x4, 0xd}, {0x80a0000}, {0xeeef0000, 0x8}, 0xddf8ffdb, 0x0, 0x0, 0x2b, 0x0, 0x3800, 0x0, [0x0, 0x1000, 0x1]}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000002, &(0x7f00000000c0)=[{0x400, 0x6, 0xfffffffffffffffc}], 0x1, 0x2, 0x2c, 0x2, 0x6e, 0x20}) 182.116734ms ago: executing program 1 (id=5070): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r5}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) open_by_handle_at(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61a6160a14a500"], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x20, 0x5b, "20891c746dd9b4ef870a6dc7b72e054ddb85a64a37f6a780d9d9bb30"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8841}, 0x8800) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000140)={0x3, r9, 0x1}) 158.819458ms ago: executing program 3 (id=5071): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406000005240000000d240f"], 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x52000102) (async) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x1a, 0x60, 0x4a, 0x20, 0x5c6, 0x9215, 0x2846, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x40, 0xc0, 0x3, [{{0x9, 0x4, 0x4, 0x6, 0x0, 0xff, 0x45, 0xa8}}]}}]}}, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = getpgrp(0x0) (async) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x408, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) (async) fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r4}) (async) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a6970"], 0x64}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000ff03000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="d5730000000000007f9067b3000000000000000000003ac64b2dfd5341eb7285ccac1d0b8fa2af1c00ddb667e8501d02efafdc76f3005e052030df4b9074c78d2eca636cf0712dc2572e7ed4e116c4b0da23421ed39a0c8b48046469a2ca4c51357e96f182d38a2efdcff372622bd8b559eb245d74a30b0d1ed438925af152080c2610ec1ded229d5c5995124f1187049849fd72d28a25d14e6669750438e74f1274e1033d021bfacbfa847a6c8df142cd7be74fc05d56ec51dbaff0e6625459f5e5992cb486f48b0b9bb5"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 7 (id=5072): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x4, [0x8, 0xe74, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe72, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0xfffffffc, 0x0, 0x10000000], [0x80000000, 0x0, 0x0, 0xb16, 0x10000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x4], [0xfffffffa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x100000, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0xfffffffd, 0x1, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x8, 0xa0d, 0x8, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4003, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x9, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0x6, 0x1000, 0x0, 0x0, 0xa, 0x0, 0x9]}, 0x45c) kernel console output (not intermixed with test programs): 4-1: Product: syz [ 1358.093105][T20973] usb 4-1: Manufacturer: syz [ 1358.098194][T20973] usb 4-1: SerialNumber: syz [ 1358.108884][T20973] usb 4-1: config 0 descriptor?? [ 1358.123788][T20973] safe_serial 4-1:0.0: safe_serial converter detected [ 1358.135984][T20977] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1358.156646][T20973] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 1358.163029][T25328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4644'. [ 1358.295878][T20977] usb 10-1: Using ep0 maxpacket: 32 [ 1358.303593][T20977] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.324998][T20973] usb 4-1: USB disconnect, device number 67 [ 1358.353793][T20973] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 1358.376204][T20977] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1358.388126][T20973] safe_serial 4-1:0.0: device disconnected [ 1358.394709][T20977] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.422324][T20977] usb 10-1: Product: syz [ 1358.428800][T20977] usb 10-1: Manufacturer: syz [ 1358.433525][T20977] usb 10-1: SerialNumber: syz [ 1358.457834][T20977] usb 10-1: config 0 descriptor?? [ 1358.470431][T20977] usb 10-1: bad CDC descriptors [ 1358.498277][T20977] usb 10-1: unsupported MDLM descriptors [ 1358.523137][T20981] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1358.533590][T15022] usb 9-1: Failed to submit usb control message: -71 [ 1358.552829][T15022] usb 9-1: unable to send the bmi data to the device: -71 [ 1358.590538][T20981] usb 9-1: USB disconnect, device number 52 [ 1358.597971][T15022] usb 9-1: unable to get target info from device [ 1358.614728][T15022] usb 9-1: could not get target info (-71) [ 1358.622753][T15022] usb 9-1: could not probe fw (-71) [ 1358.703537][T25340] loop2: detected capacity change from 0 to 7 [ 1358.720818][T25340] Dev loop2: unable to read RDB block 7 [ 1358.735152][T25340] loop2: AHDI p1 p2 [ 1358.740504][T25340] loop2: partition table partially beyond EOD, truncated [ 1358.752043][T25340] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 1358.832349][ T6032] udevd[6032]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1359.124701][T25353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1359.151814][T20981] tipc: Node number set to 134353152 [ 1359.298245][T25361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4653'. [ 1359.357970][T25361] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4653'. [ 1359.468304][T25369] input: syz1 as /devices/virtual/input/input181 [ 1359.479960][T25361] geneve4: entered promiscuous mode [ 1359.494741][T25361] geneve4: entered allmulticast mode [ 1360.498661][T25377] loop2: detected capacity change from 0 to 7 [ 1360.572388][T25377] Dev loop2: unable to read RDB block 7 [ 1360.593623][T25377] loop2: AHDI p1 p2 p3 [ 1360.621795][T25377] loop2: partition table partially beyond EOD, truncated [ 1360.650125][T25024] usb 10-1: USB disconnect, device number 17 [ 1360.659040][T25377] loop2: p1 start 1634624559 is beyond EOD, truncated [ 1360.741069][T25377] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1360.959306][T25389] FAULT_INJECTION: forcing a failure. [ 1360.959306][T25389] name failslab, interval 1, probability 0, space 0, times 0 [ 1360.988982][T25389] CPU: 0 UID: 0 PID: 25389 Comm: syz.1.4662 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 1360.989014][T25389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1360.989027][T25389] Call Trace: [ 1360.989037][T25389] [ 1360.989047][T25389] dump_stack_lvl+0x189/0x250 [ 1360.989085][T25389] ? __pfx____ratelimit+0x10/0x10 [ 1360.989107][T25389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1360.989140][T25389] ? __pfx__printk+0x10/0x10 [ 1360.989171][T25389] ? __pfx___might_resched+0x10/0x10 [ 1360.989197][T25389] ? fs_reclaim_acquire+0x7d/0x100 [ 1360.989255][T25389] should_fail_ex+0x414/0x560 [ 1360.989285][T25389] should_failslab+0xa8/0x100 [ 1360.989315][T25389] __kmalloc_noprof+0xcb/0x4f0 [ 1360.989339][T25389] ? kfree+0x4d/0x440 [ 1360.989359][T25389] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1360.989390][T25389] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1360.989416][T25389] ? tomoyo_domain+0xd9/0x130 [ 1360.989450][T25389] tomoyo_path2_perm+0x265/0x680 [ 1360.989471][T25389] ? tomoyo_path2_perm+0x235/0x680 [ 1360.989493][T25389] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1360.989514][T25389] ? __pfx_fuse_change_entry_timeout+0x10/0x10 [ 1360.989554][T25389] ? fuse_dentry_revalidate+0x879/0x910 [ 1360.989617][T25389] tomoyo_path_rename+0x141/0x190 [ 1360.989649][T25389] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 1360.989689][T25389] security_path_rename+0x250/0x490 [ 1360.989721][T25389] do_renameat2+0x64d/0xc50 [ 1360.989770][T25389] ? __pfx_do_renameat2+0x10/0x10 [ 1360.989807][T25389] ? strncpy_from_user+0x150/0x290 [ 1360.989833][T25389] ? getname_flags+0x1e5/0x540 [ 1360.989867][T25389] __x64_sys_rename+0x82/0x90 [ 1360.989894][T25389] do_syscall_64+0xfa/0x3b0 [ 1360.989914][T25389] ? lockdep_hardirqs_on+0x9c/0x150 [ 1360.989934][T25389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.989954][T25389] ? clear_bhb_loop+0x60/0xb0 [ 1360.989986][T25389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1360.990005][T25389] RIP: 0033:0x7f027a78e969 [ 1360.990023][T25389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1360.990041][T25389] RSP: 002b:00007f027b59c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1360.990063][T25389] RAX: ffffffffffffffda RBX: 00007f027a9b6080 RCX: 00007f027a78e969 [ 1360.990079][T25389] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 1360.990093][T25389] RBP: 00007f027b59c090 R08: 0000000000000000 R09: 0000000000000000 [ 1360.990105][T25389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1360.990117][T25389] R13: 0000000000000000 R14: 00007f027a9b6080 R15: 00007f027aadfa28 [ 1360.990149][T25389] [ 1361.004572][T25390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1361.018038][T25389] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1361.052469][T25390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.280924][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.301221][T20977] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1361.346258][T20973] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1361.384234][T25401] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1361.446024][T20977] usb 9-1: device descriptor read/64, error -71 [ 1361.485016][T25402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.502230][T25402] team0: Port device batadv0 added [ 1361.517105][T20973] usb 4-1: Using ep0 maxpacket: 32 [ 1361.533297][T20973] usb 4-1: config 1 interface 1 has no altsetting 0 [ 1361.553960][T20973] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1361.567495][T20973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.575572][T20973] usb 4-1: Product: syz [ 1361.587188][T20973] usb 4-1: Manufacturer: syz [ 1361.592266][T20973] usb 4-1: SerialNumber: syz [ 1361.607349][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.613700][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.716016][T20977] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1361.855871][T20977] usb 9-1: device descriptor read/64, error -71 [ 1361.967001][T20977] usb usb9-port1: attempt power cycle [ 1362.216360][T25419] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4671'. [ 1362.336086][T20977] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1362.422266][T20977] usb 9-1: device descriptor read/8, error -71 [ 1362.785974][T20977] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1362.820773][T20977] usb 9-1: device descriptor read/8, error -71 [ 1362.950337][T20977] usb usb9-port1: unable to enumerate USB device [ 1363.078849][T25426] fuse: Bad value for 'fd' [ 1363.087600][T25426] fuse: Unknown parameter 'group_i¸ö00000000000000000000' [ 1363.089412][T25427] fuse: Unknown parameter 'group_i¸ö00000000000000000000' [ 1363.971856][T21643] bridge_slave_1: left promiscuous mode [ 1363.987206][T21643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.079255][T21643] bridge_slave_0: left promiscuous mode [ 1364.085092][T21643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.099303][T20973] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1364.253409][T20973] usb 4-1: USB disconnect, device number 68 [ 1364.341865][T25448] input: syz1 as /devices/virtual/input/input182 [ 1364.360728][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1364.859489][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1364.874009][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1364.883411][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1364.900445][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1364.911349][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1366.121044][T21643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1366.176909][T21643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.281391][T21643] bond0 (unregistering): Released all slaves [ 1366.615522][T21643] bond1 (unregistering): Released all slaves [ 1366.923039][T25476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1366.957088][T25476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.036068][T20759] Bluetooth: hci0: command tx timeout [ 1367.301765][T21643] hsr_slave_0: left promiscuous mode [ 1367.320717][T21643] hsr_slave_1: left promiscuous mode [ 1367.334010][T21643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1367.352736][T21643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1367.977770][T25483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.031039][T25483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.138261][T25483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1368.167392][T25483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1368.958888][T25490] loop6: detected capacity change from 0 to 7 [ 1369.000583][ T6032] Dev loop6: unable to read RDB block 7 [ 1369.020740][ T6032] loop6: AHDI p1 p2 [ 1369.024723][ T6032] loop6: partition table partially beyond EOD, truncated [ 1369.053247][ T6032] loop6: p1 start 926365495 is beyond EOD, truncated [ 1369.078942][T25490] Dev loop6: unable to read RDB block 7 [ 1369.086753][T25490] loop6: AHDI p1 p2 [ 1369.094478][T25490] loop6: partition table partially beyond EOD, truncated [ 1369.118426][T25490] loop6: p1 start 926365495 is beyond EOD, truncated [ 1369.125407][T20759] Bluetooth: hci0: command tx timeout [ 1369.694848][T25499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1369.727024][T25499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1369.955038][T21643] team0 (unregistering): Port device team_slave_1 removed [ 1370.074289][T21643] team0 (unregistering): Port device team_slave_0 removed [ 1370.771158][ T30] audit: type=1326 audit(1748778344.368:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.8.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1370.799555][ T30] audit: type=1326 audit(1748778344.398:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.8.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1370.822025][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.830484][ T30] audit: type=1326 audit(1748778344.398:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.8.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1370.852790][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.873348][ T30] audit: type=1326 audit(1748778344.398:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.8.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1370.897279][ T30] audit: type=1326 audit(1748778344.398:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.8.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1370.919709][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.931424][ T30] audit: type=1326 audit(1748778344.398:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.8.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc0c338d37c code=0x7ffc0000 [ 1370.953691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.961267][ T30] audit: type=1326 audit(1748778344.528:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.8.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc0c338d41f code=0x7ffc0000 [ 1370.997597][ T30] audit: type=1326 audit(1748778344.528:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.8.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1371.020164][ C1] vkms_vblank_simulate: vblank timer overrun [ 1371.028225][ T30] audit: type=1326 audit(1748778344.528:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.8.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1371.052105][ T30] audit: type=1326 audit(1748778344.528:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25507 comm="syz.8.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1371.197472][T20759] Bluetooth: hci0: command tx timeout [ 1372.035567][T25462] chnl_net:caif_netlink_parms(): no params data found [ 1372.976793][T25546] netlink: 'syz.3.4700': attribute type 8 has an invalid length. [ 1372.998227][T25462] bridge0: port 1(bridge_slave_0) entered blocking state [ 1373.034350][T25462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1373.051506][T25462] bridge_slave_0: entered allmulticast mode [ 1373.076106][T25462] bridge_slave_0: entered promiscuous mode [ 1373.146728][T20981] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1373.214744][T25462] bridge0: port 2(bridge_slave_1) entered blocking state [ 1373.232552][T25462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1373.259193][T25462] bridge_slave_1: entered allmulticast mode [ 1373.275948][T20759] Bluetooth: hci0: command tx timeout [ 1373.298784][T20981] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 1373.305959][T25462] bridge_slave_1: entered promiscuous mode [ 1373.312127][T20981] usb 4-1: config 0 has no interface number 0 [ 1373.365597][T20981] usb 4-1: too many endpoints for config 0 interface 3 altsetting 0: 58, using maximum allowed: 30 [ 1373.433597][T20981] usb 4-1: config 0 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 58 [ 1373.508965][T25462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.524156][T20981] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1373.570436][T25462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.574748][T20981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1373.657809][T20981] usb 4-1: config 0 descriptor?? [ 1373.828105][T25462] team0: Port device team_slave_0 added [ 1373.844174][T25462] team0: Port device team_slave_1 added [ 1373.870302][T20981] usb 4-1: string descriptor 0 read error: -71 [ 1373.884581][T20981] ums-realtek 4-1:0.3: USB Mass Storage device detected [ 1373.912835][T25566] netlink: 'syz.7.4704': attribute type 64 has an invalid length. [ 1373.944196][T25566] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4704'. [ 1374.018537][T25462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.025640][T25462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1374.055036][T25462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.129200][T20981] usb 4-1: USB disconnect, device number 69 [ 1374.173223][T25462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1374.198910][T25462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1374.355833][T25462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1374.995223][T25462] hsr_slave_0: entered promiscuous mode [ 1375.010095][T25462] hsr_slave_1: entered promiscuous mode [ 1375.025494][T25462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1375.041748][T25462] Cannot create hsr debugfs directory [ 1375.085823][T20968] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1375.235861][T20968] usb 4-1: Using ep0 maxpacket: 16 [ 1375.249187][T20968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1375.308984][T20968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1375.443828][T20968] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1375.595295][T20968] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1375.626478][T20968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.666734][T20968] usb 4-1: config 0 descriptor?? [ 1376.133786][T20968] microsoft 0003:045E:07DA.0041: item fetching failed at offset 32/34 [ 1376.160973][T20968] microsoft 0003:045E:07DA.0041: parse failed [ 1376.251964][T20968] microsoft 0003:045E:07DA.0041: probe with driver microsoft failed with error -22 [ 1376.366944][T20968] usb 4-1: USB disconnect, device number 70 [ 1379.167259][T25462] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1379.212963][T25462] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1379.297250][T25462] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1379.306988][T20976] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1379.353862][T25462] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1379.646929][T25024] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1379.673514][T20976] usb 4-1: Using ep0 maxpacket: 16 [ 1379.717882][T20976] usb 4-1: config 0 has no interfaces? [ 1379.847712][T20976] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1379.890360][T20976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.913659][T20976] usb 4-1: Product: syz [ 1379.932906][T20976] usb 4-1: Manufacturer: syz [ 1379.968864][T20976] usb 4-1: SerialNumber: syz [ 1379.996920][T20976] usb 4-1: config 0 descriptor?? [ 1380.110972][T25462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1380.200125][T25462] 8021q: adding VLAN 0 to HW filter on device team0 [ 1380.297538][T25626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1380.328352][T25626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1380.394025][T21642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.401293][T21642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1380.468824][ T8803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1380.476075][ T8803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1380.479821][T25649] vivid-000: disconnect [ 1380.608150][T25629] vivid-000: reconnect [ 1380.857571][T25462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.218927][T25462] veth0_vlan: entered promiscuous mode [ 1381.372224][T25462] veth1_vlan: entered promiscuous mode [ 1381.471512][T25462] veth0_macvtap: entered promiscuous mode [ 1381.502871][T25462] veth1_macvtap: entered promiscuous mode [ 1381.619948][T25462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1381.718308][T25462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1381.780009][T25462] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.813827][T25462] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.840712][T25462] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.869193][T25462] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.271499][T20984] usb 4-1: USB disconnect, device number 71 [ 1383.690238][T24999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.765021][T25704] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1383.963705][T24999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.535606][T21643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1384.621916][T21643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1384.965861][T20977] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1384.998935][ T8797] bond3: left allmulticast mode [ 1385.047880][ T8797] bridge0: port 1(bond3) entered disabled state [ 1385.104079][T20759] Bluetooth: hci5: unexpected event for opcode 0x2006 [ 1385.146286][T20977] usb 9-1: Using ep0 maxpacket: 16 [ 1385.159475][T20977] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.176605][T20977] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1385.199253][T25727] FAULT_INJECTION: forcing a failure. [ 1385.199253][T25727] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.207241][T20977] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1385.245966][T20977] usb 9-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 1385.260120][T25727] CPU: 0 UID: 0 PID: 25727 Comm: syz.2.4677 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 1385.260151][T25727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1385.260164][T25727] Call Trace: [ 1385.260173][T25727] [ 1385.260182][T25727] dump_stack_lvl+0x189/0x250 [ 1385.260220][T25727] ? __pfx____ratelimit+0x10/0x10 [ 1385.260241][T25727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1385.260273][T25727] ? __pfx__printk+0x10/0x10 [ 1385.260294][T25727] ? __pfx___might_resched+0x10/0x10 [ 1385.260312][T25727] ? fs_reclaim_acquire+0x7d/0x100 [ 1385.260345][T25727] should_fail_ex+0x414/0x560 [ 1385.260367][T25727] should_failslab+0xa8/0x100 [ 1385.260389][T25727] __kmalloc_noprof+0xcb/0x4f0 [ 1385.260407][T25727] ? kfree+0x4d/0x440 [ 1385.260422][T25727] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1385.260444][T25727] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1385.260464][T25727] ? tomoyo_domain+0xd9/0x130 [ 1385.260489][T25727] tomoyo_path2_perm+0x265/0x680 [ 1385.260504][T25727] ? tomoyo_path2_perm+0x235/0x680 [ 1385.260521][T25727] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 1385.260535][T25727] ? __pfx_fuse_change_entry_timeout+0x10/0x10 [ 1385.260565][T25727] ? fuse_dentry_revalidate+0x879/0x910 [ 1385.260612][T25727] tomoyo_path_rename+0x141/0x190 [ 1385.260635][T25727] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 1385.260666][T25727] security_path_rename+0x250/0x490 [ 1385.260689][T25727] do_renameat2+0x64d/0xc50 [ 1385.260724][T25727] ? __pfx_do_renameat2+0x10/0x10 [ 1385.260751][T25727] ? strncpy_from_user+0x150/0x290 [ 1385.260770][T25727] ? getname_flags+0x1e5/0x540 [ 1385.260795][T25727] __x64_sys_rename+0x82/0x90 [ 1385.260815][T25727] do_syscall_64+0xfa/0x3b0 [ 1385.260829][T25727] ? lockdep_hardirqs_on+0x9c/0x150 [ 1385.260844][T25727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.260858][T25727] ? clear_bhb_loop+0x60/0xb0 [ 1385.260876][T25727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.260891][T25727] RIP: 0033:0x7fbbf658e969 [ 1385.260904][T25727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1385.260917][T25727] RSP: 002b:00007fbbf73a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 1385.260934][T25727] RAX: ffffffffffffffda RBX: 00007fbbf67b6080 RCX: 00007fbbf658e969 [ 1385.260945][T25727] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100 [ 1385.260956][T25727] RBP: 00007fbbf73a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1385.260965][T25727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1385.260974][T25727] R13: 0000000000000000 R14: 00007fbbf67b6080 R15: 00007fbbf68dfa28 [ 1385.260997][T25727] [ 1385.261004][T25727] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1385.565944][T20977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.653184][T20977] usb 9-1: config 0 descriptor?? [ 1385.916417][T25720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.973549][T25720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.266489][T20977] mcp2200 0003:04D8:00DF.0042: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.8-1/input0 [ 1386.434992][T20977] usb 9-1: USB disconnect, device number 58 [ 1386.587350][T20984] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1386.758587][T25741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.772860][T20984] usb 4-1: Using ep0 maxpacket: 8 [ 1386.774848][T25741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.803601][T20984] usb 4-1: config 0 has no interfaces? [ 1386.812479][T20984] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1386.846962][T20984] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1386.855203][T20984] usb 4-1: Manufacturer: syz [ 1386.871374][T20984] usb 4-1: config 0 descriptor?? [ 1387.170375][T25744] loop8: detected capacity change from 0 to 16384 [ 1387.407234][T25747] loop8: detected capacity change from 16384 to 0 [ 1387.451199][ C1] I/O error, dev loop8, sector 6144 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 1387.620612][ T8797] bond0 (unregistering): Released all slaves [ 1388.057700][ T8797] bond1 (unregistering): Released all slaves [ 1388.403926][ T8797] bond2 (unregistering): Released all slaves [ 1388.623653][ T8797] bond3 (unregistering): Released all slaves [ 1388.867390][ T8797] ave_0: left promiscuous mode [ 1389.038597][T25772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4742'. [ 1389.060528][ T8797] tipc: Left network mode [ 1389.334951][T25782] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4743'. [ 1389.447627][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1389.447647][ T30] audit: type=1326 audit(1748778363.018:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25781 comm="syz.8.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1389.603284][ T8797] hsr_slave_0: left promiscuous mode [ 1389.639699][ T8797] hsr_slave_1: left promiscuous mode [ 1389.839580][T12399] usb 4-1: USB disconnect, device number 72 [ 1390.097365][T20977] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1390.287208][T20977] usb 9-1: Using ep0 maxpacket: 16 [ 1390.305059][T20977] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 1390.323218][T20977] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1390.355736][T20977] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1390.386627][T25024] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1390.390423][T20977] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1390.424957][T20977] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1390.454054][T20977] usb 9-1: config 0 has no interface number 0 [ 1390.472131][T25820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.495889][T20977] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1390.516755][T25820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.532956][T20977] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1390.534010][T25824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1390.551375][T25024] usb 3-1: Using ep0 maxpacket: 16 [ 1390.579492][T20977] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1390.640102][T25802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.662144][T20977] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1390.711385][T25802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.740748][T20977] usb 9-1: config 0 interface 125 has no altsetting 0 [ 1390.748243][T20977] usb 9-1: config 0 interface 125 has no altsetting 2 [ 1390.808599][T20977] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1390.830573][T20977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.849489][T20977] usb 9-1: Product: syz [ 1390.853800][T20977] usb 9-1: Manufacturer: syz [ 1390.861240][T20977] usb 9-1: SerialNumber: syz [ 1390.872282][T20977] usb 9-1: config 0 descriptor?? [ 1390.894728][T20977] usb 9-1: selecting invalid altsetting 2 [ 1390.990227][T25024] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1391.017227][T25024] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1391.046735][T25024] usb 3-1: can't read configurations, error -71 [ 1391.373764][T25834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.383147][T20759] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1391.383707][T25834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.617295][T25838] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4745'. [ 1391.929154][T20977] get_1284_register timeout [ 1391.936780][ C0] usb 9-1: async_complete: urb error -104 [ 1391.942651][ C0] usb 9-1: async_complete: urb error -104 [ 1391.948921][ C0] usb 9-1: async_complete: urb error -104 [ 1392.021841][T20977] uss720 9-1:0.125: probe with driver uss720 failed with error -5 [ 1393.363955][T25864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1393.491532][T25864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1393.599021][ T30] audit: type=1326 audit(1748778367.178:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1393.621467][ C1] vkms_vblank_simulate: vblank timer overrun [ 1393.646956][T25867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4757'. [ 1393.746181][ T30] audit: type=1326 audit(1748778367.178:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1393.907758][ T30] audit: type=1326 audit(1748778367.178:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1394.066465][ T30] audit: type=1326 audit(1748778367.178:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1394.092848][ T30] audit: type=1326 audit(1748778367.178:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1394.117062][ T30] audit: type=1326 audit(1748778367.178:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1394.140162][ T30] audit: type=1326 audit(1748778367.178:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1394.164928][ T30] audit: type=1326 audit(1748778367.178:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1394.187440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1394.253922][ T5931] usb 9-1: USB disconnect, device number 59 [ 1394.326660][ T30] audit: type=1326 audit(1748778367.178:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1394.396066][T25880] fuse: Bad value for 'fd' [ 1394.535175][ T30] audit: type=1326 audit(1748778367.178:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1394.651666][ T30] audit: type=1326 audit(1748778367.188:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1394.736256][T20968] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1394.774821][ T30] audit: type=1326 audit(1748778367.188:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25860 comm="syz.2.4757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fbbf658e969 code=0x7ffc0000 [ 1394.821724][ T30] audit: type=1326 audit(1748778367.898:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25876 comm="syz.3.4759" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa109d8e969 code=0x0 [ 1394.868578][T20977] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1394.936200][T20968] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1394.995722][T20968] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.017177][T20968] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1395.071194][T20968] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1395.085814][T20977] usb 9-1: Using ep0 maxpacket: 16 [ 1395.091901][T20968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.104859][T20977] usb 9-1: config 8 has an invalid interface number: 223 but max is 0 [ 1395.124339][T20977] usb 9-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1395.134440][T20977] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.158192][T20977] usb 9-1: config 8 has no interface number 0 [ 1395.164685][T20977] usb 9-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32 [ 1395.182871][T20968] usb 3-1: config 0 descriptor?? [ 1395.217466][T20977] usb 9-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1395.236607][T20977] usb 9-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1395.250774][T20977] usb 9-1: config 8 interface 223 has no altsetting 0 [ 1395.279930][T20977] usb 9-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1395.311254][T20977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.360821][T20977] usb 9-1: Product: syz [ 1395.373036][T20977] usb 9-1: Manufacturer: syz [ 1395.388522][T20977] usb 9-1: SerialNumber: syz [ 1395.418042][T25885] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1395.466032][T25883] netlink: 'syz.2.4760': attribute type 1 has an invalid length. [ 1395.711891][T20977] usb 9-1: USB disconnect, device number 60 [ 1395.744501][T20968] usbhid 3-1:0.0: can't add hid device: -71 [ 1395.828744][T20968] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1396.023377][T20968] usb 3-1: USB disconnect, device number 4 [ 1396.690353][T25914] syzkaller0: entered promiscuous mode [ 1396.736922][T25914] syzkaller0: entered allmulticast mode [ 1396.814419][T25925] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1397.506553][T12399] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1397.776672][T12399] usb 3-1: Using ep0 maxpacket: 8 [ 1397.783527][T12399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1397.806474][T12399] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1397.815542][T12399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.833475][T12399] usb 3-1: config 0 descriptor?? [ 1398.049994][T12399] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1398.086774][T20984] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1398.276541][T20984] usb 4-1: Using ep0 maxpacket: 32 [ 1398.284139][T20984] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1398.338046][T20984] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1398.416854][T20984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.462633][T25933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.563919][T20984] usb 4-1: Product: syz [ 1398.576376][T25933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.613777][T20984] usb 4-1: Manufacturer: syz [ 1398.659568][T20984] usb 4-1: SerialNumber: syz [ 1398.695997][T20984] usb 4-1: config 0 descriptor?? [ 1398.760446][T20968] usb 3-1: USB disconnect, device number 5 [ 1399.132433][T20984] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1399.337109][T25949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.368678][T25949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.610017][T25949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.647152][T25949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.819271][T25973] ptrace attach of "./syz-executor exec"[15851] was attempted by "./syz-executor exec"[25973] [ 1399.943326][T25975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.962553][T25975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.982114][T12399] usb 4-1: USB disconnect, device number 73 [ 1399.996709][T25975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1400.005508][T25975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1400.485291][T12399] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1400.656680][T12399] usb 4-1: Using ep0 maxpacket: 32 [ 1400.663657][T12399] usb 4-1: config 2 has an invalid interface number: 117 but max is 0 [ 1400.695440][T12399] usb 4-1: config 2 has no interface number 0 [ 1400.711829][T12399] usb 4-1: config 2 interface 117 has no altsetting 0 [ 1400.735789][T20968] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1400.768485][T12399] usb 4-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 1400.800271][T12399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.850882][T12399] usb 4-1: Product: syz [ 1400.873588][T12399] usb 4-1: Manufacturer: syz [ 1400.898540][T12399] usb 4-1: SerialNumber: syz [ 1400.916756][T12399] usb-storage 4-1:2.117: USB Mass Storage device detected [ 1400.928394][T20968] usb 9-1: too many configurations: 255, using maximum allowed: 8 [ 1400.946953][T12399] usb-storage 4-1:2.117: Quirks match for vid 0781 pid 0100: 1 [ 1400.982722][T20968] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.992002][T25995] input: syz1 as /devices/virtual/input/input186 [ 1401.135258][T25980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1401.156316][T25980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1401.203062][T20968] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1401.392041][T12399] usb 4-1: USB disconnect, device number 74 [ 1401.503509][T20968] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.565509][T20968] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1401.857590][T20968] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.093049][T20968] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1402.414217][T20968] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.446767][T12399] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1402.464117][T20968] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1402.487227][T20968] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.516158][T20968] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1402.553872][T20968] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.606903][T12399] usb 4-1: Using ep0 maxpacket: 8 [ 1402.622875][T20968] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1402.624435][T12399] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1402.674184][T20968] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.684530][T12399] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1402.701501][T20968] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1402.754002][T12399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1402.777814][T20968] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1402.800179][T20968] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1402.820445][T12399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1402.845193][T20968] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1402.875786][T20968] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.882701][T12399] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1402.883813][T20968] usb 9-1: Product: syz [ 1402.992715][T12399] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1403.032722][T20968] usb 9-1: Manufacturer: syz [ 1403.039975][T12399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.072417][T12399] usb 4-1: Product: syz [ 1403.078074][T20968] usb 9-1: SerialNumber: syz [ 1403.088937][T12399] usb 4-1: Manufacturer: syz [ 1403.115144][T20968] usb 9-1: config 0 descriptor?? [ 1403.119217][T12399] usb 4-1: SerialNumber: syz [ 1403.176654][T20968] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1403.203470][T12399] usb 4-1: config 0 descriptor?? [ 1403.274538][T20968] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1403.323471][T20968] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1403.355201][T20968] usb 9-1: media controller created [ 1403.514081][T20968] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1403.566431][T25984] tc_dump_action: action bad kind [ 1403.606355][ T5931] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1403.670524][T26014] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1403.872012][ T5931] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1403.872038][T20968] DVB: Unable to find symbol tda10046_attach() [ 1403.872053][T20968] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1403.938550][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.944218][T20968] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1404.040396][ T5931] usb 3-1: Product: syz [ 1404.091169][ T5931] usb 3-1: Manufacturer: syz [ 1404.107736][ T5931] usb 3-1: SerialNumber: syz [ 1404.187040][ T5931] usb 3-1: config 0 descriptor?? [ 1404.313267][T20968] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1404.362160][T20968] usb 9-1: USB disconnect, device number 61 [ 1404.407020][ T5931] usb 3-1: selecting invalid altsetting 1 [ 1404.463029][ T5931] technisat-usb2: could not set alternate setting to 0 [ 1404.655447][ T5931] technisat-usb2: firmware version: 0.0 [ 1404.668974][ T5931] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1405.060429][ T5931] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1405.146536][T26046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4793'. [ 1405.181287][ T5931] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 1405.264583][ T5931] usb 3-1: USB disconnect, device number 6 [ 1405.277913][T26049] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4793'. [ 1405.354862][T12399] iowarrior 4-1:0.0: IOWarrior product=0x1505, serial=42424242 interface=0 now attached to iowarrior0 [ 1405.397171][T12399] usb 4-1: USB disconnect, device number 75 [ 1405.768156][T26063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.816833][T26063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.879979][T26064] input: syz1 as /devices/virtual/input/input188 [ 1406.505440][T26079] FAULT_INJECTION: forcing a failure. [ 1406.505440][T26079] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.565408][T26079] CPU: 0 UID: 0 PID: 26079 Comm: syz.1.4801 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 1406.565439][T26079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1406.565452][T26079] Call Trace: [ 1406.565460][T26079] [ 1406.565470][T26079] dump_stack_lvl+0x189/0x250 [ 1406.565509][T26079] ? __pfx____ratelimit+0x10/0x10 [ 1406.565530][T26079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1406.565562][T26079] ? __pfx__printk+0x10/0x10 [ 1406.565588][T26079] ? __pfx___might_resched+0x10/0x10 [ 1406.565615][T26079] ? fs_reclaim_acquire+0x7d/0x100 [ 1406.565650][T26079] should_fail_ex+0x414/0x560 [ 1406.565683][T26079] should_failslab+0xa8/0x100 [ 1406.565712][T26079] __kmalloc_noprof+0xcb/0x4f0 [ 1406.565738][T26079] ? tomoyo_encode+0x28b/0x550 [ 1406.565769][T26079] tomoyo_encode+0x28b/0x550 [ 1406.565801][T26079] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1406.565829][T26079] ? tomoyo_domain+0xd9/0x130 [ 1406.565862][T26079] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1406.565883][T26079] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1406.565908][T26079] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1406.565948][T26079] ? __lock_acquire+0xab9/0xd20 [ 1406.566003][T26079] ? __fget_files+0x2a/0x420 [ 1406.566035][T26079] ? __fget_files+0x2a/0x420 [ 1406.566062][T26079] ? __fget_files+0x3a0/0x420 [ 1406.566089][T26079] ? __fget_files+0x2a/0x420 [ 1406.566122][T26079] security_file_ioctl+0xcb/0x2d0 [ 1406.566157][T26079] __se_sys_ioctl+0x47/0x170 [ 1406.566184][T26079] do_syscall_64+0xfa/0x3b0 [ 1406.566206][T26079] ? lockdep_hardirqs_on+0x9c/0x150 [ 1406.566226][T26079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.566248][T26079] ? clear_bhb_loop+0x60/0xb0 [ 1406.566274][T26079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.566294][T26079] RIP: 0033:0x7f027a78e969 [ 1406.566313][T26079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.566332][T26079] RSP: 002b:00007f027b5bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1406.566354][T26079] RAX: ffffffffffffffda RBX: 00007f027a9b5fa0 RCX: 00007f027a78e969 [ 1406.566369][T26079] RDX: 0000200000000340 RSI: 000000000000541b RDI: 0000000000000003 [ 1406.566382][T26079] RBP: 00007f027b5bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.566395][T26079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.566408][T26079] R13: 0000000000000000 R14: 00007f027a9b5fa0 R15: 00007f027aadfa28 [ 1406.566441][T26079] [ 1406.909957][T26085] ALSA: mixer_oss: invalid OSS volume '' [ 1406.917041][T26079] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1407.045568][T26085] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4803'. [ 1407.129084][T26085] unsupported nlmsg_type 40 [ 1407.241651][T26091] bond5: entered promiscuous mode [ 1407.247569][T26091] bond5: entered allmulticast mode [ 1407.253328][T26091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1407.332083][T26097] Cannot find add_set index 3 as target [ 1407.589857][T26101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4807'. [ 1407.649161][T26101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1407.776636][T12399] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1407.833477][T15022] tipc: Subscription rejected, illegal request [ 1407.976436][T12399] usb 4-1: Using ep0 maxpacket: 8 [ 1408.008878][T12399] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1408.096247][T20984] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1408.328650][T12399] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1408.337931][T20984] usb 3-1: Using ep0 maxpacket: 8 [ 1408.350312][T20984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1408.366509][T12399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.377573][T20984] usb 3-1: config 9 has an invalid interface number: 5 but max is 0 [ 1408.385652][T20984] usb 3-1: config 9 has no interface number 0 [ 1408.396353][T12399] usb 4-1: Product: syz [ 1408.407625][T20984] usb 3-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping [ 1408.421829][T12399] usb 4-1: Manufacturer: syz [ 1408.432219][T20984] usb 3-1: config 9 interface 5 has no altsetting 0 [ 1408.439544][T12399] usb 4-1: SerialNumber: syz [ 1408.440208][T26123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.449524][T20984] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 1408.464227][T12399] usb 4-1: config 0 descriptor?? [ 1408.470166][T20984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.474523][T26123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.479828][T20984] usb 3-1: Product: syz [ 1408.492880][T20984] usb 3-1: Manufacturer: syz [ 1408.499139][T20984] usb 3-1: SerialNumber: syz [ 1408.576399][T26123] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4811'. [ 1408.797052][T20984] usb 3-1: USB disconnect, device number 7 [ 1409.458379][T26153] FAULT_INJECTION: forcing a failure. [ 1409.458379][T26153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.480493][T26153] CPU: 0 UID: 0 PID: 26153 Comm: syz.2.4816 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 1409.480535][T26153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1409.480549][T26153] Call Trace: [ 1409.480558][T26153] [ 1409.480568][T26153] dump_stack_lvl+0x189/0x250 [ 1409.480606][T26153] ? __pfx____ratelimit+0x10/0x10 [ 1409.480632][T26153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1409.480665][T26153] ? __pfx__printk+0x10/0x10 [ 1409.480702][T26153] should_fail_ex+0x414/0x560 [ 1409.480732][T26153] _copy_to_user+0x31/0xb0 [ 1409.480766][T26153] simple_read_from_buffer+0xe1/0x170 [ 1409.480799][T26153] proc_fail_nth_read+0x1df/0x250 [ 1409.480835][T26153] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1409.480871][T26153] ? rw_verify_area+0x258/0x650 [ 1409.480894][T26153] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1409.480928][T26153] vfs_read+0x200/0x980 [ 1409.480958][T26153] ? __pfx___mutex_lock+0x10/0x10 [ 1409.480982][T26153] ? __pfx_vfs_read+0x10/0x10 [ 1409.481008][T26153] ? __fget_files+0x2a/0x420 [ 1409.481042][T26153] ? __fget_files+0x3a0/0x420 [ 1409.481069][T26153] ? __fget_files+0x2a/0x420 [ 1409.481108][T26153] ksys_read+0x145/0x250 [ 1409.481130][T26153] ? __fget_files+0x3a0/0x420 [ 1409.481160][T26153] ? __pfx_ksys_read+0x10/0x10 [ 1409.481191][T26153] ? do_syscall_64+0xbe/0x3b0 [ 1409.481219][T26153] do_syscall_64+0xfa/0x3b0 [ 1409.481240][T26153] ? lockdep_hardirqs_on+0x9c/0x150 [ 1409.481261][T26153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.481282][T26153] ? clear_bhb_loop+0x60/0xb0 [ 1409.481308][T26153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.481329][T26153] RIP: 0033:0x7fbbf658d37c [ 1409.481348][T26153] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1409.481365][T26153] RSP: 002b:00007fbbf73c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1409.481388][T26153] RAX: ffffffffffffffda RBX: 00007fbbf67b5fa0 RCX: 00007fbbf658d37c [ 1409.481403][T26153] RDX: 000000000000000f RSI: 00007fbbf73c80a0 RDI: 0000000000000005 [ 1409.481415][T26153] RBP: 00007fbbf73c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.481428][T26153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.481441][T26153] R13: 0000000000000000 R14: 00007fbbf67b5fa0 R15: 00007fbbf68dfa28 [ 1409.481473][T26153] [ 1409.768269][T20977] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1409.786798][T26151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.804169][T26151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.992114][T20977] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1410.009464][T20977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.034564][T20977] usb 9-1: config 0 descriptor?? [ 1410.050258][T20977] cp210x 9-1:0.0: cp210x converter detected [ 1410.790079][T20968] usb 4-1: USB disconnect, device number 76 [ 1412.104870][T20977] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1412.130936][T20977] cp210x 9-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 1412.162592][T20977] cp210x 9-1:0.0: GPIO initialisation failed: -32 [ 1412.205472][T20977] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1412.291158][T20977] usb 9-1: USB disconnect, device number 62 [ 1412.334725][T20977] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1412.369562][T20977] cp210x 9-1:0.0: device disconnected [ 1412.564488][T26204] vivid-007: ================= START STATUS ================= [ 1412.600363][T26204] vivid-007: Enable Output Cropping: true [ 1412.713122][T26204] vivid-007: Enable Output Composing: true [ 1412.733465][T26204] vivid-007: Enable Output Scaler: true [ 1412.740431][T26204] vivid-007: Tx RGB Quantization Range: Automatic [ 1412.749578][T26204] vivid-007: Transmit Mode: HDMI [ 1412.754737][T26204] vivid-007: Hotplug Present: 0x00000000 [ 1412.763789][T26204] vivid-007: RxSense Present: 0x00000000 [ 1412.777607][T26204] vivid-007: EDID Present: 0x00000000 [ 1412.783910][T26204] vivid-007: ================== END STATUS ================== [ 1413.579403][T26220] fuse: Bad value for 'fd' [ 1413.601933][T26220] syzkaller1: entered promiscuous mode [ 1413.608102][T20968] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 1413.635129][T26220] syzkaller1: entered allmulticast mode [ 1413.768640][T20968] usb 9-1: not running at top speed; connect to a high speed hub [ 1413.794648][T20968] usb 9-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1413.845461][T20968] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1413.868841][T20968] usb 9-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.40 [ 1413.878446][T20968] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.901736][T20968] usb 9-1: Product: syz [ 1413.920842][T20968] usb 9-1: Manufacturer: syz [ 1413.949081][T20968] usb 9-1: SerialNumber: syz [ 1414.205011][T20968] usbhid 9-1:1.0: can't add hid device: -71 [ 1414.212977][T20968] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1414.289307][T20968] usb 9-1: USB disconnect, device number 63 [ 1414.376068][T18413] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 1414.577933][T18413] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1414.589592][T18413] usb 3-1: config 0 has no interface number 0 [ 1414.596521][T18413] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1414.612900][T18413] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1414.628823][T18413] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1414.648740][T18413] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1414.686147][T18413] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1414.732842][T18413] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1414.765625][T18413] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1414.801063][T18413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.894854][T18413] usb 3-1: config 0 descriptor?? [ 1414.921095][T26230] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1414.930617][T26230] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1414.980298][T18413] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1415.166727][T20984] usb 9-1: new low-speed USB device number 64 using dummy_hcd [ 1415.244710][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 1415.267962][T25024] usb 3-1: USB disconnect, device number 8 [ 1415.283728][T25024] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1415.316966][T20984] usb 9-1: device descriptor read/64, error -71 [ 1415.612916][T20984] usb 9-1: new low-speed USB device number 65 using dummy_hcd [ 1416.013202][T20984] usb 9-1: device descriptor read/64, error -71 [ 1416.216448][T20984] usb usb9-port1: attempt power cycle [ 1416.728336][T20984] usb 9-1: new low-speed USB device number 66 using dummy_hcd [ 1416.819188][T20984] usb 9-1: device descriptor read/8, error -71 [ 1417.275647][T26266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.312146][T20984] usb 9-1: new low-speed USB device number 67 using dummy_hcd [ 1417.317371][T26266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.378360][T26265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.404320][T20984] usb 9-1: device descriptor read/8, error -71 [ 1417.412042][T26265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.537125][T20984] usb usb9-port1: unable to enumerate USB device [ 1418.045816][T20977] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1418.200974][T26300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.246795][T26300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.251650][T20977] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1418.305395][T20977] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1418.356482][T20977] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1418.358884][T26305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.374995][T20977] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1418.382482][T26305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.423515][T20977] usb 4-1: Product: syz [ 1418.455416][T20977] usb 4-1: Manufacturer: syz [ 1418.484672][T20977] usb 4-1: SerialNumber: syz [ 1418.521436][T20977] usb 4-1: config 0 descriptor?? [ 1418.582164][T20977] usb 4-1: selecting invalid altsetting 0 [ 1418.672403][ C1] vcan0: j1939_tp_rxtimer: 0xffff88814234ac00: rx timeout, send abort [ 1418.744603][T26283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.806677][T26283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.987358][T20984] usb 4-1: USB disconnect, device number 77 [ 1419.180727][ C1] vcan0: j1939_tp_rxtimer: 0xffff88814234ac00: abort rx timeout. Force session deactivation [ 1419.220452][T26328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4852'. [ 1419.236697][T26328] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 1419.269623][T26328] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1419.416853][T20977] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1419.576049][T18413] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1419.596004][T20977] usb 9-1: Using ep0 maxpacket: 8 [ 1419.611805][T20977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.622826][T20977] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1419.632514][T20977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.637706][T20984] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1419.649630][T20977] usb 9-1: config 0 descriptor?? [ 1419.662431][T20977] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1419.735938][T18413] usb 3-1: Using ep0 maxpacket: 8 [ 1419.749236][T18413] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1419.761804][T18413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1419.788814][T18413] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1419.806681][T20984] usb 4-1: Using ep0 maxpacket: 16 [ 1419.815335][T18413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1419.831913][T18413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1419.839045][T20984] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1419.848089][T18413] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1419.863557][T20984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.873729][T18413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1419.883905][T20984] usb 4-1: Product: syz [ 1419.895601][T18413] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1419.913182][T20984] usb 4-1: Manufacturer: syz [ 1419.916447][T18413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1419.946486][T20984] usb 4-1: SerialNumber: syz [ 1419.955796][T18413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1419.958345][T20984] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1419.974731][T20984] r8152-cfgselector 4-1: config 0 descriptor?? [ 1420.003684][T18413] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1420.018793][T18413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1420.037360][T18413] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1420.053549][T18413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1420.066853][T18413] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1420.086621][T18413] usb 3-1: string descriptor 0 read error: -22 [ 1420.093390][T18413] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1420.113509][T18413] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.144952][T18413] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1420.213894][T20984] r8152-cfgselector 4-1: USB disconnect, device number 78 [ 1420.463663][T20984] usb 3-1: USB disconnect, device number 9 [ 1420.890941][T20977] gspca_vc032x: reg_w err -71 [ 1420.896789][T20977] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 1420.944760][T20977] usb 9-1: USB disconnect, device number 68 [ 1421.065431][T26369] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4856'. [ 1421.206105][T20976] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1421.409930][T20976] usb 4-1: Using ep0 maxpacket: 16 [ 1421.431267][T20976] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1421.453658][T20976] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1421.473348][T20976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.496137][T20977] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1421.514172][T20976] usb 4-1: Product: syz [ 1421.529132][T20976] usb 4-1: Manufacturer: syz [ 1421.537966][T20976] usb 4-1: SerialNumber: syz [ 1421.571509][T20976] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1421.586312][T20976] r8152-cfgselector 4-1: config 0 descriptor?? [ 1421.725942][T20977] usb 9-1: Using ep0 maxpacket: 16 [ 1421.739467][T20977] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1421.773223][T20977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1421.812915][T20977] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1421.830406][T26390] misc userio: Invalid payload size [ 1421.841088][T20977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.891970][T20977] usb 9-1: Product: syz [ 1421.908522][T20977] usb 9-1: Manufacturer: syz [ 1421.938319][T20977] usb 9-1: SerialNumber: syz [ 1421.959784][T20977] usb 9-1: config 0 descriptor?? [ 1421.970674][T20977] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1422.005793][T20977] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1422.110149][T26366] use of bytesused == 0 is deprecated and will be removed in the future, [ 1422.141417][T26366] use the actual size instead. [ 1422.207033][T20976] r8152-cfgselector 4-1: USB disconnect, device number 79 [ 1422.299652][T26405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.308518][T26405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.574306][T20977] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1422.582111][T20977] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1422.716476][T20981] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1422.875138][T26424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4867'. [ 1423.034845][T20981] usb 3-1: config 0 has no interfaces? [ 1423.052817][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.059652][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.074862][T20981] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1423.084851][T20981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.115103][T20981] usb 3-1: Product: syz [ 1423.150568][T20981] usb 3-1: Manufacturer: syz [ 1423.159994][T20981] usb 3-1: SerialNumber: syz [ 1423.169533][T20981] usb 3-1: config 0 descriptor?? [ 1423.195727][T20977] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 1423.207706][T20977] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 1423.250890][T20977] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 1423.280117][T20977] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 1423.297841][T20977] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 1423.445135][T26424] batman_adv: batadv0: Removing interface: vlan0 [ 1423.936577][T20977] usb 9-1: USB disconnect, device number 69 [ 1424.623135][T26447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4868'. [ 1425.476191][T20981] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1425.636826][T20981] usb 4-1: Using ep0 maxpacket: 16 [ 1425.650675][T20981] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1425.695571][T20981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.837428][T20981] usb 4-1: Product: syz [ 1425.855564][T20981] usb 4-1: Manufacturer: syz [ 1425.878221][T20981] usb 4-1: SerialNumber: syz [ 1425.909324][T20981] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1425.936618][T20981] r8152-cfgselector 4-1: config 0 descriptor?? [ 1426.061197][T25024] usb 3-1: USB disconnect, device number 10 [ 1426.335376][T26489] pimreg: entered allmulticast mode [ 1426.657703][T26498] loop6: detected capacity change from 0 to 7 [ 1426.675356][T26498] Dev loop6: unable to read RDB block 7 [ 1426.689989][T26498] loop6: AHDI p1 p2 [ 1426.700198][T26498] loop6: partition table partially beyond EOD, truncated [ 1426.721205][T26498] loop6: p1 start 926365495 is beyond EOD, truncated [ 1428.069138][T26523] usb usb8: usbfs: process 26523 (syz.7.4883) did not claim interface 0 before use [ 1428.596662][T20981] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1428.603727][T20981] r8152-cfgselector 4-1: bad CDC descriptors [ 1428.614256][T20981] r8152-cfgselector 4-1: USB disconnect, device number 80 [ 1429.371824][T26541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.380959][T26541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.971420][T12422] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1430.167747][T12422] usb 9-1: Using ep0 maxpacket: 8 [ 1430.292143][T12422] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1430.488759][T12422] usb 9-1: config 127 has an invalid interface number: 181 but max is 0 [ 1430.833107][T12422] usb 9-1: config 127 has no interface number 0 [ 1430.883350][T12422] usb 9-1: config 127 interface 181 altsetting 249 bulk endpoint 0xC has invalid maxpacket 64 [ 1430.919364][T12422] usb 9-1: config 127 interface 181 altsetting 249 bulk endpoint 0x6 has invalid maxpacket 64 [ 1431.001938][T12422] usb 9-1: config 127 interface 181 has no altsetting 0 [ 1431.023044][T12422] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=12.8b [ 1431.044581][T12422] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.261684][T12422] usb 9-1: Product: syz [ 1431.301999][T12422] usb 9-1: Manufacturer: syz [ 1431.425489][T12422] usb 9-1: SerialNumber: syz [ 1431.586863][T26546] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1431.638764][T26546] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1431.936856][ T5931] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1431.954413][T12422] kvaser_usb 9-1:127.181: error -ENODEV: Cannot get usb endpoint(s) [ 1432.011927][T26566] loop6: detected capacity change from 0 to 7 [ 1432.019675][T12422] usb 9-1: USB disconnect, device number 70 [ 1432.023223][T26566] Dev loop6: unable to read RDB block 7 [ 1432.035879][T26566] loop6: AHDI p1 p2 [ 1432.045624][T26566] loop6: partition table partially beyond EOD, truncated [ 1432.095648][T26566] loop6: p1 start 926365495 is beyond EOD, truncated [ 1432.096807][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 1432.118682][ T5931] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 1432.139887][ T5931] usb 3-1: config 0 has no interface number 0 [ 1432.182896][ T5931] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1432.259339][ T5931] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1432.290630][ T5931] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1432.302121][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.319752][ T5931] usb 3-1: Product: syz [ 1432.324202][ T5931] usb 3-1: Manufacturer: syz [ 1432.334804][ T5931] usb 3-1: SerialNumber: syz [ 1432.369011][ T5931] usb 3-1: config 0 descriptor?? [ 1432.630773][ T5931] usb 3-1: USB disconnect, device number 11 [ 1432.673374][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1433.309701][T26582] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4895'. [ 1433.341509][T20981] IPVS: starting estimator thread 0... [ 1433.400236][T26586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4896'. [ 1433.436777][T26583] IPVS: using max 37 ests per chain, 88800 per kthread [ 1433.503545][T26589] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4894'. [ 1433.662812][T26594] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4894'. [ 1433.706618][T20981] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 1433.915436][T20981] usb 3-1: config 4 has an invalid interface number: 250 but max is 1 [ 1433.966330][T20981] usb 3-1: config 4 has an invalid interface number: 55 but max is 1 [ 1434.015161][T20981] usb 3-1: config 4 has no interface number 0 [ 1434.056351][T20981] usb 3-1: config 4 has no interface number 1 [ 1434.093710][T20981] usb 3-1: config 4 interface 250 has no altsetting 0 [ 1434.113073][T20981] usb 3-1: config 4 interface 55 has no altsetting 0 [ 1434.157143][T20981] usb 3-1: New USB device found, idVendor=2304, idProduct=0245, bcdDevice=4a.84 [ 1434.193319][T20981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.231642][T20981] usb 3-1: Product: syz [ 1434.244694][T20981] usb 3-1: Manufacturer: syz [ 1434.280309][T20981] usb 3-1: SerialNumber: syz [ 1434.628453][T20981] dvb-usb: found a 'Pinnacle PCTV 73e SE' in cold state, will try to load a firmware [ 1434.672833][T20981] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1434.714588][T20981] dib0700: firmware download failed at 7 with -8 [ 1434.770254][T26612] loop6: detected capacity change from 0 to 7 [ 1434.784423][T20981] dvb-usb: found a 'Pinnacle PCTV 73e SE' in cold state, will try to load a firmware [ 1434.808686][T20981] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1434.819313][T26618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.828945][T20981] dib0700: firmware download failed at 7 with -8 [ 1434.836967][T26618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.854209][T26619] binder: 26613:26619 ioctl c00c6211 0 returned -14 [ 1434.865189][T26618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.874461][T20981] usb 3-1: USB disconnect, device number 12 [ 1434.900317][T26618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.937206][T26612] Dev loop6: unable to read RDB block 7 [ 1434.952151][T26612] loop6: AHDI p1 p2 [ 1434.977424][T26612] loop6: partition table partially beyond EOD, truncated [ 1434.985055][T26612] loop6: p1 start 926365495 is beyond EOD, truncated [ 1435.350070][T26628] Cannot find add_set index 0 as target [ 1435.777744][ T5931] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1435.906241][T20981] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1435.946846][ T5931] usb 4-1: Using ep0 maxpacket: 32 [ 1435.971169][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1436.597180][T20981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.609050][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1436.620207][T20981] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1436.648966][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1436.664114][T20981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.719838][T20981] usb 3-1: config 0 descriptor?? [ 1436.725011][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 1436.770931][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 1436.807659][ T5931] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1436.819685][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.867031][ T5931] usb 4-1: Product: syz [ 1436.880102][ T5931] usb 4-1: Manufacturer: syz [ 1436.908535][ T5931] usb 4-1: SerialNumber: syz [ 1436.969498][T20981] usbhid 3-1:0.0: can't add hid device: -71 [ 1436.977903][T20981] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1436.989850][ T5931] usb 4-1: config 0 descriptor?? [ 1437.012540][T26640] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1437.053727][ T5931] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input193 [ 1437.075373][T20981] usb 3-1: USB disconnect, device number 13 [ 1437.228023][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1437.376368][T20984] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1437.451205][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1437.563426][T20984] usb 9-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 1437.579090][T20984] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.593370][T20984] usb 9-1: config 0 descriptor?? [ 1437.616226][T20981] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1437.674491][T20984] pwc: Creative Labs Webcam 5 detected. [ 1437.713458][T26640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.738165][T26640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.776783][T20981] usb 3-1: Using ep0 maxpacket: 32 [ 1437.783996][T20981] usb 3-1: no configurations [ 1437.801464][T20981] usb 3-1: can't read configurations, error -22 [ 1437.945047][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1438.027275][T20981] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1438.053469][ T5185] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1438.093714][T26667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.103840][T26667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.116498][T26667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4915'. [ 1438.133497][T26667] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.142438][T26667] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.151209][T26667] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.160657][T26667] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.257095][T20981] usb 3-1: Using ep0 maxpacket: 32 [ 1438.302603][T20981] usb 3-1: no configurations [ 1438.385023][T20981] usb 3-1: can't read configurations, error -22 [ 1438.395128][T26667] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.404798][T26667] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.416436][T26667] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.425345][T26667] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.491638][T20981] usb usb3-port1: attempt power cycle [ 1439.104931][T26682] loop6: detected capacity change from 0 to 7 [ 1439.153293][T26682] Dev loop6: unable to read RDB block 7 [ 1439.166520][T26682] loop6: AHDI p1 p2 [ 1439.173952][T26682] loop6: partition table partially beyond EOD, truncated [ 1439.218810][T26682] loop6: p1 start 926365495 is beyond EOD, truncated [ 1439.268855][T12399] usb 4-1: USB disconnect, device number 81 [ 1440.115792][T26689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4919'. [ 1440.126702][T20759] Bluetooth: hci2: unexpected event for opcode 0x203d [ 1440.445798][ T30] audit: type=1326 audit(1748778414.018:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.1.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027a78e969 code=0x7ffc0000 [ 1440.514957][T26697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.549115][T12422] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 1440.586830][T26697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.636807][ T30] audit: type=1326 audit(1748778414.018:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.1.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027a78e969 code=0x7ffc0000 [ 1440.766404][ T30] audit: type=1326 audit(1748778414.108:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.1.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f027a78d2d0 code=0x7ffc0000 [ 1440.803084][T12422] usb 4-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 1440.833318][T12422] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1440.875895][ T30] audit: type=1326 audit(1748778414.108:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.1.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f027a78e56b code=0x7ffc0000 [ 1440.910006][T26689] hsr_slave_1 (unregistering): left promiscuous mode [ 1440.920074][T12422] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 28009, setting to 64 [ 1440.977062][T12422] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1441.007693][ T30] audit: type=1326 audit(1748778414.108:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.1.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f027a78e56b code=0x7ffc0000 [ 1441.019932][T12422] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1441.030220][ C1] vkms_vblank_simulate: vblank timer overrun [ 1441.098484][T12422] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1441.106316][ T30] audit: type=1326 audit(1748778414.208:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.1.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027a78e969 code=0x7ffc0000 [ 1441.125753][T12422] usb 4-1: Product: syz [ 1441.172301][T20984] pwc: Failed to set LED on/off time (-71) [ 1441.187037][T12422] usb 4-1: Manufacturer: syz [ 1441.191694][T12422] usb 4-1: SerialNumber: syz [ 1441.215327][T20984] pwc: send_video_command error -71 [ 1441.224864][T20984] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1441.236361][ T30] audit: type=1326 audit(1748778414.208:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.1.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027a78e969 code=0x7ffc0000 [ 1441.266843][T20984] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1441.270200][T12422] usb 4-1: config 0 descriptor?? [ 1441.282688][T20984] usb 9-1: USB disconnect, device number 71 [ 1441.290558][ T30] audit: type=1326 audit(1748778414.218:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.1.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f027a78e56b code=0x7ffc0000 [ 1441.314235][ T30] audit: type=1326 audit(1748778414.218:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.1.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027a78e969 code=0x7ffc0000 [ 1441.346820][T26691] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1441.370557][ T30] audit: type=1326 audit(1748778414.218:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26696 comm="syz.1.4920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f027a78e969 code=0x7ffc0000 [ 1441.413721][T26707] usb usb7: usbfs: process 26707 (syz.8.4923) did not claim interface 2 before use [ 1441.597820][T12422] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1441.627161][T12422] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1441.799062][T12422] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 1441.817990][T12422] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1441.842978][T12422] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1441.909193][T26720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1441.921084][T26720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1442.254771][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.261513][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.268162][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.274786][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.281399][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.288008][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.294690][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.301794][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.308488][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.315084][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.321695][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.328323][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.334971][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.341619][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.348338][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.354945][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.361620][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.368296][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.374934][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.381587][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.388183][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.394779][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.401470][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.408094][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.414704][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.421318][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.428014][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.434627][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.441233][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.447894][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.454540][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.461213][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.468752][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.475376][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.482178][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.488867][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.495382][T12422] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1442.503792][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.510337][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.516870][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.523359][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.529928][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.536467][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.543009][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.549539][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.556255][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.562847][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.569434][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.576138][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.582708][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.589329][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.596041][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.602599][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.609222][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.615816][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.622367][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.628942][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.635489][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.642171][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.648786][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.655348][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.661952][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.668563][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.675123][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.681706][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.688296][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.694836][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.701351][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.707893][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.714381][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.720949][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.727510][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.734019][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.740532][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.747037][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.753606][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.760101][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.766618][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.773104][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.779612][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.786134][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.792659][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.799528][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.806045][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.812585][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.819237][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.825903][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.832448][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.839028][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.845704][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.852326][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.858955][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.865501][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.872117][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.879992][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.886816][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.893461][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.900118][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.906837][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.913485][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.920497][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.927630][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.934393][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.941057][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.947723][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.954390][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.961142][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.967804][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.974501][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.981282][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.987978][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1442.994631][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.001308][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.008042][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.014647][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.021265][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.027929][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.034580][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.041428][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.048081][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.054723][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.061382][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.068035][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.074687][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.081316][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.087930][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.094513][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.101117][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.107701][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.114290][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.120933][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.127515][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.134116][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.140729][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.147323][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.153903][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.160513][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.167161][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.173751][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.180367][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.187049][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.193630][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.200369][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.206993][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.213585][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.220206][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.226825][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.233435][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.240050][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.246697][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.253310][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.259943][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.266549][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.273143][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.279782][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.286432][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.293059][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.299656][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.306273][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.312871][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.319512][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.326142][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.332750][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.339357][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.346001][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.352609][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.359218][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.365817][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.372425][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.379048][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.385642][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.392296][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.398904][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.405491][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.412090][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.418711][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.425295][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.431901][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.438560][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.445215][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.451821][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.458473][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.465062][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.471707][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.478321][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.484905][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.491527][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.498128][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.504714][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.511306][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.519034][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.535743][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.542387][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.549071][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.555824][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.562666][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.569301][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.576125][ C0] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 1443.583165][T12422] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 1443.604848][T12422] usb 4-1: USB disconnect, device number 82 [ 1443.787856][T26733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.797793][T26733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.165461][T20759] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1444.175112][T20759] Bluetooth: hci2: Injecting HCI hardware error event [ 1444.185368][T20759] Bluetooth: hci2: hardware error 0x00 [ 1444.192072][T20984] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1444.346294][T20984] usb 4-1: Using ep0 maxpacket: 32 [ 1444.358561][T20984] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.414239][T20984] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1444.424743][T20984] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1444.436411][T20984] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1444.445625][T20984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.462388][T20984] usb 4-1: config 0 descriptor?? [ 1445.092481][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4929'. [ 1445.217457][T12399] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1445.553615][T12399] usb 9-1: config 0 has no interfaces? [ 1445.688223][T12399] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1445.779032][T12399] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.853195][T12399] usb 9-1: Product: syz [ 1445.864862][T12399] usb 9-1: Manufacturer: syz [ 1445.883149][T12399] usb 9-1: SerialNumber: syz [ 1446.035024][T12399] usb 9-1: config 0 descriptor?? [ 1446.346792][T12422] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1446.476664][T20759] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1446.506416][T12422] usb 3-1: Using ep0 maxpacket: 32 [ 1446.682696][T12422] usb 3-1: config 0 has an invalid interface number: 146 but max is 0 [ 1446.762233][T12422] usb 3-1: config 0 has no interface number 0 [ 1446.791717][T12422] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1446.849396][T12422] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1446.897464][T12422] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1446.914129][T12422] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1447.140166][T12422] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1447.160863][T20984] usbhid 4-1:0.0: can't add hid device: -71 [ 1447.195011][T20984] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1447.210618][T12422] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1447.288083][T12422] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1447.307295][T20984] usb 4-1: USB disconnect, device number 83 [ 1447.447752][T12422] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1447.604238][T12422] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1447.640282][T12422] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1447.736895][T12422] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1447.758254][T12422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.809881][T12422] usb 3-1: Product: syz [ 1447.832859][T12422] usb 3-1: Manufacturer: syz [ 1447.864156][T12422] usb 3-1: SerialNumber: syz [ 1447.916770][T12422] usb 3-1: config 0 descriptor?? [ 1447.935851][T26762] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1447.952432][T26762] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1448.022172][T26794] binder: BINDER_SET_CONTEXT_MGR already set [ 1448.028651][T26794] binder: 26786:26794 ioctl 4018620d 200000000040 returned -16 [ 1448.066268][T12422] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1448.069986][T26784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4939'. [ 1448.124592][T26787] binder: 26786:26787 ioctl c0306201 2000000003c0 returned -14 [ 1448.175724][T12422] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1448.266978][T12422] scsi host1: microtekX6 [ 1448.341355][T12422] usb 3-1: USB disconnect, device number 17 [ 1448.346645][T15022] microtek usb (rev 0.4.3): error -19 submitting URB [ 1448.378987][ T25] microtek usb (rev 0.4.3): error -19 submitting URB [ 1448.426602][ T25] microtek usb (rev 0.4.3): error -19 submitting URB [ 1449.399355][T20977] usb 9-1: USB disconnect, device number 72 [ 1449.535933][T26819] syzkaller1: tun_chr_ioctl cmd 35203 [ 1449.574332][T26819] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1449.576431][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1449.576452][ T30] audit: type=1800 audit(1748778423.168:4138): pid=26819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4947" name="memory.events" dev="tmpfs" ino=2145 res=0 errno=0 [ 1449.624542][T26819] syzkaller1: linktype set to 32 [ 1449.801299][ T30] audit: type=1326 audit(1748778423.298:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.7.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e538e969 code=0x7ffc0000 [ 1450.026271][ T30] audit: type=1326 audit(1748778423.298:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26822 comm="syz.7.4948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e538e969 code=0x7ffc0000 [ 1450.048720][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.399405][T12399] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1450.576419][T12399] usb 4-1: Using ep0 maxpacket: 16 [ 1450.586839][T26857] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4955'. [ 1450.647651][T12399] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 1450.661067][T12399] usb 4-1: config 1 interface 0 altsetting 62 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 1450.686628][T12399] usb 4-1: config 1 interface 0 altsetting 62 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1450.802675][T12399] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1450.842845][T12399] usb 4-1: config 1 interface 0 altsetting 62 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 1450.857151][T12399] usb 4-1: config 1 interface 0 altsetting 62 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1450.871405][T12399] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1450.898347][T12399] usb 4-1: config 1 interface 0 altsetting 62 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 1450.928167][T12399] usb 4-1: config 1 interface 0 altsetting 62 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1450.948852][T12399] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1450.957074][T26866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1450.973508][T12399] usb 4-1: config 1 interface 0 altsetting 62 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 1451.013360][T12399] usb 4-1: config 1 interface 0 altsetting 62 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1451.041989][T12399] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1451.093470][T26866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.287304][T12399] usb 4-1: config 1 interface 0 altsetting 62 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 1451.301270][T12399] usb 4-1: config 1 interface 0 altsetting 62 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1451.327413][T12399] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1451.337389][T25024] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1451.363588][T12399] usb 4-1: config 1 interface 0 altsetting 62 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 1451.377105][T12399] usb 4-1: config 1 interface 0 altsetting 62 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1451.403460][T12399] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1451.412222][T12399] usb 4-1: config 1 interface 0 altsetting 62 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 1451.431863][T12399] usb 4-1: config 1 interface 0 altsetting 62 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1451.456288][T12399] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1451.464483][T12399] usb 4-1: config 1 interface 0 altsetting 62 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 1451.626949][T25024] usb 3-1: config 0 has no interfaces? [ 1451.802703][T12399] usb 4-1: config 1 interface 0 altsetting 62 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1451.927657][T25024] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1451.959007][T12399] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1451.975530][T25024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.005133][T25024] usb 3-1: Product: syz [ 1452.010138][T25024] usb 3-1: Manufacturer: syz [ 1452.022765][T25024] usb 3-1: SerialNumber: syz [ 1452.029145][T12399] usb 4-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 1452.042558][T25024] usb 3-1: config 0 descriptor?? [ 1452.048277][T12399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.057390][T12399] usb 4-1: Product: syz [ 1452.065303][T12399] usb 4-1: Manufacturer: 㱫 [ 1452.070614][T12399] usb 4-1: SerialNumber: syz [ 1452.520651][T26889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.544931][T26889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.770122][T26891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.788538][T26891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.899303][T26839] syz.3.4952 (26839): drop_caches: 2 [ 1454.018686][T25024] usb 3-1: USB disconnect, device number 18 [ 1454.116875][T26916] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4973'. [ 1454.249777][T12399] usbhid 4-1:1.0: can't add hid device: -71 [ 1454.321694][T12399] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1454.348672][T12399] usb 4-1: USB disconnect, device number 84 [ 1455.775023][T26964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.813424][T26964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.155935][T20976] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1456.423523][T20976] usb 4-1: config 0 has no interfaces? [ 1456.454632][T20976] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1456.515926][T20976] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.564941][T20976] usb 4-1: Product: syz [ 1456.598350][T20976] usb 4-1: Manufacturer: syz [ 1456.769872][T20976] usb 4-1: SerialNumber: syz [ 1456.809695][T20976] usb 4-1: config 0 descriptor?? [ 1456.945853][T12422] usb 9-1: new full-speed USB device number 73 using dummy_hcd [ 1457.189085][T12422] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1457.243276][T12422] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1457.341897][T12422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1457.487960][T12422] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1457.652618][T12422] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1457.662731][T12422] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.689055][T12422] usb 9-1: Product: syz [ 1457.703201][T12422] usb 9-1: Manufacturer: syz [ 1457.708459][T12422] usb 9-1: SerialNumber: syz [ 1457.731962][T12422] usb 9-1: config 0 descriptor?? [ 1457.752483][T26987] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1457.986102][T12422] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1458.022258][T27012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.064233][T12422] input: Griffin SoundKnob as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input197 [ 1458.124958][ C0] powermate: config urb returned -71 [ 1458.130862][ C0] powermate: config urb returned -71 [ 1458.136433][ C0] powermate: config urb returned -71 [ 1458.142002][ C0] powermate: config urb returned -71 [ 1458.152874][T12422] usb 9-1: USB disconnect, device number 73 [ 1458.158937][ C0] powermate 9-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1458.188716][T27012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.228911][T27012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1458.240527][T27012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.738763][T27027] input: syz0 as /devices/virtual/input/input198 [ 1459.174404][T27036] netlink: 'syz.8.5003': attribute type 7 has an invalid length. [ 1459.195038][T12399] usb 4-1: USB disconnect, device number 85 [ 1459.233799][T27036] netlink: 'syz.8.5003': attribute type 8 has an invalid length. [ 1459.866407][T25024] usb 9-1: new full-speed USB device number 74 using dummy_hcd [ 1460.038914][T25024] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1460.048355][T25024] usb 9-1: not running at top speed; connect to a high speed hub [ 1460.087686][T25024] usb 9-1: config 17 has an invalid interface number: 8 but max is 1 [ 1460.117580][T25024] usb 9-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 1460.137185][T25024] usb 9-1: config 17 has no interface number 0 [ 1460.146706][T25024] usb 9-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1460.187504][T25024] usb 9-1: config 17 interface 8 has no altsetting 0 [ 1460.219229][T25024] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 1460.246886][T25024] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.286419][T25024] usb 9-1: Product: syz [ 1460.290649][T25024] usb 9-1: Manufacturer: syz [ 1460.295362][T25024] usb 9-1: SerialNumber: syz [ 1460.560038][T27051] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5006'. [ 1460.667259][T27071] loop2: detected capacity change from 0 to 7 [ 1460.681284][T27071] Dev loop2: unable to read RDB block 7 [ 1460.715890][T27071] loop2: AHDI p1 p2 [ 1460.737391][T27071] loop2: partition table partially beyond EOD, truncated [ 1460.780935][T27071] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 1460.791668][T27051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.846113][T27051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.913051][T27051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.947274][T27051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1461.230235][ T5200] Dev loop2: unable to read RDB block 7 [ 1461.257645][ T5200] loop2: AHDI p1 p2 [ 1461.283656][ T5200] loop2: partition table partially beyond EOD, truncated [ 1461.327290][ T5200] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 1461.591144][T25024] usb 9-1: selecting invalid altsetting 0 [ 1461.615999][T14524] udevd[14524]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1461.694006][T25024] usb 9-1: USB disconnect, device number 74 [ 1461.747017][T20976] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1461.756824][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1461.793627][T27100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1461.821320][T27100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.023140][T20976] usb 3-1: config 0 has no interfaces? [ 1462.284925][T20976] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1462.346884][T20976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.372327][T20976] usb 3-1: Product: syz [ 1462.389895][T20976] usb 3-1: Manufacturer: syz [ 1462.404618][T20976] usb 3-1: SerialNumber: syz [ 1462.441118][T20976] usb 3-1: config 0 descriptor?? [ 1462.905901][T20976] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1463.077407][T18413] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 1463.117014][T20976] usb 9-1: Using ep0 maxpacket: 16 [ 1463.188388][T27130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.199656][T27130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.319590][T27118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.386790][T27118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.405001][T18413] usb 4-1: Invalid ep0 maxpacket: 16 [ 1463.495900][T27134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5024'. [ 1463.609690][T18413] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 1463.959664][T18413] usb 4-1: Invalid ep0 maxpacket: 16 [ 1463.965425][T18413] usb usb4-port1: attempt power cycle [ 1464.575797][T18413] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 1464.596500][T18413] usb 4-1: Invalid ep0 maxpacket: 16 [ 1464.789171][T18413] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 1464.837315][T18413] usb 4-1: Invalid ep0 maxpacket: 16 [ 1464.843698][T18413] usb usb4-port1: unable to enumerate USB device [ 1465.295989][T12422] usb 3-1: USB disconnect, device number 19 [ 1465.672577][T20976] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1465.702880][T20976] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1465.831325][T20976] usb 9-1: can't read configurations, error -71 [ 1465.946888][T12399] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1466.096653][T12399] usb 3-1: device descriptor read/64, error -71 [ 1466.346322][T12399] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1466.586638][T12399] usb 3-1: device descriptor read/64, error -71 [ 1466.758291][T12399] usb usb3-port1: attempt power cycle [ 1466.856263][T20976] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1467.035834][T20976] usb 9-1: Using ep0 maxpacket: 8 [ 1467.046493][T27178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.057992][T27178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.091684][T20976] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1467.105623][T20976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.175363][T12399] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1467.197396][T12399] usb 3-1: device descriptor read/8, error -71 [ 1467.335711][T20976] usb 9-1: config 0 descriptor?? [ 1467.466215][T12399] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1467.497136][T12399] usb 3-1: device descriptor read/8, error -71 [ 1467.578435][T20976] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1467.626976][T12399] usb usb3-port1: unable to enumerate USB device [ 1468.920309][T20976] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1468.942290][T20976] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1469.014702][T20976] asix 9-1:0.0: probe with driver asix failed with error -71 [ 1469.075748][T20976] usb 9-1: USB disconnect, device number 76 [ 1470.186410][T27213] netlink: 'syz.8.5042': attribute type 15 has an invalid length. [ 1470.658497][ T30] audit: type=1326 audit(1748778444.258:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27221 comm="syz.8.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1470.673337][T27223] tipc: Started in network mode [ 1470.681124][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.743197][T27223] tipc: Node identity 4, cluster identity 4711 [ 1470.754939][T27223] tipc: Node number set to 4 [ 1470.770355][ T30] audit: type=1326 audit(1748778444.258:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27221 comm="syz.8.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1470.843407][ T30] audit: type=1326 audit(1748778444.258:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27221 comm="syz.8.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1470.895086][T27231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5044'. [ 1470.930585][T27231] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.930688][T27231] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.930759][T27231] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.930830][T27231] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.931073][T27231] geneve2: entered promiscuous mode [ 1470.931131][T27231] geneve2: entered allmulticast mode [ 1470.969423][T27231] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.969465][T27231] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.969494][T27231] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.969516][T27231] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.986692][ T30] audit: type=1326 audit(1748778444.258:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27221 comm="syz.8.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1470.986764][ T30] audit: type=1326 audit(1748778444.258:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27221 comm="syz.8.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1470.986812][ T30] audit: type=1326 audit(1748778444.258:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27221 comm="syz.8.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1470.986860][ T30] audit: type=1326 audit(1748778444.258:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27221 comm="syz.8.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1470.986908][ T30] audit: type=1326 audit(1748778444.258:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27221 comm="syz.8.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1470.986959][ T30] audit: type=1326 audit(1748778444.258:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27221 comm="syz.8.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1470.987014][ T30] audit: type=1326 audit(1748778444.258:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27221 comm="syz.8.5045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c338e969 code=0x7ffc0000 [ 1471.037460][T12422] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1471.262161][T12422] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.262194][T12422] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1471.265582][T12422] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1471.265614][T12422] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1471.265718][T12422] usb 9-1: SerialNumber: syz [ 1471.589087][T12422] usb 9-1: 0:2 : does not exist [ 1471.589174][T12422] usb 9-1: unit 5: unexpected type 0x09 [ 1471.685407][T12422] usb 9-1: USB disconnect, device number 77 [ 1471.787369][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1472.738832][T27250] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 1473.149106][T27253] netlink: 'syz.8.5050': attribute type 27 has an invalid length. [ 1473.451352][T27253] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.451599][T27253] bridge0: port 1(bridge_slave_0) entered disabled state [ 1474.207198][T27253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.758630][T27253] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.773382][T27253] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.782666][T27253] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.800370][T27253] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.886021][T27253] geneve1: left allmulticast mode [ 1475.693552][T27262] trusted_key: encrypted_key: key user:syz not found [ 1475.727031][T27262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1476.634802][T27271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.643991][T27271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.419350][T25024] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1477.576703][T25024] usb 4-1: Using ep0 maxpacket: 32 [ 1477.589961][T25024] usb 4-1: config 6 has an invalid interface number: 66 but max is 0 [ 1477.607482][T25024] usb 4-1: config 6 has no interface number 0 [ 1477.798407][T25024] usb 4-1: config 6 interface 66 has no altsetting 0 [ 1477.836452][T25024] usb 4-1: New USB device found, idVendor=0499, idProduct=1006, bcdDevice=d6.95 [ 1477.845896][T25024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.863995][T25024] usb 4-1: Product: syz [ 1477.882261][T25024] usb 4-1: Manufacturer: syz [ 1477.908674][T25024] usb 4-1: SerialNumber: syz [ 1480.314694][T25024] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1480.419312][T25024] snd-usb-audio 4-1:6.66: probe with driver snd-usb-audio failed with error -2 [ 1480.477167][T25024] usb 4-1: USB disconnect, device number 90 [ 1480.547906][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.66/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1480.949202][T27333] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1481.389865][T27344] [ 1481.392232][T27344] ===================================================== [ 1481.399165][T27344] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1481.406644][T27344] 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 Not tainted [ 1481.413404][T27344] ----------------------------------------------------- [ 1481.420331][T27344] syz.3.5071/27344 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1481.428050][T27344] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1481.436852][T27344] [ 1481.436852][T27344] and this task is already holding: [ 1481.444236][T27344] ffff8880335f9f20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1481.452986][T27344] which would create a new lock dependency: [ 1481.459093][T27344] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1481.466697][T27344] [ 1481.466697][T27344] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1481.476160][T27344] (&dev->event_lock#2){..-.}-{3:3} [ 1481.476207][T27344] [ 1481.476207][T27344] ... which became SOFTIRQ-irq-safe at: [ 1481.489119][T27344] lock_acquire+0x120/0x360 [ 1481.493719][T27344] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1481.499033][T27344] input_inject_event+0xab/0x320 [ 1481.504064][T27344] led_trigger_event+0x138/0x210 [ 1481.509092][T27344] kbd_bh+0x1c6/0x2e0 [ 1481.513169][T27344] tasklet_action_common+0x369/0x580 [ 1481.518556][T27344] handle_softirqs+0x283/0x870 [ 1481.523419][T27344] __irq_exit_rcu+0xca/0x1f0 [ 1481.528106][T27344] irq_exit_rcu+0x9/0x30 [ 1481.532445][T27344] sysvec_call_function_single+0xa3/0xc0 [ 1481.538181][T27344] asm_sysvec_call_function_single+0x1a/0x20 [ 1481.544256][T27344] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1481.550170][T27344] evdev_write+0x2fc/0x480 [ 1481.554690][T27344] vfs_write+0x27e/0xa90 [ 1481.559030][T27344] ksys_write+0x145/0x250 [ 1481.563455][T27344] do_syscall_64+0xfa/0x3b0 [ 1481.568058][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.574046][T27344] [ 1481.574046][T27344] to a SOFTIRQ-irq-unsafe lock: [ 1481.581079][T27344] (tasklist_lock){.+.+}-{3:3} [ 1481.581109][T27344] [ 1481.581109][T27344] ... which became SOFTIRQ-irq-unsafe at: [ 1481.593753][T27344] ... [ 1481.593763][T27344] lock_acquire+0x120/0x360 [ 1481.600945][T27344] _raw_read_lock+0x36/0x50 [ 1481.605555][T27344] __do_wait+0xde/0x740 [ 1481.609891][T27344] do_wait+0x1f8/0x520 [ 1481.614128][T27344] kernel_wait+0xab/0x170 [ 1481.619262][T27344] call_usermodehelper_exec_work+0xbe/0x230 [ 1481.625267][T27344] process_scheduled_works+0xade/0x17b0 [ 1481.630924][T27344] worker_thread+0x8a0/0xda0 [ 1481.635626][T27344] kthread+0x711/0x8a0 [ 1481.639816][T27344] ret_from_fork+0x3fc/0x770 [ 1481.644510][T27344] ret_from_fork_asm+0x1a/0x30 [ 1481.649382][T27344] [ 1481.649382][T27344] other info that might help us debug this: [ 1481.649382][T27344] [ 1481.659633][T27344] Chain exists of: [ 1481.659633][T27344] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1481.659633][T27344] [ 1481.672718][T27344] Possible interrupt unsafe locking scenario: [ 1481.672718][T27344] [ 1481.681063][T27344] CPU0 CPU1 [ 1481.686436][T27344] ---- ---- [ 1481.691810][T27344] lock(tasklist_lock); [ 1481.696103][T27344] local_irq_disable(); [ 1481.702884][T27344] lock(&dev->event_lock#2); [ 1481.710108][T27344] lock(&f_owner->lock); [ 1481.716982][T27344] [ 1481.720444][T27344] lock(&dev->event_lock#2); [ 1481.725316][T27344] [ 1481.725316][T27344] *** DEADLOCK *** [ 1481.725316][T27344] [ 1481.733469][T27344] 2 locks held by syz.3.5071/27344: [ 1481.738671][T27344] #0: ffff88807659e180 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x17d/0x8a0 [ 1481.747237][T27344] #1: ffff8880335f9f20 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1481.756410][T27344] [ 1481.756410][T27344] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1481.766824][T27344] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1481.772670][T27344] IN-SOFTIRQ-W at: [ 1481.776920][T27344] lock_acquire+0x120/0x360 [ 1481.783605][T27344] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1481.790995][T27344] input_inject_event+0xab/0x320 [ 1481.798120][T27344] led_trigger_event+0x138/0x210 [ 1481.805237][T27344] kbd_bh+0x1c6/0x2e0 [ 1481.811398][T27344] tasklet_action_common+0x369/0x580 [ 1481.818878][T27344] handle_softirqs+0x283/0x870 [ 1481.825830][T27344] __irq_exit_rcu+0xca/0x1f0 [ 1481.832616][T27344] irq_exit_rcu+0x9/0x30 [ 1481.839044][T27344] sysvec_call_function_single+0xa3/0xc0 [ 1481.846869][T27344] asm_sysvec_call_function_single+0x1a/0x20 [ 1481.855029][T27344] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1481.862946][T27344] evdev_write+0x2fc/0x480 [ 1481.869548][T27344] vfs_write+0x27e/0xa90 [ 1481.875974][T27344] ksys_write+0x145/0x250 [ 1481.882485][T27344] do_syscall_64+0xfa/0x3b0 [ 1481.889187][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.897263][T27344] INITIAL USE at: [ 1481.901424][T27344] lock_acquire+0x120/0x360 [ 1481.908031][T27344] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1481.915334][T27344] input_inject_event+0xab/0x320 [ 1481.922379][T27344] kbd_led_trigger_activate+0xbc/0x100 [ 1481.930284][T27344] led_trigger_set+0x52d/0x950 [ 1481.937139][T27344] led_trigger_set_default+0x215/0x250 [ 1481.944689][T27344] led_classdev_register_ext+0x73d/0x930 [ 1481.952474][T27344] input_leds_connect+0x517/0x790 [ 1481.959598][T27344] input_register_device+0xcee/0x10b0 [ 1481.967069][T27344] atkbd_connect+0x70e/0x9c0 [ 1481.973764][T27344] serio_driver_probe+0x82/0xa0 [ 1481.980714][T27344] really_probe+0x26a/0x9a0 [ 1481.987311][T27344] __driver_probe_device+0x18c/0x2f0 [ 1481.994686][T27344] driver_probe_device+0x4f/0x430 [ 1482.001804][T27344] __driver_attach+0x452/0x700 [ 1482.008697][T27344] bus_for_each_dev+0x230/0x2b0 [ 1482.015662][T27344] serio_handle_event+0x1a2/0x860 [ 1482.022821][T27344] process_scheduled_works+0xade/0x17b0 [ 1482.030472][T27344] worker_thread+0x8a0/0xda0 [ 1482.037168][T27344] kthread+0x711/0x8a0 [ 1482.043348][T27344] ret_from_fork+0x3fc/0x770 [ 1482.050036][T27344] ret_from_fork_asm+0x1a/0x30 [ 1482.056943][T27344] } [ 1482.059710][T27344] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1482.069012][T27344] -> (&client->buffer_lock){....}-{3:3} { [ 1482.074938][T27344] INITIAL USE at: [ 1482.079038][T27344] lock_acquire+0x120/0x360 [ 1482.085563][T27344] _raw_spin_lock+0x2e/0x40 [ 1482.091996][T27344] evdev_pass_values+0xb9/0xbd0 [ 1482.098861][T27344] evdev_events+0x1e6/0x340 [ 1482.105288][T27344] input_pass_values+0x288/0x890 [ 1482.112153][T27344] input_event_dispose+0x330/0x6b0 [ 1482.119188][T27344] input_inject_event+0x1fe/0x320 [ 1482.126159][T27344] evdev_write+0x2fc/0x480 [ 1482.132504][T27344] vfs_write+0x27e/0xa90 [ 1482.138667][T27344] ksys_write+0x145/0x250 [ 1482.144918][T27344] do_syscall_64+0xfa/0x3b0 [ 1482.151530][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.159358][T27344] } [ 1482.162039][T27344] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1482.170391][T27344] ... acquired at: [ 1482.174371][T27344] lock_acquire+0x120/0x360 [ 1482.179063][T27344] _raw_spin_lock+0x2e/0x40 [ 1482.183764][T27344] evdev_pass_values+0xb9/0xbd0 [ 1482.188808][T27344] evdev_events+0x1e6/0x340 [ 1482.193498][T27344] input_pass_values+0x288/0x890 [ 1482.198623][T27344] input_event_dispose+0x330/0x6b0 [ 1482.204053][T27344] input_inject_event+0x1fe/0x320 [ 1482.209272][T27344] evdev_write+0x2fc/0x480 [ 1482.213882][T27344] vfs_write+0x27e/0xa90 [ 1482.218313][T27344] ksys_write+0x145/0x250 [ 1482.222876][T27344] do_syscall_64+0xfa/0x3b0 [ 1482.227568][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.233644][T27344] [ 1482.235978][T27344] -> (&new->fa_lock){....}-{3:3} { [ 1482.241224][T27344] INITIAL USE at: [ 1482.245217][T27344] lock_acquire+0x120/0x360 [ 1482.251469][T27344] _raw_write_lock_irq+0xa2/0xf0 [ 1482.258171][T27344] fasync_remove_entry+0xf1/0x1c0 [ 1482.264939][T27344] lease_modify+0x1ca/0x3c0 [ 1482.271280][T27344] locks_remove_file+0x4bf/0xea0 [ 1482.278056][T27344] __fput+0x3ab/0xa70 [ 1482.283951][T27344] task_work_run+0x1d4/0x260 [ 1482.290329][T27344] get_signal+0x11ed/0x1340 [ 1482.296591][T27344] arch_do_signal_or_restart+0x9a/0x750 [ 1482.303886][T27344] exit_to_user_mode_loop+0x75/0x110 [ 1482.310965][T27344] do_syscall_64+0x2bd/0x3b0 [ 1482.317360][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.325000][T27344] INITIAL READ USE at: [ 1482.329430][T27344] lock_acquire+0x120/0x360 [ 1482.336233][T27344] _raw_read_lock_irqsave+0xaf/0x100 [ 1482.343720][T27344] kill_fasync+0x199/0x4d0 [ 1482.350403][T27344] sock_wake_async+0x137/0x160 [ 1482.357355][T27344] sk_wake_async+0x189/0x280 [ 1482.364131][T27344] tcp_rcv_state_process+0x21d0/0x4150 [ 1482.371779][T27344] tcp_v4_do_rcv+0x3f2/0xce0 [ 1482.378555][T27344] __release_sock+0x21c/0x350 [ 1482.385411][T27344] release_sock+0x5f/0x1f0 [ 1482.392011][T27344] __inet_stream_connect+0x8af/0xf10 [ 1482.399492][T27344] inet_stream_connect+0x66/0xa0 [ 1482.406615][T27344] __sys_connect+0x313/0x440 [ 1482.413646][T27344] __x64_sys_connect+0x7a/0x90 [ 1482.420594][T27344] do_syscall_64+0xfa/0x3b0 [ 1482.427281][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.435356][T27344] } [ 1482.437950][T27344] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1482.446738][T27344] ... acquired at: [ 1482.450632][T27344] lock_acquire+0x120/0x360 [ 1482.455317][T27344] _raw_read_lock_irqsave+0xaf/0x100 [ 1482.460794][T27344] kill_fasync+0x199/0x4d0 [ 1482.465393][T27344] evdev_pass_values+0x627/0xbd0 [ 1482.470519][T27344] evdev_events+0x1e6/0x340 [ 1482.475208][T27344] input_pass_values+0x288/0x890 [ 1482.480334][T27344] input_event_dispose+0x330/0x6b0 [ 1482.485626][T27344] input_inject_event+0x1fe/0x320 [ 1482.490884][T27344] evdev_write+0x2fc/0x480 [ 1482.495495][T27344] vfs_write+0x27e/0xa90 [ 1482.500022][T27344] ksys_write+0x145/0x250 [ 1482.504531][T27344] do_syscall_64+0xfa/0x3b0 [ 1482.509216][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.515292][T27344] [ 1482.517623][T27344] -> (&f_owner->lock){....}-{3:3} { [ 1482.522854][T27344] INITIAL USE at: [ 1482.526764][T27344] lock_acquire+0x120/0x360 [ 1482.532840][T27344] _raw_write_lock_irq+0xa2/0xf0 [ 1482.539435][T27344] __f_setown+0x67/0x370 [ 1482.545259][T27344] generic_setlease+0xd60/0x1240 [ 1482.551768][T27344] fcntl_setlease+0x3a2/0x4c0 [ 1482.558068][T27344] do_fcntl+0x6a9/0x1910 [ 1482.563895][T27344] __se_sys_fcntl+0xc8/0x150 [ 1482.570052][T27344] do_syscall_64+0xfa/0x3b0 [ 1482.576138][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.583608][T27344] INITIAL READ USE at: [ 1482.587959][T27344] lock_acquire+0x120/0x360 [ 1482.594466][T27344] _raw_read_lock_irqsave+0xaf/0x100 [ 1482.601768][T27344] send_sigio+0x38/0x370 [ 1482.608020][T27344] dnotify_handle_event+0x169/0x440 [ 1482.615238][T27344] fsnotify+0x1814/0x1a80 [ 1482.621582][T27344] vfs_create+0x39b/0x400 [ 1482.627920][T27344] do_mknodat+0x3c6/0x4d0 [ 1482.634352][T27344] __x64_sys_mknodat+0xa7/0xc0 [ 1482.641130][T27344] do_syscall_64+0xfa/0x3b0 [ 1482.647645][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.655545][T27344] } [ 1482.658049][T27344] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1482.666916][T27344] ... acquired at: [ 1482.670725][T27344] lock_acquire+0x120/0x360 [ 1482.675427][T27344] _raw_read_lock_irqsave+0xaf/0x100 [ 1482.680908][T27344] send_sigio+0x38/0x370 [ 1482.685344][T27344] kill_fasync+0x24d/0x4d0 [ 1482.689960][T27344] sock_wake_async+0x137/0x160 [ 1482.695003][T27344] sk_wake_async+0x184/0x280 [ 1482.699884][T27344] unix_release_sock+0x6d4/0xc60 [ 1482.705104][T27344] unix_release+0x92/0xd0 [ 1482.709716][T27344] sock_close+0xc0/0x240 [ 1482.714157][T27344] __fput+0x44c/0xa70 [ 1482.718326][T27344] task_work_run+0x1d4/0x260 [ 1482.723188][T27344] do_exit+0x8d1/0x2550 [ 1482.727528][T27344] do_group_exit+0x21c/0x2d0 [ 1482.732302][T27344] get_signal+0x1286/0x1340 [ 1482.736991][T27344] arch_do_signal_or_restart+0x9a/0x750 [ 1482.742723][T27344] exit_to_user_mode_loop+0x75/0x110 [ 1482.748192][T27344] do_syscall_64+0x2bd/0x3b0 [ 1482.752965][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.759049][T27344] [ 1482.761382][T27344] [ 1482.761382][T27344] the dependencies between the lock to be acquired [ 1482.761391][T27344] and SOFTIRQ-irq-unsafe lock: [ 1482.774937][T27344] -> (tasklist_lock){.+.+}-{3:3} { [ 1482.780082][T27344] HARDIRQ-ON-R at: [ 1482.784076][T27344] lock_acquire+0x120/0x360 [ 1482.790252][T27344] _raw_read_lock+0x36/0x50 [ 1482.796425][T27344] __do_wait+0xde/0x740 [ 1482.802239][T27344] do_wait+0x1f8/0x520 [ 1482.808075][T27344] kernel_wait+0xab/0x170 [ 1482.814062][T27344] call_usermodehelper_exec_work+0xbe/0x230 [ 1482.821616][T27344] process_scheduled_works+0xade/0x17b0 [ 1482.828846][T27344] worker_thread+0x8a0/0xda0 [ 1482.835105][T27344] kthread+0x711/0x8a0 [ 1482.840848][T27344] ret_from_fork+0x3fc/0x770 [ 1482.847100][T27344] ret_from_fork_asm+0x1a/0x30 [ 1482.853523][T27344] SOFTIRQ-ON-R at: [ 1482.857513][T27344] lock_acquire+0x120/0x360 [ 1482.863675][T27344] _raw_read_lock+0x36/0x50 [ 1482.869844][T27344] __do_wait+0xde/0x740 [ 1482.875659][T27344] do_wait+0x1f8/0x520 [ 1482.881394][T27344] kernel_wait+0xab/0x170 [ 1482.887380][T27344] call_usermodehelper_exec_work+0xbe/0x230 [ 1482.894937][T27344] process_scheduled_works+0xade/0x17b0 [ 1482.902145][T27344] worker_thread+0x8a0/0xda0 [ 1482.908397][T27344] kthread+0x711/0x8a0 [ 1482.914126][T27344] ret_from_fork+0x3fc/0x770 [ 1482.920373][T27344] ret_from_fork_asm+0x1a/0x30 [ 1482.926799][T27344] INITIAL USE at: [ 1482.930702][T27344] lock_acquire+0x120/0x360 [ 1482.936775][T27344] _raw_write_lock_irq+0xa2/0xf0 [ 1482.943303][T27344] copy_process+0x224f/0x3c00 [ 1482.949557][T27344] kernel_clone+0x21e/0x870 [ 1482.955642][T27344] user_mode_thread+0xdd/0x140 [ 1482.962005][T27344] rest_init+0x23/0x300 [ 1482.967745][T27344] start_kernel+0x478/0x500 [ 1482.973845][T27344] x86_64_start_reservations+0x24/0x30 [ 1482.980889][T27344] x86_64_start_kernel+0x143/0x1c0 [ 1482.987580][T27344] common_startup_64+0x13e/0x147 [ 1482.994100][T27344] INITIAL READ USE at: [ 1482.998435][T27344] lock_acquire+0x120/0x360 [ 1483.004945][T27344] _raw_read_lock+0x36/0x50 [ 1483.011463][T27344] __do_wait+0xde/0x740 [ 1483.017710][T27344] do_wait+0x1f8/0x520 [ 1483.023785][T27344] kernel_wait+0xab/0x170 [ 1483.030121][T27344] call_usermodehelper_exec_work+0xbe/0x230 [ 1483.038023][T27344] process_scheduled_works+0xade/0x17b0 [ 1483.045580][T27344] worker_thread+0x8a0/0xda0 [ 1483.052195][T27344] kthread+0x711/0x8a0 [ 1483.058275][T27344] ret_from_fork+0x3fc/0x770 [ 1483.064873][T27344] ret_from_fork_asm+0x1a/0x30 [ 1483.071640][T27344] } [ 1483.074144][T27344] ... key at: [] tasklist_lock+0x18/0x40 [ 1483.081879][T27344] ... acquired at: [ 1483.085692][T27344] lock_acquire+0x120/0x360 [ 1483.090385][T27344] _raw_read_lock+0x36/0x50 [ 1483.095082][T27344] send_sigurg+0x12b/0x420 [ 1483.099681][T27344] sk_send_sigurg+0x6c/0x2e0 [ 1483.104454][T27344] queue_oob+0x699/0x8a0 [ 1483.108888][T27344] unix_stream_sendmsg+0xaf9/0xc90 [ 1483.114188][T27344] __sock_sendmsg+0x219/0x270 [ 1483.119089][T27344] ____sys_sendmsg+0x505/0x830 [ 1483.124044][T27344] ___sys_sendmsg+0x21f/0x2a0 [ 1483.128928][T27344] __x64_sys_sendmsg+0x19b/0x260 [ 1483.134055][T27344] do_syscall_64+0xfa/0x3b0 [ 1483.138799][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.144961][T27344] [ 1483.147292][T27344] [ 1483.147292][T27344] stack backtrace: [ 1483.153186][T27344] CPU: 0 UID: 0 PID: 27344 Comm: syz.3.5071 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full) [ 1483.153207][T27344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1483.153218][T27344] Call Trace: [ 1483.153227][T27344] [ 1483.153236][T27344] dump_stack_lvl+0x189/0x250 [ 1483.153265][T27344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1483.153291][T27344] ? __pfx__printk+0x10/0x10 [ 1483.153312][T27344] validate_chain+0x1f05/0x2140 [ 1483.153343][T27344] __lock_acquire+0xab9/0xd20 [ 1483.153364][T27344] ? send_sigurg+0x12b/0x420 [ 1483.153379][T27344] lock_acquire+0x120/0x360 [ 1483.153395][T27344] ? send_sigurg+0x12b/0x420 [ 1483.153411][T27344] ? _raw_read_lock_irqsave+0xbb/0x100 [ 1483.153441][T27344] _raw_read_lock+0x36/0x50 [ 1483.153465][T27344] ? send_sigurg+0x12b/0x420 [ 1483.153480][T27344] send_sigurg+0x12b/0x420 [ 1483.153496][T27344] sk_send_sigurg+0x6c/0x2e0 [ 1483.153514][T27344] queue_oob+0x699/0x8a0 [ 1483.153541][T27344] ? __pfx_queue_oob+0x10/0x10 [ 1483.153564][T27344] ? __pfx___might_resched+0x10/0x10 [ 1483.153586][T27344] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1483.153607][T27344] unix_stream_sendmsg+0xaf9/0xc90 [ 1483.153632][T27344] ? aa_sk_perm+0x81e/0x950 [ 1483.153650][T27344] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1483.153675][T27344] ? aa_sock_msg_perm+0x94/0x160 [ 1483.153694][T27344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1483.153710][T27344] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1483.153733][T27344] __sock_sendmsg+0x219/0x270 [ 1483.153753][T27344] ____sys_sendmsg+0x505/0x830 [ 1483.153778][T27344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1483.153805][T27344] ? import_iovec+0x74/0xa0 [ 1483.153831][T27344] ___sys_sendmsg+0x21f/0x2a0 [ 1483.153854][T27344] ? __pfx____sys_sendmsg+0x10/0x10 [ 1483.153891][T27344] ? __fget_files+0x2a/0x420 [ 1483.153913][T27344] ? __fget_files+0x3a0/0x420 [ 1483.153939][T27344] __x64_sys_sendmsg+0x19b/0x260 [ 1483.153963][T27344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1483.153991][T27344] ? rcu_is_watching+0x15/0xb0 [ 1483.154018][T27344] ? do_syscall_64+0xbe/0x3b0 [ 1483.154037][T27344] do_syscall_64+0xfa/0x3b0 [ 1483.154055][T27344] ? lockdep_hardirqs_on+0x9c/0x150 [ 1483.154070][T27344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.154087][T27344] ? clear_bhb_loop+0x60/0xb0 [ 1483.154106][T27344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1483.154122][T27344] RIP: 0033:0x7fa109d8e969 [ 1483.154138][T27344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1483.154154][T27344] RSP: 002b:00007fa10ac27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1483.154173][T27344] RAX: ffffffffffffffda RBX: 00007fa109fb6080 RCX: 00007fa109d8e969 [ 1483.154186][T27344] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000004 [ 1483.154197][T27344] RBP: 00007fa109e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1483.154208][T27344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1483.154219][T27344] R13: 0000000000000000 R14: 00007fa109fb6080 R15: 00007fa10a0dfa28 [ 1483.154237][T27344] [ 1483.587080][T27350] uinput: invalid abs[03] min:2838 max:64 [ 1483.824536][T27354] bridge1: entered promiscuous mode [ 1484.483737][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.491171][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.780887][T27195] Set syz1 is full, maxelem 65536 reached