last executing test programs: 1m19.52919645s ago: executing program 3 (id=2127): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="74000000020601000000000600000000000000000e0003006269746d61703a69700000000c0007800500150006f201000000020073797a3000000000050005000700000024000780080009400000000532230b40fffffffa08001340000000000800174000007f520900020073797a3000000000ae57d5a684e9e41a24d2b5da2d54b2fa765d796f4f9e"], 0x74}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = syz_io_uring_setup(0x1249, &(0x7f00000004c0)={0x0, 0x2170, 0x1, 0x1, 0x1c1}, &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) r4 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @from_mac, {0x3, 0x40}}, 0x18, 0x5, @random=0xa9, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x6f, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0xc0}}, [{0xdd, 0x28, "280e70980ce7c95811d533aad5a91f994efe17ecb13cf7d6e92364d9c06693ff4fd9cca0577e5fe4"}, {0xdd, 0x5a, "28733666414365648b2cbb511bfa63b10e8f5688d01422fb127ded326b5616253ff1f90e5fe40be15f0b85986096a34b4e1c1be7c03df0a6a5af6607db4e88826f119c446085b636f0b5f256aa032878a5cf72b0730d386c1d34"}, {0xdd, 0x1b, "e519665505ed8980ff41d6b88e18f16fbf61c67bc98e57fef5b87e"}, {0xdd, 0x38, "869ea3a314005bf8a34d202067312124e3ec56e0247d2de6bd6229c6c2873fc78a4717e4ce31879d79cd1d899bff313330f4e936206d3248"}, {0xdd, 0x6, "d0585128ffc5"}, {0xdd, 0x8c, "4cb9cae3e17b2bf474e9e2c0c8d17c4c4e1ecd4c59f6d3ab813f24556f138294a49700ee46839813091696e56546cbbe140627563d1e01b79327a11959c8f57401db7d52096c9986810717a14f93b9347e027c9ac4fdacbc769be7cb176488f4a7e064766d4a8d17e014056cc2ff0121e55a69a75319707b680bb6b393075e522e0c3165d8212d7fa9383f77"}]}, 0x1ad) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r6) add_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) 1m15.611714292s ago: executing program 3 (id=2133): socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket(0xa, 0x2, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r5 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000300)={r7, 0x8000000, 0x0, 0x4, 0x0, [], [], [0x3], [0x0, 0x10000]}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0x800], [0x1, 0xfffffffe], [0x206300000, 0x7, 0x0, 0xfffffffffffffeff]}) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0xbe, 0x0, 0x5748}]}, 0x10) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r10, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac141400000000001400000000000000000000000700000007038b01000000005e15f32aa9988e60da6af674011b2a455370163705ff6db8fe99e02d5c23fecd3922873c70484cf959be1be72e9341a96fb1aa0c825d8aa4d9b88e8108d7b4073aacafd32f94591c94ddb8ac0acc3aac8ac1960818c53bc0bca554f571a2a134f78b7d55c61c500139014cf38980f0ed12e5f086073d98727cfeb96c1caed1a11815ddb48dd3a6c091fb"], 0x38}, 0x0) ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) close_range(r2, 0xffffffffffffffff, 0x0) 1m11.941922005s ago: executing program 3 (id=2137): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) epoll_create(0x101) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="0f236eb9010900000f32826d0800440f20c0350f000000440f22c0b9800000c00f3235000800000f300fc7accd706c00000f017725f6eaf30fa7c02e0f08", 0x3e}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_io_uring_complete(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m8.866257807s ago: executing program 3 (id=2141): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="74000000020601000000000600000000000000000e0003006269746d61703a69700000000c0007800500150006f201000000020073797a3000000000050005000700000024000780080009400000000532230b40fffffffa08001340000000000800174000007f520900020073797a3000000000ae57d5a684e9e41a24d2b5da2d54b2fa765d796f4f9e"], 0x74}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = syz_io_uring_setup(0x1249, &(0x7f00000004c0)={0x0, 0x2170, 0x1, 0x1, 0x1c1}, &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) r4 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @from_mac, {0x3, 0x40}}, 0x18, 0x5, @random=0xa9, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x6f, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0xc0}}, [{0xdd, 0x28, "280e70980ce7c95811d533aad5a91f994efe17ecb13cf7d6e92364d9c06693ff4fd9cca0577e5fe4"}, {0xdd, 0x5a, "28733666414365648b2cbb511bfa63b10e8f5688d01422fb127ded326b5616253ff1f90e5fe40be15f0b85986096a34b4e1c1be7c03df0a6a5af6607db4e88826f119c446085b636f0b5f256aa032878a5cf72b0730d386c1d34"}, {0xdd, 0x1b, "e519665505ed8980ff41d6b88e18f16fbf61c67bc98e57fef5b87e"}, {0xdd, 0x38, "869ea3a314005bf8a34d202067312124e3ec56e0247d2de6bd6229c6c2873fc78a4717e4ce31879d79cd1d899bff313330f4e936206d3248"}, {0xdd, 0x6, "d0585128ffc5"}]}, 0x11f) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r6) add_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) 1m8.49995601s ago: executing program 2 (id=2142): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a75940000000109021200010000000009040020"], 0x0) socket$kcm(0x29, 0x2, 0x0) 1m6.93326028s ago: executing program 2 (id=2144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m5.6602479s ago: executing program 2 (id=2147): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, 0x0) epoll_create(0x101) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0) r4 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="0f236eb9010900000f32826d0800440f20c0350f000000440f22c0b9800000c00f3235000800000f300fc7accd706c00000f017725f6eaf30fa7c02e0f08", 0x3e}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_io_uring_complete(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1m5.32647847s ago: executing program 3 (id=2148): r0 = fsopen(&(0x7f0000000140)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) (fail_nth: 1) 1m4.881120934s ago: executing program 3 (id=2150): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0x0, @broadcast}, 'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000280)="88e9123f9e4e2968c497eccaf9b31f6655870c05977e96d9ac0a09a1181e1c5e5b08a729a09f765dc281f0d1c67fe71875efe3e880daeb1c94c9d4816a18da876b6ee3ea8517875dec076a6308f4be8fb48d231b29a6ad7f4bd2f1966a496efc4c69c9de9949552b8d22a872263aeae4f754b2ff2fa1a49ec609ac09feccf05b9043929c4408d72feca24cf7f87301b5e7787f5d5bdbec6095d9e5", 0x9b}], 0x2) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffb, 0x28c183) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r8, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0x7, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r10 = dup3(r6, r9, 0x0) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000140), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000e00)) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8, [0x8000, 0xc95a, 0xd, 0xf, 0x7, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x7ff, 0x5f, 0x5, 0x7, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x6, 0x4, 0x0, 0x7, 0x3c5b, 0x4, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xc23d, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x60, 0x7, 0x3e, 0x8f, 0x6, 0x0, 0xffffffff, 0x7, 0x4, 0x8, 0x3ff, 0x82, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000007, 0x7, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e9, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x5646, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x3fd, 0x403, 0x0, 0x1, 0xff, 0x5, 0x1000005, 0x6, 0xd, 0x4e0, 0x2, 0x8, 0xb, 0x4, 0x9, 0x4, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x0, 0x9, 0x40007f, 0x3, 0x9, 0x1, 0x3, 0x403, 0x10001, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x4, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x4, 0x2, 0xb, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3a, 0x800003, 0x200, 0x82, 0xfffffffd, 0x1, 0x2950bfaf, 0x1000, 0xa2, 0x800007, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x100002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x44, 0x0, 0x2, 0x1c, 0x120000, 0x3, 0x5a7, 0x80a2ed, 0x3ff, 0x1], [0x9, 0xbb33, 0x7, 0x3, 0x5, 0x938, 0x6, 0x8, 0x0, 0xb9, 0x5, 0x1ff, 0x5, 0x57, 0x5, 0x3, 0x104, 0x10000, 0x4, 0x7fff, 0xffff, 0x6, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a8, 0x806, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x3, 0x3, 0x7e, 0x100, 0x3, 0x7, 0xaf, 0xb, 0x6, 0x226, 0x5, 0x9, 0x8, 0x30b1d693, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x2, 0x8, 0xb1e, 0x1d7, 0x200, 0xffff343e, 0xfff]}, 0x45c) syz_io_uring_setup(0x324e, &(0x7f0000000080)={0x0, 0x4, 0x13580, 0x2}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) io_submit(0x0, 0x8, &(0x7f0000001fc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x4, r6, &(0x7f0000000880)="449b749d93cee197dfc70af65ce617d019e58110975aa96408a62673b4a2be6ced01c9110be4f1eb425c29b1c91e5713d2ce4065e6d4e8786ae62d3354dc06920792ba32dceb3062f875ffb57a8e39d15e45bcdd3d966aaffe050d13901d9699487144bb6514fbdcfbbf84965faccac63d44b9a2bcc168505871c45e6324899cdbdf150026461537cdcd4ff784afa8", 0x8f, 0x100000000, 0x0, 0x3, r10}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x2, r5, &(0x7f0000000980)="51eb85fc1acc370382d0eb780ec9b8ecfaba851798f449c2054eb2df9f16341582b08af1e7adcf52fb239fd3832eb5d6683f2305ce0cd6401901de5f5ec5b22281c497a2f6efe2fc2c95c196cc368a157b609d573aef760d6f7d1a5966cc8ef46eaeb01734d7350ba0a0d3f7ef947ddd486d05ceec41", 0x76, 0x9}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000a40)="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", 0xfe, 0xf, 0x0, 0x3}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x8, 0x5, r4, &(0x7f0000000b80)="b61e551d34842ef7b0dda2f2666049d9361f32ccdec575b70cb5768cf93347366ded154a314cde9e9cf6a8d31bd556af3f37a74a0aa219a674d7b51b76c40f70698f5e7e51a7abcf6c223882b41c0c06a5a91636eb679ec62bbbf2e2bba550e131ced5fb3874cfbf69d89ac10dda338e7890ce2177e03a785a14157656dcb664f33777d5ba3a9fe5e2df677ec5ab9edcfe43950d84c34e52aeb2a9662b491e4a85e19a6b", 0xa4, 0x10, 0x0, 0x1, r6}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x8, 0x383, r0, &(0x7f0000000c80)="9bf9659fc62cf16ecd59569f81cfcd3a3d970ffccebd5c88229afdaa202d4e7bf3aefdf8e8fc1d96e1fb0270cd6bd7e29a2665ea9070d531be46afe187934b9b3266a18afce3f1ad6f64d3ccbabe2fb9a4336aa2d542077fcc4779b4594c959413f5dcaae58ca7", 0x67, 0x400, 0x0, 0x2, r10}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x8, 0x4, r7, &(0x7f0000000d40)="817c4ba74c9e3e662280153281516a6b30b586e01c88bbc8bc30cf7471ca694a03edf2bfd4bee084d9abf1c7c96200ef8170cf9887c1522e657a6d2870f7421f5232228a8a", 0x45, 0x2, 0x0, 0x2, r6}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x2ba137adbe813eee, 0x1, 0xffffffffffffffff, &(0x7f0000000e40)="37be617e527dc44ece637613baa201ed526884777836fbef61735516c9df22d19d69341878bc9c5c04dbe5767dafc873f298430eea4358dcc0ad28ff6f94703102308644d443d84504095f310f7b6976e7b6d1d9cc4b2ac8326d869ed8055f33f0bb607b86f55588326698c231230cf7e2c757cd4609bd7b469dbce8f39344128911407f11e08611334d4454ee00208a7d7d86f71e3297c67df42b3cda5dca533008d801aaa2d7ff9182352e2fa0724b4639813ad2d9616b4366808e4da6112da6e4d569a59897a7bb0026887eea575c28cec1d974ee282e5bff59a9e427a292442cf03063a06dcf6d484821d7e6404576b46a9c18d37b3dbfc4ef45c251502a73f33e9fd6279132c8f52869a8e2c80cb080dcab0433172f214e0f513143ae4801ec98e6001004b58a027913c98f200b8bf3a34bcd96dfe362d7a7966fbf9f740dd61113f121b4f3d6254dee2c60033e8b58d00714a27e15dc14062eee6b038c11e560f1071bc61d7630666f9bf69b402ff22b2de75dd7efaf985029320655ca3e91a9de6191a4efe1e827b8cce541b4765cdefb3d419a2a459df01a96f680edd1f631e043b4c7aabb599f10c982c83040a78379b07b1d031f17b55d8781742b126fca6ca230ec7bf934aa36306dc9c2244cbf96bcebec1f7657e272327c6da19be97f075bf039d07af93ec0cb653dd41496975c6119274decf50310dd08b5b5b7401db4a005c63b127ea5731e6d4317f3d6f32d2046f72aba894757ce234ff17da8c3fcfe3656a2b90ac95f59027a0005a3d8a886ae076dc333804b3e97aef8bfc4173f4f359b6933c2b7197f1b6ce615d0aef50f1665e6ceed1f7d0ed1e43afcecd72285d8f04d785227c0d0ef5855f4955cd927020a2890cc472f4ebdc838aa630aa4ea84b9dcca940fced9fb794763819f9321b96e659d09e7964c3d1643e5fca1b33e15869f34a4ceff95006c67a3a2d0fd2b6e7df91841f7771529b5b8eca023096f0503506ab8dae680937856f2693c10755fab3319b61d9eca757f53d464cbd07742fc1f6dbaabd1735206ea1e22e09d39f2b6b6c5a636191d96b86ddcec9741ff3818b8d0222433b15054fcef387bef8e027109a2920cf31a2f9be9fbc83f99c5b8eeb22ae111c641268078c03f8137eb2764b1a213b4ae86fb94be2cf6d43c49f47e74b50b5457327edc24ac29612f13cb735b2d2207796bd045e0d9536f841da1492ddcf757c860d7de95bbd998db569d08119b88a459037f375a428d7c5cea2cb7952b0adf10bf6fc9532b4eafd83bca681cb4722b7e8d7870871e749490b5d6ad458beaf813f74f7ba29cb504b555bc2b63b33ad2bd6b998c7e4c0494d718f28bf42a7eb0936eb16ae4ab18ce0a6747f4b2e9bae10cecd55db7e79b489da21a4f8d1b416ee9830b2af6afb35f0912116c41bd5dd542c7f340d8e04f022452009d721064b7009be6c6f915606648bc1d3c38d0857fabb5257b676bb9a51e207a7d6b3e4dc93c60e3f2c035ba5ffb84b2d764090c534342afc81b613f46dd2824f7dfabe0d38013c4d0a954c453355571426b69b91c3260e8349365c9dd0135d90686d9d29526e7afe839b6cd818fcb14cc04b6234e26ebafc85b3d7ed59712ac40c21c65e7fd5b7e7f3dfd1b35020bf1997ac9ab551ea76d678818438dfe0ed6339bdf6c8bab9afa5f8557cd6aa4a71abd7b33aa6707e5db8a778e73d88a8d4609a4b6dafaa3acc4ef8113a9ddbbd9231b1cc071aeff5136e91448b6bcb98e2124bf47f889ba08661dc038872f6a57117fec9703d8bb279a4f0ff350669e1f98b0a1e68b5d6a42345be37bb14d2d92cffab5b408dccd29519eb39a386ad54dc06da6f0aa6c003e2d7b6ed1a8ca1a7ecbae96215beb93b2df36c724018bd63e81d2451fb4ddc6964999e63d42dd7fcfdfdbbd86e2f9f116cc32ad95ec05526e6e29128d8eedcd83b4e423cbe1b96b03a6e3a818e5c5af558399e301f6674747bac6f7e5c7e9904d6b27899bbfb6c1be765ee2d5d1136ef9ef3dac34d1577ef78a654f851e03879d839213b17973a1ca813260bde6e5f77bdfdb38d9c6528746f14899738b72c8dec3714551274f2f279658a42d5a33fe22e41e310e8f05c8e891b94726a0816d6e1a8a1562f78ef783f63ed8317377163278ed3c35cd17e44104570ad68f17cf0aa23cebc4f706bc5a4afc64dbb848c804ceb2a8e70f8866201ec32434659b4a7e93364acb6843d21d42735761d2b759d69ce5630a19456c34cd59c9d88f456f9fdcd5e67a840a9de8aac38fa2f4f6a5b9d6227a36406630806d51eb213de295d7dcc5470dfc34c26faaa6fa980d39a2f2ff1b4fdc70ffd9e6801121f5e22225934743ce9e61f1ecfa1f1ed004390b2c3f158789c8e19cdfe5b6560ac2a9512632c99992708707adef39f5cf09a2506470d117f8dd8f7aa87ad0070b33520ccda6631991065b561e9b12f6febdc2b15e77a71faec427be61db6758740a14588f7da1221c4c439211b9820b82f37cbe29dbd5a2a259f0f69cceb6911d45bd1e111191fd4509a071bffffe808ab53e97fcab951aca5f9d81930363eeb23fd65cf58cf350c651c5cb628a3b3a8496e364ec8168a87e008822d1f34102bb4fea8cbfc0f45d1dea39849d7eb4baf0cdb04a6c09eeebc837e1222936994caa1aff5f39d914ba9d2b846ef9ff7b2205f3fe0b0ce676905f8078d28282dd5097a5050e78d06e6decf7a68b7da59417327ce175d405ca0e68d02a372f6ecc643e84e2ffa175d9fbc5cba6616cbec174ddecbc9a67f364762e7e76da751b194b835ef66fd41954f4e3d997fb7d4e5d7920f0f90262503f471b876ea29ed8620adbc6a752fec99f30ba6e7be87dd83a492d461d83527fbb4e57eda4c2899b1fd191a0f7045cad6ee9541bcc91c01e00174e042ab599f1eccad70c5c27b8b14797f415270675c01cdb6bf2aecca9295b081b0d72d47edaab245e56578db3f3448261241850d3060b7d0a768e7fa5c8321a342ec701bf38ad3093ea021ec5a2d5be9180e47f550f45dab0c03d9d7d7433fd276263c863088cbda1adb4eb8e17c3a0576a8f49899f1cc05bc8c34aefc4f634b2695c5ee415b5d177063d13c04bfe5eefc2c25015b1dbb089eddac81fda325b07337b87b9789753320532d6e1d90fac961bcf527144b8ac842bb3384a1fc114e491979862d334a4d154d971e1fe607e6f02131e95aa940ee67c795a9dbef7320e15d2d392135129f89c0b5acd332f440cd69744b51c184dbedff551b2c391efda33f15b742dc466c6e496740c91250c4aa110f85cfd0a7ed132627ac3cba74654b6c7857e1ce0cb9f92b010a81182d0123065025220fcc771a1e8684735ffc676dee3412ca9a9add6fa6c2b4e5c594f5ff14cd8125136f23a335cc11ec3236073cf17e02aea2a10394e42d1a0e063e53cfdbe58545658520e67781675ca5247363acf7bcaf1489ac1e3ea953e31c7b1849cf61c1ed872d2bbb18bdb917405ef2ba00d2e5a049da3e86a0f04ffb826dc760792b561ce32357fb7732cd65dfc15a09426db38e8d4182cfcfd35bb277059b9e99f1068d040219b78df5716761693fb5178e7245fb9fcdf10b3a9c8692335b7f01473496b0f16f59ffd77198ea70c31c970ff381a9247cc35b96a6ccc0e144dd0a3c574c822a7405ddf13c36a0b46fc43a373499b4425053fd5015225d5830cfc09c54f1e4c9b391b7a2de8e35baf1630b4b8810d6e54b416647203670690676de23fee9a92fec9a28b2d494f73a8538aa6e6caff1b0dfe965a1472665b17769bd68ca146c59502e81bebfbfce97ff3afd23d32ff7bb6a865f42b09b94db46c4e8ba282d66f52105063905d704cfbe04b9db554cc0906bdbdd0507d6733976f0f1f633e9fde4e6425088d7832b54e3fd9d0f6bded8bd4e233a2014399fd537f2fdeb07b55a930e1f047ecfab25c22c2154883251da1b828d98ba0a315d40656bda18d99ff1042e9bad9d384fbc52b683378ceece1be421b2775df51283b3e27001be244f0c71772806d038a2ee0f3a6e5680598a96df4fb19cec01223e97a480f62381dddaa2aa17f9a72bf4a57e398decf9bd9a04745374475486118276786ad756ad4995b2c33aa6717359456e1c459c8576db30058e25f1797bf6f5bbd49648302e3d47ded3f61111edf1aacb0ce3d2155a981126528b2f8c4fc7dccfbaf58b1255d2fc7ed5891ce3c600880c3924f90b74b2b84464c7d7bb2ecb7bfabec2c24b0068abf43391a7fee14a0c7a76687f04a4d68b0179ca6f7a96ddb18f24cfd32244d15409a3b5a4917cc96e1338e4eaaa9a2c3f06a13cb86861ec164e1bfb831665c98f05d6ab3b41d14a90500a663ecfb9136a3f8acf9bed88baad73b32fbe8d99c1f163ef98f534c3c4e3edbd24edb54cb1909f3146fb5292bfb8799dc45f5d0d5d9cb086cdb70e53729b7e4cbc1f78698d6da893b552863dbe37f0fd4ad521906e9b63ce434bc8ed709245931f7adad8467e02761ed14d4e344a9a4b2681e3c20905a41b6c173da01cab65800edd7cc9e28fa832c15626443b59db9acd7037073f51d4b80a3e0e1a7572de22c63103232cb837b03bd03d1a36799e830758f7e52dd294de9d8abc5015f6013369313eeaf2297bdda942ef25570b83e423d14919113feb2ffb792f2a5565a0ba11e3b6524c9cce8ff308653d1194a4e8219f12c7f111500ba775ce4f66abc442c5c6e8533659ead1b3a04328448407410c6c62b9b6f85071eb486370a41f9161502f2a5c727f3f9719b9197e539a1bd0bb0fe56a97449eae45c5cafdb881d4aaf24c91bee7791f3e2f77b13fb0b300da26d4e9186a818c3431428ac5ea10ee8424c7b3ffac52bd2645a140eb713474c594ddaf19e4b7e52a8cff19e02c4374f891b6db7e58d84565a858286feea45fe686326f4aa49539c02c68722ae9b9835987c72dc10ba3b5490f6ec42f9cfbfb390a1cde5cb8df8b7256bd43966fa495e41f8ccfc3152360bad01706a355d1caa77b996f6c32c0fd71fecb20e0c0120867b6392bd13a3792765f87b8e7071520a6452439894ebb62579cd6de75c51dcdd9e12d13d580458627e3629489bb616a971500c750ff2a9d7c79a2919d24cefa6fc001014934b8721ae155df4132333451448273fbb08c22f54bbb35d2ec76d300cb559a01999df5db66ae27a714069dc03e08b25b3ded5fca7961490bc000cd6708e69e0c829a1c5bc02ecb45735dd40e42a26175e11032462b8a6505cf5ef1a9a34a1a50aa73f93c25df91c998a5d14957fec4391b095f031cb6bb9afb5cf11bf60e9becb84d38ff12a2963052eaa6de2eb9678c5c7f61f894c85c44b1e28f1ab3d4e524cacb55aa43a3fb87e0f9efcc66035ec8c8c94edcd20db7134ebb51d974e86351fbeb03cec8250f6c3a9bbcc5d7fd405b330eef9cb46d923e69d537e6e758576641867bae27d9f104ff63a0c522d91231a8152423a29fc2aa7fcc94c3d843fbc97a7b0846cf68d7e898a8a31e41092a22892fe87d94008024b6e2ed5644fad4c0988f0c160da0e84767815f049fee2d9b22f9a99d5124ed8e42d8496397266bf8b518bf037acc899d8fd751c9d37b905504d31bf79433af7f5504bf243d6d0ee3f520b74c0f34f8c89feb3facb988b4a19549124ef1e0dd5a5b7d50c395e9adaba23a478e8addf67c5dfc2717e0ef17067e34717a31ad688041316edba5d2a903ef19a5b7a9d5b3cd8936a813e852fed9ecaff5d2995d9427cb55f281734171b7910e3ee72", 0x1000, 0x30cd8d958, 0x0, 0x2}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000001ec0)="80a911069576cda645a1b9647f55cf78749d799328a7e84238bfad6a8fcdc16bd65256b4021a3b3add0a9118d0fe5aea8ffad6f6e645e776b13529538b60c59be5c8a4721dae4b4d51d76fdfd5d7374d1b29955f3b6b168cf601815f3073517d54f72ec0b02438a5e4f8b2488ed1997e150e94d9edc5844db88f1f4c0efd3d9c67d1b63300e8eeb99908a8041990ce2ebde154fa18e07589a2", 0x99, 0x5d, 0x0, 0x2, r10}]) 1m2.303299887s ago: executing program 2 (id=2153): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280"], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m1.129274921s ago: executing program 2 (id=2155): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0xb0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e22, 0x80000, @mcast2}, 0x1c, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=@newlink={0x40, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x40840) 1m0.817324755s ago: executing program 2 (id=2156): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 49.783845391s ago: executing program 32 (id=2150): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @loopback}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0xa, {0x2, 0x0, @broadcast}, 'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000280)="88e9123f9e4e2968c497eccaf9b31f6655870c05977e96d9ac0a09a1181e1c5e5b08a729a09f765dc281f0d1c67fe71875efe3e880daeb1c94c9d4816a18da876b6ee3ea8517875dec076a6308f4be8fb48d231b29a6ad7f4bd2f1966a496efc4c69c9de9949552b8d22a872263aeae4f754b2ff2fa1a49ec609ac09feccf05b9043929c4408d72feca24cf7f87301b5e7787f5d5bdbec6095d9e5", 0x9b}], 0x2) r5 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffffffb, 0x28c183) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r8, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0x7, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r10 = dup3(r6, r9, 0x0) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000140), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000e00)) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) mknodat$loop(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x0, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8, [0x8000, 0xc95a, 0xd, 0xf, 0x7, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x7ff, 0x5f, 0x5, 0x7, 0xffff2d37, 0xffffff01, 0x4, 0x3, 0x0, 0x6, 0x4, 0x0, 0x7, 0x3c5b, 0x4, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xc23d, 0x7, 0x3, 0x8, 0x1004c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x60, 0x7, 0x3e, 0x8f, 0x6, 0x0, 0xffffffff, 0x7, 0x4, 0x8, 0x3ff, 0x82, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x3c], [0x10000007, 0x7, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e9, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x5646, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7b, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x3fd, 0x403, 0x0, 0x1, 0xff, 0x5, 0x1000005, 0x6, 0xd, 0x4e0, 0x2, 0x8, 0xb, 0x4, 0x9, 0x4, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x0, 0x9, 0x40007f, 0x3, 0x9, 0x1, 0x3, 0x403, 0x10001, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x4, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x2, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x4, 0x2, 0xb, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3a, 0x800003, 0x200, 0x82, 0xfffffffd, 0x1, 0x2950bfaf, 0x1000, 0xa2, 0x800007, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x100002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x44, 0x0, 0x2, 0x1c, 0x120000, 0x3, 0x5a7, 0x80a2ed, 0x3ff, 0x1], [0x9, 0xbb33, 0x7, 0x3, 0x5, 0x938, 0x6, 0x8, 0x0, 0xb9, 0x5, 0x1ff, 0x5, 0x57, 0x5, 0x3, 0x104, 0x10000, 0x4, 0x7fff, 0xffff, 0x6, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a8, 0x806, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x3, 0x3, 0x7e, 0x100, 0x3, 0x7, 0xaf, 0xb, 0x6, 0x226, 0x5, 0x9, 0x8, 0x30b1d693, 0xa1f, 0xf42, 0x7, 0x1, 0x6c1b, 0x0, 0x2, 0x8, 0xb1e, 0x1d7, 0x200, 0xffff343e, 0xfff]}, 0x45c) syz_io_uring_setup(0x324e, &(0x7f0000000080)={0x0, 0x4, 0x13580, 0x2}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) io_submit(0x0, 0x8, &(0x7f0000001fc0)=[&(0x7f0000000940)={0x0, 0x0, 0x0, 0x5, 0x4, r6, &(0x7f0000000880)="449b749d93cee197dfc70af65ce617d019e58110975aa96408a62673b4a2be6ced01c9110be4f1eb425c29b1c91e5713d2ce4065e6d4e8786ae62d3354dc06920792ba32dceb3062f875ffb57a8e39d15e45bcdd3d966aaffe050d13901d9699487144bb6514fbdcfbbf84965faccac63d44b9a2bcc168505871c45e6324899cdbdf150026461537cdcd4ff784afa8", 0x8f, 0x100000000, 0x0, 0x3, r10}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x2, r5, &(0x7f0000000980)="51eb85fc1acc370382d0eb780ec9b8ecfaba851798f449c2054eb2df9f16341582b08af1e7adcf52fb239fd3832eb5d6683f2305ce0cd6401901de5f5ec5b22281c497a2f6efe2fc2c95c196cc368a157b609d573aef760d6f7d1a5966cc8ef46eaeb01734d7350ba0a0d3f7ef947ddd486d05ceec41", 0x76, 0x9}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000a40)="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", 0xfe, 0xf, 0x0, 0x3}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x8, 0x5, r4, &(0x7f0000000b80)="b61e551d34842ef7b0dda2f2666049d9361f32ccdec575b70cb5768cf93347366ded154a314cde9e9cf6a8d31bd556af3f37a74a0aa219a674d7b51b76c40f70698f5e7e51a7abcf6c223882b41c0c06a5a91636eb679ec62bbbf2e2bba550e131ced5fb3874cfbf69d89ac10dda338e7890ce2177e03a785a14157656dcb664f33777d5ba3a9fe5e2df677ec5ab9edcfe43950d84c34e52aeb2a9662b491e4a85e19a6b", 0xa4, 0x10, 0x0, 0x1, r6}, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x8, 0x383, r0, &(0x7f0000000c80)="9bf9659fc62cf16ecd59569f81cfcd3a3d970ffccebd5c88229afdaa202d4e7bf3aefdf8e8fc1d96e1fb0270cd6bd7e29a2665ea9070d531be46afe187934b9b3266a18afce3f1ad6f64d3ccbabe2fb9a4336aa2d542077fcc4779b4594c959413f5dcaae58ca7", 0x67, 0x400, 0x0, 0x2, r10}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x8, 0x4, r7, &(0x7f0000000d40)="817c4ba74c9e3e662280153281516a6b30b586e01c88bbc8bc30cf7471ca694a03edf2bfd4bee084d9abf1c7c96200ef8170cf9887c1522e657a6d2870f7421f5232228a8a", 0x45, 0x2, 0x0, 0x2, r6}, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x2ba137adbe813eee, 0x1, 0xffffffffffffffff, &(0x7f0000000e40)="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", 0x1000, 0x30cd8d958, 0x0, 0x2}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000001ec0)="80a911069576cda645a1b9647f55cf78749d799328a7e84238bfad6a8fcdc16bd65256b4021a3b3add0a9118d0fe5aea8ffad6f6e645e776b13529538b60c59be5c8a4721dae4b4d51d76fdfd5d7374d1b29955f3b6b168cf601815f3073517d54f72ec0b02438a5e4f8b2488ed1997e150e94d9edc5844db88f1f4c0efd3d9c67d1b63300e8eeb99908a8041990ce2ebde154fa18e07589a2", 0x99, 0x5d, 0x0, 0x2, r10}]) 45.536419993s ago: executing program 33 (id=2156): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 36.112645968s ago: executing program 4 (id=2215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x5, 0x2, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0xfffffffffffffda1, 0x119, 0xf}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r4) close(r4) syz_io_uring_setup(0x6d43, &(0x7f0000000440)={0x0, 0x32c4, 0x4000, 0x0, 0x0, 0x0, r4}, &(0x7f0000000400), 0x0) read(r3, &(0x7f00000004c0)=""/244, 0xf4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local, @empty, @multicast}}}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0xff, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000001480)="0000501ef6634193019239c6acc305bff96eb52dca04891fd13963b9c7bdd4b02376b17f76a334f7925256c3792c753e2d338b1c2fffbcc54ce54a7f9928c96013d6370a1d070c0980dde89d462716ad9fc2abe1b6c1daac83dd6698f7cc826fc906007f5e2455598aa8055150663ae075e13ca2fc012c3bb95ab1847ae1b9f5b308d900dbdfec3f21c09ba974f5aea421b1da0c26d8e578d9f2e43fd645eaf183b8ee5fe3fbe1be16aeef29c2dd5d56b487683ef1237dba5b2c0bf50c0ca95f760522944098f6cc0101a10086a2a69f8fcefb9be4b33e24796b0d0939ba9d40173d4c432be8ce6ea2cad58733a92c38223459d0c8a49f980464058e817ee3", 0x0, 0x800004, 0x10030, 0x0, 0x0}) connect$can_bcm(r5, &(0x7f0000000140), 0x10) r7 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x3) ioctl$UFFDIO_ZEROPAGE(r3, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}}) r10 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r10, &(0x7f0000001fc0)=""/184, 0xb8) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000300)={0x50, 0x0, r11, {0x7, 0x2b, 0x9, 0x50800080, 0x2, 0x1, 0x3, 0x9680abd, 0x0, 0x0, 0x80, 0x80}}, 0x50) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x28, r1, 0x100, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0x0, 0x99, {0x9, 0xe}}}}}, 0x28}}, 0x5) 35.181360245s ago: executing program 4 (id=2221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x4040) 35.157088627s ago: executing program 4 (id=2222): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = fsopen(&(0x7f0000000000)='qnx6\x00', 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) pipe(&(0x7f0000000340)) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x18, &(0x7f0000000140)=ANY=[@ANYRESOCT=r6, @ANYRESOCT=r4, @ANYRESDEC=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 34.945370931s ago: executing program 4 (id=2223): socket$inet6(0xa, 0x2, 0x0) socket(0x18, 0x803, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000001010101000000000000000002000002180002801400018008580100ac1414bb080002007f0000010c0019800800020036"], 0x38}, 0x1, 0x0, 0x0, 0x26008842}, 0x20000080) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x10200, 0x0, 0x80a0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x0) r5 = dup(r3) ioctl$KVM_SET_MSRS(r5, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64]) 34.830292287s ago: executing program 4 (id=2224): ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffffff}) close(r0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000040)={0x2, {0x0, 0x6, 0x2, 0x7fff, 0x81, 0x4}}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/159, 0x9f}], 0x1, 0x0, 0x0, 0x1}, 0x40000) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_usb_connect(0x1, 0x2e1, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xcc, 0x65, 0xbd, 0x10, 0x7b4, 0x10a, 0x102, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2cf, 0x1, 0x6, 0x9, 0x90, 0x4, [{{0x9, 0x4, 0xd1, 0x1, 0xb, 0x97, 0x4d, 0xf8, 0xe, [@hid_hid={0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x60d}}], [{{0x9, 0x5, 0x3, 0x3, 0x20, 0x3, 0x82, 0xe}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x6, 0xc, 0x5, [@generic={0xa0, 0x10, "95e3e82e4796d731a2b6257e15d60efe67c25a0b18d32134e470e916ff7b2353f5f6eb136bce4120eead4f77bb2a38fd410cee3c3cd571dfb3e3329660f61410d38047d5d346a69afeea53743db234f487f70253dedda043cdbd4a1cf5471ee23a8b104b96634330e1881e3ebca504c3e45c598ac0c30bea07fd2eb26b6ce6fc80cf1abcd4a3a68cea65a44c8c48720ddb1596d38fbf26886dbd001ba92e"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x200, 0x0, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0xf7, 0x8, 0xe, [@generic={0x79, 0xb, "c6a8b14d2346e072cdefecba07783545e6e5c0136e68b3cc625983c8c40abb025b973e0014001c0ba157fab1760133ce90c6489bf69ba5fa3aac86800b55d60632fd26bd6cef8d721ae3ae14924e20288bcce255c8ec2a52f018a1771acec9d3a3962f24dfdc28bf67c888a1958204a65eee0c3acf360c"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x5}]}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x1, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x7, 0xfa, 0x37}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x5e, 0x5, 0x8, [@generic={0x2a, 0x21, "1c96579190472debb27e22cb32f5fcb8857c3948e91a9effa350405c3f5767fdb1138064edcf262a"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x80, 0x0, 0x8d, [@generic={0xe4, 0x11, "5dd0790e8944b87c5a99d6f687586a5c4ec3d76a42bdbeee5a11420c20c21c1c9a74c010eeaf5e60d33738292473c41a3936f86794198e974acd14c77c9d318279fb0e7948c874006b945bd7698bc1971db6c224b41d18d06375c65ae4b6edcaa4a556cfc4563cae44bae79335aa92aa5a9b8f6721406fe7763a6b860f3b3b26bc581b05189e3468256dc2f2ac3bdc2fd84d1b69cab2e8e96712474912d367b689992cff0a74b403ce53fc22b98ca971f2034cfca752073082bd636121bf84cafbd775d158ecbf5bf28a74d61820d17c8dac907bd6aa88b3afb89ed9a25afa65857e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x32, 0x3}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x82, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1e, 0xfff6}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x6, 0x1, 0x6}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x9, 0xa6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5}]}}]}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x8, 0x8, 0x7f, 0x40}, 0x66, &(0x7f0000000600)={0x5, 0xf, 0x66, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "51e50fc5fdad2935aacc8f619d40c966"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xcf, 0x4, 0x9, 0x4, 0x4}, @wireless={0xb, 0x10, 0x1, 0x16, 0x1c, 0x8e, 0x8, 0x9, 0x7}, @generic={0x37, 0x10, 0x1, "3887c341c2b3a3ba28b455a923e7255dbf475f0030a67d7e38bbbca3d028d7fe7880bf1f140652f468d3595577ba7850b758b86e"}]}, 0x2, [{0x1e, &(0x7f0000000680)=@string={0x1e, 0x3, "36a02582443f0ea8304d5bb24b71fb44ef45e039682c0d30754067dd"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44c}}]}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000740), 0x400980, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000780)={{0xa, 0x4e24, 0x10, @mcast1}, {0xa, 0x4e24, 0x7, @private0, 0x49}, 0x1, {[0x6, 0xc, 0x7, 0xfffffc01, 0x3, 0xc94e, 0xe123, 0x1]}}, 0x5c) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect$uac1(0x2, 0x132, &(0x7f0000000800)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x120, 0x3, 0x1, 0xfd, 0x80, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x80}, [@processing_unit={0x8, 0x24, 0x7, 0x6, 0x0, 0x3, "e5"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x2, 0x2, 0x48ee, 0x6}, @processing_unit={0xb, 0x24, 0x7, 0x4, 0x1, 0xd3, "464a1bc2"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x305, 0x3, 0x4, 0x69}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x5, 0x4, 0xf9, 0xc, 0x4, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xff, 0x6, 0x1002}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x4, 0x3, 0x6, "841718", "ac91"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1000, 0x4, 0xfc, "f8d9e903a2"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xce, 0x3, 0x8, 0x80, "ac2c08", "d2bc54"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0x7, 0x4, "de96126f282f"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x2, 0x5, 0x4, "fae731"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x4, 0x1, {0x7, 0x25, 0x1, 0x81, 0x2, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x2, 0x9, 0x3, "ed", "dc64"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xd0, 0x6, 0x4, "7ada0253"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0x8, 0xf, "", "b21403"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x0, 0xfb9e, 0x81, "dd0a1e"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x6, 0x0, "f7953314a5"}, @as_header={0x7, 0x24, 0x1, 0xe, 0x3, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xfa, 0x4, 0xc5, {0x7, 0x25, 0x1, 0x3, 0xc5, 0xa6d0}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x250, 0x8, 0x98, 0xd7, 0x20, 0x10}, 0x24, &(0x7f0000000980)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xa, 0x4, 0x9, 0xc3, 0x7, 0xc}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0c1cdbd4a875e74c2f00f88302b85485"}]}, 0x1, [{0xdb, &(0x7f00000009c0)=@string={0xdb, 0x3, "c565f9096378c3545ec399217371c7bcfae3a7647ec4239b38da1da6969d3c0e32f711d1a1cd4661ec3182c1191264530d02e09dc2630f99bcf98bcb1d336534c451dfccb846fa59736f7ec38c553c4c2142091d552964edf141cd064dae654e683dc4c65a859dd22150e466cd4e346794150d9cecd98fab98d3c7aadf0cedddc34d992f025922d3a705a06b5c4db54035cd1aa9e09697c03123cd4762da0209c84cbfd8db6b803877d821372dd1a8a8c1aac8f1119a0047c1a1a68277c0764cb597829ad243746c9c3661dcd73f0214f50b590eb449594881"}}]}) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000b00), &(0x7f0000000b40)=0x8) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000c80)={0x101, 0x1, &(0x7f0000000b80)=[0x3], &(0x7f0000000bc0)=[0xb1], &(0x7f0000000c00)=[0x75, 0x10ad, 0x3, 0x7, 0x2], &(0x7f0000000c40)=[0x6, 0xfff]}) add_key$user(&(0x7f0000000cc0), &(0x7f0000000d00)={'syz', 0x2}, &(0x7f0000000d40)="99c2c23ba69513d0c10af000bfd04074f4eabbf32540a0a118cddf31cffd484c22e4e958c6e053449a58c69268abc2c67098d37896ceb13ad240e7d6573d47eeca9d14967ad005b619eb05e10affa8e6a55f3d0059fae6fe0c06c8870d0c77dd70015e8b8aa08ba35512ac8d8b98e779a40c1b627a777f2a964b1e1ce4a8fd0c3fc551022fa3f45e31467f48207e8641bcc31f2f17c970346a16191609bfc5abbe78f4b6b92d712ce62de18e2e66aa6a98bad7181f96abfb111d1931d285219470f9aaf0cce26283de3700", 0xcb, 0xfffffffffffffff9) syz_io_uring_setup(0x7c52, &(0x7f0000000e40)={0x0, 0x7151, 0x8000, 0x2, 0x220, 0x0, r1}, &(0x7f0000000ec0)=0x0, &(0x7f0000000f00)) r4 = syz_io_uring_complete(r3) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000f40)=0x32e) r5 = semget(0x1, 0x2, 0x21) semctl$IPC_RMID(r5, 0x0, 0x0) r6 = semget$private(0x0, 0x0, 0x220) semctl$SEM_STAT(r6, 0x0, 0x12, &(0x7f0000000f80)=""/91) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000001000)=0x200) clock_adjtime(0x5, &(0x7f0000001040)={0x2, 0x8, 0x10, 0xaf, 0x4, 0xc362, 0x3, 0x3, 0xff, 0x4, 0x5, 0xfffffffffffffff8, 0x3, 0xe9, 0x10, 0xf, 0x80000000, 0x808, 0x81, 0x7, 0x3, 0x5, 0x9, 0x5, 0x0, 0x3}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/oops_count', 0x800002, 0x25) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000001180)={"013ac75a56b8e2ceb480d5565a004ec4a5c911c9a4c901d2406bc70eb5542971", r4}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) mq_timedreceive(r7, &(0x7f00000012c0)=""/169, 0xa9, 0x81, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001380)={'bridge_slave_0\x00', 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000013c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) 31.769624462s ago: executing program 4 (id=2234): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vcsu(&(0x7f0000000100), 0x6, 0x200) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x18, r2, 0x8000000000000002, 0x8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6", 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x7c38, 0xfffffff2, 0x2005f, 0x3, 0x8, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x10000, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xf6a0, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x23, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x0, 0x80071, 0xa000000, 0xfffff000, 0x103, 0x0, 0x5, 0x3d, 0x4, 0x1, 0xfff, 0x3, 0x5, 0x4, 0x7, 0x0, 0x80, 0x6, 0x5, 0xa, 0x59d, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x1, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x200, 0xfffffffd, 0xff, 0x1005, 0x801, 0x5f31, 0xc, 0x6000000, 0x7, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x2, 0x2000005, 0x2, 0x1, 0x0, 0xffff, 0x2100002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d5, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x7fffffff, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x3, 0x5, 0x3b, 0x3, 0x3, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x6, 0x54fe12d2, 0x4, 0x200, 0x9, 0x4, 0x7, 0x4, 0x2, 0xf23, 0x0, 0x7, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x4], [0x9, 0x7e06, 0x1, 0xb, 0x5, 0x938, 0x6, 0x3, 0xffffffff, 0x5, 0xce7, 0x203, 0x6, 0x5, 0x5, 0x0, 0x100, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x2, 0x5, 0x81, 0x2, 0x150, 0x60a7, 0x6, 0x6, 0x400007, 0xffffffff, 0x5, 0x735, 0x8, 0x3, 0x50fd, 0x10001, 0x3, 0x2, 0x100, 0x9602, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0x80, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x7, 0x5, 0xffff7441, 0xfff]}, 0x45c) syz_io_uring_setup(0x184, &(0x7f0000000680)={0x0, 0x3416, 0x13100, 0x2, 0x4}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0xffffffffffffff6d}}, 0x4004810) fsopen(&(0x7f00000009c0)='hpfs\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001300)=ANY=[@ANYBLOB="120100004c2c5a105e047507f84901020301090212000100fd00000904c70000e2e50c008cb9bd44299a019507ab2f4f30d79108045b8a698adc95840b872b4faf8e2ba2e7f1d2b957d67e8e84c913606f522b230d9b719cde8a8fcf4383a64638414caafa4dcfd553a969011a1171745a0f578305d7f3c94650287003beb681e6a7ea4c2c54a019b720a737e8b21b4c1bbf3ed1f54e5a4288b035da968997df80c82807533eacea9819f85eb84877c818b8f26c037dd63e725e"], 0x0) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r8, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000002480)=@chain) move_pages(0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r9, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r9, 0x4004510f, &(0x7f0000000180)=0x1d59cf8) 29.796333515s ago: executing program 0 (id=2240): syz_usb_connect(0x6, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9, 0x5a, 0x6c, 0x20, 0x1199, 0x68aa, 0xa470, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x7d, 0x3, 0x80, 0x3, [{{0x9, 0x4, 0x1b, 0x18, 0x1, 0xff, 0xff, 0xff, 0x4, [@generic={0x7, 0x5, "ba5f66cd00"}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x8, 0x2}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000100)=@string={0x0, 0x3, "ff1b4391cc052029e7a420cb09c7524d4dbdef4a1e89bedc602c6f49fe6ed40250173d8ce7f622f91358cf308609846a73e61fe120c942b7f2e3645d06fe29bc0f40dd0f67de397d7147dd3c0b37861b3e2e116491dfd4b427d6c21826045e06e1fe8627e4dd1ea8dd9ffec5cb730b9d7576b2f277d665a119e6473fcf12750f3e3158b1a5381d59e65833784170b25062c52d92157b87025a4ce4146d2d0c837fda81dc26fe6ec66b08512d6c7a389a1fa43dff0fa58c467ba53e5c59fe241fbac512cec2c0b2aa6e4c65f5d72a2b2374d60d9fc08396c81c1ebb0c1dc232386a1ad5502d561fdb0d990cd9fa7a2b"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4}}]}) 29.252114776s ago: executing program 0 (id=2241): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xa4ca, 0x183801) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES16=r0], 0x0) 26.159947228s ago: executing program 0 (id=2245): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x505802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904", @ANYRESOCT=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0xa1dcece6dc12ac58, 0xffffffffffffffff, 0x0) (async, rerun: 64) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (rerun: 64) syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000004c0)={0x9, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 64) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)="322a8004c6f82d1623224bcbf1c174a5ee074334b2d97ff9bf8c71a15d278f86ff3e1a501069cc119af7ced4a252675d6c882d7633f15cc6fff298a6eef7c7c59ab011eb70289143419ca9c50dc92673f27880bee092dbbd7727ae87746dda172982f8f2e07bf12ac0b5082454f1bd77143251944402248a4b0e4b014b823f9f5db7fed7af9cecc2d3b652400a1155ce626184ca3963f2a1c97f17c89fd89b029aa685e009b84db593e88cbd132432b87a8394251cb4248b8e4c1c00348df51c0a9496360e7b6fa50186913f6c9889") (rerun: 64) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 23.048730401s ago: executing program 0 (id=2249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xab, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x136c, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0x7c}}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x47, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 22.925149369s ago: executing program 0 (id=2250): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="74000000020601000000000600000000000000000e0003006269746d61703a69700000000c0007800500150006f201000000020073797a3000000000050005000700000024000780080009400000000532230b40fffffffa08001340000000000800174000007f520900020073797a3000000000ae57d5a684e9e41a24d2b5da2d54b2fa765d796f4f9e"], 0x74}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r3 = syz_io_uring_setup(0x1249, &(0x7f00000004c0)={0x0, 0x2170, 0x1, 0x1, 0x1c1}, &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) r4 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x2) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f00000004c0)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @from_mac, {0x3, 0x40}}, 0x18, 0x5, @random=0xa9, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x1, 0x0, {0x6f, 0x5, 0x0, 0x6, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x0, 0xc0}}, [{0xdd, 0x28, "280e70980ce7c95811d533aad5a91f994efe17ecb13cf7d6e92364d9c06693ff4fd9cca0577e5fe4"}, {0xdd, 0x5a, "28733666414365648b2cbb511bfa63b10e8f5688d01422fb127ded326b5616253ff1f90e5fe40be15f0b85986096a34b4e1c1be7c03df0a6a5af6607db4e88826f119c446085b636f0b5f256aa032878a5cf72b0730d386c1d34"}, {0xdd, 0x1b, "e519665505ed8980ff41d6b88e18f16fbf61c67bc98e57fef5b87e"}, {0xdd, 0x38, "869ea3a314005bf8a34d202067312124e3ec56e0247d2de6bd6229c6c2873fc78a4717e4ce31879d79cd1d899bff313330f4e936206d3248"}, {0xdd, 0x6, "d0585128ffc5"}, {0xdd, 0x8a, "4cb9cae3e17b2bf474e9e2c0c8d17c4c4e1ecd4c59f6d3ab813f24556f138294a49700ee46839813091696e56546cbbe140627563d1e01b79327a11959c8f57401db7d52096c9986810717a14f93b9347e027c9ac4fdacbc769be7cb176488f4a7e064766d4a8d17e014056cc2ff0121e55a69a75319707b680bb6b393075e522e0c3165d8212d7fa938"}]}, 0x1ab) ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000000)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r6) add_key(&(0x7f0000000400)='.request_key_auth\x00', &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) 19.961192014s ago: executing program 1 (id=2258): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000001800128008000100767469000c000280"], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19.853203757s ago: executing program 0 (id=2259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xfc, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xfc}}, 0x0) 19.239128031s ago: executing program 1 (id=2260): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000ff7f0000752b056800080000faff8141", @ANYRES32, @ANYRESHEX=r2], 0x3}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = accept4(r0, 0x0, 0x0, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000004c0)={0x2, 0x0, @pic={0xf, 0x1, 0x8, 0xfe, 0x0, 0x4, 0x2, 0xfb, 0xbc, 0x1, 0x8, 0x70, 0x34, 0xf9, 0x5, 0x6}}) sendmmsg$unix(r4, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001d40)="1706184f78b8494cbb6ce17499013820a2", 0x11}], 0x1, 0x0, 0x0, 0x20004001}}], 0x1, 0x8000) recvmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]}) msgget$private(0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 18.329365661s ago: executing program 1 (id=2261): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) 18.311740588s ago: executing program 1 (id=2262): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="4eb4fffffede", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000400000000a20000000000a05000000000000000000010000000900010073797a300000000014000000020a010100000000000000000100000920000000000a010500c285501527f0a2b40000090900f1ff72797a300000000020000000050a05000000000000000000010000060900010073797a30"], 0x9c}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0xe8, 0x0, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8c}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xe}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_LABELS_MASK={0xc, 0x17, [0xffff0000, 0x261]}, @CTA_NAT_DST={0x94, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x9}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0x20}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x54}}, 0x804) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0x7, 0xb57a, "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", 0x80, 0xa, 0x7, 0xa, 0x40, 0x7, 0x1, 0x1}}}, 0x120) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000f4060000120900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a05000000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800900090073797a300000000004000180140000001000010000000000000000000084000a"], 0xc8}}, 0x20008844) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a30000000000800053c00128024000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280100001800c000100636f756e746572000800034000000110140000001000010000000000000000000084000a0000000000"], 0xc8}}, 0x20050800) r6 = syz_clone(0x289a2400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r6, &(0x7f0000000200), 0x4003) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x106, 0x6}}, 0x20) 18.218129968s ago: executing program 1 (id=2263): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[], 0x0) socket$kcm(0x29, 0x2, 0x0) 16.020820337s ago: executing program 34 (id=2234): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vcsu(&(0x7f0000000100), 0x6, 0x200) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x70) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x18, r2, 0x8000000000000002, 0x8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002d002100000000000000000004"], 0x1c}], 0x1}, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6", 0x9) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x7c38, 0xfffffff2, 0x2005f, 0x3, 0x8, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x10000, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xf6a0, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x23, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x0, 0x80071, 0xa000000, 0xfffff000, 0x103, 0x0, 0x5, 0x3d, 0x4, 0x1, 0xfff, 0x3, 0x5, 0x4, 0x7, 0x0, 0x80, 0x6, 0x5, 0xa, 0x59d, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x1, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x200, 0xfffffffd, 0xff, 0x1005, 0x801, 0x5f31, 0xc, 0x6000000, 0x7, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x2, 0x2000005, 0x2, 0x1, 0x0, 0xffff, 0x2100002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d5, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x7fffffff, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x3, 0x5, 0x3b, 0x3, 0x3, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x6, 0x54fe12d2, 0x4, 0x200, 0x9, 0x4, 0x7, 0x4, 0x2, 0xf23, 0x0, 0x7, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x4], [0x9, 0x7e06, 0x1, 0xb, 0x5, 0x938, 0x6, 0x3, 0xffffffff, 0x5, 0xce7, 0x203, 0x6, 0x5, 0x5, 0x0, 0x100, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x2, 0x5, 0x81, 0x2, 0x150, 0x60a7, 0x6, 0x6, 0x400007, 0xffffffff, 0x5, 0x735, 0x8, 0x3, 0x50fd, 0x10001, 0x3, 0x2, 0x100, 0x9602, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0x80, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x7, 0x5, 0xffff7441, 0xfff]}, 0x45c) syz_io_uring_setup(0x184, &(0x7f0000000680)={0x0, 0x3416, 0x13100, 0x2, 0x4}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a00000000160a01010000000000000000070000020000038000000380000001007465616d3000000000000000000000000000010069703665727370616e300000000000000000074000000002000007400000000000000000060a16c900000000000000000a0000040000034000000000000000010000094000000000000006400000000000000005000000000e0a01010000000000000000070000040000044000000003000004400000000100000000000a0101000000000000000002000001000004400000000000000005000002400000000100000440000000000000000500000000180a050000000000000000000000000200000540000000000000000400000000050a010800000000000000000700000700000b400000000200000000120a010400000000000000000700000a000004800000038000000100fe8000000000000000000000000000bb00000100fc02000000000000000000000000000000000440000000040000044000000000000005000600000000000440000000020000050005000000000001400000000600000380000001002001000000000000000000000000000100000340000075a600000200fe80000000000000000000000000003c00000100fe80000000000000000000000000001900000000030a010400000000000000000000000400000540fffffffb0000030073797a300000000000000240000000000000000300000240000000000000000200000c00ddfef2d071f35aa445aa755baade7e94b0e61b5af6500762f2e72b225c703a965b57d6e75ba6e25be4751291056cb99461622621e10b886f6faca2cb7cf9c41717690f655eb6eb9fa76aca0e0d39a706c7d176a7f67a0ecd5889581466a52ee2bbb3ea8c8523be98cc7b0821c37756780be101c5dfd0dd208ea9dda0bf65d966cc6797f46ca30a7b5d00000000000c0036309b15637cff9c4cafdcadd94e2611078f29689a0c0ea84914beb902f4260e34dd632470dd0ced5fd7d6ac1312f5b3fca072b2a665615c4327a5fef31d1bb4c3966f43868792577e6fd9b460e0ba70a7c2235c56924b2f8009104949588de96968f68e26a9ced18761c4601bccfa755bb2deec45735523bd920f1cf9b090559cc4017a5d47b14945ac06b1b6076e10e5ec0c6b584a26ef6f77ce0c9c0d7a5e32fbac67564702ef5bfd15a651351fe3f1d09896ec16eca71038eddaae4a1f1cdf058c1b00000000090a030000000000000000000000000400000980000001400000000200000140031cdd8500000140ffffffff00000280000001800000018000000140000000020000014000000001000001400000000b0000014000000004000001400000000700000180000001400000000100000140000000000000014000000071000001800000014000000009000001400000003d00000140000000070000020073797a30000000000000128000000180000001006e756d67656e00000000028000000440000000090000024000000008000004400000000000000440000000060000034000000000000004400000080c000001800000010072616e676500000000001180000001006861736800000000000005400000000400000d404863b3f42822377a7faf4c753fbb4d291c0ebb120ec0779c942be50daa40e1ba55f995b17888435c2f298828ebcc6ed39251046bba666557e016c39a4b29ca674aa3ffe5aca267c02776f6b2de9851063bcbd7c42e4c272f0cb72def71e2b97cdfa23d74fd48614573da51c5d3767beb62eb7eac17861241f46689f81bd142803efe30c7d6c941b7f3823356c3b2479bcf3ecd9c17657397d8d24bd2e3a96310f03da68e2aec8ea49558b60239a0b91f3f4e98bb93cd133afb31d6c345b29786255f95520eec0dd7cc3195ff04de84b0308bb5a080fdba9e2a96ad035d26d00b7e52500d245041d3d6cf1e8ff0fa2de12f45835b628e3a8900001180000001006d61737100000000000002800000034000000002000003400000001200000140000000550000014000000051000001400000002400000140000000520000014000000004000000000c0a040b00000000000000000000000900000380000000800000054000000000000000040000034000000000140000001100010000000000000000000700000a92e02e751b"], 0xffffffffffffff6d}}, 0x4004810) fsopen(&(0x7f00000009c0)='hpfs\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001300)=ANY=[@ANYBLOB="120100004c2c5a105e047507f84901020301090212000100fd00000904c70000e2e50c008cb9bd44299a019507ab2f4f30d79108045b8a698adc95840b872b4faf8e2ba2e7f1d2b957d67e8e84c913606f522b230d9b719cde8a8fcf4383a64638414caafa4dcfd553a969011a1171745a0f578305d7f3c94650287003beb681e6a7ea4c2c54a019b720a737e8b21b4c1bbf3ed1f54e5a4288b035da968997df80c82807533eacea9819f85eb84877c818b8f26c037dd63e725e"], 0x0) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r8, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000002480)=@chain) move_pages(0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r9, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r9, 0x4004510f, &(0x7f0000000180)=0x1d59cf8) 15.113349933s ago: executing program 1 (id=2265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x8847}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xfc, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x2, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xfc}}, 0x0) 4.005918518s ago: executing program 35 (id=2259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xfc, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xfc}}, 0x0) 0s ago: executing program 36 (id=2265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x8847}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)={0xfc, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x2, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0xfc}}, 0x0) kernel console output (not intermixed with test programs): 111][T12985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.026662][T12985] usb 4-1: Product: syz [ 1067.031568][T12985] usb 4-1: Manufacturer: syz [ 1067.040086][T12985] usb 4-1: SerialNumber: syz [ 1067.101375][T12985] usb 4-1: config 0 descriptor?? [ 1067.139599][ T5922] usb 3-1: 0:2 : does not exist [ 1067.198002][ T5922] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1067.224851][ T5922] usb 3-1: USB disconnect, device number 90 [ 1067.441428][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.521728][T15096] fuse: Unknown parameter '0x0000000000000009' [ 1069.400920][ T5915] usb 2-1: USB disconnect, device number 72 [ 1070.109080][T12985] usb 4-1: USB disconnect, device number 86 [ 1071.052614][T15117] input: syz0 as /devices/virtual/input/input176 [ 1071.302497][ T5922] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1071.516095][ T5922] usb 4-1: config 0 has no interfaces? [ 1071.730280][ T5922] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1071.805935][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.912539][ T5922] usb 4-1: Product: syz [ 1071.947865][ T5922] usb 4-1: Manufacturer: syz [ 1072.042754][ T5922] usb 4-1: SerialNumber: syz [ 1072.110011][ T5922] usb 4-1: config 0 descriptor?? [ 1072.887895][T15129] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1990'. [ 1073.152730][T12985] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1073.433277][T12985] usb 2-1: Using ep0 maxpacket: 32 [ 1073.473968][T12985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.504414][T12985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1073.718568][T12985] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1073.918150][T12985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.134629][T12985] usb 2-1: config 0 descriptor?? [ 1074.644987][T15129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1075.478194][T15143] input: syz0 as /devices/virtual/input/input178 [ 1075.807027][T15144] input: syz0 as /devices/virtual/input/input177 [ 1075.833655][ T5922] usb 4-1: USB disconnect, device number 87 [ 1076.999894][T15161] fuse: Bad value for 'fd' [ 1077.428857][T12985] usbhid 2-1:0.0: can't add hid device: -71 [ 1077.457955][T12985] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1077.504131][T12985] usb 2-1: USB disconnect, device number 73 [ 1078.260912][T15173] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1996'. [ 1078.547784][ T5922] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1078.831378][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1078.844933][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.858381][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1078.879146][ T5922] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1078.911191][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.048484][ T5922] usb 2-1: config 0 descriptor?? [ 1079.515019][T15173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1079.692603][ T5915] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1080.128683][ T5915] usb 4-1: config 0 has no interfaces? [ 1080.148796][ T5915] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1080.160983][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.169536][ T5915] usb 4-1: Product: syz [ 1080.180574][ T5915] usb 4-1: Manufacturer: syz [ 1080.187502][ T5915] usb 4-1: SerialNumber: syz [ 1080.207045][ T5915] usb 4-1: config 0 descriptor?? [ 1082.159398][ T5922] usbhid 2-1:0.0: can't add hid device: -71 [ 1082.178138][ T5922] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1082.258121][ T5922] usb 2-1: USB disconnect, device number 74 [ 1082.425600][T15201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2002'. [ 1082.950406][ T5922] usb 4-1: USB disconnect, device number 88 [ 1085.092585][ T5915] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1085.262507][ T5922] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1085.295928][ T5915] usb 5-1: config 0 has no interfaces? [ 1085.317985][ T5915] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1085.339172][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.593512][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.603991][ T5922] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1085.615443][ T5915] usb 5-1: Product: syz [ 1085.642358][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.650627][ T5915] usb 5-1: Manufacturer: syz [ 1085.668021][ T5915] usb 5-1: SerialNumber: syz [ 1085.682987][ T5922] usb 2-1: config 0 descriptor?? [ 1085.695166][ T5915] usb 5-1: config 0 descriptor?? [ 1085.872588][ T5880] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1086.158949][ T5880] usb 3-1: config 0 has no interfaces? [ 1086.190094][ T5880] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1086.200195][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.208383][ T5880] usb 3-1: Product: syz [ 1086.221174][ T5880] usb 3-1: Manufacturer: syz [ 1086.231599][ T5880] usb 3-1: SerialNumber: syz [ 1086.245588][T15230] binder: 15214:15230 ioctl 4018620d 0 returned -22 [ 1086.275997][ T5880] usb 3-1: config 0 descriptor?? [ 1086.572255][T15230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.581781][T15230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.602476][ T1210] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1087.825462][ T1210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.837007][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1087.869852][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1087.964175][ T1210] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1088.014413][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.049284][ T1210] usb 4-1: config 0 descriptor?? [ 1088.087836][ T1210] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1088.116766][ T43] usb 5-1: USB disconnect, device number 91 [ 1088.162228][ T1210] usb 4-1: MIDIStreaming interface descriptor not found [ 1089.225526][ T5915] usb 3-1: USB disconnect, device number 91 [ 1090.061779][ T5915] usb 4-1: USB disconnect, device number 89 [ 1090.642502][ T43] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1090.671560][ T5922] usbhid 2-1:0.0: can't add hid device: -71 [ 1090.680294][ T5922] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1090.694390][ T5915] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1090.771316][ T5922] usb 2-1: USB disconnect, device number 75 [ 1090.882648][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.909871][ T5915] usb 4-1: config 0 has no interfaces? [ 1090.935720][ T43] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1090.999285][ T5915] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1091.002373][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.028006][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.082491][ T5915] usb 4-1: Product: syz [ 1091.143554][ T43] usb 5-1: config 0 descriptor?? [ 1091.152760][ T5915] usb 4-1: Manufacturer: syz [ 1091.157502][ T5915] usb 4-1: SerialNumber: syz [ 1091.196008][ T5915] usb 4-1: config 0 descriptor?? [ 1091.435600][ T5922] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1091.669659][T15267] binder: 15255:15267 ioctl c0306201 0 returned -14 [ 1091.981798][ T5922] usb 2-1: config 0 has no interfaces? [ 1092.068695][ T5922] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1092.131393][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.195405][ T5922] usb 2-1: Product: syz [ 1092.368391][T15276] fuse: Bad value for 'user_id' [ 1092.373593][T15276] fuse: Bad value for 'user_id' [ 1092.402120][ T5922] usb 2-1: Manufacturer: syz [ 1092.485186][ T5922] usb 2-1: SerialNumber: syz [ 1092.507333][ T5922] usb 2-1: config 0 descriptor?? [ 1092.522481][T12985] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1092.580112][T15267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.594837][T15267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.688461][T12985] usb 3-1: config 0 has no interfaces? [ 1092.702470][T12985] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1092.712615][T12985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.720871][T12985] usb 3-1: Product: syz [ 1092.726768][T12985] usb 3-1: Manufacturer: syz [ 1092.732816][T12985] usb 3-1: SerialNumber: syz [ 1092.829925][T12985] usb 3-1: config 0 descriptor?? [ 1094.640407][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 1094.653972][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1094.891975][ T43] usb 5-1: USB disconnect, device number 92 [ 1094.981172][ T5908] usb 4-1: USB disconnect, device number 90 [ 1095.614986][ T5908] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1095.797992][ T5908] usb 5-1: config 0 has no interfaces? [ 1095.811261][ T5908] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1095.821043][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.045194][ T5908] usb 5-1: Product: syz [ 1096.056907][ T5908] usb 5-1: Manufacturer: syz [ 1096.066156][ T5908] usb 5-1: SerialNumber: syz [ 1096.083339][ T5908] usb 5-1: config 0 descriptor?? [ 1096.121147][T14074] usb 2-1: USB disconnect, device number 76 [ 1096.464786][T14074] usb 3-1: USB disconnect, device number 92 [ 1096.752820][ T5915] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1096.952453][T14074] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1097.026023][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.044222][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1097.068778][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1097.101831][ T5915] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1097.114279][T14074] usb 3-1: Using ep0 maxpacket: 16 [ 1097.125865][T14074] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1097.140560][T14074] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1097.152912][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.171579][T14074] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1097.197075][T14074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.206403][ T5915] usb 2-1: config 0 descriptor?? [ 1097.246400][T14074] usb 3-1: Product: syz [ 1097.276740][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1097.289379][T14074] usb 3-1: Manufacturer: syz [ 1097.301274][T14074] usb 3-1: SerialNumber: syz [ 1097.340640][ T5915] usb 2-1: MIDIStreaming interface descriptor not found [ 1097.629464][T14074] usb 3-1: 0:2 : does not exist [ 1097.671350][T14074] usb 3-1: USB disconnect, device number 93 [ 1097.757983][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1097.937189][ T5838] usb 5-1: USB disconnect, device number 93 [ 1099.431232][ T5838] usb 2-1: USB disconnect, device number 77 [ 1100.007915][T15327] fuse: Bad value for 'fd' [ 1100.195209][T15328] input: syz0 as /devices/virtual/input/input181 [ 1102.005977][ T5838] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1102.223504][ T5838] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1102.338372][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1102.442455][ T1210] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1102.571541][ T5838] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1102.612587][ T1210] usb 5-1: config 0 has no interfaces? [ 1102.624574][ T1210] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1102.634298][ T1210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.645518][ T1210] usb 5-1: Product: syz [ 1102.649754][ T1210] usb 5-1: Manufacturer: syz [ 1102.657919][ T1210] usb 5-1: SerialNumber: syz [ 1102.681987][ T1210] usb 5-1: config 0 descriptor?? [ 1102.699254][ T5838] usb 3-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1102.821423][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.891461][T15346] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2032'. [ 1102.960639][ T5838] usb 3-1: config 0 descriptor?? [ 1103.089039][ T5838] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1103.096437][ T5838] usb 3-1: MIDIStreaming interface descriptor not found [ 1103.113216][ T5908] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1103.462429][ T5908] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.484045][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1103.532049][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1103.546327][ T5908] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1103.556472][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.575012][ T5908] usb 4-1: config 0 descriptor?? [ 1103.585898][ T5908] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1103.602951][ T5908] usb 4-1: MIDIStreaming interface descriptor not found [ 1104.811396][T14074] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1105.061564][T14074] usb 2-1: config 0 has no interfaces? [ 1105.074469][T14074] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1105.083907][T14074] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.091900][T14074] usb 2-1: Product: syz [ 1105.102352][T14074] usb 2-1: Manufacturer: syz [ 1105.113536][T14074] usb 2-1: SerialNumber: syz [ 1105.145068][T14074] usb 2-1: config 0 descriptor?? [ 1105.340593][T14074] usb 5-1: USB disconnect, device number 94 [ 1105.524524][T12985] usb 3-1: USB disconnect, device number 94 [ 1105.639941][T15361] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2035'. [ 1106.142761][ T5838] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1106.320366][T12985] usb 4-1: USB disconnect, device number 91 [ 1106.432472][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 1106.448447][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.469429][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.985903][ T5838] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1107.022980][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.057901][ T5838] usb 5-1: config 0 descriptor?? [ 1107.412751][T12985] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1107.585359][T15361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.605198][T12985] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1107.615517][T12985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1107.645881][T12985] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.762678][T12985] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1108.257410][T12985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.271755][T12985] usb 4-1: config 0 descriptor?? [ 1108.318893][T12985] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1108.336076][T12985] usb 4-1: MIDIStreaming interface descriptor not found [ 1108.799950][T12985] usb 2-1: USB disconnect, device number 78 [ 1109.981948][T12985] usb 4-1: USB disconnect, device number 92 [ 1110.317313][ T5838] usbhid 5-1:0.0: can't add hid device: -71 [ 1110.332688][ T5838] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1110.358671][ T5838] usb 5-1: USB disconnect, device number 95 [ 1110.732482][T14074] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1111.127645][T14074] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.247722][T14074] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1111.380685][T14074] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1111.420754][T14074] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1111.438012][T14074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.457185][T14074] usb 4-1: config 0 descriptor?? [ 1111.499901][T14074] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1111.523619][T14074] usb 4-1: MIDIStreaming interface descriptor not found [ 1112.382555][ T5838] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1112.851991][ T5838] usb 3-1: config 0 has no interfaces? [ 1112.901375][ T5838] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1112.950723][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.002561][ T5838] usb 3-1: Product: syz [ 1113.016144][ T5838] usb 3-1: Manufacturer: syz [ 1113.030158][ T5838] usb 3-1: SerialNumber: syz [ 1113.073605][T14074] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1113.073888][ T5838] usb 3-1: config 0 descriptor?? [ 1113.332722][T14074] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.379525][T14074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1113.396097][T14074] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1113.428198][T14074] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1113.518177][T14074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.565732][T14074] usb 2-1: config 0 descriptor?? [ 1113.606674][T14074] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1113.618248][T14074] usb 2-1: MIDIStreaming interface descriptor not found [ 1114.528237][ T5926] usb 4-1: USB disconnect, device number 93 [ 1114.643479][ T5838] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1114.804759][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.836044][ T5838] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1114.847287][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.873967][ T5838] usb 5-1: config 0 descriptor?? [ 1115.267781][T15435] binder: 15427:15435 ioctl 4018620d 0 returned -22 [ 1115.278573][T15435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.290404][T15435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.362877][ T5926] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1115.525816][ T5926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1115.586463][ T5926] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1115.700685][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.737892][ T5926] usb 4-1: config 0 descriptor?? [ 1116.207861][ T1210] usb 3-1: USB disconnect, device number 95 [ 1116.537197][T15441] binder: 15431:15441 ioctl 4018620d 0 returned -22 [ 1116.552582][T15441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.563416][T15441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.727705][T15450] binder_alloc: 15443: binder_alloc_buf size 16408 failed, no address space [ 1116.744773][T15450] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1117.122705][ T5908] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1117.140611][ T1210] usb 2-1: USB disconnect, device number 79 [ 1117.297409][ T5908] usb 3-1: config 0 has no interfaces? [ 1117.321549][ T5908] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1117.331915][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.594026][ T5908] usb 3-1: Product: syz [ 1117.627093][T15455] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2054'. [ 1117.665747][ T5908] usb 3-1: Manufacturer: syz [ 1117.679639][ T5908] usb 3-1: SerialNumber: syz [ 1117.862177][ T5908] usb 3-1: config 0 descriptor?? [ 1117.923616][ T43] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1118.152921][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1118.164393][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.183854][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.423153][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1118.471830][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.525049][ T43] usb 2-1: config 0 descriptor?? [ 1119.042042][T15455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.416580][ T5838] usbhid 5-1:0.0: can't add hid device: -71 [ 1119.424043][ T5838] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1119.606115][ T5838] usb 5-1: USB disconnect, device number 96 [ 1120.374891][ T5926] usbhid 4-1:0.0: can't add hid device: -71 [ 1120.381052][ T5926] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1120.433831][ T5926] usb 4-1: USB disconnect, device number 94 [ 1120.781573][T15469] input: syz0 as /devices/virtual/input/input185 [ 1120.978097][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.984971][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.429973][ T1210] usb 3-1: USB disconnect, device number 96 [ 1121.587998][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 1121.631271][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1121.681001][ T43] usb 2-1: USB disconnect, device number 80 [ 1121.945678][T15481] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2058'. [ 1122.252485][ T43] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1122.522734][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1122.536350][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.549371][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.560582][ T43] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1122.571863][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.598514][ T43] usb 3-1: config 0 descriptor?? [ 1123.032931][T15480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1124.576824][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1124.576844][ T30] audit: type=1326 audit(1750138873.938:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15486 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1124.755761][ T30] audit: type=1326 audit(1750138873.938:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15486 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1124.819032][ T30] audit: type=1326 audit(1750138874.028:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15486 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1124.855154][ T30] audit: type=1326 audit(1750138874.028:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15486 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1125.012583][ T30] audit: type=1326 audit(1750138874.028:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15486 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1125.040953][ T30] audit: type=1326 audit(1750138874.028:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15486 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1125.309822][ T30] audit: type=1326 audit(1750138874.028:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15486 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1125.369313][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 1125.522837][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1125.801761][ T43] usb 3-1: USB disconnect, device number 97 [ 1125.809891][ T30] audit: type=1326 audit(1750138874.028:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15486 comm="syz.0.2061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1125.849871][ T30] audit: type=1326 audit(1750138874.178:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f6f8e929 code=0x7ffc0000 [ 1126.065944][ T30] audit: type=1326 audit(1750138874.178:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15495 comm="syz.3.2063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f6f8e929 code=0x7ffc0000 [ 1127.678427][ T1210] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1127.870017][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.890232][ T1210] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1127.902680][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.934081][ T1210] usb 4-1: config 0 descriptor?? [ 1128.102496][ T5915] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1128.284735][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.294970][ T5915] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1128.339157][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.440261][T15529] binder: 15511:15529 ioctl 4018620d 0 returned -22 [ 1128.451295][T15529] binder: 15511:15529 ioctl c0306201 0 returned -14 [ 1128.500637][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.511580][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.532742][ T5915] usb 5-1: config 0 descriptor?? [ 1129.161326][T15536] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2070'. [ 1129.267814][T15537] binder: 15523:15537 ioctl c0306201 0 returned -14 [ 1129.278664][T15537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.439736][ T5922] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1129.512482][T15537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.627107][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 1129.694649][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.728328][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1129.750389][ T5922] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1129.816159][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.856757][ T5922] usb 3-1: config 0 descriptor?? [ 1130.092413][ T5926] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1130.265039][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.275302][ T5926] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1130.316786][T15536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1130.897793][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.024459][ T5926] usb 2-1: config 0 descriptor?? [ 1131.543051][T15545] binder: BINDER_SET_CONTEXT_MGR already set [ 1131.549333][T15545] binder: 15539:15545 ioctl 4018620d 200000000040 returned -16 [ 1131.562954][T15543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.572049][T15543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1132.069974][ T5922] usbhid 3-1:0.0: can't add hid device: -71 [ 1132.083546][ T5922] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1132.150005][ T5922] usb 3-1: USB disconnect, device number 98 [ 1132.907674][ T1210] usbhid 4-1:0.0: can't add hid device: -71 [ 1132.932418][ T43] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1133.112620][ T1210] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1133.123113][ T43] usb 3-1: device descriptor read/64, error -71 [ 1133.278950][ T1210] usb 4-1: USB disconnect, device number 95 [ 1133.376405][ T43] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1133.542754][ T43] usb 3-1: device descriptor read/64, error -71 [ 1133.609137][ T5915] usbhid 5-1:0.0: can't add hid device: -32 [ 1133.621424][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1133.672613][ T43] usb usb3-port1: attempt power cycle [ 1134.072564][ T1210] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1134.153008][ T43] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1134.218248][ T43] usb 3-1: device descriptor read/8, error -71 [ 1134.380803][ T1210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.409329][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1134.473776][ T43] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1134.483403][ T5926] usbhid 2-1:0.0: can't add hid device: -71 [ 1134.495496][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1134.518634][ T5926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1134.529885][ T43] usb 3-1: device descriptor read/8, error -71 [ 1134.569869][ T5926] usb 2-1: USB disconnect, device number 81 [ 1134.577157][ T1210] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1134.609380][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.652797][ T5915] usb 5-1: USB disconnect, device number 97 [ 1134.673010][ T43] usb usb3-port1: unable to enumerate USB device [ 1134.698352][ T1210] usb 4-1: config 0 descriptor?? [ 1134.760418][ T1210] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1134.877414][ T1210] usb 4-1: MIDIStreaming interface descriptor not found [ 1135.202457][ T5915] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1135.380244][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.492577][ T5915] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1135.521382][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.553985][ T5915] usb 5-1: config 0 descriptor?? [ 1137.532405][ T5926] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1137.687042][T12985] usb 4-1: USB disconnect, device number 96 [ 1137.707080][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.732868][ T5926] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1138.053248][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.100080][ T5926] usb 3-1: config 0 descriptor?? [ 1138.732253][ T1210] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1138.781498][T15596] binder: 15578:15596 ioctl 4018620d 0 returned -22 [ 1138.838446][T15596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.848361][T15596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.913444][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 1138.925150][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1138.956781][ T5915] usb 5-1: USB disconnect, device number 98 [ 1139.096805][ T1210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.110910][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1139.159504][ T1210] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1139.196848][ T1210] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1139.219982][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.286884][ T1210] usb 4-1: config 0 descriptor?? [ 1139.336968][ T1210] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1139.358735][ T1210] usb 4-1: MIDIStreaming interface descriptor not found [ 1141.521896][ T5926] usbhid 3-1:0.0: can't add hid device: -71 [ 1141.745738][ T5926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1141.794211][ T5926] usb 3-1: USB disconnect, device number 103 [ 1142.664032][T12985] usb 4-1: USB disconnect, device number 97 [ 1143.385160][T12985] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1143.491127][ T5915] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1143.592428][T12985] usb 4-1: device descriptor read/64, error -71 [ 1143.694260][ T5915] usb 3-1: config 0 has no interfaces? [ 1143.821311][ T5915] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1143.872489][T12985] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1143.908574][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.917956][ T5915] usb 3-1: Product: syz [ 1143.949039][ T5915] usb 3-1: Manufacturer: syz [ 1143.957450][ T5915] usb 3-1: SerialNumber: syz [ 1144.016470][T12985] usb 4-1: device descriptor read/64, error -71 [ 1144.144968][T12985] usb usb4-port1: attempt power cycle [ 1144.203771][ T5915] usb 3-1: config 0 descriptor?? [ 1144.532767][T12985] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1144.554004][T12985] usb 4-1: device descriptor read/8, error -71 [ 1144.634287][ T5838] usb 3-1: USB disconnect, device number 104 [ 1144.802926][T12985] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1144.824617][T12985] usb 4-1: device descriptor read/8, error -71 [ 1144.873161][T15644] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2094'. [ 1145.036361][T12985] usb usb4-port1: unable to enumerate USB device [ 1145.182402][ T5838] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1145.512497][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 1145.745605][ T5915] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1145.975615][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.986995][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.997299][ T5838] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1146.012151][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.042873][ T5838] usb 3-1: config 0 descriptor?? [ 1146.091687][T15651] fuse: Invalid rootmode [ 1146.114735][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1146.282502][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1146.415338][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1146.520495][ T5915] usb 2-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1146.529736][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.535529][T15644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1146.552666][T15538] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1146.575529][ T5915] usb 2-1: config 0 descriptor?? [ 1146.680561][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1146.691390][ T5915] usb 2-1: MIDIStreaming interface descriptor not found [ 1146.764074][T15538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1146.962621][T15538] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1146.995277][T15538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.032876][T15538] usb 4-1: config 0 descriptor?? [ 1147.485127][T15666] binder: 15647:15666 ioctl 4018620d 0 returned -22 [ 1147.510909][T15666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.524318][T15666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.968358][ T5838] usbhid 3-1:0.0: can't add hid device: -71 [ 1149.009709][ T5838] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1149.114746][ T5838] usb 3-1: USB disconnect, device number 105 [ 1149.384783][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1149.384803][ T30] audit: type=1326 audit(1750138898.748:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb178e929 code=0x7ffc0000 [ 1149.462456][ T30] audit: type=1326 audit(1750138898.748:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb178e929 code=0x7ffc0000 [ 1149.522552][ T5838] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1149.712649][ T30] audit: type=1326 audit(1750138898.788:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7efcb178e929 code=0x7ffc0000 [ 1149.758092][T12985] usb 2-1: USB disconnect, device number 82 [ 1149.771007][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2100'. [ 1149.804933][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.090513][ T5838] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1150.107163][ T30] audit: type=1326 audit(1750138898.788:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb178e929 code=0x7ffc0000 [ 1150.178131][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.405756][ T5838] usb 3-1: config 0 descriptor?? [ 1150.429970][ T30] audit: type=1326 audit(1750138898.788:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb178e929 code=0x7ffc0000 [ 1150.872566][ T1210] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1150.899921][ T30] audit: type=1326 audit(1750138898.788:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7efcb178e929 code=0x7ffc0000 [ 1150.956389][T15689] binder: 15668:15689 ioctl c0306201 0 returned -14 [ 1151.017794][ T30] audit: type=1326 audit(1750138898.788:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb178e929 code=0x7ffc0000 [ 1151.123672][T15689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.140353][T15689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.175717][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.187534][ T1210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.197756][ T1210] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 1151.207662][ T30] audit: type=1326 audit(1750138898.788:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb178e929 code=0x7ffc0000 [ 1151.269385][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.279925][ T30] audit: type=1326 audit(1750138898.798:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15670 comm="syz.4.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efcb178e929 code=0x7ffc0000 [ 1151.399596][ T1210] usb 2-1: config 0 descriptor?? [ 1151.849133][ T1210] isku 0003:1E7D:3264.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:3264] on usb-dummy_hcd.1-1/input0 [ 1152.021967][T15681] fuse: Unknown parameter '2gr' [ 1152.063992][ T1210] usb 2-1: USB disconnect, device number 83 [ 1152.099223][T15538] usbhid 4-1:0.0: can't add hid device: -32 [ 1152.122618][T15538] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1152.374401][T15538] usb 4-1: USB disconnect, device number 102 [ 1152.624280][ T30] audit: type=1326 audit(1750138901.988:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15692 comm="syz.3.2103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f6f8e929 code=0x7ffc0000 [ 1152.982477][T15538] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1153.357737][T15538] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.374788][T15538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1153.563617][ T2153] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1153.710257][T15538] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1153.741026][ T2153] usb 2-1: device descriptor read/64, error -71 [ 1153.895146][T15538] usb 5-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1153.961130][T15538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.003964][ T2153] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1154.122697][T15538] usb 5-1: config 0 descriptor?? [ 1154.202869][ T2153] usb 2-1: device descriptor read/64, error -71 [ 1154.203661][T15538] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1154.293803][T15538] usb 5-1: MIDIStreaming interface descriptor not found [ 1154.333081][ T2153] usb usb2-port1: attempt power cycle [ 1154.704608][ T5838] usbhid 3-1:0.0: can't add hid device: -71 [ 1154.735985][ T5838] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1154.781340][ T5838] usb 3-1: USB disconnect, device number 106 [ 1154.822870][ T2153] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1155.094022][ T2153] usb 2-1: device descriptor read/8, error -71 [ 1155.524064][ T2153] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1155.662126][ T2153] usb 2-1: device descriptor read/8, error -71 [ 1155.772743][ T2153] usb usb2-port1: unable to enumerate USB device [ 1155.796664][ T5922] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1156.174218][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.184272][ T5922] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1156.201342][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.256964][ T5922] usb 4-1: config 0 descriptor?? [ 1156.748233][T15723] binder: BINDER_SET_CONTEXT_MGR already set [ 1156.754532][T15723] binder: 15719:15723 ioctl 4018620d 200000000040 returned -16 [ 1156.795543][T15723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.811326][T15723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.406199][T15734] fuse: Bad value for 'rootmode' [ 1157.587325][ T5915] usb 5-1: USB disconnect, device number 99 [ 1158.624492][T15744] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2112'. [ 1159.052748][ T5915] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1159.362590][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 1159.370673][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.381718][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1159.432140][ T5915] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1159.474602][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.545140][ T5915] usb 5-1: config 0 descriptor?? [ 1159.567383][ T5915] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1160.152081][T15745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1160.308307][T15751] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2113'. [ 1160.468152][ T5922] usbhid 4-1:0.0: can't add hid device: -71 [ 1160.482553][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1160.547870][ T5922] usb 4-1: USB disconnect, device number 103 [ 1161.384015][ T5922] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1161.853199][ T5915] usb 5-1: USB disconnect, device number 100 [ 1162.130862][ T5922] usb 3-1: config 0 has no interfaces? [ 1162.152069][ T5922] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1162.164761][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.174228][ T5922] usb 3-1: Product: syz [ 1162.178583][ T5922] usb 3-1: Manufacturer: syz [ 1162.195940][ T5922] usb 3-1: SerialNumber: syz [ 1162.242968][ T5922] usb 3-1: config 0 descriptor?? [ 1162.272193][T15771] fuse: Bad value for 'fd' [ 1163.791674][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1163.791687][ T30] audit: type=1326 audit(1750138913.148:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f6f8e929 code=0x7ffc0000 [ 1163.937722][ T30] audit: type=1326 audit(1750138913.198:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f98f6f8e929 code=0x7ffc0000 [ 1164.034628][ T30] audit: type=1326 audit(1750138913.198:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f6f8e929 code=0x7ffc0000 [ 1164.160099][ T43] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1164.195754][ T30] audit: type=1326 audit(1750138913.198:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.3.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98f6f8e929 code=0x7ffc0000 [ 1164.218148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.272707][ T30] audit: type=1326 audit(1750138913.468:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1164.301968][ T5915] usb 3-1: USB disconnect, device number 107 [ 1164.435405][ T30] audit: type=1326 audit(1750138913.468:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1164.494741][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1164.501518][ T43] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1164.501756][ T30] audit: type=1326 audit(1750138913.478:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1164.533282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.539592][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.611238][ T30] audit: type=1326 audit(1750138913.478:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1164.633657][ C0] vkms_vblank_simulate: vblank timer overrun [ 1164.682138][ T43] usb 2-1: config 0 descriptor?? [ 1164.688597][ T30] audit: type=1326 audit(1750138913.478:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1165.152399][ T5838] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1165.197818][ T30] audit: type=1326 audit(1750138913.478:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15782 comm="syz.0.2122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1165.292745][ T1210] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1165.344615][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.379282][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1165.460714][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1165.482225][ T43] video4linux radio48: keene_cmd_set failed (-71) [ 1165.495950][ T43] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1165.551248][ T43] usb 2-1: USB disconnect, device number 88 [ 1165.566186][ T5838] usb 5-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1165.753812][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1165.775708][ T5838] usb 5-1: config 0 descriptor?? [ 1165.800741][ T5838] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1165.814942][ T5838] usb 5-1: MIDIStreaming interface descriptor not found [ 1165.843252][ T1210] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.976633][ T1210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1166.123953][ T1210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1166.183053][ T1210] usb 3-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 1166.256228][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.478133][T15805] fuse: Bad value for 'rootmode' [ 1166.563559][ T1210] usb 3-1: config 0 descriptor?? [ 1166.641739][ T1210] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1166.729539][ T1210] usb 3-1: MIDIStreaming interface descriptor not found [ 1166.956008][T15813] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2127'. [ 1167.432561][T12985] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1167.572993][T12985] usb 4-1: device descriptor read/64, error -71 [ 1167.836107][T15824] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2128'. [ 1167.912485][T12985] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1168.062708][T12985] usb 4-1: device descriptor read/64, error -71 [ 1168.402802][T12985] usb usb4-port1: attempt power cycle [ 1168.493817][ T1210] usb 3-1: USB disconnect, device number 108 [ 1168.942682][T12985] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1168.963262][T12985] usb 4-1: device descriptor read/8, error -71 [ 1169.316728][T12985] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1169.880270][ T5922] usb 5-1: USB disconnect, device number 101 [ 1170.098808][T15836] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2131'. [ 1170.329880][T12985] usb 4-1: device descriptor read/8, error -71 [ 1170.492017][ T5838] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1170.500201][T12985] usb usb4-port1: unable to enumerate USB device [ 1170.742783][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 1170.751347][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.762728][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.772908][ T5838] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1171.025810][T12985] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1171.099715][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.259191][ T5838] usb 2-1: config 0 descriptor?? [ 1171.342766][ T2153] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1171.387798][T12985] usb 4-1: config 0 has no interfaces? [ 1171.539940][T12985] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1171.554044][T12985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.572131][T12985] usb 4-1: Product: syz [ 1171.581084][T12985] usb 4-1: Manufacturer: syz [ 1171.591356][T12985] usb 4-1: SerialNumber: syz [ 1171.607936][ T2153] usb 3-1: config 0 has no interfaces? [ 1171.619700][ T2153] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1171.639384][ T2153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.652418][ T2153] usb 3-1: Product: syz [ 1171.656610][ T2153] usb 3-1: Manufacturer: syz [ 1171.671672][ T2153] usb 3-1: SerialNumber: syz [ 1171.677376][T12985] usb 4-1: config 0 descriptor?? [ 1171.710903][ T2153] usb 3-1: config 0 descriptor?? [ 1171.937026][T15836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1173.727626][T15860] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2136'. [ 1174.048658][ T2153] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1174.101430][ T1210] usb 4-1: USB disconnect, device number 108 [ 1174.233094][ T2153] usb 5-1: Using ep0 maxpacket: 32 [ 1174.281950][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.293683][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.322636][ T2153] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1174.343307][ T2153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.677739][ T1210] usb 3-1: USB disconnect, device number 109 [ 1174.788212][ T2153] usb 5-1: config 0 descriptor?? [ 1175.354764][ T5838] usbhid 2-1:0.0: can't add hid device: -71 [ 1175.386287][ T5838] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1175.451109][ T5838] usb 2-1: USB disconnect, device number 89 [ 1175.519856][T15860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1176.345975][ T5838] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1176.583667][ T5838] usb 2-1: config 0 has no interfaces? [ 1176.595496][ T5838] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1176.609022][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.620116][ T5838] usb 2-1: Product: syz [ 1176.638610][ T5838] usb 2-1: Manufacturer: syz [ 1176.655019][ T5838] usb 2-1: SerialNumber: syz [ 1176.815133][ T5838] usb 2-1: config 0 descriptor?? [ 1177.556193][T15886] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2141'. [ 1177.862544][ T5922] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1177.932500][ T1210] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1178.032592][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 1178.049071][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.084782][ T1210] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1178.091784][ T1210] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1178.147496][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.169015][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.182500][ T5922] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1178.278923][ T1210] usb 3-1: config 0 descriptor?? [ 1178.289056][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.455247][ T5922] usb 4-1: config 0 descriptor?? [ 1178.456168][ T2153] usbhid 5-1:0.0: can't add hid device: -71 [ 1178.494140][ T2153] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1178.527366][ T2153] usb 5-1: USB disconnect, device number 102 [ 1178.534182][ T1210] usb 3-1: USB disconnect, device number 110 [ 1178.964925][T15886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1179.062619][ T5915] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1179.226543][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1179.233587][ T5915] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1179.246626][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.550339][ T5915] usb 5-1: config 0 descriptor?? [ 1180.137996][ T5915] (null): keene_cmd_main failed (-71) [ 1180.228278][ T5915] video4linux radio48: keene_cmd_main failed (-71) [ 1180.257580][ T5915] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 1180.300158][T12985] usb 2-1: USB disconnect, device number 90 [ 1180.322598][ T5915] usb 5-1: USB disconnect, device number 103 [ 1180.729828][ T5922] usbhid 4-1:0.0: can't add hid device: -71 [ 1180.738306][ T5922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1180.772149][ T5922] usb 4-1: USB disconnect, device number 109 [ 1180.839911][T15910] FAULT_INJECTION: forcing a failure. [ 1180.839911][T15910] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1180.857167][T15910] CPU: 0 UID: 0 PID: 15910 Comm: syz.3.2148 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1180.857190][T15910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1180.857206][T15910] Call Trace: [ 1180.857215][T15910] [ 1180.857222][T15910] dump_stack_lvl+0x189/0x250 [ 1180.857252][T15910] ? __pfx____ratelimit+0x10/0x10 [ 1180.857277][T15910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1180.857302][T15910] ? __pfx__printk+0x10/0x10 [ 1180.857328][T15910] should_fail_ex+0x414/0x560 [ 1180.857352][T15910] _copy_to_user+0x31/0xb0 [ 1180.857375][T15910] simple_read_from_buffer+0xe1/0x170 [ 1180.857401][T15910] proc_fail_nth_read+0x1df/0x250 [ 1180.857422][T15910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1180.857444][T15910] ? rw_verify_area+0x258/0x650 [ 1180.857467][T15910] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1180.857487][T15910] vfs_read+0x200/0x980 [ 1180.857515][T15910] ? __pfx___mutex_lock+0x10/0x10 [ 1180.857530][T15910] ? __pfx_vfs_read+0x10/0x10 [ 1180.857555][T15910] ? __fget_files+0x2a/0x420 [ 1180.857576][T15910] ? __fget_files+0x3a0/0x420 [ 1180.857591][T15910] ? __fget_files+0x2a/0x420 [ 1180.857615][T15910] ksys_read+0x145/0x250 [ 1180.857630][T15910] ? __pfx_ksys_read+0x10/0x10 [ 1180.857654][T15910] ? rcu_is_watching+0x15/0xb0 [ 1180.857682][T15910] ? do_syscall_64+0xbe/0x3b0 [ 1180.857699][T15910] do_syscall_64+0xfa/0x3b0 [ 1180.857712][T15910] ? lockdep_hardirqs_on+0x9c/0x150 [ 1180.857735][T15910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.857750][T15910] ? clear_bhb_loop+0x60/0xb0 [ 1180.857769][T15910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.857787][T15910] RIP: 0033:0x7f98f6f8d33c [ 1180.857803][T15910] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1180.857817][T15910] RSP: 002b:00007f98f7ddb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1180.857836][T15910] RAX: ffffffffffffffda RBX: 00007f98f71b5fa0 RCX: 00007f98f6f8d33c [ 1180.857848][T15910] RDX: 000000000000000f RSI: 00007f98f7ddb0a0 RDI: 0000000000000004 [ 1180.857857][T15910] RBP: 00007f98f7ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.857866][T15910] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1180.857876][T15910] R13: 0000000000000000 R14: 00007f98f71b5fa0 R15: 00007f98f72dfa28 [ 1180.857899][T15910] [ 1181.163602][T15538] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1181.322491][T15538] usb 2-1: Using ep0 maxpacket: 16 [ 1181.333846][T15538] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1181.344369][T15538] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1181.356150][T15538] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1181.365432][T15538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.373549][T15538] usb 2-1: Product: syz [ 1181.377866][T15538] usb 2-1: Manufacturer: syz [ 1181.382837][T15538] usb 2-1: SerialNumber: syz [ 1181.652441][ T5922] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1181.793411][T15921] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2149'. [ 1181.817589][T15538] usb 2-1: 0:2 : does not exist [ 1181.881664][T15538] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1181.909900][T15538] usb 2-1: USB disconnect, device number 91 [ 1182.173359][ T2153] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1182.227040][ T5922] usb 4-1: config 0 has no interfaces? [ 1182.249076][ T5922] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1182.259726][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.268947][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1182.386739][ T5922] usb 4-1: Product: syz [ 1182.406140][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.412768][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.452405][ T5922] usb 4-1: Manufacturer: syz [ 1182.469750][ T5922] usb 4-1: SerialNumber: syz [ 1182.513727][ T5922] usb 4-1: config 0 descriptor?? [ 1182.532449][ T2153] usb 5-1: Using ep0 maxpacket: 32 [ 1182.539481][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1182.637558][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1182.654169][ T2153] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1182.663724][ T2153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.683450][ T2153] usb 5-1: config 0 descriptor?? [ 1183.178562][T15921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.732751][T12985] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1183.995632][T12985] usb 2-1: config 0 has no interfaces? [ 1184.007444][T12985] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1184.017513][T12985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.032459][T12985] usb 2-1: Product: syz [ 1184.041184][T12985] usb 2-1: Manufacturer: syz [ 1184.069054][T12985] usb 2-1: SerialNumber: syz [ 1184.105358][T12985] usb 2-1: config 0 descriptor?? [ 1185.549202][ T2153] usbhid 5-1:0.0: can't add hid device: -71 [ 1185.575105][ T2153] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1185.622915][ T2153] usb 5-1: USB disconnect, device number 104 [ 1185.823600][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1185.823619][ T30] audit: type=1326 audit(1750138935.188:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15948 comm="syz.4.2157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcb178e929 code=0x0 [ 1186.176166][T15947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1186.189728][T15947] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1186.218467][T15947] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1186.227422][T15947] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1186.232128][T15954] loop8: detected capacity change from 0 to 7 [ 1186.240566][T15947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1186.248122][T15947] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1186.256920][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1186.259750][T15947] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1186.266141][ C1] buffer_io_error: 15 callbacks suppressed [ 1186.266160][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1186.272647][T15947] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1186.284452][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1186.289964][T15947] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1186.293460][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1186.302795][T15947] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1186.311724][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1186.333370][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1186.342623][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1186.352379][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1186.362300][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1186.371482][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1186.379682][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1186.388943][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1186.398038][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1186.407310][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1186.415353][T15954] ldm_validate_partition_table(): Disk read failed. [ 1186.422317][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1186.431565][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1186.440262][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1186.449498][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 1186.461713][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1186.470979][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 1186.479488][T15954] Dev loop8: unable to read RDB block 0 [ 1186.491176][T15954] loop8: unable to read partition table [ 1186.498255][T15954] loop8: partition table beyond EOD, truncated [ 1186.506782][T15954] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1186.832679][T15959] fuse: Bad value for 'group_id' [ 1186.837935][T15959] fuse: Bad value for 'group_id' [ 1187.087833][ T2153] usb 2-1: USB disconnect, device number 92 [ 1187.665021][ T5922] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1187.895701][ T5922] usb 5-1: config 0 has no interfaces? [ 1188.045814][ T5922] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1188.057368][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.081556][ T5922] usb 5-1: Product: syz [ 1188.095496][ T5922] usb 5-1: Manufacturer: syz [ 1188.100182][ T5922] usb 5-1: SerialNumber: syz [ 1188.118715][ T5922] usb 5-1: config 0 descriptor?? [ 1188.167034][T15969] sctp: [Deprecated]: syz.1.2163 (pid 15969) Use of int in max_burst socket option. [ 1188.167034][T15969] Use struct sctp_assoc_value instead [ 1188.205659][T15969] MPI: mpi too large (32768 bits) [ 1189.182389][ T43] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1189.332689][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1189.340312][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1189.353339][ T43] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1189.371852][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.389575][ T43] usb 2-1: Product: syz [ 1189.397612][ T43] usb 2-1: Manufacturer: syz [ 1189.409801][ T43] usb 2-1: SerialNumber: syz [ 1189.581658][ T43] usb 2-1: config 0 descriptor?? [ 1190.001158][ T43] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1190.311782][T12985] usb 5-1: USB disconnect, device number 105 [ 1191.281280][ T5500] gs_usb 2-1:0.0 can0: bit-timing not yet defined [ 1192.241158][ T5915] usb 2-1: USB disconnect, device number 93 [ 1193.296299][T16022] fuse: Bad value for 'fd' [ 1194.486002][T16035] fuse: Unknown parameter 'grou00000000000000000000' [ 1195.979085][T16045] FAULT_INJECTION: forcing a failure. [ 1195.979085][T16045] name failslab, interval 1, probability 0, space 0, times 1 [ 1195.996462][T16045] CPU: 0 UID: 0 PID: 16045 Comm: syz.4.2175 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1195.996495][T16045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1195.996509][T16045] Call Trace: [ 1195.996516][T16045] [ 1195.996523][T16045] dump_stack_lvl+0x189/0x250 [ 1195.996552][T16045] ? __pfx____ratelimit+0x10/0x10 [ 1195.996577][T16045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1195.996607][T16045] ? __pfx__printk+0x10/0x10 [ 1195.996629][T16045] ? __pfx___might_resched+0x10/0x10 [ 1195.996653][T16045] ? fs_reclaim_acquire+0x7d/0x100 [ 1195.996675][T16045] should_fail_ex+0x414/0x560 [ 1195.996699][T16045] should_failslab+0xa8/0x100 [ 1195.996717][T16045] __kmalloc_noprof+0xcb/0x4f0 [ 1195.996730][T16045] ? kfree+0x4d/0x440 [ 1195.996751][T16045] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1195.996778][T16045] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1195.996802][T16045] ? tomoyo_domain+0xd9/0x130 [ 1195.996829][T16045] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1195.996847][T16045] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1195.996868][T16045] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1195.996899][T16045] ? __lock_acquire+0xab9/0xd20 [ 1195.996936][T16045] ? __fget_files+0x2a/0x420 [ 1195.996956][T16045] ? __fget_files+0x2a/0x420 [ 1195.996971][T16045] ? __fget_files+0x3a0/0x420 [ 1195.996987][T16045] ? __fget_files+0x2a/0x420 [ 1195.997007][T16045] security_file_ioctl+0xcb/0x2d0 [ 1195.997026][T16045] __se_sys_ioctl+0x47/0x170 [ 1195.997051][T16045] do_syscall_64+0xfa/0x3b0 [ 1195.997065][T16045] ? lockdep_hardirqs_on+0x9c/0x150 [ 1195.997087][T16045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.997102][T16045] ? clear_bhb_loop+0x60/0xb0 [ 1195.997121][T16045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.997136][T16045] RIP: 0033:0x7efcb178e929 [ 1195.997150][T16045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1195.997164][T16045] RSP: 002b:00007efcaf5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1195.997181][T16045] RAX: ffffffffffffffda RBX: 00007efcb19b5fa0 RCX: 00007efcb178e929 [ 1195.997192][T16045] RDX: 0000000000000000 RSI: 0000000000008946 RDI: 0000000000000003 [ 1195.997201][T16045] RBP: 00007efcaf5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.997211][T16045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.997219][T16045] R13: 0000000000000000 R14: 00007efcb19b5fa0 R15: 00007efcb1adfa28 [ 1195.997242][T16045] [ 1195.997942][T16045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1196.620118][T16055] FAULT_INJECTION: forcing a failure. [ 1196.620118][T16055] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.658317][T16055] CPU: 0 UID: 0 PID: 16055 Comm: syz.1.2179 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1196.658356][T16055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1196.658369][T16055] Call Trace: [ 1196.658377][T16055] [ 1196.658386][T16055] dump_stack_lvl+0x189/0x250 [ 1196.658425][T16055] ? __pfx____ratelimit+0x10/0x10 [ 1196.658457][T16055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1196.658490][T16055] ? __pfx__printk+0x10/0x10 [ 1196.658512][T16055] ? __might_fault+0xb0/0x130 [ 1196.658562][T16055] should_fail_ex+0x414/0x560 [ 1196.658594][T16055] _copy_from_user+0x2d/0xb0 [ 1196.658617][T16055] __sys_bpf+0x1ed/0x860 [ 1196.658649][T16055] ? __pfx___sys_bpf+0x10/0x10 [ 1196.658691][T16055] ? ksys_write+0x22a/0x250 [ 1196.658713][T16055] ? __pfx_ksys_write+0x10/0x10 [ 1196.658731][T16055] ? rcu_is_watching+0x15/0xb0 [ 1196.658772][T16055] __x64_sys_bpf+0x7c/0x90 [ 1196.658799][T16055] do_syscall_64+0xfa/0x3b0 [ 1196.658817][T16055] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.658849][T16055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.658870][T16055] ? clear_bhb_loop+0x60/0xb0 [ 1196.658896][T16055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.658917][T16055] RIP: 0033:0x7fdfdab8e929 [ 1196.658936][T16055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1196.658967][T16055] RSP: 002b:00007fdfd89f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1196.658990][T16055] RAX: ffffffffffffffda RBX: 00007fdfdadb5fa0 RCX: 00007fdfdab8e929 [ 1196.659005][T16055] RDX: 0000000000000048 RSI: 0000200000000a80 RDI: 0000000000000000 [ 1196.659019][T16055] RBP: 00007fdfd89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.659032][T16055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1196.659044][T16055] R13: 0000000000000001 R14: 00007fdfdadb5fa0 R15: 00007fdfdaedfa28 [ 1196.659076][T16055] [ 1197.402427][ T5915] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1197.494780][T16069] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2183'. [ 1197.595971][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1197.602722][ T5915] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1197.611835][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.644225][ T5915] usb 5-1: config 0 descriptor?? [ 1197.773478][ T5922] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1197.866731][ T5915] (null): keene_cmd_main failed (-71) [ 1197.914519][ T5915] video4linux radio48: keene_cmd_main failed (-71) [ 1197.932947][ T5922] usb 2-1: Using ep0 maxpacket: 32 [ 1197.941529][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1197.965935][ T5915] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 1197.983296][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.093708][ T5915] usb 5-1: USB disconnect, device number 106 [ 1198.102428][ T5922] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1198.152136][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.180921][ T5922] usb 2-1: config 0 descriptor?? [ 1198.614305][T16069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1198.952381][ T43] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1199.131133][ T43] usb 5-1: config 0 has no interfaces? [ 1199.139656][ T43] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1199.149353][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.164141][ T43] usb 5-1: Product: syz [ 1199.168369][ T43] usb 5-1: Manufacturer: syz [ 1199.181202][ T43] usb 5-1: SerialNumber: syz [ 1199.211933][ T43] usb 5-1: config 0 descriptor?? [ 1200.219736][T16077] FAULT_INJECTION: forcing a failure. [ 1200.219736][T16077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1200.236287][T16077] CPU: 0 UID: 0 PID: 16077 Comm: syz.0.2185 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1200.236317][T16077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1200.236331][T16077] Call Trace: [ 1200.236339][T16077] [ 1200.236348][T16077] dump_stack_lvl+0x189/0x250 [ 1200.236414][T16077] ? __pfx____ratelimit+0x10/0x10 [ 1200.236448][T16077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1200.236482][T16077] ? __pfx__printk+0x10/0x10 [ 1200.236520][T16077] should_fail_ex+0x414/0x560 [ 1200.236554][T16077] _copy_from_user+0x2d/0xb0 [ 1200.236577][T16077] __copy_msghdr+0x3c5/0x5b0 [ 1200.236610][T16077] ___sys_sendmsg+0x1a5/0x2a0 [ 1200.236641][T16077] ? __pfx____sys_sendmsg+0x10/0x10 [ 1200.236706][T16077] ? __fget_files+0x2a/0x420 [ 1200.236730][T16077] ? __fget_files+0x3a0/0x420 [ 1200.236765][T16077] __x64_sys_sendmsg+0x19b/0x260 [ 1200.236796][T16077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1200.236835][T16077] ? __pfx_ksys_write+0x10/0x10 [ 1200.236853][T16077] ? rcu_is_watching+0x15/0xb0 [ 1200.236892][T16077] ? do_syscall_64+0xbe/0x3b0 [ 1200.236916][T16077] do_syscall_64+0xfa/0x3b0 [ 1200.236934][T16077] ? lockdep_hardirqs_on+0x9c/0x150 [ 1200.236966][T16077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.236988][T16077] ? clear_bhb_loop+0x60/0xb0 [ 1200.237013][T16077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.237035][T16077] RIP: 0033:0x7f2797d8e929 [ 1200.237054][T16077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.237073][T16077] RSP: 002b:00007f2798b1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1200.237096][T16077] RAX: ffffffffffffffda RBX: 00007f2797fb5fa0 RCX: 00007f2797d8e929 [ 1200.237113][T16077] RDX: 0000000000008804 RSI: 0000200000000640 RDI: 0000000000000003 [ 1200.237127][T16077] RBP: 00007f2798b1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1200.237140][T16077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1200.237153][T16077] R13: 0000000000000000 R14: 00007f2797fb5fa0 R15: 00007f27980dfa28 [ 1200.237186][T16077] [ 1201.028735][ T5922] usbhid 2-1:0.0: can't add hid device: -71 [ 1201.034911][ T5922] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1201.124904][ T5922] usb 2-1: USB disconnect, device number 94 [ 1202.167825][T16087] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2190'. [ 1202.526522][T12985] usb 5-1: USB disconnect, device number 107 [ 1202.575588][T16096] FAULT_INJECTION: forcing a failure. [ 1202.575588][T16096] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.589151][T16096] CPU: 1 UID: 0 PID: 16096 Comm: syz.4.2192 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1202.589183][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1202.589195][T16096] Call Trace: [ 1202.589204][T16096] [ 1202.589212][T16096] dump_stack_lvl+0x189/0x250 [ 1202.589250][T16096] ? __pfx____ratelimit+0x10/0x10 [ 1202.589284][T16096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1202.589318][T16096] ? __pfx__printk+0x10/0x10 [ 1202.589347][T16096] ? __pfx___might_resched+0x10/0x10 [ 1202.589386][T16096] should_fail_ex+0x414/0x560 [ 1202.589423][T16096] should_failslab+0xa8/0x100 [ 1202.589448][T16096] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1202.589471][T16096] ? __alloc_skb+0x112/0x2d0 [ 1202.589500][T16096] __alloc_skb+0x112/0x2d0 [ 1202.589530][T16096] netlink_sendmsg+0x5c6/0xb30 [ 1202.589567][T16096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1202.589597][T16096] ? aa_sock_msg_perm+0x94/0x160 [ 1202.589627][T16096] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1202.589654][T16096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1202.589682][T16096] __sock_sendmsg+0x21c/0x270 [ 1202.589720][T16096] ____sys_sendmsg+0x505/0x830 [ 1202.589755][T16096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1202.589793][T16096] ? import_iovec+0x74/0xa0 [ 1202.589819][T16096] ___sys_sendmsg+0x21f/0x2a0 [ 1202.589849][T16096] ? __pfx____sys_sendmsg+0x10/0x10 [ 1202.589925][T16096] ? __fget_files+0x2a/0x420 [ 1202.589948][T16096] ? __fget_files+0x3a0/0x420 [ 1202.589984][T16096] __x64_sys_sendmsg+0x19b/0x260 [ 1202.590015][T16096] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1202.590054][T16096] ? __pfx_ksys_write+0x10/0x10 [ 1202.590071][T16096] ? rcu_is_watching+0x15/0xb0 [ 1202.590110][T16096] ? do_syscall_64+0xbe/0x3b0 [ 1202.590134][T16096] do_syscall_64+0xfa/0x3b0 [ 1202.590152][T16096] ? lockdep_hardirqs_on+0x9c/0x150 [ 1202.590184][T16096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.590205][T16096] ? clear_bhb_loop+0x60/0xb0 [ 1202.590231][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.590252][T16096] RIP: 0033:0x7efcb178e929 [ 1202.590271][T16096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1202.590290][T16096] RSP: 002b:00007efcaf5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1202.590313][T16096] RAX: ffffffffffffffda RBX: 00007efcb19b5fa0 RCX: 00007efcb178e929 [ 1202.590329][T16096] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 1202.590342][T16096] RBP: 00007efcaf5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1202.590355][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1202.590368][T16096] R13: 0000000000000000 R14: 00007efcb19b5fa0 R15: 00007efcb1adfa28 [ 1202.590400][T16096] [ 1203.210175][T16103] batadv1: entered promiscuous mode [ 1203.240975][T16102] batadv1: entered promiscuous mode [ 1203.288530][T12985] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1203.432734][T12985] usb 5-1: device descriptor read/64, error -71 [ 1203.561251][T16107] FAULT_INJECTION: forcing a failure. [ 1203.561251][T16107] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.575196][T16107] CPU: 0 UID: 0 PID: 16107 Comm: syz.0.2196 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1203.575225][T16107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1203.575238][T16107] Call Trace: [ 1203.575246][T16107] [ 1203.575255][T16107] dump_stack_lvl+0x189/0x250 [ 1203.575292][T16107] ? __pfx____ratelimit+0x10/0x10 [ 1203.575324][T16107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1203.575357][T16107] ? __pfx__printk+0x10/0x10 [ 1203.575386][T16107] ? __pfx___might_resched+0x10/0x10 [ 1203.575441][T16107] should_fail_ex+0x414/0x560 [ 1203.575474][T16107] should_failslab+0xa8/0x100 [ 1203.575499][T16107] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1203.575521][T16107] ? __alloc_skb+0x112/0x2d0 [ 1203.575550][T16107] __alloc_skb+0x112/0x2d0 [ 1203.575579][T16107] netlink_sendmsg+0x5c6/0xb30 [ 1203.575616][T16107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1203.575646][T16107] ? aa_sock_msg_perm+0x94/0x160 [ 1203.575676][T16107] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1203.575703][T16107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1203.575730][T16107] __sock_sendmsg+0x21c/0x270 [ 1203.575767][T16107] ____sys_sendmsg+0x505/0x830 [ 1203.575807][T16107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1203.575845][T16107] ? import_iovec+0x74/0xa0 [ 1203.575870][T16107] ___sys_sendmsg+0x21f/0x2a0 [ 1203.575900][T16107] ? __pfx____sys_sendmsg+0x10/0x10 [ 1203.575967][T16107] ? __fget_files+0x2a/0x420 [ 1203.575990][T16107] ? __fget_files+0x3a0/0x420 [ 1203.576025][T16107] __x64_sys_sendmsg+0x19b/0x260 [ 1203.576056][T16107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1203.576095][T16107] ? __pfx_ksys_write+0x10/0x10 [ 1203.576112][T16107] ? rcu_is_watching+0x15/0xb0 [ 1203.576150][T16107] ? do_syscall_64+0xbe/0x3b0 [ 1203.576175][T16107] do_syscall_64+0xfa/0x3b0 [ 1203.576193][T16107] ? lockdep_hardirqs_on+0x9c/0x150 [ 1203.576224][T16107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.576245][T16107] ? clear_bhb_loop+0x60/0xb0 [ 1203.576271][T16107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.576292][T16107] RIP: 0033:0x7f2797d8e929 [ 1203.576311][T16107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.576330][T16107] RSP: 002b:00007f2798b1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1203.576352][T16107] RAX: ffffffffffffffda RBX: 00007f2797fb5fa0 RCX: 00007f2797d8e929 [ 1203.576368][T16107] RDX: 0000000000004040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1203.576382][T16107] RBP: 00007f2798b1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.576396][T16107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.576408][T16107] R13: 0000000000000000 R14: 00007f2797fb5fa0 R15: 00007f27980dfa28 [ 1203.576442][T16107] [ 1203.683060][ T43] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1203.861526][T12985] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1203.913137][T16109] FAULT_INJECTION: forcing a failure. [ 1203.913137][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.926187][T16109] CPU: 1 UID: 0 PID: 16109 Comm: syz.0.2197 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1203.926213][T16109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1203.926223][T16109] Call Trace: [ 1203.926229][T16109] [ 1203.926236][T16109] dump_stack_lvl+0x189/0x250 [ 1203.926265][T16109] ? __pfx____ratelimit+0x10/0x10 [ 1203.926289][T16109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1203.926313][T16109] ? __pfx__printk+0x10/0x10 [ 1203.926332][T16109] ? __pfx___might_resched+0x10/0x10 [ 1203.926357][T16109] ? fs_reclaim_acquire+0x7d/0x100 [ 1203.926379][T16109] should_fail_ex+0x414/0x560 [ 1203.926403][T16109] should_failslab+0xa8/0x100 [ 1203.926425][T16109] __kmalloc_noprof+0xcb/0x4f0 [ 1203.926439][T16109] ? tomoyo_encode+0x28b/0x550 [ 1203.926465][T16109] tomoyo_encode+0x28b/0x550 [ 1203.926491][T16109] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1203.926515][T16109] ? tomoyo_domain+0xd9/0x130 [ 1203.926542][T16109] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1203.926560][T16109] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1203.926581][T16109] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1203.926619][T16109] ? __lock_acquire+0xab9/0xd20 [ 1203.926656][T16109] ? __fget_files+0x2a/0x420 [ 1203.926676][T16109] ? __fget_files+0x2a/0x420 [ 1203.926695][T16109] ? __fget_files+0x3a0/0x420 [ 1203.926711][T16109] ? __fget_files+0x2a/0x420 [ 1203.926731][T16109] security_file_ioctl+0xcb/0x2d0 [ 1203.926750][T16109] __se_sys_ioctl+0x47/0x170 [ 1203.926776][T16109] do_syscall_64+0xfa/0x3b0 [ 1203.926789][T16109] ? lockdep_hardirqs_on+0x9c/0x150 [ 1203.926812][T16109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.926828][T16109] ? clear_bhb_loop+0x60/0xb0 [ 1203.926846][T16109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.926861][T16109] RIP: 0033:0x7f2797d8e929 [ 1203.926875][T16109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1203.926889][T16109] RSP: 002b:00007f2798b1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1203.926905][T16109] RAX: ffffffffffffffda RBX: 00007f2797fb5fa0 RCX: 00007f2797d8e929 [ 1203.926916][T16109] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1203.926925][T16109] RBP: 00007f2798b1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.926934][T16109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.926943][T16109] R13: 0000000000000000 R14: 00007f2797fb5fa0 R15: 00007f27980dfa28 [ 1203.926966][T16109] [ 1203.926983][T16109] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1204.247855][T12985] usb 5-1: device descriptor read/64, error -71 [ 1204.262416][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1204.269463][ T43] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 [ 1204.283448][ T43] usb 2-1: config 0 has no interface number 0 [ 1204.298225][ T43] usb 2-1: New USB device found, idVendor=f205, idProduct=b038, bcdDevice=26.19 [ 1204.318899][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.334039][ T43] usb 2-1: Product: syz [ 1204.338270][ T43] usb 2-1: Manufacturer: syz [ 1204.343058][ T43] usb 2-1: SerialNumber: syz [ 1204.357302][ T43] usb 2-1: config 0 descriptor?? [ 1204.363075][T12985] usb usb5-port1: attempt power cycle [ 1204.371026][ T43] usb-storage 2-1:0.236: USB Mass Storage device detected [ 1204.504257][ T30] audit: type=1326 audit(1750138953.868:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1204.530094][ T30] audit: type=1326 audit(1750138953.868:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1204.553615][ T30] audit: type=1326 audit(1750138953.868:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1204.576273][ T30] audit: type=1326 audit(1750138953.868:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1204.590474][T15538] usb 2-1: USB disconnect, device number 95 [ 1204.607577][ T30] audit: type=1326 audit(1750138953.868:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1204.630739][ T30] audit: type=1326 audit(1750138953.868:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2797d8d290 code=0x7ffc0000 [ 1204.653899][ T30] audit: type=1326 audit(1750138953.868:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2797d8e52b code=0x7ffc0000 [ 1204.679240][ T30] audit: type=1326 audit(1750138953.868:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2797d8e52b code=0x7ffc0000 [ 1204.702459][ T30] audit: type=1326 audit(1750138953.868:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2797d8e52b code=0x7ffc0000 [ 1204.724930][ T30] audit: type=1326 audit(1750138953.868:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.0.2199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2797d8e52b code=0x7ffc0000 [ 1204.732590][T12985] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1204.773522][T12985] usb 5-1: device descriptor read/8, error -71 [ 1205.012473][T12985] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1205.032920][T12985] usb 5-1: device descriptor read/8, error -71 [ 1205.142835][T12985] usb usb5-port1: unable to enumerate USB device [ 1205.385055][T15538] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1205.542544][T15538] usb 2-1: Using ep0 maxpacket: 16 [ 1205.549746][T15538] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 1205.558001][T15538] usb 2-1: config 8 has no interface number 0 [ 1205.564396][T15538] usb 2-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1205.576628][T15538] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1205.586837][T15538] usb 2-1: config 8 interface 39 has no altsetting 0 [ 1205.596097][T15538] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1205.605332][T15538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.613450][T15538] usb 2-1: Product: syz [ 1205.617634][T15538] usb 2-1: Manufacturer: syz [ 1205.622246][T15538] usb 2-1: SerialNumber: syz [ 1205.842502][T16119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.851394][T16119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1205.867477][T15538] ipheth 2-1:8.39: Unable to find endpoints [ 1205.879608][T15538] usb 2-1: USB disconnect, device number 96 [ 1205.960718][T16121] FAULT_INJECTION: forcing a failure. [ 1205.960718][T16121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.974410][T16121] CPU: 1 UID: 0 PID: 16121 Comm: syz.4.2201 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1205.974452][T16121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1205.974466][T16121] Call Trace: [ 1205.974475][T16121] [ 1205.974484][T16121] dump_stack_lvl+0x189/0x250 [ 1205.974522][T16121] ? __pfx____ratelimit+0x10/0x10 [ 1205.974554][T16121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1205.974587][T16121] ? __pfx__printk+0x10/0x10 [ 1205.974634][T16121] should_fail_ex+0x414/0x560 [ 1205.974667][T16121] _copy_from_user+0x2d/0xb0 [ 1205.974690][T16121] __copy_msghdr+0x3c5/0x5b0 [ 1205.974722][T16121] ___sys_sendmsg+0x1a5/0x2a0 [ 1205.974753][T16121] ? __pfx____sys_sendmsg+0x10/0x10 [ 1205.974818][T16121] ? __fget_files+0x2a/0x420 [ 1205.974841][T16121] ? __fget_files+0x3a0/0x420 [ 1205.974876][T16121] __x64_sys_sendmsg+0x19b/0x260 [ 1205.974906][T16121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1205.974945][T16121] ? __pfx_ksys_write+0x10/0x10 [ 1205.974971][T16121] ? do_syscall_64+0xbe/0x3b0 [ 1205.974995][T16121] do_syscall_64+0xfa/0x3b0 [ 1205.975013][T16121] ? lockdep_hardirqs_on+0x9c/0x150 [ 1205.975044][T16121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.975066][T16121] ? clear_bhb_loop+0x60/0xb0 [ 1205.975092][T16121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.975113][T16121] RIP: 0033:0x7efcb178e929 [ 1205.975132][T16121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1205.975152][T16121] RSP: 002b:00007efcaf5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1205.975174][T16121] RAX: ffffffffffffffda RBX: 00007efcb19b5fa0 RCX: 00007efcb178e929 [ 1205.975190][T16121] RDX: 0000000020000811 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 1205.975203][T16121] RBP: 00007efcaf5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.975217][T16121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.975230][T16121] R13: 0000000000000000 R14: 00007efcb19b5fa0 R15: 00007efcb1adfa28 [ 1205.975260][T16121] [ 1206.230264][T16123] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2202'. [ 1206.523748][T15538] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1206.684154][T15538] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1206.693235][T15538] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1206.703969][T15538] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1206.722471][T15538] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1206.734941][T15538] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1206.760437][T15538] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1206.769872][T15538] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1206.778022][T15538] usb 5-1: Product: syz [ 1206.782453][T15538] usb 5-1: Manufacturer: syz [ 1206.793206][T15538] cdc_wdm 5-1:1.0: skipping garbage [ 1206.798455][T15538] cdc_wdm 5-1:1.0: skipping garbage [ 1206.806311][T15538] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1206.812251][T15538] cdc_wdm 5-1:1.0: Unknown control protocol [ 1206.992898][ T5908] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1207.015918][T16125] vti0: entered promiscuous mode [ 1207.020912][T16125] vti0: entered allmulticast mode [ 1207.155659][ T5908] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1207.164270][ T5908] usb 2-1: not running at top speed; connect to a high speed hub [ 1207.173873][ T5908] usb 2-1: config 11 has an invalid interface number: 16 but max is 1 [ 1207.182090][ T5908] usb 2-1: config 11 has an invalid interface number: 3 but max is 1 [ 1207.190658][ T5908] usb 2-1: config 11 has an invalid descriptor of length 198, skipping remainder of the config [ 1207.201914][ T5908] usb 2-1: config 11 has no interface number 0 [ 1207.208715][ T5908] usb 2-1: config 11 has no interface number 1 [ 1207.215139][ T5908] usb 2-1: config 11 interface 3 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1207.228444][ T5908] usb 2-1: config 11 interface 16 has no altsetting 0 [ 1207.235369][ T5908] usb 2-1: config 11 interface 3 has no altsetting 0 [ 1207.246951][ T5908] usb 2-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice=9c.cd [ 1207.256321][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.264534][ T5908] usb 2-1: Product: syz [ 1207.268736][ T5908] usb 2-1: Manufacturer: syz [ 1207.273456][ T5908] usb 2-1: SerialNumber: syz [ 1207.288974][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 1207.294629][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1207.301267][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1207.308511][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1207.315174][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1207.322914][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1207.329540][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1207.335877][T12985] usb 5-1: USB disconnect, device number 112 [ 1207.342775][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1207.349409][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1207.355498][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1207.534328][ T5908] usb 2-1: USB disconnect, device number 97 [ 1207.576745][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:11.16/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1207.677939][T16135] FAULT_INJECTION: forcing a failure. [ 1207.677939][T16135] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.691064][T16135] CPU: 1 UID: 0 PID: 16135 Comm: syz.0.2207 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1207.691092][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1207.691105][T16135] Call Trace: [ 1207.691114][T16135] [ 1207.691140][T16135] dump_stack_lvl+0x189/0x250 [ 1207.691179][T16135] ? __pfx____ratelimit+0x10/0x10 [ 1207.691211][T16135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1207.691244][T16135] ? __pfx__printk+0x10/0x10 [ 1207.691270][T16135] ? __pfx___might_resched+0x10/0x10 [ 1207.691304][T16135] ? fs_reclaim_acquire+0x7d/0x100 [ 1207.691334][T16135] should_fail_ex+0x414/0x560 [ 1207.691366][T16135] should_failslab+0xa8/0x100 [ 1207.691391][T16135] __kmalloc_noprof+0xcb/0x4f0 [ 1207.691411][T16135] ? tomoyo_encode+0x28b/0x550 [ 1207.691447][T16135] tomoyo_encode+0x28b/0x550 [ 1207.691483][T16135] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1207.691525][T16135] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1207.691550][T16135] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1207.691578][T16135] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1207.691619][T16135] ? __lock_acquire+0xab9/0xd20 [ 1207.691656][T16135] ? __fget_files+0x2a/0x420 [ 1207.691676][T16135] ? __fget_files+0x2a/0x420 [ 1207.691692][T16135] ? __fget_files+0x3a0/0x420 [ 1207.691708][T16135] ? __fget_files+0x2a/0x420 [ 1207.691737][T16135] security_file_ioctl+0xcb/0x2d0 [ 1207.691756][T16135] __se_sys_ioctl+0x47/0x170 [ 1207.691781][T16135] do_syscall_64+0xfa/0x3b0 [ 1207.691794][T16135] ? lockdep_hardirqs_on+0x9c/0x150 [ 1207.691817][T16135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.691832][T16135] ? clear_bhb_loop+0x60/0xb0 [ 1207.691851][T16135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.691866][T16135] RIP: 0033:0x7f2797d8e929 [ 1207.691880][T16135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.691894][T16135] RSP: 002b:00007f2798b1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1207.691910][T16135] RAX: ffffffffffffffda RBX: 00007f2797fb5fa0 RCX: 00007f2797d8e929 [ 1207.691921][T16135] RDX: 0000000000000000 RSI: 000000004008af03 RDI: 0000000000000003 [ 1207.691931][T16135] RBP: 00007f2798b1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1207.691940][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1207.691950][T16135] R13: 0000000000000000 R14: 00007f2797fb5fa0 R15: 00007f27980dfa28 [ 1207.691972][T16135] [ 1207.691988][T16135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1208.032940][T16138] FAULT_INJECTION: forcing a failure. [ 1208.032940][T16138] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.045918][T16138] CPU: 0 UID: 0 PID: 16138 Comm: syz.0.2208 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1208.045949][T16138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1208.045963][T16138] Call Trace: [ 1208.045973][T16138] [ 1208.045982][T16138] dump_stack_lvl+0x189/0x250 [ 1208.046023][T16138] ? __pfx____ratelimit+0x10/0x10 [ 1208.046057][T16138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1208.046091][T16138] ? __pfx__printk+0x10/0x10 [ 1208.046118][T16138] ? __pfx___might_resched+0x10/0x10 [ 1208.046153][T16138] ? fs_reclaim_acquire+0x7d/0x100 [ 1208.046184][T16138] should_fail_ex+0x414/0x560 [ 1208.046217][T16138] should_failslab+0xa8/0x100 [ 1208.046243][T16138] __kmalloc_noprof+0xcb/0x4f0 [ 1208.046264][T16138] ? anon_vma_name_alloc+0x40/0xf0 [ 1208.046290][T16138] anon_vma_name_alloc+0x40/0xf0 [ 1208.046312][T16138] prctl_set_vma+0x18b/0x400 [ 1208.046348][T16138] __se_sys_prctl+0x27e/0x1940 [ 1208.046379][T16138] ? __pfx___se_sys_prctl+0x10/0x10 [ 1208.046413][T16138] ? do_syscall_64+0xbe/0x3b0 [ 1208.046433][T16138] ? __x64_sys_prctl+0x20/0xc0 [ 1208.046480][T16138] do_syscall_64+0xfa/0x3b0 [ 1208.046500][T16138] ? lockdep_hardirqs_on+0x9c/0x150 [ 1208.046545][T16138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.046567][T16138] ? clear_bhb_loop+0x60/0xb0 [ 1208.046595][T16138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.046618][T16138] RIP: 0033:0x7f2797d8e929 [ 1208.046638][T16138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1208.046658][T16138] RSP: 002b:00007f2798b1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1208.046682][T16138] RAX: ffffffffffffffda RBX: 00007f2797fb5fa0 RCX: 00007f2797d8e929 [ 1208.046700][T16138] RDX: 0000200000fff000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 1208.046715][T16138] RBP: 00007f2798b1b090 R08: 0000200000000900 R09: 0000000000000000 [ 1208.046731][T16138] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.046745][T16138] R13: 0000000000000000 R14: 00007f2797fb5fa0 R15: 00007f27980dfa28 [ 1208.046779][T16138] [ 1208.384227][T16142] FAULT_INJECTION: forcing a failure. [ 1208.384227][T16142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1208.411277][T16142] CPU: 0 UID: 0 PID: 16142 Comm: syz.0.2210 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1208.411310][T16142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1208.411324][T16142] Call Trace: [ 1208.411333][T16142] [ 1208.411343][T16142] dump_stack_lvl+0x189/0x250 [ 1208.411383][T16142] ? __pfx____ratelimit+0x10/0x10 [ 1208.411416][T16142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1208.411451][T16142] ? __pfx__printk+0x10/0x10 [ 1208.411489][T16142] should_fail_ex+0x414/0x560 [ 1208.411522][T16142] _copy_to_user+0x31/0xb0 [ 1208.411548][T16142] simple_read_from_buffer+0xe1/0x170 [ 1208.411577][T16142] proc_fail_nth_read+0x1df/0x250 [ 1208.411606][T16142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1208.411635][T16142] ? rw_verify_area+0x258/0x650 [ 1208.411668][T16142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1208.411696][T16142] vfs_read+0x200/0x980 [ 1208.411746][T16142] ? __pfx___mutex_lock+0x10/0x10 [ 1208.411768][T16142] ? __pfx_vfs_read+0x10/0x10 [ 1208.411802][T16142] ? __fget_files+0x2a/0x420 [ 1208.411833][T16142] ? __fget_files+0x3a0/0x420 [ 1208.411856][T16142] ? __fget_files+0x2a/0x420 [ 1208.411901][T16142] ksys_read+0x145/0x250 [ 1208.411918][T16142] ? __fget_files+0x3a0/0x420 [ 1208.411944][T16142] ? __pfx_ksys_read+0x10/0x10 [ 1208.411981][T16142] ? do_syscall_64+0xbe/0x3b0 [ 1208.412005][T16142] do_syscall_64+0xfa/0x3b0 [ 1208.412024][T16142] ? lockdep_hardirqs_on+0x9c/0x150 [ 1208.412055][T16142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.412076][T16142] ? clear_bhb_loop+0x60/0xb0 [ 1208.412102][T16142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.412123][T16142] RIP: 0033:0x7f2797d8d33c [ 1208.412142][T16142] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1208.412160][T16142] RSP: 002b:00007f2798b1b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1208.412183][T16142] RAX: ffffffffffffffda RBX: 00007f2797fb5fa0 RCX: 00007f2797d8d33c [ 1208.412200][T16142] RDX: 000000000000000f RSI: 00007f2798b1b0a0 RDI: 0000000000000004 [ 1208.412213][T16142] RBP: 00007f2798b1b090 R08: 0000000000000000 R09: 0000000000000000 [ 1208.412227][T16142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1208.412240][T16142] R13: 0000000000000000 R14: 00007f2797fb5fa0 R15: 00007f27980dfa28 [ 1208.412276][T16142] [ 1208.772482][ T5915] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1208.902782][ T5908] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1208.932435][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 1208.939050][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1208.948153][ T5915] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1208.957299][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.965428][ T5915] usb 5-1: Product: syz [ 1208.969598][ T5915] usb 5-1: Manufacturer: syz [ 1208.974861][ T5915] usb 5-1: SerialNumber: syz [ 1208.983775][ T5915] usb 5-1: config 0 descriptor?? [ 1209.055422][ T5908] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1209.066600][ T5908] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1209.076617][ T5908] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1209.089529][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.109349][T16146] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1209.121843][ T5908] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1209.333900][T15538] usb 2-1: USB disconnect, device number 98 [ 1209.397725][ T5915] gs_usb 5-1:0.0: Couldn't get device config: (err=-71) [ 1209.409472][ T5915] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 1209.428589][ T5915] usb 5-1: USB disconnect, device number 113 [ 1210.004558][T16152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 1210.446967][T16161] usb usb8: usbfs: process 16161 (syz.1.2217) did not claim interface 0 before use [ 1210.457315][T16161] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1210.465484][T16161] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2217'. [ 1210.518996][T16163] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2217'. [ 1211.166815][T16180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2223'. [ 1211.512484][ T43] usb 5-1: new low-speed USB device number 114 using dummy_hcd [ 1211.647588][T16184] fuse: root generation should be zero [ 1211.672408][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 1211.812415][ T43] usb 5-1: new low-speed USB device number 115 using dummy_hcd [ 1212.042743][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 1212.048400][ T43] usb usb5-port1: attempt power cycle [ 1212.319761][T16193] netlink: 'syz.1.2228': attribute type 1 has an invalid length. [ 1212.392437][ T43] usb 5-1: new low-speed USB device number 116 using dummy_hcd [ 1212.412763][T16193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1212.419764][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 1212.450986][T16195] bond2: (slave dummy0): making interface the new active one [ 1212.476953][T16195] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1212.573006][ T43] usb 5-1: new low-speed USB device number 117 using dummy_hcd [ 1212.612883][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 1212.642863][ T43] usb usb5-port1: unable to enumerate USB device [ 1212.922994][ T43] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1213.102800][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 1213.109420][ T43] usb 2-1: config 0 has an invalid interface number: 167 but max is 0 [ 1213.117763][ T43] usb 2-1: config 0 has no interface number 0 [ 1213.124758][ T43] usb 2-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 1213.135244][ T43] usb 2-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 32 [ 1213.145367][ T43] usb 2-1: config 0 interface 167 has no altsetting 0 [ 1213.156283][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 1213.165727][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.173987][ T43] usb 2-1: Product: syz [ 1213.178193][ T43] usb 2-1: Manufacturer: syz [ 1213.183047][ T43] usb 2-1: SerialNumber: syz [ 1213.190456][ T43] usb 2-1: config 0 descriptor?? [ 1213.196774][T16197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1213.204695][T16197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1213.416751][T16197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1213.426698][T16197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1213.461657][ T43] usbtest 2-1:0.167: couldn't get endpoints, -22 [ 1213.470256][ T43] usbtest 2-1:0.167: probe with driver usbtest failed with error -22 [ 1213.485711][ T43] usb 2-1: USB disconnect, device number 99 [ 1214.021064][T16204] program syz.1.2232 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1214.246997][T16210] usb usb8: usbfs: process 16210 (syz.1.2233) did not claim interface 0 before use [ 1214.519686][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2234'. [ 1214.852379][T15538] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1215.032354][T15538] usb 5-1: Using ep0 maxpacket: 16 [ 1215.044113][T15538] usb 5-1: config 0 has an invalid interface number: 199 but max is 0 [ 1215.052552][T15538] usb 5-1: config 0 has no interface number 0 [ 1215.065683][T15538] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=49.f8 [ 1215.083170][T15538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.092621][T15538] usb 5-1: Product: syz [ 1215.101019][T15538] usb 5-1: Manufacturer: syz [ 1215.106937][T15538] usb 5-1: SerialNumber: syz [ 1215.118510][T15538] usb 5-1: config 0 descriptor?? [ 1215.329745][T16220] FAULT_INJECTION: forcing a failure. [ 1215.329745][T16220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1215.346378][T16220] CPU: 0 UID: 0 PID: 16220 Comm: syz.1.2236 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1215.346412][T16220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1215.346427][T16220] Call Trace: [ 1215.346436][T16220] [ 1215.346446][T16220] dump_stack_lvl+0x189/0x250 [ 1215.346487][T16220] ? __pfx____ratelimit+0x10/0x10 [ 1215.346521][T16220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1215.346556][T16220] ? __pfx__printk+0x10/0x10 [ 1215.346580][T16220] ? __might_fault+0xb0/0x130 [ 1215.346614][T16220] should_fail_ex+0x414/0x560 [ 1215.346647][T16220] _copy_from_iter+0x1db/0x16f0 [ 1215.346685][T16220] ? rcu_is_watching+0x15/0xb0 [ 1215.346719][T16220] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1215.346743][T16220] ? __pfx__copy_from_iter+0x10/0x10 [ 1215.346778][T16220] ? __build_skb_around+0x257/0x3e0 [ 1215.346807][T16220] ? netlink_sendmsg+0x642/0xb30 [ 1215.346832][T16220] ? skb_put+0x11b/0x210 [ 1215.346859][T16220] netlink_sendmsg+0x6b2/0xb30 [ 1215.346888][T16220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1215.346912][T16220] ? aa_sock_msg_perm+0x94/0x160 [ 1215.346937][T16220] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1215.346966][T16220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1215.346988][T16220] __sock_sendmsg+0x21c/0x270 [ 1215.347019][T16220] ____sys_sendmsg+0x505/0x830 [ 1215.347046][T16220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1215.347076][T16220] ? import_iovec+0x74/0xa0 [ 1215.347096][T16220] ___sys_sendmsg+0x21f/0x2a0 [ 1215.347120][T16220] ? __pfx____sys_sendmsg+0x10/0x10 [ 1215.347171][T16220] ? __fget_files+0x2a/0x420 [ 1215.347191][T16220] ? __fget_files+0x3a0/0x420 [ 1215.347223][T16220] __x64_sys_sendmsg+0x19b/0x260 [ 1215.347248][T16220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1215.347279][T16220] ? __pfx_ksys_write+0x10/0x10 [ 1215.347300][T16220] ? do_syscall_64+0xbe/0x3b0 [ 1215.347319][T16220] do_syscall_64+0xfa/0x3b0 [ 1215.347334][T16220] ? lockdep_hardirqs_on+0x9c/0x150 [ 1215.347360][T16220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.347377][T16220] ? clear_bhb_loop+0x60/0xb0 [ 1215.347399][T16220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.347416][T16220] RIP: 0033:0x7fdfdab8e929 [ 1215.347432][T16220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1215.347448][T16220] RSP: 002b:00007fdfd89f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1215.347467][T16220] RAX: ffffffffffffffda RBX: 00007fdfdadb5fa0 RCX: 00007fdfdab8e929 [ 1215.347480][T16220] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1215.347493][T16220] RBP: 00007fdfd89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.347504][T16220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.347515][T16220] R13: 0000000000000000 R14: 00007fdfdadb5fa0 R15: 00007fdfdaedfa28 [ 1215.347540][T16220] [ 1215.360974][T16212] warning: `syz.4.2234' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1215.942382][ T5908] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1216.072851][ T5908] usb 2-1: device descriptor read/64, error -71 [ 1216.098979][ T30] audit: type=1326 audit(1750138965.458:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16226 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1216.124094][T16227] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1216.131807][T16227] audit: out of memory in audit_log_start [ 1216.138856][ T30] audit: type=1326 audit(1750138965.488:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16226 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2797d8d290 code=0x7ffc0000 [ 1216.161788][ T30] audit: type=1326 audit(1750138965.488:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16226 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2797d8d3df code=0x7ffc0000 [ 1216.196913][ T30] audit: type=1326 audit(1750138965.498:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16226 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2797d8d33c code=0x7ffc0000 [ 1216.236109][ T30] audit: type=1326 audit(1750138965.498:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16226 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2797d8d3df code=0x7ffc0000 [ 1216.263925][ T30] audit: type=1326 audit(1750138965.498:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16226 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2797d8d58a code=0x7ffc0000 [ 1216.287585][ T30] audit: type=1326 audit(1750138965.498:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16226 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1216.311783][ T30] audit: type=1326 audit(1750138965.498:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16226 comm="syz.0.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2797d8e929 code=0x7ffc0000 [ 1216.335421][ T5908] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1216.472509][ T5908] usb 2-1: device descriptor read/64, error -71 [ 1216.585667][ T5908] usb usb2-port1: attempt power cycle [ 1216.922934][ T5908] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1216.943100][ T5908] usb 2-1: device descriptor read/8, error -71 [ 1217.182469][ T5908] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1217.208206][ T5908] usb 2-1: device descriptor read/8, error -71 [ 1217.322903][ T5908] usb usb2-port1: unable to enumerate USB device [ 1219.085550][T16238] usb usb8: usbfs: process 16238 (syz.1.2243) did not claim interface 0 before use [ 1219.955479][T16240] FAULT_INJECTION: forcing a failure. [ 1219.955479][T16240] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.978506][T16240] CPU: 0 UID: 0 PID: 16240 Comm: syz.1.2244 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1219.978536][T16240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1219.978553][T16240] Call Trace: [ 1219.978562][T16240] [ 1219.978572][T16240] dump_stack_lvl+0x189/0x250 [ 1219.978610][T16240] ? __pfx____ratelimit+0x10/0x10 [ 1219.978642][T16240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.978675][T16240] ? __pfx__printk+0x10/0x10 [ 1219.978700][T16240] ? __pfx___might_resched+0x10/0x10 [ 1219.978734][T16240] ? fs_reclaim_acquire+0x7d/0x100 [ 1219.978765][T16240] should_fail_ex+0x414/0x560 [ 1219.978798][T16240] should_failslab+0xa8/0x100 [ 1219.978824][T16240] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1219.978846][T16240] ? dup_task_struct+0x52/0x860 [ 1219.978871][T16240] dup_task_struct+0x52/0x860 [ 1219.978891][T16240] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.978934][T16240] copy_process+0x54b/0x3c00 [ 1219.978984][T16240] ? __pfx_copy_process+0x10/0x10 [ 1219.979019][T16240] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1219.979050][T16240] vhost_task_create+0x1c4/0x290 [ 1219.979074][T16240] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1219.979105][T16240] ? __pfx_vhost_task_create+0x10/0x10 [ 1219.979136][T16240] ? __pfx_vhost_task_fn+0x10/0x10 [ 1219.979171][T16240] ? kasan_save_track+0x4f/0x80 [ 1219.979201][T16240] ? kasan_save_track+0x3e/0x80 [ 1219.979238][T16240] kvm_mmu_post_init_vm+0x147/0x2b0 [ 1219.979275][T16240] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1219.979307][T16240] ? __mutex_trylock_common+0x153/0x260 [ 1219.979334][T16240] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1219.979362][T16240] ? rcu_is_watching+0x15/0xb0 [ 1219.979396][T16240] ? look_up_lock_class+0x74/0x170 [ 1219.979430][T16240] ? register_lock_class+0x51/0x320 [ 1219.979466][T16240] ? __lock_acquire+0xab9/0xd20 [ 1219.979527][T16240] kvm_vcpu_ioctl+0x95c/0xe90 [ 1219.979556][T16240] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1219.979576][T16240] ? __lock_acquire+0xab9/0xd20 [ 1219.979628][T16240] ? __fget_files+0x2a/0x420 [ 1219.979655][T16240] ? __fget_files+0x2a/0x420 [ 1219.979677][T16240] ? __fget_files+0x3a0/0x420 [ 1219.979700][T16240] ? __fget_files+0x2a/0x420 [ 1219.979728][T16240] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1219.979759][T16240] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1219.979782][T16240] __se_sys_ioctl+0xfc/0x170 [ 1219.979816][T16240] do_syscall_64+0xfa/0x3b0 [ 1219.979834][T16240] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.979865][T16240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.979887][T16240] ? clear_bhb_loop+0x60/0xb0 [ 1219.979923][T16240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.979944][T16240] RIP: 0033:0x7fdfdab8e929 [ 1219.979963][T16240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.979982][T16240] RSP: 002b:00007fdfd89f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1219.980005][T16240] RAX: ffffffffffffffda RBX: 00007fdfdadb5fa0 RCX: 00007fdfdab8e929 [ 1219.980021][T16240] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1219.980034][T16240] RBP: 00007fdfd89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.980048][T16240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1219.980061][T16240] R13: 0000000000000000 R14: 00007fdfdadb5fa0 R15: 00007fdfdaedfa28 [ 1219.980094][T16240] [ 1220.682428][ T5908] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1220.844700][ T5908] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1220.851372][ T5908] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1220.860529][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.871681][ T5908] usb 2-1: config 0 descriptor?? [ 1221.081511][ T5908] (null): keene_cmd_main failed (-71) [ 1221.102734][ T5908] video4linux radio48: keene_cmd_main failed (-71) [ 1221.109320][ T5908] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1221.120163][ T5908] usb 2-1: USB disconnect, device number 104 [ 1221.634099][ T30] audit: type=1326 audit(1750138970.998:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16246 comm="syz.1.2247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfdab8e929 code=0x0 [ 1223.340514][T16264] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2250'. [ 1224.081480][T16268] usb usb8: usbfs: process 16268 (syz.1.2252) did not claim interface 0 before use [ 1224.422453][T12985] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1224.572451][T12985] usb 2-1: Using ep0 maxpacket: 16 [ 1224.579699][T12985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.589899][T12985] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1224.601350][T12985] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1224.610483][T12985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.618535][T12985] usb 2-1: Product: syz [ 1224.623199][T12985] usb 2-1: Manufacturer: syz [ 1224.627844][T12985] usb 2-1: SerialNumber: syz [ 1224.846590][T12985] usb 2-1: 0:2 : does not exist [ 1224.858994][T12985] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1224.883663][T12985] usb 2-1: USB disconnect, device number 105 [ 1224.916210][ T5888] udevd[5888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1226.934675][ T30] audit: type=1326 audit(1750138976.298:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16286 comm="syz.1.2260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfdab8e929 code=0x0 [ 1226.935928][ T43] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1226.974226][ T43] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1227.740268][T16292] usb usb8: usbfs: process 16292 (syz.1.2261) did not claim interface 0 before use [ 1228.152393][T14074] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1228.292394][T14074] usb 2-1: device descriptor read/64, error -71 [ 1228.542359][T14074] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1228.672485][T14074] usb 2-1: device descriptor read/64, error -71 [ 1228.786972][T14074] usb usb2-port1: attempt power cycle [ 1229.132415][T14074] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1229.153060][T14074] usb 2-1: device descriptor read/8, error -71 [ 1229.392446][T14074] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1229.417278][T14074] usb 2-1: device descriptor read/8, error -71 [ 1229.533295][T14074] usb usb2-port1: unable to enumerate USB device [ 1243.848050][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.854611][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.285364][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.291729][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1328.962680][ T31] INFO: task kworker/1:3:5838 blocked for more than 143 seconds. [ 1328.970465][ T31] Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 [ 1328.978274][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1328.987379][ T31] task:kworker/1:3 state:D stack:20712 pid:5838 tgid:5838 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1328.999593][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1329.006372][ T31] Call Trace: [ 1329.009684][ T31] [ 1329.013060][ T31] __schedule+0x16f5/0x4d00 [ 1329.017951][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1329.023574][ T31] ? schedule+0x165/0x360 [ 1329.027982][ T31] ? __pfx___schedule+0x10/0x10 [ 1329.032985][ T31] ? schedule+0x91/0x360 [ 1329.037275][ T31] schedule+0x165/0x360 [ 1329.041480][ T31] schedule_preempt_disabled+0x13/0x30 [ 1329.047739][ T31] __mutex_lock+0x724/0xe80 [ 1329.052365][ T31] ? look_up_lock_class+0x74/0x170 [ 1329.057531][ T31] ? __mutex_lock+0x51b/0xe80 [ 1329.062554][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1329.068840][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1329.074265][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1329.080040][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1329.085909][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1329.092009][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1329.097852][ T31] process_scheduled_works+0xae1/0x17b0 [ 1329.103851][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1329.109893][ T31] worker_thread+0x8a0/0xda0 [ 1329.114615][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1329.121023][ T31] ? __kthread_parkme+0x7b/0x200 [ 1329.126087][ T31] kthread+0x70e/0x8a0 [ 1329.130210][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1329.135936][ T31] ? __pfx_kthread+0x10/0x10 [ 1329.140575][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1329.145952][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1329.151203][ T31] ? __pfx_kthread+0x10/0x10 [ 1329.155949][ T31] ret_from_fork+0x3f9/0x770 [ 1329.160592][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1329.166126][ T31] ? __switch_to_asm+0x39/0x70 [ 1329.170929][ T31] ? __switch_to_asm+0x33/0x70 [ 1329.175843][ T31] ? __pfx_kthread+0x10/0x10 [ 1329.180489][ T31] ret_from_fork_asm+0x1a/0x30 [ 1329.185357][ T31] [ 1329.188479][ T31] [ 1329.188479][ T31] Showing all locks held in the system: [ 1329.196666][ T31] 1 lock held by khungtaskd/31: [ 1329.201560][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1329.211551][ T31] 2 locks held by klogd/5194: [ 1329.216422][ T31] 2 locks held by getty/5595: [ 1329.221129][ T31] #0: ffff88814c73a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1329.231372][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1329.241659][ T31] 3 locks held by kworker/1:3/5838: [ 1329.247145][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1329.258609][ T31] #1: ffffc900040bfbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1329.272305][ T31] #2: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1329.290012][ T31] 5 locks held by kworker/u8:1/12206: [ 1329.295559][ T31] 1 lock held by syz.3.1744/13798: [ 1329.300696][ T31] #0: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1329.310910][ T31] 2 locks held by syz.3.2150/15918: [ 1329.316560][ T31] #0: ffff88807ee35100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1329.326443][ T31] #1: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1329.336767][ T31] 2 locks held by syz.2.2156/15947: [ 1329.342005][ T31] #0: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 1329.352803][ T31] #1: ffff88807ee35100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1329.362594][ T31] 2 locks held by syz-executor/16046: [ 1329.367988][ T31] #0: ffff888054467918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1329.378166][ T31] #1: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1329.388458][ T31] 2 locks held by syz-executor/16080: [ 1329.393946][ T31] #0: ffff888028986918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1329.404109][ T31] #1: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1329.414504][ T31] 3 locks held by syz.4.2234/16214: [ 1329.419728][ T31] #0: ffffffff8f576470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1329.428016][ T31] #1: ffffffff8f576288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1329.437211][ T31] #2: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1329.447586][ T31] 2 locks held by syz.0.2259/16284: [ 1329.452868][ T31] #0: ffffffff8f576470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1329.461132][ T31] #1: ffffffff8f576288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1329.470416][ T31] 2 locks held by syz-executor/16298: [ 1329.476099][ T31] #0: ffff88802fd7a118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1329.486258][ T31] #1: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1329.496296][ T31] 2 locks held by syz.1.2265/16300: [ 1329.501496][ T31] #0: ffffffff8f576470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1329.510097][ T31] #1: ffffffff8f576288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 1329.519160][ T31] 2 locks held by syz-executor/16302: [ 1329.524699][ T31] #0: ffff8880252df118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1329.535161][ T31] #1: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1329.545207][ T31] 2 locks held by syz-executor/16304: [ 1329.550593][ T31] #0: ffff888024264118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 1329.560663][ T31] #1: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 1329.570908][ T31] [ 1329.573508][ T31] ============================================= [ 1329.573508][ T31] [ 1329.581964][ T31] NMI backtrace for cpu 1 [ 1329.581978][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1329.581999][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1329.582010][ T31] Call Trace: [ 1329.582018][ T31] [ 1329.582025][ T31] dump_stack_lvl+0x189/0x250 [ 1329.582054][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1329.582076][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1329.582103][ T31] ? __pfx__printk+0x10/0x10 [ 1329.582132][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1329.582158][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1329.582177][ T31] ? _printk+0xcf/0x120 [ 1329.582198][ T31] ? __pfx__printk+0x10/0x10 [ 1329.582226][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1329.582258][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1329.582289][ T31] watchdog+0xfee/0x1030 [ 1329.582319][ T31] ? watchdog+0x1de/0x1030 [ 1329.582348][ T31] kthread+0x70e/0x8a0 [ 1329.582370][ T31] ? __pfx_watchdog+0x10/0x10 [ 1329.582393][ T31] ? __pfx_kthread+0x10/0x10 [ 1329.582413][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1329.582438][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1329.582462][ T31] ? __pfx_kthread+0x10/0x10 [ 1329.582481][ T31] ret_from_fork+0x3f9/0x770 [ 1329.582508][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1329.582537][ T31] ? __switch_to_asm+0x39/0x70 [ 1329.582553][ T31] ? __switch_to_asm+0x33/0x70 [ 1329.582569][ T31] ? __pfx_kthread+0x10/0x10 [ 1329.582589][ T31] ret_from_fork_asm+0x1a/0x30 [ 1329.582618][ T31] [ 1329.734619][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1329.739876][ C0] NMI backtrace for cpu 0 [ 1329.739891][ C0] CPU: 0 UID: 0 PID: 12206 Comm: kworker/u8:1 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1329.739912][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1329.739924][ C0] Workqueue: bat_events batadv_nc_worker [ 1329.739951][ C0] RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x10/0x18 [ 1329.739982][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 <75> 06 5a c3 cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a c3 cc cc [ 1329.739997][ C0] RSP: 0018:ffffc9001baa7928 EFLAGS: 00000246 [ 1329.740011][ C0] RAX: 0000000000000001 RBX: ffff88807b5b0fc0 RCX: 0000000000000000 [ 1329.740024][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807b5b0fc0 [ 1329.740035][ C0] RBP: 1ffff1100f6b61f9 R08: ffff88807b5b0fc3 R09: 1ffff1100f6b61f8 [ 1329.740048][ C0] R10: dffffc0000000000 R11: ffffed100f6b61f9 R12: dffffc0000000000 [ 1329.740061][ C0] R13: 1ffff1100f6b61fa R14: ffff88807b5b0fd0 R15: ffff88807b5b0fc8 [ 1329.740075][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 1329.740089][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1329.740101][ C0] CR2: 000055d956c1e168 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1329.740139][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1329.740149][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1329.740160][ C0] Call Trace: [ 1329.740166][ C0] [ 1329.740174][ C0] do_raw_spin_unlock+0x122/0x240 [ 1329.740196][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 1329.740220][ C0] _raw_spin_unlock_bh+0x23/0x40 [ 1329.740242][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 1329.740268][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 1329.740298][ C0] batadv_nc_worker+0x369/0x610 [ 1329.740322][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1329.740348][ C0] process_scheduled_works+0xae1/0x17b0 [ 1329.740407][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1329.740442][ C0] worker_thread+0x8a0/0xda0 [ 1329.740471][ C0] kthread+0x70e/0x8a0 [ 1329.740493][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1329.740521][ C0] ? __pfx_kthread+0x10/0x10 [ 1329.740542][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1329.740567][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1329.740593][ C0] ? __pfx_kthread+0x10/0x10 [ 1329.740613][ C0] ret_from_fork+0x3f9/0x770 [ 1329.740641][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1329.740669][ C0] ? __switch_to_asm+0x39/0x70 [ 1329.740688][ C0] ? __switch_to_asm+0x33/0x70 [ 1329.740706][ C0] ? __pfx_kthread+0x10/0x10 [ 1329.740726][ C0] ret_from_fork_asm+0x1a/0x30 [ 1329.740753][ C0] [ 1329.741653][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1330.014155][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 1330.025968][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1330.036026][ T31] Call Trace: [ 1330.039315][ T31] [ 1330.042265][ T31] dump_stack_lvl+0x99/0x250 [ 1330.046894][ T31] ? __asan_memcpy+0x40/0x70 [ 1330.051508][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1330.056728][ T31] ? __pfx__printk+0x10/0x10 [ 1330.061337][ T31] panic+0x2db/0x790 [ 1330.065263][ T31] ? __pfx_panic+0x10/0x10 [ 1330.069695][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1330.075529][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1330.080941][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1330.087118][ T31] watchdog+0x102d/0x1030 [ 1330.091488][ T31] ? watchdog+0x1de/0x1030 [ 1330.095927][ T31] kthread+0x70e/0x8a0 [ 1330.100009][ T31] ? __pfx_watchdog+0x10/0x10 [ 1330.104699][ T31] ? __pfx_kthread+0x10/0x10 [ 1330.109301][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1330.114524][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1330.119734][ T31] ? __pfx_kthread+0x10/0x10 [ 1330.124335][ T31] ret_from_fork+0x3f9/0x770 [ 1330.128934][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1330.134061][ T31] ? __switch_to_asm+0x39/0x70 [ 1330.138843][ T31] ? __switch_to_asm+0x33/0x70 [ 1330.143610][ T31] ? __pfx_kthread+0x10/0x10 [ 1330.148210][ T31] ret_from_fork_asm+0x1a/0x30 [ 1330.152992][ T31] [ 1330.156353][ T31] Kernel Offset: disabled [ 1330.160689][ T31] Rebooting in 86400 seconds..