last executing test programs: 15m35.634556832s ago: executing program 3 (id=4181): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x144, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x98, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2f}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x98, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 15m35.434560872s ago: executing program 3 (id=4184): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = fsopen(&(0x7f00000003c0)='overlay\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00\xb1\xed8~\x92\xae\x82\xbe\xe7\xfd_\xc1\x83\xb7\xd4\xee\x9a\xa5\xc1\x8e\xc5\xcb|\x95-\xc8\x8f\xa1\xd6\xe2\r!\x81`\xa4P\xd2\xb2.9e\xa04\x1as#\x19\x83\xe42\xec\x91\xdb\x8e\x8b\x85\xc1\xado\xde\xf1s\xf9\xd3-z\x96\xd8\xbf\xbb\x19\xd6c\xe2\xc4\xf0d\xdb\xe9\x1c\x8d|\" \x12\xac\x7f4AJ\x1d\vS\xd9_\xd4\xeeQ\xd4u\x10\xd7j\xe3\xab\xbc\xffY\x8dA=l`V\x10\xbf\xd1\xbfbz\"\xd0\xeaX\x99\x9c\x14\x83\xe1\xc3.!R\x93\xf4S\x95\xc7\x90we\x82\xf81\x9f\x04\xe0\xa9\xa9\xe0\xf0\xa8R\xfbQ<\x11\xc3P\xbe\x1eR\xc1\xbfES\x99\xda\xfc\x8ff\xf9\xa0\x18\xd0\x00w\\\xf2\xba\xa4 \xaa\xbc\x9b\xd4\x86\xef\t\xb7\xd2\xec\xe8\xde\xe5u\x123V\x8a\x10\xa1^\x0e\x80N\xceD\xd5[-.', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x8ffd0000, 0x71, 0x10, 0x31}, [@ldst={0x6, 0x3, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) ppoll(&(0x7f0000000080)=[{r0, 0x8108}, {r0, 0xc51}], 0x2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 15m34.638033652s ago: executing program 3 (id=4188): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f00000013c0)=""/251, 0xfb}, {&(0x7f0000001700)=""/163, 0xa3}], 0x3}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000001b80)=""/130, 0x82}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000001600)=""/216, 0xd8}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000001500)=""/245, 0xf5}, {&(0x7f0000003180)=""/246, 0xf6}], 0x9}, 0x81}], 0x4, 0x40012032, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd28, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xec0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000001880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001840)={&(0x7f00000014c0)={0x30, r3, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1, 0x19}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 15m34.316068515s ago: executing program 3 (id=4191): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000180)={{0x3c, @empty, 0x4e22, 0x1, 'none\x00', 0x25, 0x6}, {@empty, 0x4e22, 0x2000, 0x0, 0x6, 0x2}}, 0x44) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x380000b, 0x204031, 0xffffffffffffffff, 0x5e9b7000) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x220) recvfrom(0xffffffffffffffff, &(0x7f0000001700)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xffffffdb) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0x7fffffffffffffff) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r5, 0x6f2d, 0xcb) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) 15m31.11753406s ago: executing program 3 (id=4207): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x32fb2843044266a8) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x298, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x268, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x7cac, 0x3, 0x4, 0xd, 0x12, 0x16, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x100}, @TCA_CHOKE_STAB={0x104, 0x2, "c67acdd7c092f72835c9bab546de077e6030ca5cf8282e8efae5d53c97f2f5d69394f0680459416d72e22308fe0a08e9456dc8bed8e06387cb76785c2e8d1d8147b992eddaa8921c41ccba3c36df089c8660c588f6c92f4a019e0c242c78ee6346c20d5574a9bfba1a9e1d45792ef06256318f666b132775da0bab702d3c478f4605eb80e538839d351de810b747ad43f966ade3626d4b4464d02678c70d47cf0ee30525a7a709249c44d3848842a131d55e05fe8f3f2272ac844c9394f5b593a5e42b75434d57e2b49b117e201559261dd994ff358243003ab939a0a4b56f847d6074b92f76d930cadb1c45ba7cc9c95fc92bea2f455bb00a558a89a1d41c4e"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x3, 0xdde, 0xc, 0x1e, 0x12, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xfffffc00}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0xffff, 0xffff, 0x2, 0xe, 0x1e, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x7638}]}}]}, 0x298}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r9) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) llistxattr(&(0x7f0000005500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000340)=""/151, 0x97) 15m30.559792229s ago: executing program 3 (id=4212): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) listns(&(0x7f0000000580)={0x20, 0x0, 0x2, 0x44000000, 0x0, 0xffffffffffffffff}, &(0x7f0000001fc0)=[0x0], 0x1, 0x0) (async) unshare(0x66000080) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000000000000008020900000110005"], 0x30}}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8a, 0x0, &(0x7f0000000600)="e3ef7f670000ec6783b424e0f0544b00aab05400f16b2882a631a8af8babc441912ecbee66cd7a3529664862e9f91f4aab3d47f07b93cd09504d9222638b43fd8b47485a03000000000000002d1a96000000000000000000000000ba97abbce016d389d26b3951e73e3b2b491b676e63d3f530820d4447a753b6d4dd682361facac3f7b2cbd0c5ab3fe2", 0x0, 0x20000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) (async) r6 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r5, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}}, 0x0) (async) move_mount(r0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x120) 15m29.820589858s ago: executing program 32 (id=4212): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) listns(&(0x7f0000000580)={0x20, 0x0, 0x2, 0x44000000, 0x0, 0xffffffffffffffff}, &(0x7f0000001fc0)=[0x0], 0x1, 0x0) (async) unshare(0x66000080) r2 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000000000000008020900000110005"], 0x30}}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x8a, 0x0, &(0x7f0000000600)="e3ef7f670000ec6783b424e0f0544b00aab05400f16b2882a631a8af8babc441912ecbee66cd7a3529664862e9f91f4aab3d47f07b93cd09504d9222638b43fd8b47485a03000000000000002d1a96000000000000000000000000ba97abbce016d389d26b3951e73e3b2b491b676e63d3f530820d4447a753b6d4dd682361facac3f7b2cbd0c5ab3fe2", 0x0, 0x20000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x1}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000140), 0xa, 0x8001) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) (async) r6 = gettid() sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r5, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r6], 0x28}}, 0x0) (async) move_mount(r0, &(0x7f0000000200)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x120) 12m18.031672597s ago: executing program 4 (id=5147): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)={0x20, 0x1, 0x6, "f66ba5fe8423"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x7fu0\x1d\xda>\xe1s\xf4q\xe0\x9b\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) ftruncate(r1, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002840)={0x1c, &(0x7f0000002300)={0x40, 0x13, 0x1, "90"}, 0x0, 0x0}) 12m14.828740666s ago: executing program 4 (id=5163): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000", @ANYRES8, @ANYRES16], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x2c020400) r2 = socket(0x15, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e1d, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x44, 0x0, &(0x7f0000000180)="b44c80630562443108347301af47fa0ff9b11fe7d5fe008c6392009c5bbd0408000000003e13b8cd7263f0fd00000fae7a6a53200386ce51deeffb9de8b4645c2b9c0614", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0xa000) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000380)='\x02\xc3\xf6\xddM\xd6\x8dwE)\x83\xe1\x1f\x9c\xf5q', &(0x7f00000003c0)='iochabset\xd9S\xdc\x85\xba\xbd\xd5\xb4B\x1b\x88$6\x85\\\xfe\x13\x1e\f\x14d\x04\x8e;\x9f\xa1/\xbe\xab\xc4\x82o\xe3c\xc5\xdd5\x1ca<\xdd\xd4\f\x14\xc2\xbd\xd2\x93H\x1a\xc3\x03\xf7\"\x16\xe2\xe6\xa5\xf7\ar\x0e\xedU\xb8!T\x13-\xef\x9fO\x1a\x03w\x99\xc5\xc3\x89\xd8\x99\xb6y\x18\x11\xb9\xf0\x17\x7fX\xfc\xb2\xc6\xc5\xbd\xde-\xdco*\xcd\xe8\xe9\x13\x04B\x9dw\xedH\xb0\xe0\x91\x04\xe6\t\xf1U\xb2Jn\x8da\xafv a\xee\xc3\xcf\x16+\xb4\xbbn \x1d<\xeeC\x1cv\'\xc8n\xd9.\xb8\xbe\xd7\xe0\xa8\xbb;\xf5\x1agV\xfcT\\\xb6\x7f\x9e|\xc5\xec6P\xd14\xfb\xe6~\xaa0\x955W6\xc8\x8d\x85\x86Q\x89\xf9\t3a\xed\xda\xb6\xc7\xf8\xa3\xcb>\x8a\xbd\x7fH\x80\x14', 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x21182, 0x0) read$FUSE(r4, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, 0xffffffffffffffff, 0x0) faccessat2(r4, &(0x7f0000000140)='./file0\x00', 0x88, 0x200) r5 = mq_open(&(0x7f0000000600)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5f\x02\x00\x00\x00\x00\x00\x00\x00,r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x01\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8eu\xe1r\xf7s2\x82\xe57&bJ\xef\xd0V\x01i%\x18=E\xa7\x8e#4!3\x8d\xf9\xc1I\xcb0\x16P\x04\xc2TSxSn\xb0\f\xd9\'\xff01t\xbf\x01\x0f\xa9\xe3\a\xd2\xdf\x9f\x7f\xce\x92\x8bG\x15\x06\xcd:\x9c\x19\xc8\xf9\x84\xd7\x8b\"\x87\x05?h\x1d\xf5\v\x1a0\xa8\x85\x06\xed\xccm\xe4\x18\xca94\x8dN\x9d\xe4\xac\xa2s\xf79\xa4\xb4\xe9\xe9', 0x3, 0x8f, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbee2, 0x11, r5, 0x39526000) r6 = add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r6, 0x30}) request_key(0x0, 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex;De', r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRESOCT=r7], 0xb4}, 0x1, 0x0, 0x0, 0x20040054}, 0x45) socket$nl_netfilter(0x10, 0x3, 0xc) 12m11.642884164s ago: executing program 4 (id=5181): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r2, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x8000000, 0x100000000}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x800010, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x80000000}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e21}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 12m11.096565506s ago: executing program 4 (id=5184): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="10100000000000000800002005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, 0x0) syz_usb_connect$uac1(0x6, 0x82, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x7, 0x20, 0x5f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x108, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x7d, 0xc, 0xc7, 0x7}, @as_header={0x7, 0x24, 0x1, 0x5, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xfc, 0x0, 0xb, {0x7, 0x25, 0x1, 0x8, 0x49, 0x68}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xc6, 0x80, 0x83, {0x7, 0x25, 0x1, 0xc, 0x4e, 0x3fdc}}}}}}}}]}}, 0x0) 12m10.287435109s ago: executing program 4 (id=5188): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000200)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) io_setup(0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) statfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000b02000/0x1000)=nil, &(0x7f000082c000/0x3000)=nil, &(0x7f0000928000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000b34000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f00000a3000/0x1000)=nil, &(0x7f000099f000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x1c) r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24004041) read$FUSE(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket(0x400000000010, 0x800, 0x1) r7 = syz_open_procfs(0x0, 0x0) r8 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r9 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r9, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESDEC=r5, @ANYRES8=r3, @ANYRESHEX=r7, @ANYRESOCT=r1], 0xf4) sendfile(r8, r8, 0x0, 0x20004) readv(r7, &(0x7f0000000800)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x1e}, {0x0}], 0x9) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x63}, 0x1, 0x0, 0x0, 0x40004}, 0x1) write(r6, &(0x7f0000000180)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c040007031a0003004056362c58c56bd515f17b14f0c305eae1e50530ee0714179fe9712ecea74b38b6062d68feca9dd1504baea59233ba0b5a1f18f42961817f2c2e94d71d3a5317", 0x64) 12m9.009462109s ago: executing program 4 (id=5192): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2) syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x101200) r1 = syz_open_dev$video(&(0x7f0000000040), 0x61, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r2, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfdfffffc, 0x20, 0xfffffdfb, 0x71}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) syz_clone(0x80201000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/fscreate\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x1810000, 0x0, 0x0, 0x0, {0x20080027}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000080)=""/168, 0xa8}, {&(0x7f0000000140)=""/204, 0xcc}, {&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/161, 0xa1}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, 0x7f, 0x7) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000004b40)={0x1, @vbi={0x0, 0x0, 0x33524742}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000014c0)={0x0, 0x9, 0x0, [0x7, 0x81, 0x1, 0x440e, 0xfffffffffffffffe], [0xfffffffffffffff7, 0x5, 0x8000000000000000, 0x0, 0x9, 0x7, 0x7fff, 0x80000001, 0x6, 0xea4, 0x400, 0x80, 0x0, 0x7, 0x5, 0x8, 0x800, 0x6, 0x101, 0x100000000, 0x9, 0xfffffffffffffffc, 0x3ff, 0x1eb9, 0x2, 0x5, 0x4, 0x4, 0x6, 0x0, 0x3, 0x3, 0x4, 0xd3, 0x7, 0xebd0, 0x8ab3, 0x35c, 0x0, 0x0, 0x4, 0x0, 0x6, 0x37, 0x4, 0x9, 0x0, 0x99f, 0x6, 0x3, 0x0, 0x4, 0x80, 0xb61, 0x101, 0x9, 0xb1, 0x6, 0x100000001, 0x5, 0x803, 0x9, 0x5, 0x5, 0x7f, 0x7fffffff, 0xfff, 0x1, 0x8, 0x0, 0x9, 0x7e, 0x3, 0x0, 0x387, 0x2, 0x7, 0x4, 0x2, 0x6, 0x8, 0x7, 0x7f, 0x4, 0x5, 0x3, 0x8000000000000000, 0x8001, 0xf, 0xfc9, 0x100, 0x1000, 0x3, 0x8, 0x2, 0x1, 0x0, 0x1, 0x6, 0x2, 0x8, 0x10001, 0x8, 0x1, 0x7fffffffffffffff, 0x3, 0x7fffffff, 0x7, 0x30, 0x7fffffffffffffff, 0x7, 0x3, 0x8, 0x8, 0x8, 0x10001, 0x0, 0x10001, 0x5, 0x2, 0xbf6]}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000001900)={0x2, 0x40, @start={r5, 0x1, "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", "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"}, [0x9, 0x19e5b38f, 0x800000000000, 0x7f, 0xeb3, 0x2, 0x2, 0x2, 0x9, 0x6375, 0x7ff, 0x9, 0x9, 0x9ff, 0x3, 0xa, 0x6, 0x7fffffffffffffff, 0x7fffffff, 0x9, 0x20, 0x8, 0x8, 0x58, 0x6, 0x10, 0x7, 0x0, 0x0, 0x100000000, 0x1, 0x6, 0xffff, 0x5e30, 0x7ff, 0x5, 0x5, 0x3, 0x4800000000000, 0x81, 0x8000000000000001, 0x7, 0xc13f, 0x9, 0x5, 0x9, 0x10dcbfc1, 0x8000000000000000, 0x80000000, 0x40, 0x0, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x8, 0xdc, 0x3, 0x71, 0x9, 0x0, 0x1, 0x7, 0xffff, 0x7, 0x1]}) 11m53.475906131s ago: executing program 33 (id=5192): r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2) syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x101200) r1 = syz_open_dev$video(&(0x7f0000000040), 0x61, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r2, 0x0) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfdfffffc, 0x20, 0xfffffdfb, 0x71}, &(0x7f0000000080), &(0x7f0000ff4000), 0x0) syz_clone(0x80201000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='attr/fscreate\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) syz_clone3(&(0x7f0000000080)={0x1810000, 0x0, 0x0, 0x0, {0x20080027}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000080)=""/168, 0xa8}, {&(0x7f0000000140)=""/204, 0xcc}, {&(0x7f0000000240)=""/130, 0x82}, {&(0x7f0000000340)=""/59, 0x3b}, {&(0x7f0000000380)=""/161, 0xa1}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x6, 0x7f, 0x7) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000004b40)={0x1, @vbi={0x0, 0x0, 0x33524742}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000014c0)={0x0, 0x9, 0x0, [0x7, 0x81, 0x1, 0x440e, 0xfffffffffffffffe], [0xfffffffffffffff7, 0x5, 0x8000000000000000, 0x0, 0x9, 0x7, 0x7fff, 0x80000001, 0x6, 0xea4, 0x400, 0x80, 0x0, 0x7, 0x5, 0x8, 0x800, 0x6, 0x101, 0x100000000, 0x9, 0xfffffffffffffffc, 0x3ff, 0x1eb9, 0x2, 0x5, 0x4, 0x4, 0x6, 0x0, 0x3, 0x3, 0x4, 0xd3, 0x7, 0xebd0, 0x8ab3, 0x35c, 0x0, 0x0, 0x4, 0x0, 0x6, 0x37, 0x4, 0x9, 0x0, 0x99f, 0x6, 0x3, 0x0, 0x4, 0x80, 0xb61, 0x101, 0x9, 0xb1, 0x6, 0x100000001, 0x5, 0x803, 0x9, 0x5, 0x5, 0x7f, 0x7fffffff, 0xfff, 0x1, 0x8, 0x0, 0x9, 0x7e, 0x3, 0x0, 0x387, 0x2, 0x7, 0x4, 0x2, 0x6, 0x8, 0x7, 0x7f, 0x4, 0x5, 0x3, 0x8000000000000000, 0x8001, 0xf, 0xfc9, 0x100, 0x1000, 0x3, 0x8, 0x2, 0x1, 0x0, 0x1, 0x6, 0x2, 0x8, 0x10001, 0x8, 0x1, 0x7fffffffffffffff, 0x3, 0x7fffffff, 0x7, 0x30, 0x7fffffffffffffff, 0x7, 0x3, 0x8, 0x8, 0x8, 0x10001, 0x0, 0x10001, 0x5, 0x2, 0xbf6]}) ioctl$BTRFS_IOC_DEV_REPLACE(r4, 0xca289435, &(0x7f0000001900)={0x2, 0x40, @start={r5, 0x1, "352fd94a451f70f49068e8ec389e2ed92b2961f97542fd13aa44ba9139f331be44d787e8baf4a8b5bdc4096da8892b001af592fd98b52c6c64442c27e3cf338b9c6b337d1db55f191f3d641efe3c245edca55aee38e06becbdbc33e1e46ec9af6a3c01ae19432a6a04374d2c64645f32ac0825f661da5fc3b6a3937180a8e4037ba44098cb88de976e2017f468f0ce9536753b268cb1c20eab14e84517d6a3e5056c78d83001748117e1aa55c066a2ff6fd6271cfe8efd0982646373dbcfb7fb3669a18a108d2a0af83e28f31949f302c1a0fd425f3bab12a1f8b8105d1dc72f7ac67dd929b80285677d149be7f53f852ab2ea484a90cf9383425d3a396fe123cf4899094281d17f0c1f2a7f017b214d268d64fb388a8820503d091c1a4e1f51b791a59e4e7a730f2b014510b26184a356063822d018b98a96fa4d1afbac20eb773ee5c43fcd54418f4ce754f3862634b7f930ce30be8361ac4df6cfd5b50295b743748dea8bea366b2ce8c2ea122c1bcd2ea4d88071b37f8c875f54bd8a46c13059d31dda3f1da9ba2a15fb7f4df8a01a62ea110e369b40096608a945bc868428638ebdc4819bc93a5bf5bb4b55d13c8ed439db364231c63afb2182218029ce951f282691b6e6b0a9962485c66637db3a31c59830dff034100227993ace43e5cb7d072a13a59318815bc35da4c800e5dfd76c0559a19ce9c298fcd1f16b968590a33526b485b8acb1319753b42e7f70d8d406dd597e998226ea87d429ca012606f429b8241884bed5d1b0d4ff1d75ee6a216e7a25146e9c106d5169828de46fd0e867d030a5b854825d577c9c57ee025bfe33e06284947f76e5f06c7348455b64914475eea1b213ca953a2e6d048f2ebe183cead0e79e947b26bd21b51bd070f254175ecc2927714495f508dde88a60b6c3576bd206ab82ede651f9cab3d9950b4ddf07c76e50ba7d6d8506e6691a622a8252c69e2f6e58856d3cd92a15053b798f82531f61ad35fe872785e780b3d6d6ba158900f17a9d543c07a42eaa69b37f7bc990200f775f5528f790890964795a07a494dbd5b33f2d69a0db3447ae055257af9d07cd23b3ca6deebc37946a065bb7c034b4b28e3b1115a573226b2ab5da795e176b848991c14edea11d1ccdc3c6043689f4cf2a26b78ee10ef2c64cf0b4e8fa9832289ad6192409395ec2130e22ba31b16100393c97e09891eb7d7abe4af40776613403a19ea165f2e794966be8c88c7d0077c10251d4b2547d8d5546bf64b78a6543f7ca95c13670833abf26762a77e87786b3be6b92b0f1b4fdd4029f9c87963926483bcfd43b4580f1e8908e3c1c10c54bd0fd07733d5abce9ffd2a59e0f3c528866d9856e3027eb5630d26a1d6702c5d3e139bc5ddce50f2d42e330aad8efc91e9a35c76a3787f1264b83156a8dd7c7bc4f80c55dd23c4c108d8cdd", "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"}, [0x9, 0x19e5b38f, 0x800000000000, 0x7f, 0xeb3, 0x2, 0x2, 0x2, 0x9, 0x6375, 0x7ff, 0x9, 0x9, 0x9ff, 0x3, 0xa, 0x6, 0x7fffffffffffffff, 0x7fffffff, 0x9, 0x20, 0x8, 0x8, 0x58, 0x6, 0x10, 0x7, 0x0, 0x0, 0x100000000, 0x1, 0x6, 0xffff, 0x5e30, 0x7ff, 0x5, 0x5, 0x3, 0x4800000000000, 0x81, 0x8000000000000001, 0x7, 0xc13f, 0x9, 0x5, 0x9, 0x10dcbfc1, 0x8000000000000000, 0x80000000, 0x40, 0x0, 0xfffffffffffffffc, 0x7fffffffffffffff, 0x8, 0xdc, 0x3, 0x71, 0x9, 0x0, 0x1, 0x7, 0xffff, 0x7, 0x1]}) 1m40.464290616s ago: executing program 2 (id=7797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x9, 0x80, 0x941, 0x6, 0x1005, 0x4, 0x4, 0x0, 0xfffffdfffffffffd], 0xb000, 0x84340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x80000) r5 = fcntl$dupfd(r3, 0x406, r4) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x2011}) kcmp$KCMP_EPOLL_TFD(r6, r6, 0x7, r5, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x20004}) prctl$PR_SCHED_CORE(0x3e, 0x20000000000001, r6, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, 0x0) 1m38.955808202s ago: executing program 2 (id=7804): mkdir(&(0x7f0000000040)='./cgroup/../file0/file0\x00', 0x4) (async) syz_usb_connect(0x2, 0x34, 0x0, 0x0) mkdir(0x0, 0x0) (async, rerun: 32) unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0/file0\x00', 0x200) (rerun: 32) set_mempolicy(0x2, 0x0, 0x5) (async) io_setup(0x66, &(0x7f0000000400)) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x13) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x794, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}}, 0xe8) (async, rerun: 64) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async, rerun: 64) close_range(r2, 0xffffffffffffffff, 0x0) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r5 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m38.628857603s ago: executing program 2 (id=7806): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0xb27) r1 = syz_open_pts(r0, 0x141601) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x19) r2 = syz_clone(0x180000, 0x0, 0xfffffefb, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) syz_pidfd_open(r2, 0x0) socket(0xa, 0x5, 0x7fff) 1m38.555838004s ago: executing program 2 (id=7807): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0}) r2 = socket(0x2d, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffff, 0xee}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) io_uring_setup(0x61df, &(0x7f0000000140)={0x0, 0x417b, 0x40, 0x8001002, 0x3d7}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c0002800800", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r5 = open_tree(r3, &(0x7f00000000c0)='./file0\x00', 0x0) fchdir(r5) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200011900000000000000000a00aa"], 0x26}}, 0x0) 1m38.319006461s ago: executing program 2 (id=7808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x2, 0x10, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0xff, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9eb, 0x4, 0x9, 0x19}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x8, 0x3e, 0xf7, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x48, 0x5, 0xeb, {0x8, 0x25, 0x1, 0x80, 0xc, 0x8, 0x2}}}}}}}}]}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000100), 0x8000000000000000, 0x8000) 1m37.56145243s ago: executing program 2 (id=7812): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b063d, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, &(0x7f0000000040)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="c55500000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x80000021) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605000000000000000000070000000000020073797a31000000000500010006000000050005000200000005f6030002000000100003006269746d61703a706f7274000000040003000000"], 0x64}}, 0x44041) listen(r3, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = syz_clone(0x81002400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setns(r6, 0x10000000) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="000a050000004100000000"], &(0x7f0000000e00)={0xa1, 0x1, 0x400, "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"}, 0x0}) 1m37.325055503s ago: executing program 34 (id=7812): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b063d, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, &(0x7f0000000040)) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[@ANYBLOB="c55500000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x80000021) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="64000000020605000000000000000000070000000000020073797a31000000000500010006000000050005000200000005f6030002000000100003006269746d61703a706f7274000000040003000000"], 0x64}}, 0x44041) listen(r3, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = syz_clone(0x81002400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setns(r6, 0x10000000) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="000a050000004100000000"], &(0x7f0000000e00)={0xa1, 0x1, 0x400, "9a628911c8e8c0366ce4de4a142ebb969749c2ac362a1b9eb97066c8095e9d42dff27930663fda1431d47bae237ce977e329bf7f2f02b788807f8115d12f6773f3c0b8b949c186dd20e9d22c462ad33c686f3658825cb4b9d5058da0a52b45dad07a95d2dd737170798d00968f33df4cedfdef5e85b4919accd20a848848577f98ee2b7331df84dd00ab4bbc9d69f5d3a84ffa5cfed3d7a04cab22a5efb3ed021e672544a46538fa8dc70f7c28e9580c4ab95a3933af164da41cbb894aafb6342e9467df8b66368cff45b59f79fe70f4ffaea427935b02c78e84bbaeb567be87735ed3e730dbbbc73f566e04bf1f53fc82621853fba7faac18e9722bfa641a10003dbca02ec56fd75ca951856f6edf7f6ebe3adf5b2cfb53887a2b6f4961ac98c5bf8af52d65224e860ba5b93d30843507a81126fb8f78845c54230bb64b49be3781ebe6dd5fa1aca3e54095577531dc9982e5c03c908318c881ee5948d4bd7b68a9d4320b6d259eeec791fa3beaf555036394602467ccda84e252cb2a853b349bb8fc8d75fc36f2983124927f4b5710c026895edc2050e301b72c94d06a77b2cb5be05c8d508d481e68253c8032e73d311eab72e3d3edd9409a9a9100eaf5da6cdc6b1ebf1f31f93d440deaac9fb51c5297bfa674e38a22291b6c3992a950d83a5e9cab83957725be8e0f962576280c5a8d1256e0f881a47a466dddc44929f1c08adab22e3cd1aae93b08a0a4e6656cb51f342fd69ff9fb273db657cc4ad6ebe9b6b25580741850c5f27933a632435d4b2950a3a5910aae55e52319c66a415d7297b541693af189b9f350462b93b201677d0865b83d9d1ef592ce5af4f492cc3e2393ada8fcc7f0fca7cb0287036a54c52b550a5c260bdf0f548f9a59d92dd5477d93fba0fe7bfdaf0090754714fd1e5d5b382b8f2d84b6711947f6c2e6bf4bd079dfd32062fd70cdd4e472bfa4a6df2101b462b9410a624dab09cb68c60cb7b7c6f189e655436766403029c4df37e3d75c3bf1d350bafecb48c99532041f4d0a7e0af185f9c08acd75d709a3887df92834ba9a7e5b35c4d0e133fe49127847737fd2b6bb18f30f6c89c295c71d5573ab1ac30d61448a76c7a5c452505b1a93011dfebf950d2cf940dddc30563d3ed5998dde45b1833ba6d480a12e9a64bab7bb1e10817e60594904c4e9e2381966c3c08aebb0e964e609732c1e4aaa46a3b23e231e362a2815f9c746183dc8d374018b7902efd9a4504f6a28161563349c30134f21836f7f7492eab40dcccadd0f347d59a48e8a1983d852d20b47c191d335a04841168b30d9279cb1ae9e6cf4c359cdb5391b64a37bc6f1bc2d2c477d1f0f88f634bfd0dedff829dea545b65d1b101b4c2715f0b230c849b90b5aafff13d39cd4e9b0ed0a435230f0da48e18a15df7494dce711d6dcc142f90aa8731a3a48"}, 0x0}) 14.265550325s ago: executing program 7 (id=8140): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) futex(0x0, 0x9, 0x4, 0x0, 0x0, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900010000000000000000008020000000040005000000006f000f005f0b0000"], 0x24}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x4f89, 0xe0400) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f00000000c0)) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) io_uring_enter(r3, 0x707f, 0x62e7, 0x20, &(0x7f00000002c0), 0x8) fcntl$setlease(r3, 0x400, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000002200)={0x2, 0x0, &(0x7f0000000180)=""/65, &(0x7f0000000200)=""/131, &(0x7f0000001200)=""/4096, 0x9000}) 14.220667911s ago: executing program 7 (id=8141): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) gettid() write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000500)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @flat=@handle={0x73682a85, 0x1000, 0x1}, @flat=@handle={0x73682a85, 0x1}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) write(r0, &(0x7f00000000c0)="1c0000001ad6", 0x6) 14.040622749s ago: executing program 7 (id=8142): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000000)={0x0, 0x8, 0x1, "0e"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000040)={0x0, 0x73, 0x1, '('}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000380)={0x0, 0x8}, 0x8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 11.820601941s ago: executing program 1 (id=8154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000003c0)={'ip6_vti0\x00', 0x400}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x6fa0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x2180}, [@IFLA_TXQLEN={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10.985994085s ago: executing program 7 (id=8158): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c, 0x0}, 0x40054) sendto$inet6(r2, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x3, 0x8000, @private2, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4004, r7, 0x2}) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r9, &(0x7f0000004500)={0x2020}, 0x2020) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) shutdown(r2, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) close(r1) 10.117156381s ago: executing program 5 (id=8161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010800000000000000000000fffd140007800800114000000008050015000c0900000500010006000000050005000a00000005000400000000000900020073797a300000000015000300686173683a69702c706f7274"], 0x64}}, 0x82) (async) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f00000004c0)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x6}, @phonet={0x23, 0xf7, 0x8, 0x4}, @qipcrtr={0x2a, 0x1, 0x3fff}, 0xff64, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)='erspan0\x00', 0x21e8, 0x7, 0x5}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 9.810279885s ago: executing program 6 (id=8162): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) mlockall(0x2) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5000) socket(0x10, 0x3, 0x0) shmat(r2, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff) syz_open_dev$video(0x0, 0x9, 0x1e3a00) 9.765413443s ago: executing program 5 (id=8163): mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x150, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0xbc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1fc}}, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x0, 0x0) 9.056047615s ago: executing program 6 (id=8164): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x1, 0xa, 0x7ff00003}]}) socket$kcm(0x2c, 0x3, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000001c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1b3e363bbf2c217ecfdb5b4fb10079d6223434dc557af0246bbc877402898293864d4a7862925c7b71d85438dbacda5e935d970b12dd3288f2d18360081690ecf096517eae0cfdc7f99a1f670017007dae3d10c406c635c71e3b6450568c8db58027ae45f777ee1a581bfcd1f9928a33d8abccc0c75d1d5623d827871489f0f791b089c67c640982fd257f655621b5ce4c0f0df8abad85aa29354acfbf5c37d8257b1452c9f8fce5f51334d66a40c83d692897135aaf3c38e6bd0964c9b9e39c58d9091a19281f7c64be9cbc85f573897db335d300"/228, @ANYRES16=r4, @ANYBLOB="010328bd7000000000000100000008000100630000000c0099000200000004000000"], 0x28}}, 0x44) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x1, 0xc002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r6, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000480)={0x3c, r8, 0xb97534d5fe9704cf, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40488c4}, 0x24000000) 6.013398745s ago: executing program 6 (id=8165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffff, 0x2}, 0xc) writev(r3, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) unshare(0x100000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x100, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)={0x149842}, 0x68) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000002f40)=[{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000700)="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", 0x901}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x200c0010) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xa}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 4.568841404s ago: executing program 5 (id=8167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x8, [0xc, 0x9, 0x5, 0xa, 0x10, 0x2, 0x6, 0x2, 0x8, 0x5, 0x3, 0xa, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x0, 0x6, 0xd03, 0xff02, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x4, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f0000000180)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="3800ffff", @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 4.567065184s ago: executing program 7 (id=8168): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20040491) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = eventfd(0x1) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="10409418000032129f21a172ed6e4a2a14187c5fbaa3878e602bfd9d2a5c526b9bb55ff4e46a5b1614c8aec946ab5a5fda0b1c34964cdc12d4d1c739f11a673c6a6326d0fb67726d8e09f700095e2b7622358b7673d75b2600cb402fc15637292ece77abe0f29d404fb349acbb7446b4ed5746ac755df0459c34385003922d0ab1ac64ec880248053d76293036b2cba695c1c9a79e04d62b2afb19205df5484c8106146032afe5232ab2c58ee5ae807dce4379170d8ce27191b3732a3f695699", @ANYRES32, @ANYBLOB="030000000000000000972a6e46df4beb65a8d3210ba4ea9eef00284a0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) timer_create(0x1, &(0x7f00000001c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000), 0x8) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) r7 = epoll_create1(0x80000) r8 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)={0x0, 0x6, 0x26, {0x26, 0x8, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f545cb92e449c42123ec"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80387, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) timer_delete(r4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) 4.540389519s ago: executing program 1 (id=8169): syz_usb_connect$uac2(0x5, 0x97, 0x0, 0x0) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x400800, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], 0x7, 0x6, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000480)=r1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r2, 0x40096101, &(0x7f0000000680)={{}, 0xc6}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r3, 0x2, {0x0, 0xf0, 0x1}, 0x1}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r4, &(0x7f0000000980)=[{&(0x7f0000000240)=""/95, 0x5f}], 0x1) openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4.316090686s ago: executing program 0 (id=8170): r0 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 4.315634611s ago: executing program 6 (id=8171): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000009c0)={{0xffffffffffffffff, &(0x7f0000000580)='[\x87:\x00', 0xd0000, &(0x7f00000005c0)={@align=0x2, {0x0, 0x1000, 0x1, 0x46}}, 0x0, &(0x7f0000000840)={@_ha_fsid}, &(0x7f0000000880)=0x4}, {[0xe71, 0x5, 0xb, 0x9f3]}, 0x8, 0xdf, &(0x7f00000008c0)=""/223}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r0, 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2e, 0x48, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xadca, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xfffffffffffffd88, &(0x7f0000000a40)=@new_dev={0x4, 0x6e8, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x1ba}}}, &(0x7f0000000200)) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000007c0)={{'\x00', 0x1}, {0x9}, 0x24, 0x0, 0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)="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", 0x1d1, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/350], 0x15e}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000440)={0x0, @sdr={0x34565559, 0x8}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x78bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r12 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r12, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f903, 0x0, '\x00', @string=0x0}}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 4.129345537s ago: executing program 0 (id=8172): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r6, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x670, 0xf3, 0x2, 0x10, 0xfffffff8, 0x6, 0x7, 0x7f, 0x27, 0x3e, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1460, 0x10700, 0x0, 0xb2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xafd4, 0x4000, 0x8000001, 0x3ab, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0xa, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x21af, 0x10, 0x2, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfbee, 0x5200, 0x2, 0x821b, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 3.648636318s ago: executing program 5 (id=8173): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044890) r0 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x6, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a30000000002c0003801800038014000100776c616e310000000000000000000000080002400000d250080001400000000014000000110001"], 0x80}}, 0x20000084) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000020900020073797a30000000000900010073797a30000000002c0003800800014000000000180003801400010076657468305f766c616e0000000000000800024000000004140000001100010000000000000000000000000a69b756f7c1057cd18f908dfdd429540053719e80a723363c4f6308a1d7b71033ab53bba15db6bea7ab0360a9e36b27161daad3a9beeb830840d792104fb2e8ca2b8b3025e56f75ccf9dec186bb"], 0x80}}, 0x0) close(0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_usb_connect$cdc_ncm(0x7, 0xaf, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x97, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9d, 0x2, 0x1, 0x2, 0x60, 0x4, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "9ef5fe"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xd852, 0x8001, 0xff, 0x9}, {0x6, 0x24, 0x1a, 0x2, 0x12}, [@country_functional={0x12, 0x24, 0x7, 0xff, 0x8f, [0x690, 0x2, 0x0, 0xf78b, 0x0, 0x100]}, @mdlm={0x15, 0x24, 0x12, 0x9}, @obex={0x5, 0x24, 0x15, 0x4f}, @obex={0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @mbim_extended={0x8, 0x24, 0x1c, 0x401, 0x4, 0xe2a}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x8, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0xf, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x2, 0x8, 0x9}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0x71, 0x6, 0x4, 0x10, 0xe}, 0x1d, &(0x7f0000000740)={0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x7, 0x8, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x3, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x2, 0x7, 0x6}]}, 0x4, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xfe, &(0x7f00000007c0)=@string={0xfe, 0x3, "5409e56fc2aa22dbd504337f243bff67391a6d9d59c65474dd5fa9c12a6265abe9a4e7c7c3d951dc1d4c5fcf148781fafe363a031c2aa64e25bae934e21ae0c004e7ecbe5808d8f5b5b0857c088662f82385ec9c396ce192f2ed02008826993e4cec803ea3e3b0e57812deae57456cbf18b3f265bb895716b56b46345df9d481c71dc1997709317802da1f2be12cdf87fce0f4281e0929e67a4fe7ef5664d646bd77f577cb69dd6b916c8600c9b9867e4b20f09e60a93a6ad3e36f1ac9d0aa3cd6f7b77c728ecce4969fa3d4cc0266b4aa5151f0fee11a04bcaecaa8ba213548a61cbaf12ddb21fbf6f5d6c569c739cbde0fe86a9ab794aec7df0431"}}, {0x7a, &(0x7f00000008c0)=@string={0x7a, 0x3, "db5e6d6eb765d4847e8e4c200cb6c4e4be6472f0eab5eec1d0d37fb69a7c4282298435cdd261bd2d66e14e638fc4a34092ab81cd9a4d5f52fac290f4dffe3695552327d80f9d94af64a219c79a6843a54881a3bba7c653d32fc311eb8b90cfd5c832a40f0c643995cf0f02f5add0f36ad134492b2072b1bf"}}, {0x63, &(0x7f0000000940)=@string={0x63, 0x3, "35f915cb38f75eeefea7eaa331c176c56a588f20a1f05a1fae44842e37e01623a57cc762da8ff95ea3d3d221dcdaf835d2b6695fdd8b5277ebaf0d1ae350d21e2d0f872dc43e9ad376a2d69737debff3aeb5d9a64bdec8ef7e4177fc163d4834ef"}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000ac0)={0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="003005000000e485000001"], &(0x7f0000000a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000b00)={0x20, 0xc, 0xbb, "fc2b8f4c91d02057b715732556b3b64f10d6fbec7fb9525db2e9db6460ecf1101eaefeff5f190afeb391f73c3e1630fda7b7e5b1810df3a37a43fad6f56d1a98f66764da659ba5108b21bd6362be5e3df185446e2f5ac62696ef045001d73c98ae2ef16666caa228d8624236278bf708f036cffdd561d917f578d12d57137bdc0eb8fb0d05724fce0ba4a7dd33b7f4140172fa7b19a4f50f5d1bf559e04a1894078daeb328873a3adfbc5d1eaa0774ebe8c62b32cb8465c50fdfda"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0xfa}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c80)={0x20, 0x80, 0x1c, {0x0, 0x1, 0x4, 0x1, 0x6, 0x0, 0x6, 0x0, 0xe, 0xd, 0xe, 0x9}}, &(0x7f0000000cc0)={0x20, 0x85, 0x4, 0x8}, &(0x7f0000000d00)={0x20, 0x83, 0x2}, &(0x7f0000000d40)={0x20, 0x87, 0x2, 0xffff}, &(0x7f0000000d80)={0x20, 0x89, 0x2}}) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000080000000000000000000a20000000000a01010000000000000000010000030900010073797a31000000e13f000000030a010400000000000000000100ffff0900030073797a310000000014000480080002400000000008000140000000050900010073797a3100000000140000001100010000000000040000000700000a28f97b"], 0x88}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$qrtr(r4, &(0x7f0000000380), &(0x7f0000000440)=0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000030900010073797a310000000018010000030a010400000000000000000100ffff0900030073797a31000000002000048008000140000000051400030076657468315f6d6163767461700000000900010073797a3100000000280008"], 0x160}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x0) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffffffe]}, 0x0, 0x8) 3.398448347s ago: executing program 6 (id=8174): unshare(0x400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)}], 0x1) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01"], 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {}, {}, {0x2, 0xfffffffc}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}], 0x12, 0x0, 0x0, 0x8000000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r4 = socket(0x2, 0x80805, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f00000003c0)={r6, 0x1}, 0x8) r7 = socket(0x10, 0x3, 0x9) sendmmsg$unix(r7, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)="6023e713245532df79dc", 0xa}], 0x1, 0x0, 0x0, 0x4044804}}, {{0x0, 0x0, &(0x7f0000002dc0), 0x0, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [r0, r1, r2, r0]}}], 0x20, 0x4000004}}], 0x2, 0x24004800) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xc48b, 0x1, 0x1, 0x8e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 3.191915035s ago: executing program 0 (id=8175): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) r1 = socket(0x10, 0x80002, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x5c}, 0x123) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000200)=0x11, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000400)=[{r4, 0xd}], 0x1, 0xff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8005, &(0x7f0000000000)=0x3f, 0x9, 0x0) set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0) io_uring_setup(0x1d56, &(0x7f0000000180)={0x0, 0xb182, 0x1000, 0x0, 0x325}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, 0x0, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r9 = getpgrp(0xffffffffffffffff) syz_open_procfs$pagemap(r9, &(0x7f0000000380)) 2.731444872s ago: executing program 5 (id=8176): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x141, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) 2.320929192s ago: executing program 0 (id=8177): mkdir(&(0x7f00000003c0)='./file0\x00', 0x136) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="08cba44fd2217036140000724511"], 0x0, 0x1200) syz_usb_connect$uac3(0x0, 0xb3, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x763, 0x2030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x1, 0xc0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x3d, 0x7}, [@output_terminal={0x13, 0x24, 0x3, 0x5, 0x101, 0x2, 0x2, 0x50, 0x7ff, 0x7, 0x9, 0x1ff}, @source_unit={0xc, 0x24, 0xb, 0x7, 0x1, 0xfffffffc, 0x8, 0x6}, @input_terminal={0x14, 0x24, 0x2, 0x2, 0x100, 0x5, 0x7, 0xb, 0x3, 0x6, 0x2, 0x1ff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x9, 0xd4, 0x84, {0xa, 0x25, 0x25, 0x0, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x210, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x80000000, 0x5, 0x9}}}}}}}}]}}, 0x0) 1.332831602s ago: executing program 1 (id=8178): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c, 0x0}, 0x40054) sendto$inet6(r2, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x3, 0x8000, @private2, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000100)={0x4004, r7, 0x2}) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r9, &(0x7f0000004500)={0x2020}, 0x2020) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) shutdown(r2, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)) close(r1) 1.329082484s ago: executing program 7 (id=8179): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x4, 0x2, 0xff, 0x8, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x80, 0xd750, 0x3}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="b4050000000000007110bf0000000009180000004f27000000000000000800009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcb, &(0x7f0000000480)=""/203, 0x0, 0x0, '\x00', r0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000380), 0x10}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) socket$packet(0x11, 0x3, 0x300) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) recvmsg(r4, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r10 = syz_open_procfs(0x0, 0x0) pread64(r10, &(0x7f0000000080)=""/237, 0xed, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_XDP={0x24, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r9}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xc}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000000800010028bd7000fd08000000000000", @ANYRES32=0x0, @ANYBLOB="8a4301000000000014000300776c616e3000"/28], 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usb_connect$uac2(0x3, 0x8f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027d000301061002080b0100010c200009040000000101200009240180ff071d00040c2403020403050400ff011c08240a04"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 1.135134154s ago: executing program 1 (id=8180): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2082) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) socket$igmp6(0xa, 0x3, 0x2) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.0327719s ago: executing program 1 (id=8181): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000fe8000000000000000000000000000244e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x80c4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x12) rt_sigprocmask(0x2, &(0x7f0000000fc0)={[0x8000000000000000]}, &(0x7f0000001000), 0x8) 780.552672ms ago: executing program 1 (id=8182): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x3f, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080211000000040000a118000200fe8000000000000008000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000080bb9ad809d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bff", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) fcntl$setpipe(r0, 0x407, 0x9) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x41, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000003, 0x204031, 0xffffffffffffffff, 0xb1042000) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x4, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7fffffffffffffff, 0x663, 0x7fffffff}, 0x0, 0x0) syz_usb_disconnect(r2) 367.108824ms ago: executing program 0 (id=8183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x4000000}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 253.490232ms ago: executing program 0 (id=8184): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x6}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) pwritev(r2, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1f, 0xffffff01, 0x2) semop(0xffffffffffffffff, &(0x7f0000000500)=[{0x2, 0x3ff, 0x800}], 0x41) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="16000000", @ANYRES16=r8, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32=r9, @ANYBLOB="0c00990009000000440000000800020001000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x200044c4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYRES64=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x20000d, 0x5, 0x20000}, 0x10, 0xffffffffffffffff}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) 253.138553ms ago: executing program 6 (id=8185): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents(r1, &(0x7f0000000500)=""/198, 0xc6) mknodat$loop(r1, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) syz_usb_connect(0x3, 0x348, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x2, 0x348}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000200)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r3, 0x221d, 0xcf75, 0x37, 0x0, 0x0) 0s ago: executing program 5 (id=8186): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x4ce3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {{0xa, 0x1, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x7, 0x2) kernel console output (not intermixed with test programs): 59 code=0x0 [ 1962.661343][T15857] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1962.674404][T15857] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1962.701377][T15857] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1962.715528][T15857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.730908][T15857] usb 2-1: Product: syz [ 1962.739279][T15857] usb 2-1: Manufacturer: syz [ 1962.749430][T15857] usb 2-1: SerialNumber: syz [ 1962.760348][T15857] usb 2-1: config 0 descriptor?? [ 1962.774829][T15857] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1963.620286][ T2055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.642424][ T2055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1963.691656][ T2031] binder: 2030:2031 ioctl c0306201 2000000003c0 returned -14 [ 1964.009500][T24905] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 1964.066373][T15857] gspca_sunplus: reg_r err -110 [ 1964.071355][T15857] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1964.469370][T24905] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 1964.507154][T24905] usb 3-1: config 0 has no interface number 0 [ 1964.514721][T24905] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1964.532555][T24905] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1964.545990][T24905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1964.556895][T24905] usb 3-1: Product: syz [ 1964.562397][T24905] usb 3-1: Manufacturer: syz [ 1964.567296][T24905] usb 3-1: SerialNumber: syz [ 1964.578619][T24905] usb 3-1: config 0 descriptor?? [ 1965.015911][T15857] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1965.092551][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.123158][ T2071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.149596][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.179041][ T2071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.205733][T15857] usb 6-1: Using ep0 maxpacket: 32 [ 1965.227005][ T2056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.237128][T15857] usb 6-1: config index 0 descriptor too short (expected 6701, got 45) [ 1965.255746][T15857] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.278354][ T2056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.294317][T15857] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1965.313419][T15857] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1965.328184][T15857] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1965.334962][T15857] usb 6-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 1965.362755][T15857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1965.412694][T15857] usb 6-1: config 0 descriptor?? [ 1965.553826][T24905] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 1965.586008][ T8603] usb 2-1: USB disconnect, device number 53 [ 1965.642600][T24905] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 1965.679921][T24905] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 1965.725404][T24905] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 1965.751378][T24905] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1965.790044][T24905] usb 3-1: USB disconnect, device number 13 [ 1965.822360][T24905] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1965.832984][T24905] keyspan 3-1:0.133: device disconnected [ 1965.879042][T15857] logitech 0003:046D:CA03.0088: unknown main item tag 0x0 [ 1965.912629][T15857] logitech 0003:046D:CA03.0088: unknown main item tag 0x0 [ 1965.942240][T15857] logitech 0003:046D:CA03.0088: unknown main item tag 0x0 [ 1965.970400][T15857] logitech 0003:046D:CA03.0088: unknown main item tag 0x0 [ 1966.004028][T15857] logitech 0003:046D:CA03.0088: unknown main item tag 0x0 [ 1966.015955][T17762] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1966.041620][T15857] logitech 0003:046D:CA03.0088: unknown main item tag 0x0 [ 1966.049996][T15857] logitech 0003:046D:CA03.0088: unknown main item tag 0x0 [ 1966.073254][T15857] logitech 0003:046D:CA03.0088: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.5-1/input0 [ 1966.105182][T15857] logitech 0003:046D:CA03.0088: no inputs found [ 1966.189296][T17762] usb 1-1: device descriptor read/64, error -71 [ 1966.566759][T17762] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1966.574473][T15857] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1966.614064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.625538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.695707][T15857] usb 2-1: device descriptor read/64, error -71 [ 1966.702111][T17762] usb 1-1: device descriptor read/64, error -71 [ 1966.816614][T17762] usb usb1-port1: attempt power cycle [ 1966.945736][T15857] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1967.085709][T15857] usb 2-1: device descriptor read/64, error -71 [ 1967.155775][T17762] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1967.176692][T17762] usb 1-1: device descriptor read/8, error -71 [ 1967.197284][T15857] usb usb2-port1: attempt power cycle [ 1967.415731][T17762] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1967.436501][T17762] usb 1-1: device descriptor read/8, error -71 [ 1967.535733][T15857] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1967.546182][T17762] usb usb1-port1: unable to enumerate USB device [ 1967.556487][T15857] usb 2-1: device descriptor read/8, error -71 [ 1967.709444][ T2098] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7763'. [ 1967.775522][ T8601] usb 6-1: USB disconnect, device number 115 [ 1967.798044][T15857] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1967.866464][T15857] usb 2-1: device descriptor read/8, error -71 [ 1967.969694][T23010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1967.996218][T15857] usb usb2-port1: unable to enumerate USB device [ 1968.070927][ T2107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7767'. [ 1968.212633][ T2114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7766'. [ 1968.252849][ T2113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1968.335575][ T2113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7768'. [ 1968.345087][ T2113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7768'. [ 1968.377409][ T2113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7768'. [ 1968.404464][ T2113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7768'. [ 1968.511838][ T2113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7768'. [ 1968.521018][ T2113] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7768'. [ 1968.678064][T15857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.137020][ T2132] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1969.157816][ T2130] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7771'. [ 1969.181457][ T8601] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1969.189734][T23013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.528239][ T2144] netlink: 'syz.5.7775': attribute type 21 has an invalid length. [ 1969.709283][ T2155] syzkaller0: entered promiscuous mode [ 1969.715100][ T2155] syzkaller0: entered allmulticast mode [ 1969.747982][T15857] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1969.784288][ T2155] syzkaller0: left allmulticast mode [ 1969.796875][ T8586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.850862][T16047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1969.956264][T15857] usb 2-1: Using ep0 maxpacket: 16 [ 1969.971964][T15857] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1969.983513][T15857] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1969.994872][T15857] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1970.016688][T15857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.035703][T15857] usb 2-1: Product: syz [ 1970.040135][T15857] usb 2-1: Manufacturer: syz [ 1970.044972][T15857] usb 2-1: SerialNumber: syz [ 1970.081392][T16047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1970.108275][T15857] usb 2-1: config 0 descriptor?? [ 1970.367109][T15857] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input176 [ 1970.520200][ T8601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 1970.532417][ T8601] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25888, setting to 1024 [ 1970.543670][ T8601] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1970.556939][ T8601] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1970.566089][ T8601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.577259][ T8586] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1970.577373][ T8601] usb 3-1: config 0 descriptor?? [ 1970.613063][ T2171] binder: 2170:2171 ioctl c0306201 2000000003c0 returned -14 [ 1970.627825][ T2131] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1970.641875][ T2171] binder: BINDER_SET_CONTEXT_MGR already set [ 1970.649374][ T2171] binder: 2170:2171 ioctl 4018620d 200000000100 returned -16 [ 1970.735806][T15857] rc_core: IR keymap rc-imon-pad not found [ 1970.741924][T15857] Registered IR keymap rc-empty [ 1970.763842][T15857] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1970.774592][T15857] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1970.845785][ T8586] usb 1-1: Using ep0 maxpacket: 16 [ 1970.866166][ T8586] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1970.888324][ T8586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1970.914053][T15857] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1970.928971][ T8586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1970.943043][ T8586] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1970.959947][T15857] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input177 [ 1970.974040][ T8586] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1971.003587][T15857] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:58> initialized [ 1971.018410][ T8586] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1971.102783][ T8586] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1971.138774][ T8586] usb 1-1: Manufacturer: syz [ 1971.210053][ T8586] usb 1-1: config 0 descriptor?? [ 1971.418026][ T8601] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1971.628636][ T2177] net_ratelimit: 146 callbacks suppressed [ 1971.628660][ T2177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1971.679010][ T8586] rc_core: IR keymap rc-hauppauge not found [ 1971.685318][ T8586] Registered IR keymap rc-empty [ 1971.691383][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1971.746923][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1971.765540][ T2178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1971.798313][ T8586] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 1971.815928][ T2178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1971.826085][ T2178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1971.851311][ T8586] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input178 [ 1971.903552][ T2178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1971.946293][ T2178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.006128][ T2178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.014624][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1972.029956][T15857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.060088][ T2178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.076159][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1972.136116][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1972.149156][ T2178] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.186056][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1972.249934][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1972.295901][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1972.357086][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1972.406699][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1972.475998][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1972.525867][ T8586] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1972.627708][ T8586] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1972.665669][ T8586] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1972.695877][ T8586] usb 1-1: USB disconnect, device number 29 [ 1972.792978][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1972.800999][T24906] usb 2-1: USB disconnect, device number 58 [ 1973.282097][T24905] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1973.417379][T24905] usb 6-1: device descriptor read/64, error -71 [ 1973.606195][ T8601] usb 3-1: USB disconnect, device number 14 [ 1973.763569][T24905] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1974.109389][T24905] usb 6-1: device descriptor read/64, error -71 [ 1974.338271][T24905] usb usb6-port1: attempt power cycle [ 1974.450760][ T2224] binder: 2223:2224 ioctl c0306201 2000000003c0 returned -14 [ 1974.773647][ T8601] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1974.781473][T24905] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1974.910553][T24905] usb 6-1: device descriptor read/8, error -71 [ 1975.005876][ T8601] usb 1-1: device descriptor read/64, error -71 [ 1975.156283][T24905] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1975.187351][T24905] usb 6-1: device descriptor read/8, error -71 [ 1975.217099][ T30] audit: type=1326 audit(1781515293.837:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2238 comm="syz.2.7797" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe273b9ce59 code=0x0 [ 1975.245847][ T8601] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1975.322006][T24905] usb usb6-port1: unable to enumerate USB device [ 1975.372286][ T2240] kvm: pic: non byte write [ 1975.447067][ T8601] usb 1-1: device descriptor read/64, error -71 [ 1975.553651][ T8601] usb usb1-port1: attempt power cycle [ 1975.970067][ T2245] fuse: Unknown parameter ':' [ 1975.981802][ T8601] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1976.006635][ T8601] usb 1-1: device descriptor read/8, error -71 [ 1976.150631][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.157263][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.246185][ T8601] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1976.324191][ T30] audit: type=1326 audit(1781515294.917:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2250 comm="syz.6.7801" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbd1559ce59 code=0x0 [ 1976.375527][ T2249] __nla_validate_parse: 2 callbacks suppressed [ 1976.375548][ T2249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7800'. [ 1976.392813][ T2249] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7800'. [ 1976.403625][ T2249] syzkaller0: entered promiscuous mode [ 1976.409360][ T2249] syzkaller0: entered allmulticast mode [ 1976.481076][ T8601] usb 1-1: device descriptor read/8, error -71 [ 1976.526265][T24905] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1976.596856][ T8601] usb usb1-port1: unable to enumerate USB device [ 1976.685982][T24905] usb 6-1: Using ep0 maxpacket: 32 [ 1976.707115][T23009] net_ratelimit: 24 callbacks suppressed [ 1976.709924][T23009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1977.035428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1977.043918][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1977.052777][ T8601] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1977.193645][ T2272] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7807'. [ 1977.317353][T15857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1977.398278][T24905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1977.412741][T24905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1977.422533][T24905] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1977.431842][T24905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1977.443743][T24905] usb 6-1: config 0 descriptor?? [ 1977.598098][T24905] hub 6-1:0.0: USB hub found [ 1977.709362][ T8601] usb 2-1: Using ep0 maxpacket: 8 [ 1977.745515][ T2274] netlink: 'syz.0.7809': attribute type 1 has an invalid length. [ 1977.782156][ T2274] bond6: (slave geneve3): making interface the new active one [ 1977.790337][ T2274] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 1977.799115][T23010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1977.809131][T23010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1977.816931][T24905] hub 6-1:0.0: 1 port detected [ 1977.824642][T23010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1977.824762][ T2274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7809'. [ 1977.843344][T23010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1977.896545][ T2278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7810'. [ 1977.985970][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1977.996171][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1978.033263][T23010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1978.048481][ T8601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1978.086953][ T8601] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1978.131709][ T8601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.165628][ T8601] usb 2-1: config 0 descriptor?? [ 1978.426574][T15857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1978.511203][ T1251] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1978.533926][ T1251] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1978.552343][ T1251] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1978.562237][ T1251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1978.571395][ T1251] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1978.602633][ T8601] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1978.711599][ T8603] hub 6-1:0.0: activate --> -90 [ 1978.921711][ T2247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1979.021098][T15857] usb 2-1: USB disconnect, device number 59 [ 1979.032740][ T2247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1979.136027][ T2289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.143533][ T2289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.176496][ T2289] bridge_slave_0: entered allmulticast mode [ 1979.185596][ T2289] bridge_slave_0: entered promiscuous mode [ 1979.195019][ T2289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.202642][ T2289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.209999][ T2289] bridge_slave_1: entered allmulticast mode [ 1979.218196][ T2289] bridge_slave_1: entered promiscuous mode [ 1979.262013][ T2289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1979.269400][T23010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1979.293755][ T8601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1979.306788][ T2289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1979.353373][ T2289] team0: Port device team_slave_0 added [ 1979.363203][ T2289] team0: Port device team_slave_1 added [ 1979.429751][ T2289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1979.436850][ T2289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1979.465495][ T2289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1979.479416][ T2289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1979.507453][ T2289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1979.551719][ T2289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1979.566825][ T2301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1979.603544][ T2289] hsr_slave_0: entered promiscuous mode [ 1979.610459][ T2289] hsr_slave_1: entered promiscuous mode [ 1979.639683][ T2303] fuse: Unknown parameter '00000000000000000005' [ 1979.766705][ T2305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7816'. [ 1979.887216][ T2247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1979.901091][ T2247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1979.985909][ T8586] usb 6-1: USB disconnect, device number 120 [ 1979.991182][ T2289] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1980.015528][ T8603] hub 6-1:0.0: hub_ext_port_status failed (err = -71) [ 1980.023078][ T8603] usb 6-1-port1: connect-debounce failed [ 1980.072013][ T2289] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1980.080288][ T2289] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1980.091170][ T2289] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1980.102717][ T2289] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1980.117115][ T2316] binder: 2312:2316 ioctl c0306201 2000000003c0 returned -14 [ 1980.131730][ T2289] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1980.140299][ T2289] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1980.152188][ T2289] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1980.277913][ T2289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1980.310124][ T2289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1980.318845][ T2327] loop5: detected capacity change from 0 to 4095 [ 1980.329496][T23010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.336907][T23010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1980.381170][T23010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1980.388464][T23010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1980.629606][ T5639] Bluetooth: hci3: command tx timeout [ 1980.650996][ T2334] syzkaller0: entered promiscuous mode [ 1980.665841][ T2334] syzkaller0: entered allmulticast mode [ 1980.701403][ T2289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1980.726978][ T2334] syzkaller0: left allmulticast mode [ 1980.847526][ T2289] veth0_vlan: entered promiscuous mode [ 1980.882442][ T2289] veth1_vlan: entered promiscuous mode [ 1980.983839][ T2289] veth0_macvtap: entered promiscuous mode [ 1980.998111][ T2289] veth1_macvtap: entered promiscuous mode [ 1981.038638][ T2289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1981.072431][ T2289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1981.111044][T21215] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.128144][ T2342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7822'. [ 1981.135354][T21215] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.171476][T21215] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.251757][T21215] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.424457][T11669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.467756][T11669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.512920][T23009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.520883][T23009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.841819][ T30] audit: type=1326 audit(1781515300.457:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2349 comm="syz.1.7827" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8861f9ce59 code=0x7ffc0000 [ 1981.890822][ T30] audit: type=1326 audit(1781515300.457:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2349 comm="syz.1.7827" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f8861f9ce59 code=0x7ffc0000 [ 1981.945687][ T30] audit: type=1326 audit(1781515300.457:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2349 comm="syz.1.7827" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8861f9ce59 code=0x7ffc0000 [ 1981.980542][ T2355] loop3: detected capacity change from 0 to 3527 [ 1981.985658][ T30] audit: type=1326 audit(1781515300.457:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2349 comm="syz.1.7827" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8861f9ce59 code=0x7ffc0000 [ 1982.036410][ T30] audit: type=1326 audit(1781515300.457:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2349 comm="syz.1.7827" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8861f9ce59 code=0x7ffc0000 [ 1982.051366][ T2355] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 1982.066202][ T2355] loop3: partition table partially beyond EOD, truncated [ 1982.099558][ T2359] syzkaller0: entered promiscuous mode [ 1982.099695][ T30] audit: type=1326 audit(1781515300.457:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2349 comm="syz.1.7827" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8861f9ce59 code=0x7ffc0000 [ 1982.117618][ T30] audit: type=1326 audit(1781515300.457:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2349 comm="syz.1.7827" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8861f9ce59 code=0x7ffc0000 [ 1982.147225][ T2355] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 1982.167601][ T2359] syzkaller0: entered allmulticast mode [ 1982.372200][T16047] net_ratelimit: 7 callbacks suppressed [ 1982.372221][T16047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1982.648451][T24906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1982.670762][ T2362] binder: 2361:2362 ioctl c0306201 2000000003c0 returned -14 [ 1982.756518][ T5639] Bluetooth: hci3: command tx timeout [ 1982.824186][ T1772] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1982.868324][ T2368] netlink: 'syz.7.7833': attribute type 89 has an invalid length. [ 1982.891626][ T2368] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7833'. [ 1983.005683][ T2367] syzkaller0: entered promiscuous mode [ 1983.011522][ T2367] syzkaller0: entered allmulticast mode [ 1983.055402][ T2367] syzkaller0: left allmulticast mode [ 1983.106558][T24906] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1983.267389][T24906] usb 6-1: Using ep0 maxpacket: 32 [ 1983.295000][T24906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1983.318745][T24906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1983.331510][T24906] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1983.395715][T24906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1983.416067][ T2376] tipc: Enabled bearer , priority 0 [ 1983.442484][T24906] usb 6-1: config 0 descriptor?? [ 1983.465965][ T2376] syzkaller0: entered promiscuous mode [ 1983.471864][ T2376] syzkaller0: entered allmulticast mode [ 1983.553613][ T2381] tipc: Resetting bearer [ 1983.612662][ T2381] bond_slave_1: Caught tx_queue_len zero misconfig [ 1983.667444][T17762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1983.834760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1983.843504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1983.920616][T24906] savu 0003:1E7D:2D5A.008A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1983.992196][ T2374] tipc: Resetting bearer [ 1984.007591][T23008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1984.100112][ T2395] "syz.7.7840" (2395) uses obsolete ecb(arc4) skcipher [ 1984.121138][ T2371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1984.146040][ T2371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1984.167348][ T2371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1984.229679][ T2374] tipc: Disabling bearer [ 1984.250200][T24906] usb 6-1: USB disconnect, device number 121 [ 1984.455396][ T2408] binder: 2407:2408 ioctl c0306201 2000000003c0 returned -14 [ 1984.527927][ T2410] batadv_slave_1: entered promiscuous mode [ 1984.535811][ T2409] batadv_slave_1: left promiscuous mode [ 1984.580848][ T2412] bridge3: entered promiscuous mode [ 1984.586266][ T2412] bridge3: entered allmulticast mode [ 1984.593842][ T2412] team0: Port device bridge3 added [ 1984.611765][ T2412] bridge0: port 4(team0) entered blocking state [ 1984.618417][ T2412] bridge0: port 4(team0) entered disabled state [ 1984.625083][ T2412] team0: entered allmulticast mode [ 1984.630331][ T2412] team_slave_0: entered allmulticast mode [ 1984.636590][ T2412] team_slave_1: entered allmulticast mode [ 1984.646911][ T2412] team0: left allmulticast mode [ 1984.651984][ T2412] team_slave_0: left allmulticast mode [ 1984.657625][ T2412] team_slave_1: left allmulticast mode [ 1984.786224][ T5639] Bluetooth: hci3: command tx timeout [ 1984.926397][T16047] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1985.118693][ T2425] QAT: Device 198 not found [ 1985.236114][T17762] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1985.287658][ T2436] syzkaller0: entered promiscuous mode [ 1985.293328][ T2436] syzkaller0: entered allmulticast mode [ 1985.311339][ T2436] syzkaller0: left allmulticast mode [ 1985.399954][T17762] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1985.413096][T17762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1985.416196][T16047] usb 1-1: device descriptor read/64, error -71 [ 1985.425046][T17762] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1985.425080][T17762] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1985.426644][T17762] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1985.471162][T17762] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1985.501455][T17762] usb 6-1: Manufacturer: syz [ 1985.520729][T17762] usb 6-1: config 0 descriptor?? [ 1985.613705][ T2443] binder: 2442:2443 ioctl c0306201 2000000003c0 returned -14 [ 1985.830469][T16047] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1986.040736][ T2459] netlink: 'syz.5.7850': attribute type 33 has an invalid length. [ 1986.049358][ T2459] netlink: 152 bytes leftover after parsing attributes in process `syz.5.7850'. [ 1986.058732][ T2459] `: renamed from team0 (while UP) [ 1986.251190][T17762] usbhid 6-1:0.0: can't add hid device: -71 [ 1986.273719][T17762] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1986.299113][T17762] usb 6-1: USB disconnect, device number 122 [ 1986.481713][T16047] usb 1-1: Using ep0 maxpacket: 16 [ 1986.698445][T16047] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 1986.719509][T16047] usb 1-1: config 252 has no interface number 0 [ 1986.726098][T16047] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 186, setting to 64 [ 1986.866093][ T5639] Bluetooth: hci3: command tx timeout [ 1986.867148][T17762] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1986.930997][T16047] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1986.949266][T16047] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.958598][T16047] usb 1-1: Product: syz [ 1986.963320][T16047] usb 1-1: Manufacturer: syz [ 1986.968880][T16047] usb 1-1: SerialNumber: syz [ 1987.006964][T16047] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1987.025972][T17762] usb 6-1: Using ep0 maxpacket: 16 [ 1987.036278][T17762] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1987.054059][T17762] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1987.065685][T17762] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1987.075776][T17762] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.084059][T17762] usb 6-1: Product: syz [ 1987.092798][T17762] usb 6-1: Manufacturer: syz [ 1987.097836][T17762] usb 6-1: SerialNumber: syz [ 1987.111302][T17762] usb 6-1: config 0 descriptor?? [ 1987.204128][T11669] usb 1-1: Failed to submit usb control message: -71 [ 1987.204920][T16047] usb 1-1: USB disconnect, device number 35 [ 1987.212228][T11669] usb 1-1: unable to send the bmi data to the device: -71 [ 1987.212277][T11669] usb 1-1: unable to get target info from device [ 1987.212295][T11669] usb 1-1: could not get target info (-71) [ 1987.212359][T11669] usb 1-1: could not probe fw (-71) [ 1987.346210][T17762] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input179 [ 1987.730088][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1987.737635][T17762] imon:send_packet: packet tx failed (-71) [ 1987.776109][T17762] imon 6-1:0.0: panel buttons/knobs setup failed [ 1987.786538][T23013] net_ratelimit: 6 callbacks suppressed [ 1987.786559][T23013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1987.838727][ T8586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1987.885739][T17762] rc_core: IR keymap rc-imon-pad not found [ 1987.893635][T17762] Registered IR keymap rc-empty [ 1987.901797][T17762] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1987.912105][T17762] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1987.921945][T17762] imon:send_packet: packet tx failed (-71) [ 1987.945952][T17762] imon 6-1:0.0: remote input dev register failed [ 1987.955239][T17762] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 1987.984557][T17762] imon 6-1:0.0: unable to initialize intf0, err 0 [ 1987.995634][T17762] imon:imon_probe: failed to initialize context! [ 1988.009531][T17762] imon 6-1:0.0: unable to register, err -19 [ 1988.052897][T17762] usb 6-1: USB disconnect, device number 123 [ 1988.115176][ T8603] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1988.286060][ T8603] usb 1-1: Using ep0 maxpacket: 8 [ 1988.294583][ T8603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1988.307418][ T8603] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1988.316492][ T8603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1988.326947][ T8603] usb 1-1: config 0 descriptor?? [ 1988.479486][ T2479] syzkaller0: entered promiscuous mode [ 1988.484985][ T2479] syzkaller0: entered allmulticast mode [ 1988.495968][ T2479] syzkaller0: left allmulticast mode [ 1988.641802][T24905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1988.820337][ T8586] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1988.846725][ T2491] binder: 2490:2491 ioctl c0306201 2000000003c0 returned -14 [ 1988.907502][T17762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.037010][T11669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.045385][T16047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.053805][ T8586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 1989.073833][ T8586] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1989.087544][ T8586] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1989.100683][ T8586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.112265][ T8586] usb 2-1: config 0 descriptor?? [ 1989.147106][ T8603] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1989.161362][ T8603] usb 1-1: USB disconnect, device number 36 [ 1989.528756][ T8586] kovaplus 0003:1E7D:2D50.008B: unknown main item tag 0x0 [ 1989.536225][ T8586] kovaplus 0003:1E7D:2D50.008B: unknown main item tag 0x0 [ 1989.543424][ T8586] kovaplus 0003:1E7D:2D50.008B: unknown main item tag 0x0 [ 1989.550946][ T8586] kovaplus 0003:1E7D:2D50.008B: unknown main item tag 0x0 [ 1989.558372][ T8586] kovaplus 0003:1E7D:2D50.008B: unknown main item tag 0x0 [ 1989.565498][ T8586] kovaplus 0003:1E7D:2D50.008B: unknown main item tag 0x0 [ 1989.572735][ T8586] kovaplus 0003:1E7D:2D50.008B: unknown main item tag 0x0 [ 1989.582816][ T8586] kovaplus 0003:1E7D:2D50.008B: unknown main item tag 0x0 [ 1989.592761][ T8586] kovaplus 0003:1E7D:2D50.008B: unknown main item tag 0x0 [ 1989.600452][ T8586] kovaplus 0003:1E7D:2D50.008B: unknown main item tag 0x0 [ 1989.611180][ T8586] kovaplus 0003:1E7D:2D50.008B: hidraw0: USB HID v7f.fd Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1989.685972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.694879][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1989.934091][ T2504] syzkaller0: entered promiscuous mode [ 1989.944689][ T2504] syzkaller0: entered allmulticast mode [ 1990.029964][ T8584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1990.270973][T23013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1990.647487][ T8584] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1990.915772][ T8584] usb 6-1: Using ep0 maxpacket: 8 [ 1990.942839][ T8584] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1990.952218][ T8584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.961203][ T8584] usb 6-1: Product: syz [ 1990.965552][ T8584] usb 6-1: Manufacturer: syz [ 1990.970817][ T8584] usb 6-1: SerialNumber: syz [ 1990.981922][ T8584] usb 6-1: config 0 descriptor?? [ 1991.191112][ T8584] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1991.300215][ T2524] syzkaller0: entered promiscuous mode [ 1991.305733][ T2524] syzkaller0: entered allmulticast mode [ 1991.315910][ T2524] syzkaller0: left allmulticast mode [ 1991.767455][ T2527] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1991.800385][ T2527] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7877'. [ 1992.041725][ T8586] kovaplus 0003:1E7D:2D50.008B: couldn't init struct kovaplus_device [ 1992.070648][ T8586] kovaplus 0003:1E7D:2D50.008B: couldn't install mouse [ 1992.094765][ T8586] kovaplus 0003:1E7D:2D50.008B: probe with driver kovaplus failed with error -71 [ 1992.118873][ T8586] usb 2-1: USB disconnect, device number 60 [ 1992.264592][ T2538] binder: 2537:2538 ioctl c0306201 2000000003c0 returned -14 [ 1992.380365][ T8584] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1992.424366][ T8584] usb 6-1: USB disconnect, device number 124 [ 1992.511183][ T2555] binder: 2552:2555 ioctl c0306201 200000000080 returned -22 [ 1993.045767][ T8603] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1993.205714][ T8584] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1993.225501][ T8603] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 1993.249377][ T8603] usb 1-1: config 0 has no interface number 0 [ 1993.256867][ T8603] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1993.266912][ T8603] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1993.297400][T17762] net_ratelimit: 5 callbacks suppressed [ 1993.297421][T17762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1993.315465][ T2588] syzkaller0: entered promiscuous mode [ 1993.321144][ T2588] syzkaller0: entered allmulticast mode [ 1993.428997][ T8584] usb 6-1: Using ep0 maxpacket: 32 [ 1993.437531][ T8584] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1993.446214][ T8584] usb 6-1: config 0 has no interface number 0 [ 1993.452384][ T8584] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1993.464182][ T8584] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1993.479917][ T8584] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1993.492126][ T8584] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1993.502830][ T8584] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1993.514749][ T8584] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1993.525034][ T8584] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1993.536162][ T8586] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1993.544464][ T8584] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29440, setting to 1024 [ 1993.556135][ T8584] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1993.567277][ T8584] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1993.592437][ T8584] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1993.602163][ T8584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.610400][ T8584] usb 6-1: Product: syz [ 1993.616142][ T8584] usb 6-1: Manufacturer: syz [ 1993.621471][ T8584] usb 6-1: SerialNumber: syz [ 1993.633262][ T8584] usb 6-1: config 0 descriptor?? [ 1993.646618][ T2569] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1993.655392][ T2569] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1993.664487][ T8584] usb 6-1: will this work? Response EP is not usually 3 [ 1993.671784][ T8584] usb 6-1: will this work? Image data EP is not usually 2 [ 1993.690597][ T8584] scsi host1: microtekX6 [ 1993.777358][ T8586] usb 2-1: Using ep0 maxpacket: 16 [ 1993.798040][ T8586] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1993.810409][ T8586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1993.824410][ T8586] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1993.833856][ T8586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.842004][ T8586] usb 2-1: Product: syz [ 1993.847098][ T8586] usb 2-1: Manufacturer: syz [ 1993.852119][ T8586] usb 2-1: SerialNumber: syz [ 1993.859364][ T8586] usb 2-1: config 0 descriptor?? [ 1993.867500][ T8586] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1993.876859][ T8586] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1993.906942][T23013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1994.152519][ T8603] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 1994.153624][ T8584] usb 6-1: USB disconnect, device number 125 [ 1994.174613][ T8603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.184964][ T8603] usb 1-1: Product: syz [ 1994.189358][ T8603] usb 1-1: Manufacturer: syz [ 1994.194013][ T8603] usb 1-1: SerialNumber: syz [ 1994.230289][ T8603] usb 1-1: config 0 descriptor?? [ 1994.346780][T15857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1994.393767][ T2586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1994.398078][ T8603] ums-karma 1-1:0.46: USB Mass Storage device detected [ 1994.409948][ T2586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1994.645367][ T8586] em28xx 2-1:0.0: unknown em28xx chip ID (238) [ 1994.735769][ T8601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1994.853628][ T8586] em28xx 2-1:0.0: Config register raw data: 0xee [ 1994.873767][ T8586] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 1994.880477][ T8603] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5 [ 1994.919825][ T2600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1994.928485][ T8586] em28xx 2-1:0.0: No AC97 audio processor [ 1994.956527][ T2600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1995.060902][T23009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1995.205091][ T2602] QAT: Device 198 not found [ 1995.257981][ T8586] usb 2-1: USB disconnect, device number 61 [ 1995.393365][ T8584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1995.426597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1995.435677][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1996.118433][ T2617] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7897'. [ 1996.209288][T11669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1996.496250][T17762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1996.605721][T16047] usb 1-1: USB disconnect, device number 37 [ 1996.811634][ T2634] netlink: 'syz.5.7901': attribute type 10 has an invalid length. [ 1996.833789][ T2634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1996.844171][ T2634] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1996.859005][ T2634] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7901'. [ 1996.903252][ T8586] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1996.914885][ T2634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1996.929222][ T2634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1996.942373][ T2634] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 1996.955067][ T2634] bond0 (unregistering): Released all slaves [ 1997.048792][ T2638] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7902'. [ 1997.115413][ T8586] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1997.146233][ T8586] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1997.168221][ T8586] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1997.194812][ T8586] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1997.231264][ T8586] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.254658][ T8586] usb 2-1: Product: syz [ 1997.261196][ T8586] usb 2-1: Manufacturer: syz [ 1997.276850][ T8586] usb 2-1: SerialNumber: syz [ 1997.290722][ T8586] usb 2-1: config 0 descriptor?? [ 1997.297387][ T2624] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1997.306588][ T2624] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1997.315108][ T2644] syzkaller0: entered promiscuous mode [ 1997.388667][ T2644] syzkaller0: entered allmulticast mode [ 1997.410146][ T8586] usb 2-1: ucan: probing device on interface #0 [ 1997.465254][ T2647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7904'. [ 1997.614303][ T2624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1997.640090][ T2624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1997.651353][ T2624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7898'. [ 1997.792708][ T8601] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1998.122504][ T8586] ucan 2-1:0.0: probe with driver ucan failed with error -71 [ 1998.135938][ T8586] usb 2-1: USB disconnect, device number 62 [ 1998.176185][T17762] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1998.378531][ T2662] QAT: Device 198 not found [ 1998.402095][T17762] usb 6-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 1998.427132][T17762] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 1998.447506][T17762] usb 6-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 1998.490941][T17762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.545652][T17762] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 1998.568650][ T8584] net_ratelimit: 4 callbacks suppressed [ 1998.568669][ T8584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1998.582766][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1998.745927][T17762] gspca_sn9c2028: read1 error -71 [ 1998.751558][T17762] gspca_sn9c2028: read1 error -71 [ 1998.765903][T17762] gspca_sn9c2028: read1 error -71 [ 1998.775692][T17762] sn9c2028 6-1:220.0: probe with driver sn9c2028 failed with error -71 [ 1998.798839][T17762] usb 6-1: USB disconnect, device number 126 [ 1998.963691][ T2666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7908'. [ 1999.029581][ T8601] usb 1-1: config index 0 descriptor too short (expected 12336, got 36) [ 1999.050680][ T8601] usb 1-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 1999.068455][ T8601] usb 1-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 1999.083857][ T8601] usb 1-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 1999.094239][ T8601] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1999.103423][ T8601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.291687][ T2679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7910'. [ 1999.313954][ T2679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7910'. [ 1999.524715][ T8601] usb 1-1: USB disconnect, device number 38 [ 1999.551611][ T2683] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1999.569514][ T2685] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1999.580089][ T2685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1999.629934][ T8603] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1999.687586][ T8586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1999.837605][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1999.920664][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1999.947107][ T8603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1999.957128][ T8603] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1999.966300][ T8603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.977491][ T8603] usb 2-1: config 0 descriptor?? [ 2000.010001][ T2703] loop5: detected capacity change from 0 to 7 [ 2000.037731][ T2703] loop5: [ 2000.041106][ T2703] loop5: partition table partially beyond EOD, truncated [ 2000.486372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2000.494878][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2000.524982][ T2716] QAT: Device 198 not found [ 2000.729247][ T8586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2000.731722][ T8603] hid_parser_main: 222 callbacks suppressed [ 2000.731744][ T8603] cp2112 0003:10C4:EA90.008C: unknown main item tag 0x0 [ 2000.752212][ T8603] cp2112 0003:10C4:EA90.008C: unknown main item tag 0x0 [ 2000.759231][ T8603] cp2112 0003:10C4:EA90.008C: unknown main item tag 0x0 [ 2000.766234][ T8603] cp2112 0003:10C4:EA90.008C: unknown main item tag 0x0 [ 2000.773235][ T8603] cp2112 0003:10C4:EA90.008C: unknown main item tag 0x0 [ 2000.780232][ T8603] cp2112 0003:10C4:EA90.008C: unknown main item tag 0x0 [ 2000.787436][ T8603] cp2112 0003:10C4:EA90.008C: unknown main item tag 0x0 [ 2000.798052][ T8603] cp2112 0003:10C4:EA90.008C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 2000.833391][ T8601] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2000.953866][T16047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2001.058425][T23010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2001.082003][ T8603] cp2112 0003:10C4:EA90.008C: error requesting version [ 2001.097413][ T8603] cp2112 0003:10C4:EA90.008C: probe with driver cp2112 failed with error -71 [ 2001.144982][ T8603] usb 2-1: USB disconnect, device number 63 [ 2001.757035][T16047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2001.975982][ T8584] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2002.076049][T15857] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 2002.235831][ T8584] usb 6-1: Using ep0 maxpacket: 32 [ 2002.250471][ T8584] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 2002.259148][ T8584] usb 6-1: config 0 has no interface number 0 [ 2002.267496][ T8584] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2002.277183][ T8584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.285294][ T8584] usb 6-1: Product: syz [ 2002.295671][ T8584] usb 6-1: Manufacturer: syz [ 2002.300351][ T8584] usb 6-1: SerialNumber: syz [ 2002.307936][ T8584] usb 6-1: config 0 descriptor?? [ 2002.315496][ T8584] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2002.327854][T15857] usb 2-1: config 251 has an invalid interface number: 243 but max is 0 [ 2002.336874][T15857] usb 2-1: config 251 has no interface number 0 [ 2002.343473][T15857] usb 2-1: config 251 interface 243 has no altsetting 0 [ 2002.357322][T15857] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=b8.82 [ 2002.366563][T15857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.374794][T15857] usb 2-1: Product: syz [ 2002.379092][T15857] usb 2-1: Manufacturer: syz [ 2002.383747][T15857] usb 2-1: SerialNumber: syz [ 2002.518619][ T8584] usb 6-1: qt2_attach - failed to power on unit: -71 [ 2002.532760][ T8584] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 2002.582278][ T8584] usb 6-1: USB disconnect, device number 127 [ 2002.704676][T15857] sisusb 2-1:251.243: Invalid USB2VGA device [ 2002.718247][T15857] sisusb 2-1:251.243: probe with driver sisusb failed with error -22 [ 2002.737850][T15857] usb 2-1: USB disconnect, device number 64 [ 2003.590460][T12756] net_ratelimit: 4 callbacks suppressed [ 2003.590517][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2003.667064][ T2776] QAT: Device 198 not found [ 2003.876513][T15857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.268848][ T2797] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7940'. [ 2004.298226][ T2797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2004.310405][ T2799] macvlan2: entered promiscuous mode [ 2004.315966][ T2799] macvlan2: entered allmulticast mode [ 2004.322637][ T2799] bond0: (slave macvlan2): Opening slave failed [ 2004.438030][ T2802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7941'. [ 2004.823359][ T2818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.832289][ T2818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.847348][T16047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.864942][ T2810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.878054][T23013] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.897744][ T2810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.987233][T17762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2004.996881][T15857] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2005.218862][T15857] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 2005.230725][ T8601] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2005.233213][T15857] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2005.266974][T15857] usb 6-1: config 220 has no interface number 2 [ 2005.283558][T15857] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2005.315096][T15857] usb 6-1: config 220 interface 0 has no altsetting 0 [ 2005.330300][T15857] usb 6-1: config 220 interface 76 has no altsetting 0 [ 2005.366890][T15857] usb 6-1: config 220 interface 1 has no altsetting 0 [ 2005.397455][T15857] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2005.419432][T15857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.437937][T15857] usb 6-1: Product: syz [ 2005.448181][T15857] usb 6-1: Manufacturer: syz [ 2005.457406][T15857] usb 6-1: SerialNumber: syz [ 2005.716475][T15857] usb 6-1: selecting invalid altsetting 0 [ 2005.760396][T15857] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2005.776470][T15857] uvcvideo 6-1:220.0: No valid video chain found. [ 2005.805741][T15857] usb 6-1: selecting invalid altsetting 0 [ 2005.818832][T15857] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 2005.857744][T15857] usb 6-1: USB disconnect, device number 2 [ 2005.948175][ T8601] usb 2-1: Using ep0 maxpacket: 8 [ 2006.134422][T17762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.236020][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.271156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.279710][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2006.494597][ T30] audit: type=1326 audit(1781515325.107:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2826 comm="syz.5.7949" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2006.550346][ T30] audit: type=1326 audit(1781515325.107:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2826 comm="syz.5.7949" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2006.623441][ T30] audit: type=1326 audit(1781515325.107:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2826 comm="syz.5.7949" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2006.718612][ T8601] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2006.731653][ T8601] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2006.744424][ T8601] usb 2-1: can't read configurations, error -71 [ 2006.773320][ T30] audit: type=1326 audit(1781515325.107:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2826 comm="syz.5.7949" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2006.924945][ T30] audit: type=1326 audit(1781515325.107:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2826 comm="syz.5.7949" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2007.006035][ T2829] QAT: Device 198 not found [ 2007.016024][ T30] audit: type=1326 audit(1781515325.107:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2826 comm="syz.5.7949" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2007.104687][ T30] audit: type=1326 audit(1781515325.107:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2826 comm="syz.5.7949" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2007.186626][T17762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2007.214248][ T30] audit: type=1326 audit(1781515325.107:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2826 comm="syz.5.7949" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2007.300063][ T30] audit: type=1326 audit(1781515325.107:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2826 comm="syz.5.7949" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2007.373039][ T30] audit: type=1326 audit(1781515325.107:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2826 comm="syz.5.7949" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2007.753199][ T2848] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7955'. [ 2008.017228][ T2859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7957'. [ 2008.075100][ T2859] netlink: 'syz.1.7957': attribute type 7 has an invalid length. [ 2008.155531][ T2866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7957'. [ 2008.175371][ T2859] netlink: 'syz.1.7957': attribute type 8 has an invalid length. [ 2008.181226][ T2855] syzkaller0: entered promiscuous mode [ 2008.185272][ T2866] netlink: 'syz.1.7957': attribute type 7 has an invalid length. [ 2008.210295][ T2859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7957'. [ 2008.271572][ T2866] netlink: 'syz.1.7957': attribute type 8 has an invalid length. [ 2008.324367][ T2866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7957'. [ 2008.606212][ T8601] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 2008.666516][T11669] net_ratelimit: 3 callbacks suppressed [ 2008.666539][T11669] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2008.775498][ T8601] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2008.787079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2008.801778][ T8601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2008.819505][ T8601] usb 2-1: Product: syz [ 2008.825894][ T8601] usb 2-1: Manufacturer: syz [ 2008.831467][ T8601] usb 2-1: SerialNumber: syz [ 2008.852959][ T8601] usb 2-1: config 0 descriptor?? [ 2009.294563][ T8601] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2009.295853][ T8586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.401877][T16047] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 2009.570996][ T2898] netlink: 'syz.5.7966': attribute type 29 has an invalid length. [ 2009.580157][ T2898] netlink: 'syz.5.7966': attribute type 29 has an invalid length. [ 2009.590394][ T2898] netlink: 500 bytes leftover after parsing attributes in process `syz.5.7966'. [ 2009.600316][ T2898] netlink: 8772 bytes leftover after parsing attributes in process `syz.5.7966'. [ 2009.826907][ T2905] QAT: Device 198 not found [ 2009.847229][T23010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2009.865891][T16047] usb 1-1: Using ep0 maxpacket: 16 [ 2009.874166][T16047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2009.893410][T16047] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2009.919729][T16047] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2009.936529][T16047] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2009.947370][T16047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2009.960103][T16047] usb 1-1: config 0 descriptor?? [ 2010.326673][T17762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2010.604791][ T2926] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7971'. [ 2010.725294][T16047] microsoft 0003:045E:07DA.008D: unknown main item tag 0x0 [ 2010.732589][T16047] microsoft 0003:045E:07DA.008D: unknown main item tag 0x0 [ 2010.740286][T16047] microsoft 0003:045E:07DA.008D: unknown main item tag 0x0 [ 2010.747629][T16047] microsoft 0003:045E:07DA.008D: unknown main item tag 0x0 [ 2010.754970][T16047] microsoft 0003:045E:07DA.008D: unknown main item tag 0x0 [ 2010.762276][T16047] microsoft 0003:045E:07DA.008D: unknown main item tag 0x0 [ 2010.859373][T16047] microsoft 0003:045E:07DA.008D: unknown main item tag 0x0 [ 2010.866672][T16047] microsoft 0003:045E:07DA.008D: unknown main item tag 0x0 [ 2010.874116][T16047] microsoft 0003:045E:07DA.008D: unknown main item tag 0x0 [ 2010.883157][T16047] microsoft 0003:045E:07DA.008D: unknown main item tag 0x0 [ 2010.939896][T24905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2010.949794][ T2887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2010.958751][ T2887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2011.059510][T16047] microsoft 0003:045E:07DA.008D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 2011.070965][T16047] microsoft 0003:045E:07DA.008D: no inputs found [ 2011.077425][T16047] microsoft 0003:045E:07DA.008D: could not initialize ff, continuing anyway [ 2011.165146][T16047] usb 1-1: USB disconnect, device number 40 [ 2011.174927][T23010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.251900][ T2934] fido_id[2934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2011.381686][T17762] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.397103][ T8603] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2011.503893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2012.395870][ T2961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7985'. [ 2012.420674][ T8601] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2012.435088][ T8601] usb 2-1: USB disconnect, device number 67 [ 2012.509099][ T2965] syzkaller0: entered promiscuous mode [ 2012.514633][ T2965] syzkaller0: entered allmulticast mode [ 2013.096578][ T2981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7991'. [ 2013.467194][ T8601] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 2013.625960][ T8601] usb 1-1: Using ep0 maxpacket: 8 [ 2013.634478][ T8601] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2013.644750][ T8601] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2013.657278][ T8601] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 2013.666524][ T8601] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2013.677994][ T8601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.802873][ T2994] loop5: detected capacity change from 0 to 7 [ 2013.809980][ T2994] loop5: [ 2013.812973][ T2994] loop5: partition table partially beyond EOD, truncated [ 2013.903413][ T2996] program syz.1.7998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2013.913847][ T2996] sctp: [Deprecated]: syz.1.7998 (pid 2996) Use of int in max_burst socket option. [ 2013.913847][ T2996] Use struct sctp_assoc_value instead [ 2014.091975][T17762] usb 1-1: USB disconnect, device number 41 [ 2014.132095][ T3002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8000'. [ 2014.145598][ T3002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8000'. [ 2014.816432][ T8601] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2015.435875][T17762] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 2015.666792][T17762] usb 1-1: Using ep0 maxpacket: 8 [ 2015.679113][T17762] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2015.705654][T17762] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2015.715239][T17762] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2015.745644][T17762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.753932][T17762] usb 1-1: Product: syz [ 2015.765932][T17762] usb 1-1: Manufacturer: syz [ 2015.771371][T17762] usb 1-1: SerialNumber: syz [ 2015.788531][T17762] usb 1-1: config 0 descriptor?? [ 2015.808010][T17762] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 2016.066792][T17762] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 2016.085772][T17762] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 2016.107042][T17762] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 2016.172107][ T8601] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.182551][ T8601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2016.192487][ T8601] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 2016.202415][ T8601] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2016.215496][ T8601] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 2016.224645][ T8601] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2016.232899][T16047] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 2016.253755][ T8601] usb 6-1: config 0 descriptor?? [ 2016.288927][ T3029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8009'. [ 2016.395931][ C0] net_ratelimit: 1 callbacks suppressed [ 2016.395952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2016.410290][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2016.620357][T16047] usb 2-1: device descriptor read/64, error -71 [ 2016.699782][ T3009] syzkaller0: entered promiscuous mode [ 2016.712839][ T8601] usb 1-1: USB disconnect, device number 42 [ 2016.718076][ T3009] syzkaller0: entered allmulticast mode [ 2016.806446][ T3049] program syz.0.8014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2016.986019][T16047] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 2017.375911][T16047] usb 2-1: device descriptor read/64, error -71 [ 2017.500636][T16047] usb usb2-port1: attempt power cycle [ 2017.925481][ T3058] netlink: 92 bytes leftover after parsing attributes in process `syz.6.8016'. [ 2018.017882][T16047] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 2018.502617][T16047] usb 2-1: device descriptor read/8, error -71 [ 2018.575817][ T1251] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2018.641977][ T1251] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2018.663671][ T1251] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2018.678651][ T1251] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2018.718531][ T1251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2018.892072][T16047] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 2019.236378][T16047] usb 2-1: device not accepting address 71, error -71 [ 2019.243855][T16047] usb usb2-port1: unable to enumerate USB device [ 2019.900843][T16047] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2020.563265][T16047] usb 2-1: Using ep0 maxpacket: 8 [ 2020.870484][ T5639] Bluetooth: hci5: command tx timeout [ 2020.895824][T16047] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7 [ 2020.924568][T16047] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 2020.950915][T16047] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.006987][T16047] usb 2-1: Product: syz [ 2021.011214][T16047] usb 2-1: Manufacturer: syz [ 2021.015895][T16047] usb 2-1: SerialNumber: syz [ 2021.668038][T16047] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2021.784438][T16047] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2021.948567][T16047] usb 2-1: USB disconnect, device number 72 [ 2022.025914][ T726] udevd[726]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2022.386727][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2022.395249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2023.020359][ T5639] Bluetooth: hci5: command tx timeout [ 2023.966932][ T3094] binder: 3093:3094 unknown command 1 [ 2023.972383][ T3094] binder: 3093:3094 ioctl c0306201 200000000180 returned -22 [ 2025.027379][ T5639] Bluetooth: hci5: command tx timeout [ 2025.045472][ T8586] usb 6-1: USB disconnect, device number 3 [ 2025.208222][ T3099] ip6tnl0: Caught tx_queue_len zero misconfig [ 2025.396105][T12756] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2025.513884][ T3110] loop3: detected capacity change from 0 to 4543 [ 2025.534074][ T3110] loop3: [CUMANA/ADFS] p1 [ADFS] p1 [ 2025.541280][ T3110] loop3: partition table partially beyond EOD, truncated [ 2025.566063][ T3110] loop3: p1 size 1450237411 extends beyond EOD, truncated [ 2025.576332][T12756] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2025.726282][ T8586] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 2025.791695][T12756] bond0: (slave netdevsim1): Releasing backup interface [ 2025.838317][T12756] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2025.991103][T12756] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2025.992091][ T8586] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 2026.048021][ T726] udevd[726]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 2026.077942][ T8586] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2026.129675][ T8586] usb 6-1: config 0 has no interface number 0 [ 2026.157290][ T8586] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2026.195683][ T8586] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2026.216209][ T8586] usb 6-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2026.251930][ T8586] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 2026.282445][ T8586] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.300891][ T8586] usb 6-1: Product: syz [ 2026.313962][ T8586] usb 6-1: Manufacturer: syz [ 2026.320542][ T8586] usb 6-1: SerialNumber: syz [ 2026.342245][ T8586] usb 6-1: config 0 descriptor?? [ 2026.354074][ T3104] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2026.441818][ T3123] [U]  [ 2026.444683][ T3123] [U] [ 2026.447418][ T3123] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 2026.453833][ T3067] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.495750][ T3123] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 2026.568675][ T3067] bridge0: port 1(bridge_slave_0) entered disabled state [ 2026.580115][ T3067] bridge_slave_0: entered allmulticast mode [ 2026.589475][ T3067] bridge_slave_0: entered promiscuous mode [ 2026.601114][ T3067] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.626081][ T8586] usb 6-1: probing VID:PID(0424:012C) [ 2026.627733][ T3122] netdevsim netdevsim7: Direct firmware load for . [ 2026.627733][ T3122] failed with error -2 [ 2026.643277][ T3122] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 2026.643277][ T3122] [ 2026.658062][ T8586] usb 6-1: vub300 testing BULK OUT EndPoint(0) 0B [ 2026.663475][ T3067] bridge0: port 2(bridge_slave_1) entered disabled state [ 2026.673067][ T3067] bridge_slave_1: entered allmulticast mode [ 2026.677388][ T8586] usb 6-1: vub300 testing BULK OUT EndPoint(1) 0F [ 2026.688828][ T3067] bridge_slave_1: entered promiscuous mode [ 2026.695448][ T8586] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 2026.793029][ T8586] vub300 6-1:0.133: probe with driver vub300 failed with error -22 [ 2026.810008][T12756] bond1: left allmulticast mode [ 2026.816436][T12756] bond1: left promiscuous mode [ 2026.824774][ T8586] usb 6-1: USB disconnect, device number 4 [ 2026.857291][ T3123] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 2026.904971][ T3123] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 2026.953323][ T3123] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 2027.001149][ T3123] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\ [ 2027.075144][T12756] bridge0: port 3(bond1) entered disabled state [ 2027.084252][T12756] bridge_slave_1: left allmulticast mode [ 2027.085282][ T3123] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2027.089940][T12756] bridge_slave_1: left promiscuous mode [ 2027.101259][T12756] bridge0: port 2(bridge_slave_1) entered disabled state [ 2027.114549][T12756] bridge_slave_0: left allmulticast mode [ 2027.120606][T12756] bridge0: port 1(bridge_slave_0) entered disabled state [ 2027.126028][ T8584] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2027.136675][ T5639] Bluetooth: hci5: command tx timeout [ 2027.156936][T12756] dvmrp0: left allmulticast mode [ 2027.368375][ T8584] usb 2-1: config 127 has an invalid interface number: 138 but max is 0 [ 2027.385643][ T8584] usb 2-1: config 127 has no interface number 0 [ 2027.392399][ T8584] usb 2-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 2027.416953][ T8584] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 2027.430921][ T8584] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.452460][ T8584] usb 2-1: Product: syz [ 2027.456858][ T8584] usb 2-1: Manufacturer: syz [ 2027.462277][ T8584] usb 2-1: SerialNumber: syz [ 2027.479184][ T3129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2027.504789][ T3133] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2027.511803][ T3133] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2027.526414][ T3133] vhci_hcd vhci_hcd.0: Device attached [ 2027.574540][T12756] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 2027.605643][T12756] bond6 (unregistering): (slave geneve3): Releasing active interface [ 2027.701975][ T8584] usb 2-1: probing VID:PID(0424:012C) [ 2027.709644][ T8584] usb 2-1: vub300 testing BULK OUT EndPoint(0) 0F [ 2027.716295][ T8584] usb 2-1: vub300 testing BULK OUT EndPoint(1) 0C [ 2027.722957][ T8584] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs [ 2027.762119][ T8584] vub300 2-1:127.138: probe with driver vub300 failed with error -22 [ 2027.782398][ T8584] usb 2-1: USB disconnect, device number 73 [ 2027.816085][ T8586] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 2027.971826][T12756] team0: Port device bridge3 removed [ 2028.012946][T12756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2028.024557][T12756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2028.035106][T12756] bond0 (unregistering): Released all slaves [ 2028.051361][T12756] bond1 (unregistering): Released all slaves [ 2028.074406][T12756] bond2 (unregistering): Released all slaves [ 2028.096855][ T3134] vhci_hcd: connection reset by peer [ 2028.106849][T12756] bond3 (unregistering): Released all slaves [ 2028.117618][ T1772] vhci_hcd vhci_hcd.5: stop threads [ 2028.132131][ T1772] vhci_hcd vhci_hcd.5: release socket [ 2028.132605][ T3133] ALSA: mixer_oss: invalid OSS volume '' [ 2028.147191][ T1772] vhci_hcd vhci_hcd.5: disconnect device [ 2028.147606][T12756] bond4 (unregistering): (slave bond5): Releasing backup interface [ 2028.180651][T12756] bond4 (unregistering): Released all slaves [ 2028.202025][T12756] bond5 (unregistering): Released all slaves [ 2028.220563][T12756] bond6 (unregistering): Released all slaves [ 2028.233697][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.233970][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2028.301830][ T3067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2028.316033][ T3067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2028.380813][ T3067] team0: Port device team_slave_0 added [ 2028.396989][ T3067] team0: Port device team_slave_1 added [ 2028.470643][ T3143] syzkaller0: entered promiscuous mode [ 2028.476281][ T3143] syzkaller0: entered allmulticast mode [ 2028.512839][ T3067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2028.516155][ T8584] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2028.519868][ T3067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2028.553419][ T3067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2028.581798][ T3067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2028.593945][ T3067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2028.619891][ T3067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2028.677989][ T3143] tipc: Enabled bearer , priority 0 [ 2028.708541][ T3067] hsr_slave_0: entered promiscuous mode [ 2028.715496][ T3067] hsr_slave_1: entered promiscuous mode [ 2028.722206][ T3067] debugfs: 'hsr0' already exists in 'hsr' [ 2028.727977][ T3067] Cannot create hsr debugfs directory [ 2028.734028][ T3142] tipc: Resetting bearer [ 2028.768320][ T3142] tipc: Disabling bearer [ 2028.797856][ T8584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2028.841673][ T8584] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 2028.894236][ T8584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 2028.917046][ T8584] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 2029.044691][T12756] m>e5: left promiscuous mode [ 2029.049935][ T8584] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 2029.059624][ T8584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.067950][ T8584] usb 6-1: Product: syz [ 2029.084719][ T8584] usb 6-1: Manufacturer: syz [ 2029.096519][ T8584] usb 6-1: SerialNumber: syz [ 2029.123866][ T8584] usb 6-1: config 0 descriptor?? [ 2029.175498][ T8584] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 2029.429838][ T5293] 8021q: adding VLAN 0 to HW filter on device eth10 [ 2029.437940][ T8584] scsi host1: usb-storage 6-1:0.0 [ 2029.470590][T12756] tipc: Left network mode [ 2029.646408][ T3137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2029.682669][ T3137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2029.691882][ T3165] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2029.748973][T16047] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2029.888274][ T3165] netlink: 'syz.6.8041': attribute type 10 has an invalid length. [ 2029.929080][ T3174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8038'. [ 2029.977698][ T8601] usb 6-1: USB disconnect, device number 5 [ 2030.006491][ T3165] team0 (unregistering): Port device team_slave_0 removed [ 2030.037702][ T3165] team0 (unregistering): Port device team_slave_1 removed [ 2030.058193][ T3165] team0 (unregistering): Port device syz_tun removed [ 2030.300291][ T3182] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8036'. [ 2030.315448][ T3182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.344316][ T3182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2030.522010][T16047] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 2030.572543][T16047] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2030.604431][T16047] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2030.636179][T16047] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2030.698633][T12756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2030.710565][T12756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2030.723727][T12756] veth1_vlan: left allmulticast mode [ 2031.112375][T16047] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2031.139183][T16047] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2031.209452][T16047] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2031.292250][T16047] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2031.322889][T16047] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2031.381068][T16047] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2031.410793][ T3193] Cannot find add_set index 0 as target [ 2031.884579][T16047] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2031.910534][T16047] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2031.926361][T16047] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2031.982761][T16047] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2031.995868][T16047] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2032.008618][T16047] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2032.633777][ T3209] loop5: detected capacity change from 0 to 7 [ 2032.642027][ T3209] Dev loop5: unable to read RDB block 7 [ 2032.647738][ T3209] loop5: AHDI p1 p2 p3 [ 2032.651934][ T3209] loop5: partition table partially beyond EOD, truncated [ 2032.677925][T16047] usb 2-1: unable to read config index 5 descriptor/all [ 2032.684955][T16047] usb 2-1: can't read configurations, error -71 [ 2032.727136][ T3209] loop5: p1 start 3741368766 is beyond EOD, truncated [ 2032.733990][ T3209] loop5: p2 size 151585024 extends beyond EOD, truncated [ 2033.007144][ T8586] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 2033.665869][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2033.674377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2035.344279][T12756] team0 (unregistering): Port device team_slave_1 removed [ 2035.383684][T12756] team0 (unregistering): Port device team_slave_0 removed [ 2036.760742][ T3256] FAULT_INJECTION: forcing a failure. [ 2036.760742][ T3256] name failslab, interval 1, probability 0, space 0, times 0 [ 2036.838192][ T3256] CPU: 1 UID: 0 PID: 3256 Comm: syz.5.8057 Tainted: G L syzkaller #0 PREEMPT(full) [ 2036.838225][ T3256] Tainted: [L]=SOFTLOCKUP [ 2036.838232][ T3256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2036.838243][ T3256] Call Trace: [ 2036.838252][ T3256] [ 2036.838261][ T3256] dump_stack_lvl+0xe8/0x150 [ 2036.838292][ T3256] should_fail_ex+0x40c/0x560 [ 2036.838318][ T3256] should_failslab+0xa8/0x100 [ 2036.838350][ T3256] __kmalloc_noprof+0xe8/0x750 [ 2036.838377][ T3256] ? tomoyo_encode+0x2ad/0x570 [ 2036.838415][ T3256] tomoyo_encode+0x2ad/0x570 [ 2036.838458][ T3256] tomoyo_realpath_from_path+0x5fa/0x640 [ 2036.838499][ T3256] ? tomoyo_path_number_perm+0x219/0x5f0 [ 2036.838523][ T3256] tomoyo_path_number_perm+0x246/0x5f0 [ 2036.838548][ T3256] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2036.838570][ T3256] ? __lock_acquire+0x683/0x2cd0 [ 2036.838603][ T3256] ? hook_file_ioctl+0x1f0/0x5c0 [ 2036.838646][ T3256] ? __fget_files+0x2a/0x420 [ 2036.838670][ T3256] ? __fget_files+0x2a/0x420 [ 2036.838688][ T3256] ? __fget_files+0x3a2/0x420 [ 2036.838707][ T3256] ? __fget_files+0x2a/0x420 [ 2036.838730][ T3256] security_file_ioctl+0xc3/0x2a0 [ 2036.838754][ T3256] __se_sys_ioctl+0x47/0x170 [ 2036.838780][ T3256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2036.838800][ T3256] do_syscall_64+0x174/0x580 [ 2036.838816][ T3256] ? trace_irq_disable+0x3b/0x140 [ 2036.838842][ T3256] ? clear_bhb_loop+0x40/0x90 [ 2036.838865][ T3256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2036.838884][ T3256] RIP: 0033:0x7f868479ce59 [ 2036.838905][ T3256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2036.838922][ T3256] RSP: 002b:00007f8685645028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2036.838942][ T3256] RAX: ffffffffffffffda RBX: 00007f8684a15fa0 RCX: 00007f868479ce59 [ 2036.838954][ T3256] RDX: 0000200000000240 RSI: 000000008038550a RDI: 0000000000000004 [ 2036.838964][ T3256] RBP: 00007f8685645090 R08: 0000000000000000 R09: 0000000000000000 [ 2036.838975][ T3256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2036.838986][ T3256] R13: 00007f8684a16038 R14: 00007f8684a15fa0 R15: 00007f8684b3fa48 [ 2036.839016][ T3256] [ 2036.839037][ T3256] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2037.679649][ T3067] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2037.693930][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.700453][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.719012][ T3067] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2037.803322][ T3067] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2037.841260][ T3067] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2037.852943][ T3067] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2037.921595][ T3067] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2037.982657][ T3067] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2038.052319][ T3067] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2038.197237][ T3270] syzkaller0: entered promiscuous mode [ 2038.202974][ T3270] syzkaller0: entered allmulticast mode [ 2038.368795][ T3270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2038.393257][ T3270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2038.530035][T12756] IPVS: stop unused estimator thread 0... [ 2038.576049][ T8603] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 2038.744177][ T8603] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2038.780259][ T8603] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2038.787821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2038.833081][ T3067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2038.876495][ T8603] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 2038.924869][ T8603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.948667][ T8603] usb 2-1: config 0 descriptor?? [ 2038.954143][ T3067] 8021q: adding VLAN 0 to HW filter on device team0 [ 2039.000100][T23009] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.008272][T23009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2039.080388][T23009] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.087737][T23009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2039.328321][ T3067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2039.505735][ T3067] veth0_vlan: entered promiscuous mode [ 2039.588730][ T3067] veth1_vlan: entered promiscuous mode [ 2039.692653][ T3067] veth0_macvtap: entered promiscuous mode [ 2039.746116][ T3067] veth1_macvtap: entered promiscuous mode [ 2039.790887][ T8603] hid_parser_main: 5 callbacks suppressed [ 2039.790915][ T8603] waltop 0003:172F:0037.008E: unknown main item tag 0x2 [ 2039.803694][ T8603] waltop 0003:172F:0037.008E: unexpected long global item [ 2039.808946][ T3067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2039.811664][ T8603] waltop 0003:172F:0037.008E: probe with driver waltop failed with error -22 [ 2039.829498][ T3067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2042.036153][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2042.045027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2046.877763][ T8584] usb 2-1: USB disconnect, device number 76 [ 2046.980507][T23009] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2047.033582][T23009] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2047.057830][T23009] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2047.170473][T23009] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2047.271274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2047.279762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2047.456815][ T3345] syzkaller0: entered promiscuous mode [ 2047.464600][ T3345] syzkaller0: entered allmulticast mode [ 2047.515003][ T3345] syzkaller0: left allmulticast mode [ 2047.619381][T23005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2047.627490][T23005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2047.755219][T21215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2047.775404][T21215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2047.901517][ T3372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8019'. [ 2048.092139][ T3375] xt_hashlimit: size too large, truncated to 1048576 [ 2048.149681][ T3380] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2048.198302][ T3380] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2048.226302][T16047] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 2048.424732][ T3376] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2048.488935][ T3390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.497793][ T3390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.506386][T15857] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 2048.582079][ T3394] netdevsim netdevsim5: Direct firmware load for . [ 2048.582079][ T3394] failed with error -2 [ 2048.609799][ T3394] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 2048.609799][ T3394] [ 2048.693064][T16047] usb 1-1: Using ep0 maxpacket: 8 [ 2048.703848][T16047] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2048.716305][T16047] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2048.729013][T15857] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2048.753775][T15857] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2048.776168][T15857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.823533][T15857] usb 2-1: config 0 descriptor?? [ 2048.848792][T16047] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2048.878771][ T3399] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8083'. [ 2048.915906][T16047] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2048.957324][T16047] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2049.002342][T16047] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2049.023541][T16047] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.059541][ T3395] netlink: 'syz.7.8078': attribute type 21 has an invalid length. [ 2049.138933][ T3395] netlink: 128 bytes leftover after parsing attributes in process `syz.7.8078'. [ 2049.225322][ T3395] netlink: 'syz.7.8078': attribute type 4 has an invalid length. [ 2049.238817][ T3395] netlink: 'syz.7.8078': attribute type 3 has an invalid length. [ 2049.246693][ T3395] netlink: 3 bytes leftover after parsing attributes in process `syz.7.8078'. [ 2049.286864][ T3385] [U]  [ 2049.434332][ T3380] fuse: Bad value for 'fd' [ 2049.499446][T16047] usb 1-1: usb_control_msg returned -32 [ 2049.506001][T16047] usbtmc 1-1:16.0: can't read capabilities [ 2049.772617][ T3404] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8085'. [ 2049.797834][ T3404] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8085'. [ 2049.834071][ T3407] usbtmc 1-1:16.0: control status returned 0 [ 2049.972858][ T3409] fuse: fd is not a fuse device [ 2050.046374][ T8586] usb 1-1: USB disconnect, device number 43 [ 2050.800362][ T3425] syzkaller0: entered promiscuous mode [ 2050.805859][ T3425] syzkaller0: entered allmulticast mode [ 2050.816618][ T3425] syzkaller0: left allmulticast mode [ 2051.048680][T16047] usb 2-1: USB disconnect, device number 77 [ 2051.137333][ T3427] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 2051.573621][ T3451] syzkaller0: entered promiscuous mode [ 2051.579572][ T3451] syzkaller0: entered allmulticast mode [ 2051.624891][ T8601] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 2051.638718][ T3451] tipc: Enabled bearer , priority 0 [ 2051.648733][ T3450] tipc: Resetting bearer [ 2051.689428][ T3450] tipc: Disabling bearer [ 2052.283267][ T8601] usb 1-1: Using ep0 maxpacket: 8 [ 2052.342056][ T8586] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2052.374175][ T3461] syzkaller0: entered promiscuous mode [ 2052.591167][ T8586] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.602269][ T8586] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2052.613613][ T8586] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2052.626897][ T8586] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2052.637022][ T8586] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.676854][ T8586] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2052.711446][ T8586] usb 6-1: invalid MIDI out EP 0 [ 2052.916180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2052.924791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2052.977726][ T8601] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2052.985998][ T8601] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2052.995760][ T8601] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2053.005525][ T8601] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2053.015464][ T8601] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2053.016989][ T8586] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2053.028462][ T8601] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2053.028493][ T8601] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.060966][ T3468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.080596][ T3468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.133937][ T8586] usb 6-1: USB disconnect, device number 6 [ 2053.633476][ T3478] FAULT_INJECTION: forcing a failure. [ 2053.633476][ T3478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2053.647808][ T3478] CPU: 0 UID: 0 PID: 3478 Comm: syz.1.8110 Tainted: G L syzkaller #0 PREEMPT(full) [ 2053.647852][ T3478] Tainted: [L]=SOFTLOCKUP [ 2053.647860][ T3478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2053.647873][ T3478] Call Trace: [ 2053.647882][ T3478] [ 2053.647891][ T3478] dump_stack_lvl+0xe8/0x150 [ 2053.647922][ T3478] should_fail_ex+0x40c/0x560 [ 2053.647950][ T3478] _copy_from_user+0x2d/0xb0 [ 2053.647975][ T3478] ___sys_sendmsg+0x1c6/0x360 [ 2053.648007][ T3478] ? __lock_acquire+0x683/0x2cd0 [ 2053.648035][ T3478] ? __pfx____sys_sendmsg+0x10/0x10 [ 2053.648111][ T3478] ? __fget_files+0x2a/0x420 [ 2053.648135][ T3478] ? __fget_files+0x3a2/0x420 [ 2053.648171][ T3478] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2053.648205][ T3478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2053.648246][ T3478] ? __pfx_ksys_write+0x10/0x10 [ 2053.648284][ T3478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2053.648308][ T3478] do_syscall_64+0x174/0x580 [ 2053.648328][ T3478] ? trace_irq_disable+0x3b/0x140 [ 2053.648357][ T3478] ? clear_bhb_loop+0x40/0x90 [ 2053.648382][ T3478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2053.648403][ T3478] RIP: 0033:0x7f8861f9ce59 [ 2053.648424][ T3478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2053.648443][ T3478] RSP: 002b:00007f8862eb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2053.648467][ T3478] RAX: ffffffffffffffda RBX: 00007f8862215fa0 RCX: 00007f8861f9ce59 [ 2053.648483][ T3478] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 2053.648498][ T3478] RBP: 00007f8862eb9090 R08: 0000000000000000 R09: 0000000000000000 [ 2053.648511][ T3478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2053.648525][ T3478] R13: 00007f8862216038 R14: 00007f8862215fa0 R15: 00007f886233fa48 [ 2053.648558][ T3478] [ 2053.650480][ T8601] usb 1-1: usb_control_msg returned -71 [ 2053.886101][ T8601] usbtmc 1-1:16.0: can't read capabilities [ 2053.908488][ T8601] usb 1-1: USB disconnect, device number 44 [ 2054.076609][ T3489] netlink: 'syz.1.8113': attribute type 1 has an invalid length. [ 2054.085183][ T3489] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2054.174357][ T3495] fuse: Bad value for 'group_id' [ 2054.187802][ T3495] fuse: Bad value for 'group_id' [ 2054.508090][ T3499] syzkaller0: entered promiscuous mode [ 2054.596377][ T8601] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 2054.760588][ T3505] netlink: 'syz.1.8118': attribute type 1 has an invalid length. [ 2054.768459][ T3505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2055.056874][ T8603] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2055.188210][ T8601] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2055.205015][ T8601] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2055.215336][ T8601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.224216][ T8601] usb 1-1: Product: syz [ 2055.229128][ T8601] usb 1-1: Manufacturer: syz [ 2055.234111][ T8601] usb 1-1: SerialNumber: syz [ 2055.244539][ T8601] usb 1-1: config 0 descriptor?? [ 2055.260501][ T8601] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2055.305661][ T8584] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2055.316630][ T8603] usb 2-1: Using ep0 maxpacket: 32 [ 2055.338100][ T8603] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2055.364476][ T8603] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2055.382275][ T8603] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 2055.399609][ T8603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.435395][ T8603] usb 2-1: config 0 descriptor?? [ 2055.516371][ T8584] usb 6-1: Using ep0 maxpacket: 8 [ 2055.531729][ T8584] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2055.552726][ T8584] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2055.568976][ T3513] FAULT_INJECTION: forcing a failure. [ 2055.568976][ T3513] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.570924][ T8584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2055.581634][ T3513] CPU: 1 UID: 0 PID: 3513 Comm: syz.6.8121 Tainted: G L syzkaller #0 PREEMPT(full) [ 2055.581668][ T3513] Tainted: [L]=SOFTLOCKUP [ 2055.581677][ T3513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2055.581688][ T3513] Call Trace: [ 2055.581701][ T3513] [ 2055.581711][ T3513] dump_stack_lvl+0xe8/0x150 [ 2055.581739][ T3513] should_fail_ex+0x40c/0x560 [ 2055.581766][ T3513] should_failslab+0xa8/0x100 [ 2055.581800][ T3513] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 2055.581829][ T3513] ? __alloc_skb+0x1d7/0x7a0 [ 2055.581860][ T3513] __alloc_skb+0x1d7/0x7a0 [ 2055.581889][ T3513] tcp_stream_alloc_skb+0x3f/0x580 [ 2055.581975][ T3513] tcp_sendmsg_locked+0x1437/0x55c0 [ 2055.582019][ T3513] ? __lock_acquire+0x683/0x2cd0 [ 2055.582085][ T3513] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 2055.582116][ T3513] ? tcp_sendmsg+0x21/0x50 [ 2055.582148][ T3513] ? __local_bh_enable_ip+0xd0/0x130 [ 2055.582169][ T3513] ? __pfx_inet6_sendmsg+0x10/0x10 [ 2055.582193][ T3513] tcp_sendmsg+0x2f/0x50 [ 2055.582216][ T3513] __sys_sendto+0x4a3/0x710 [ 2055.582246][ T3513] ? __pfx___sys_sendto+0x10/0x10 [ 2055.582296][ T3513] ? exc_page_fault+0x6a/0xc0 [ 2055.582328][ T3513] ? do_user_addr_fault+0xc4a/0x1340 [ 2055.582352][ T3513] __x64_sys_sendto+0xde/0x100 [ 2055.582379][ T3513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2055.582400][ T3513] do_syscall_64+0x174/0x580 [ 2055.582418][ T3513] ? trace_irq_disable+0x3b/0x140 [ 2055.582444][ T3513] ? clear_bhb_loop+0x40/0x90 [ 2055.582468][ T3513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2055.582487][ T3513] RIP: 0033:0x7fbd1555d68e [ 2055.582508][ T3513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2055.582524][ T3513] RSP: 002b:00007fbd163bee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2055.582545][ T3513] RAX: ffffffffffffffda RBX: 00007fbd163c06c0 RCX: 00007fbd1555d68e [ 2055.582560][ T3513] RDX: 0000000000000020 RSI: 00007fbd163bf000 RDI: 0000000000000003 [ 2055.582572][ T3513] RBP: 0000000000000000 R08: 00007fbd163bef04 R09: 000000000000000c [ 2055.582584][ T3513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2055.582596][ T3513] R13: 00007fbd163bef58 R14: 00007fbd163bf000 R15: 0000000000000000 [ 2055.582626][ T3513] [ 2055.631435][ T8603] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2055.696813][ T8584] usb 6-1: config 0 descriptor?? [ 2056.087904][ T8584] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2056.187724][ T3522] bridge0: entered promiscuous mode [ 2056.193249][ T3522] bridge0: entered allmulticast mode [ 2056.500540][ T8601] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 2056.507640][ T8601] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 2056.519253][ T8601] usb 1-1: USB disconnect, device number 45 [ 2056.584942][T16047] usb 6-1: USB disconnect, device number 7 [ 2056.988385][ T3529] netlink: 'syz.1.8118': attribute type 4 has an invalid length. [ 2057.001089][ T3529] netlink: 'syz.1.8118': attribute type 4 has an invalid length. [ 2057.049452][T23013] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2057.062904][T23013] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2057.072669][T23013] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2057.081659][T23013] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2057.091944][T23013] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2057.092841][ T3529] loop8: detected capacity change from 0 to 8 [ 2057.101105][T23013] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2057.101161][T23013] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2057.101197][T23013] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2057.135615][ T3529] Dev loop8: unable to read RDB block 8 [ 2057.141603][ T3529] loop8: unable to read partition table [ 2057.149583][ T3529] loop8: partition table beyond EOD, truncated [ 2057.157357][ T3529] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2057.336945][ T3534] syzkaller0: entered promiscuous mode [ 2057.745840][ T8603] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 2057.785808][ T8601] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2057.906070][ T8603] usb 1-1: Using ep0 maxpacket: 16 [ 2057.915413][ T8603] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 2057.925406][ T8603] usb 1-1: config 0 has no interface number 0 [ 2057.932708][ T8603] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2057.944016][ T8603] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2057.962167][ T8601] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2057.973925][ T8601] usb 6-1: config 0 has no interfaces? [ 2058.193590][ T8603] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2058.205055][ T8603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.234641][ T8603] usb 1-1: Product: syz [ 2058.241242][ T8601] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 2058.253592][ T8603] usb 1-1: Manufacturer: syz [ 2058.259265][ T8601] usb 6-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 2058.259938][ T8584] usb 2-1: USB disconnect, device number 78 [ 2058.268514][ T8601] usb 6-1: Product: syz [ 2058.268541][ T8601] usb 6-1: Manufacturer: syz [ 2058.270281][ T8603] usb 1-1: SerialNumber: syz [ 2058.304825][ T8601] usb 6-1: config 0 descriptor?? [ 2058.315314][ T8603] usb 1-1: config 0 descriptor?? [ 2058.368639][ T3536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2058.384189][ T3536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2058.573218][ T5639] Bluetooth: hci1: Malformed LE Event: 0x0d [ 2058.589049][ T3538] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8129'. [ 2058.607929][ T8584] usb 6-1: USB disconnect, device number 8 [ 2058.733059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.741740][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2058.763650][ T3536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2058.771113][ T3536] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2059.131300][ T3552] QAT: Device 198 not found [ 2059.236374][ T8603] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2060.246611][ T8584] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2060.471648][ T8584] usb 6-1: device descriptor read/64, error -71 [ 2060.665499][ T3572] kvm: pic: level sensitive irq not supported [ 2060.665663][ T3572] kvm: pic: non byte read [ 2060.785972][ T8584] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 2060.955738][ T8584] usb 6-1: device descriptor read/64, error -71 [ 2061.087701][ T8584] usb usb6-port1: attempt power cycle [ 2061.455763][ T8584] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 2061.506384][ T8584] usb 6-1: device descriptor read/8, error -71 [ 2061.827168][ T8584] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 2061.876618][ T8584] usb 6-1: device descriptor read/8, error -71 [ 2061.986295][ T8584] usb usb6-port1: unable to enumerate USB device [ 2062.106498][ T8603] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 2062.117283][ T8603] asix 1-1:0.34: probe with driver asix failed with error -71 [ 2062.133147][ T8603] usb 1-1: USB disconnect, device number 46 [ 2062.189391][ T3584] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8144'. [ 2062.200522][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2063.173848][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 2063.173868][ T30] audit: type=1326 audit(1781515381.787:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.5.8149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2063.226571][ T30] audit: type=1326 audit(1781515381.807:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.5.8149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2063.262478][ T30] audit: type=1326 audit(1781515381.807:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.5.8149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2063.315677][ T30] audit: type=1326 audit(1781515381.807:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.5.8149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2063.360983][ T30] audit: type=1326 audit(1781515381.807:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.5.8149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f868475d68e code=0x7ffc0000 [ 2063.388295][ T30] audit: type=1326 audit(1781515381.927:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.5.8149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f868475d68e code=0x7ffc0000 [ 2063.423581][ T30] audit: type=1326 audit(1781515381.927:6382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.5.8149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2063.485780][ T30] audit: type=1326 audit(1781515381.927:6383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.5.8149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2063.511421][ T30] audit: type=1326 audit(1781515382.037:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.5.8149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2063.559897][ T30] audit: type=1326 audit(1781515382.037:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3596 comm="syz.5.8149" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f868479ce59 code=0x7ffc0000 [ 2063.814480][ T8603] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 2063.993992][ T3620] QAT: Device 198 not found [ 2064.101224][ T3614] syzkaller0: entered promiscuous mode [ 2064.106955][ T3614] syzkaller0: entered allmulticast mode [ 2064.335210][ T3614] syzkaller0: left allmulticast mode [ 2064.449715][ T3626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2065.836038][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2065.963841][ T3647] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8163'. [ 2065.972860][ T3647] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8163'. [ 2065.982014][ T3647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8163'. [ 2071.190541][ T3666] syzkaller0: entered promiscuous mode [ 2071.196092][ T3666] syzkaller0: entered allmulticast mode [ 2071.470412][ T3668] QAT: Device 198 not found [ 2071.486499][ T3673] netlink: 'syz.6.8171': attribute type 1 has an invalid length. [ 2071.546032][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.554793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2071.604028][ T3673] bond2: entered promiscuous mode [ 2071.617405][ T3673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2071.644733][ T3679] vlan2: entered allmulticast mode [ 2071.649909][ T3679] bond2: entered allmulticast mode [ 2071.833349][ T3673] bond2: (slave bridge1): making interface the new active one [ 2071.845665][ T3673] bridge1: entered promiscuous mode [ 2071.888782][ T3673] bridge1: entered allmulticast mode [ 2071.942974][ T3673] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 2072.162156][T24905] IPVS: starting estimator thread 0... [ 2072.170811][ T3686] netlink: 164 bytes leftover after parsing attributes in process `syz.5.8173'. [ 2072.180263][ T3686] netlink: 'syz.5.8173': attribute type 2 has an invalid length. [ 2072.254066][ T3688] IPVS: rr: FWM 3 0x00000003 - no destination available [ 2072.426009][ T3687] IPVS: using max 26 ests per chain, 62400 per kthread [ 2072.551852][ T3694] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8175'. [ 2073.195950][T24905] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2073.348935][T24905] usb 6-1: Using ep0 maxpacket: 16 [ 2073.665264][ T8603] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2073.878487][T24905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2073.894717][T24905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2073.907450][T24905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2073.920982][T24905] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2073.930580][T24905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.942002][T24905] usb 6-1: config 0 descriptor?? [ 2074.141158][ T8603] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 2074.168755][ T8603] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 2074.190296][ T8603] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.199796][ T8603] usb 1-1: Product: syz [ 2074.204959][ T8603] usb 1-1: Manufacturer: syz [ 2074.209675][ T8603] usb 1-1: SerialNumber: syz [ 2074.354923][ T3701] netlink: 'syz.7.8179': attribute type 11 has an invalid length. [ 2074.387577][ T3701] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 2074.394228][ T3701] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2074.403939][ T3701] vhci_hcd vhci_hcd.0: Device attached [ 2074.412497][ T3701] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(10) [ 2074.419424][ T3701] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2074.439891][ T3701] vhci_hcd vhci_hcd.0: Device attached [ 2074.451251][ T3701] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(12) [ 2074.458087][ T3701] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2074.465754][ T3701] vhci_hcd vhci_hcd.0: Device attached [ 2074.473901][ T3701] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(14) [ 2074.480547][ T3701] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2074.505808][ T3701] vhci_hcd vhci_hcd.0: Device attached [ 2074.785303][ T8603] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2074.792285][T11121] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 2074.808789][T24905] microsoft 0003:045E:07DA.008F: unknown main item tag 0x0 [ 2074.816175][T24905] microsoft 0003:045E:07DA.008F: unknown main item tag 0x0 [ 2074.823426][T24905] microsoft 0003:045E:07DA.008F: unknown main item tag 0x0 [ 2074.836348][T24905] microsoft 0003:045E:07DA.008F: unknown main item tag 0x0 [ 2074.844147][T24905] microsoft 0003:045E:07DA.008F: unknown main item tag 0x0 [ 2074.851605][T24905] microsoft 0003:045E:07DA.008F: unknown main item tag 0x0 [ 2074.858868][T24905] microsoft 0003:045E:07DA.008F: unknown main item tag 0x0 [ 2074.866545][T24905] microsoft 0003:045E:07DA.008F: unknown main item tag 0x0 [ 2074.875181][ T3721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8182'. [ 2074.898959][T24905] microsoft 0003:045E:07DA.008F: unknown main item tag 0x0 [ 2074.906333][T24905] microsoft 0003:045E:07DA.008F: unknown main item tag 0x0 [ 2074.928932][T24905] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.008F/input/input184 [ 2074.953466][T24905] microsoft 0003:045E:07DA.008F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 2075.002247][ T8603] usb 1-1: cannot request logical cluster ID: 3 (err: -71) [ 2075.009539][ T8603] usb 1-1: unit 80 not found! [ 2075.045769][T24906] usb 6-1: USB disconnect, device number 13 [ 2075.166072][ T8603] usb 1-1: USB disconnect, device number 47 [ 2075.191634][ T3716] udevd[3716]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2075.215829][ T8584] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 2075.386692][ T8584] usb 2-1: device descriptor read/64, error -71 [ 2075.469437][ T3733] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8184'. [ 2075.631083][ T3739] [ 2075.634075][ T3739] ===================================================== [ 2075.641033][ T3739] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2075.648609][ T3739] syzkaller #0 Tainted: G L [ 2075.654606][ T3739] ----------------------------------------------------- [ 2075.661640][ T3739] syz.5.8186/3739 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2075.669297][ T3739] ffff8880761300c0 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2075.678221][ T3739] [ 2075.678221][ T3739] and this task is already holding: [ 2075.685602][ T3739] ffff8880526b4028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xcb/0xc00 [ 2075.695914][ T3739] which would create a new lock dependency: [ 2075.701854][ T3739] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){...-}-{3:3} [ 2075.710074][ T3739] [ 2075.710074][ T3739] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2075.719538][ T3739] (&client->buffer_lock){..-.}-{3:3} [ 2075.719570][ T3739] [ 2075.719570][ T3739] ... which became SOFTIRQ-irq-safe at: [ 2075.733008][ T3739] lock_acquire+0x106/0x350 [ 2075.737725][ T3739] _raw_spin_lock+0x2e/0x40 [ 2075.742336][ T3739] evdev_pass_values+0xcb/0xc00 [ 2075.747285][ T3739] evdev_events+0x1e6/0x340 [ 2075.751884][ T3739] input_pass_values+0x288/0x890 [ 2075.756983][ T3739] input_event_dispose+0x3e5/0x6b0 [ 2075.762203][ T3739] input_event+0x84/0xc0 [ 2075.766545][ T3739] hidinput_hid_event+0x13d2/0x1ec0 [ 2075.771876][ T3739] hid_process_event+0x4be/0x620 [ 2075.776909][ T3739] hid_report_raw_event+0xf01/0x1870 [ 2075.782295][ T3739] __hid_input_report+0x454/0x580 [ 2075.787509][ T3739] hid_irq_in+0x492/0x710 [ 2075.792072][ T3739] __usb_hcd_giveback_urb+0x374/0x530 [ 2075.797656][ T3739] dummy_timer+0xac3/0x4b40 [ 2075.802369][ T3739] __hrtimer_run_queues+0x3bc/0xa10 [ 2075.807666][ T3739] hrtimer_run_softirq+0x17a/0x240 [ 2075.812991][ T3739] handle_softirqs+0x225/0x840 [ 2075.817859][ T3739] __irq_exit_rcu+0xca/0x220 [ 2075.822543][ T3739] irq_exit_rcu+0x9/0x30 [ 2075.826877][ T3739] sysvec_apic_timer_interrupt+0x57/0xc0 [ 2075.833181][ T3739] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2075.839262][ T3739] [ 2075.839262][ T3739] to a SOFTIRQ-irq-unsafe lock: [ 2075.846390][ T3739] (tasklist_lock){.+.+}-{3:3} [ 2075.846418][ T3739] [ 2075.846418][ T3739] ... which became SOFTIRQ-irq-unsafe at: [ 2075.859230][ T3739] ... [ 2075.859240][ T3739] lock_acquire+0x106/0x350 [ 2075.866416][ T3739] _raw_read_lock+0x36/0x50 [ 2075.871017][ T3739] __do_wait+0xd9/0x720 [ 2075.875278][ T3739] do_wait+0x1e7/0x510 [ 2075.879446][ T3739] kernel_wait+0xd6/0x1c0 [ 2075.883883][ T3739] call_usermodehelper_exec_work+0xbe/0x230 [ 2075.890148][ T3739] process_scheduled_works+0xa8e/0x14e0 [ 2075.895797][ T3739] worker_thread+0xa47/0xfb0 [ 2075.900586][ T3739] kthread+0x389/0x470 [ 2075.904775][ T3739] ret_from_fork+0x514/0xb70 [ 2075.909457][ T3739] ret_from_fork_asm+0x1a/0x30 [ 2075.914324][ T3739] [ 2075.914324][ T3739] other info that might help us debug this: [ 2075.914324][ T3739] [ 2075.924726][ T3739] Chain exists of: [ 2075.924726][ T3739] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 2075.924726][ T3739] [ 2075.938133][ T3739] Possible interrupt unsafe locking scenario: [ 2075.938133][ T3739] [ 2075.946548][ T3739] CPU0 CPU1 [ 2075.951921][ T3739] ---- ---- [ 2075.957293][ T3739] lock(tasklist_lock); [ 2075.961637][ T3739] local_irq_disable(); [ 2075.968567][ T3739] lock(&client->buffer_lock); [ 2075.975954][ T3739] lock(&new->fa_lock); [ 2075.982736][ T3739] [ 2075.986455][ T3739] lock(&client->buffer_lock); [ 2075.991501][ T3739] [ 2075.991501][ T3739] *** DEADLOCK *** [ 2075.991501][ T3739] [ 2075.999656][ T3739] 7 locks held by syz.5.8186/3739: [ 2076.004811][ T3739] #0: ffff88802c320110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 2076.013992][ T3739] #1: ffff88801f7ca230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 2076.024211][ T3739] #2: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 2076.034075][ T3739] #3: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2076.043678][ T3739] #4: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 2076.052922][ T3739] #5: ffff8880526b4028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xcb/0xc00 [ 2076.063408][ T3739] #6: ffffffff8e95c780 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2076.072750][ T3739] [ 2076.072750][ T3739] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2076.083177][ T3739] -> (&client->buffer_lock){..-.}-{3:3} { [ 2076.089388][ T3739] IN-SOFTIRQ-W at: [ 2076.093404][ T3739] lock_acquire+0x106/0x350 [ 2076.099839][ T3739] _raw_spin_lock+0x2e/0x40 [ 2076.106053][ T3739] evdev_pass_values+0xcb/0xc00 [ 2076.112753][ T3739] evdev_events+0x1e6/0x340 [ 2076.118914][ T3739] input_pass_values+0x288/0x890 [ 2076.125536][ T3739] input_event_dispose+0x3e5/0x6b0 [ 2076.132312][ T3739] input_event+0x84/0xc0 [ 2076.138307][ T3739] hidinput_hid_event+0x13d2/0x1ec0 [ 2076.145169][ T3739] hid_process_event+0x4be/0x620 [ 2076.151766][ T3739] hid_report_raw_event+0xf01/0x1870 [ 2076.158720][ T3739] __hid_input_report+0x454/0x580 [ 2076.165429][ T3739] hid_irq_in+0x492/0x710 [ 2076.171422][ T3739] __usb_hcd_giveback_urb+0x374/0x530 [ 2076.178485][ T3739] dummy_timer+0xac3/0x4b40 [ 2076.184772][ T3739] __hrtimer_run_queues+0x3bc/0xa10 [ 2076.191829][ T3739] hrtimer_run_softirq+0x17a/0x240 [ 2076.198701][ T3739] handle_softirqs+0x225/0x840 [ 2076.205329][ T3739] __irq_exit_rcu+0xca/0x220 [ 2076.211616][ T3739] irq_exit_rcu+0x9/0x30 [ 2076.217622][ T3739] sysvec_apic_timer_interrupt+0x57/0xc0 [ 2076.225103][ T3739] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2076.232744][ T3739] INITIAL USE at: [ 2076.236655][ T3739] lock_acquire+0x106/0x350 [ 2076.242828][ T3739] _raw_spin_lock+0x2e/0x40 [ 2076.249009][ T3739] evdev_handle_get_val+0x75/0xa30 [ 2076.255804][ T3739] evdev_ioctl_handler+0x11e5/0x1f60 [ 2076.262753][ T3739] __se_sys_ioctl+0xfc/0x170 [ 2076.269013][ T3739] do_syscall_64+0x174/0x580 [ 2076.275176][ T3739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2076.282637][ T3739] } [ 2076.285140][ T3739] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 2076.293301][ T3739] [ 2076.293301][ T3739] the dependencies between the lock to be acquired [ 2076.293311][ T3739] and SOFTIRQ-irq-unsafe lock: [ 2076.306850][ T3739] -> (tasklist_lock){.+.+}-{3:3} { [ 2076.312171][ T3739] HARDIRQ-ON-R at: [ 2076.316434][ T3739] lock_acquire+0x106/0x350 [ 2076.322943][ T3739] _raw_read_lock+0x36/0x50 [ 2076.329556][ T3739] __do_wait+0xd9/0x720 [ 2076.335725][ T3739] do_wait+0x1e7/0x510 [ 2076.341806][ T3739] kernel_wait+0xd6/0x1c0 [ 2076.348237][ T3739] call_usermodehelper_exec_work+0xbe/0x230 [ 2076.356235][ T3739] process_scheduled_works+0xa8e/0x14e0 [ 2076.363785][ T3739] worker_thread+0xa47/0xfb0 [ 2076.370479][ T3739] kthread+0x389/0x470 [ 2076.376720][ T3739] ret_from_fork+0x514/0xb70 [ 2076.383328][ T3739] ret_from_fork_asm+0x1a/0x30 [ 2076.390130][ T3739] SOFTIRQ-ON-R at: [ 2076.394304][ T3739] lock_acquire+0x106/0x350 [ 2076.400824][ T3739] _raw_read_lock+0x36/0x50 [ 2076.407349][ T3739] __do_wait+0xd9/0x720 [ 2076.413520][ T3739] do_wait+0x1e7/0x510 [ 2076.419597][ T3739] kernel_wait+0xd6/0x1c0 [ 2076.425951][ T3739] call_usermodehelper_exec_work+0xbe/0x230 [ 2076.433883][ T3739] process_scheduled_works+0xa8e/0x14e0 [ 2076.441556][ T3739] worker_thread+0xa47/0xfb0 [ 2076.448271][ T3739] kthread+0x389/0x470 [ 2076.454453][ T3739] ret_from_fork+0x514/0xb70 [ 2076.461481][ T3739] ret_from_fork_asm+0x1a/0x30 [ 2076.468343][ T3739] INITIAL USE at: [ 2076.472416][ T3739] lock_acquire+0x106/0x350 [ 2076.478926][ T3739] _raw_write_lock_irq+0x3d/0x50 [ 2076.485792][ T3739] copy_process+0x29eb/0x4380 [ 2076.492591][ T3739] kernel_clone+0x2d7/0x940 [ 2076.499020][ T3739] user_mode_thread+0x110/0x180 [ 2076.505900][ T3739] rest_init+0x23/0x300 [ 2076.511982][ T3739] start_kernel+0x38a/0x3e0 [ 2076.518503][ T3739] x86_64_start_reservations+0x24/0x30 [ 2076.526004][ T3739] x86_64_start_kernel+0x137/0x1b0 [ 2076.533324][ T3739] common_startup_64+0x13e/0x147 [ 2076.540628][ T3739] INITIAL READ USE at: [ 2076.545136][ T3739] lock_acquire+0x106/0x350 [ 2076.551995][ T3739] _raw_read_lock+0x36/0x50 [ 2076.558956][ T3739] __do_wait+0xd9/0x720 [ 2076.565470][ T3739] do_wait+0x1e7/0x510 [ 2076.571986][ T3739] kernel_wait+0xd6/0x1c0 [ 2076.578672][ T3739] call_usermodehelper_exec_work+0xbe/0x230 [ 2076.586925][ T3739] process_scheduled_works+0xa8e/0x14e0 [ 2076.595279][ T3739] worker_thread+0xa47/0xfb0 [ 2076.602421][ T3739] kthread+0x389/0x470 [ 2076.608854][ T3739] ret_from_fork+0x514/0xb70 [ 2076.615804][ T3739] ret_from_fork_asm+0x1a/0x30 [ 2076.622932][ T3739] } [ 2076.625622][ T3739] ... key at: [] tasklist_lock+0x18/0x40 [ 2076.633700][ T3739] ... acquired at: [ 2076.637956][ T3739] _raw_read_lock+0x36/0x50 [ 2076.642672][ T3739] send_sigurg+0x12b/0x420 [ 2076.647373][ T3739] sk_send_sigurg+0x6c/0x2e0 [ 2076.652241][ T3739] queue_oob+0x42c/0x4f0 [ 2076.656671][ T3739] unix_stream_sendmsg+0xc30/0xde0 [ 2076.661967][ T3739] ____sys_sendmsg+0x9b9/0xa20 [ 2076.667017][ T3739] ___sys_sendmsg+0x2a5/0x360 [ 2076.671991][ T3739] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2076.677237][ T3739] do_syscall_64+0x174/0x580 [ 2076.682024][ T3739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2076.688464][ T3739] [ 2076.690808][ T3739] -> (&f_owner->lock){....}-{3:3} { [ 2076.696135][ T3739] INITIAL USE at: [ 2076.700440][ T3739] lock_acquire+0x106/0x350 [ 2076.706701][ T3739] _raw_write_lock_irq+0x3d/0x50 [ 2076.713559][ T3739] __f_setown+0x5f/0x380 [ 2076.719570][ T3739] fcntl_dirnotify+0x3fd/0x6a0 [ 2076.726085][ T3739] do_fcntl+0x77e/0x1a30 [ 2076.732090][ T3739] __se_sys_fcntl+0xc8/0x150 [ 2076.738518][ T3739] do_syscall_64+0x174/0x580 [ 2076.744940][ T3739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2076.752590][ T3739] INITIAL READ USE at: [ 2076.757025][ T3739] lock_acquire+0x106/0x350 [ 2076.763799][ T3739] _raw_read_lock_irqsave+0x48/0x60 [ 2076.771373][ T3739] send_sigio+0x38/0x370 [ 2076.777834][ T3739] dnotify_handle_event+0x169/0x440 [ 2076.785471][ T3739] fsnotify+0x18a5/0x1b60 [ 2076.792160][ T3739] fsnotify_mkdir+0x121/0x180 [ 2076.799025][ T3739] vfs_mkdir+0x451/0x620 [ 2076.805543][ T3739] filename_mkdirat+0x285/0x510 [ 2076.812581][ T3739] __se_sys_mkdirat+0x35/0x150 [ 2076.819703][ T3739] do_syscall_64+0x174/0x580 [ 2076.826559][ T3739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2076.834634][ T3739] } [ 2076.837233][ T3739] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2076.846267][ T3739] ... acquired at: [ 2076.850179][ T3739] _raw_read_lock_irqsave+0x48/0x60 [ 2076.855578][ T3739] send_sigio+0x38/0x370 [ 2076.860035][ T3739] kill_fasync+0x24d/0x4d0 [ 2076.864652][ T3739] fsnotify_insert_event+0x30d/0x3f0 [ 2076.870303][ T3739] inotify_handle_inode_event+0x40c/0x640 [ 2076.876295][ T3739] fsnotify+0x18a5/0x1b60 [ 2076.880811][ T3739] dentry_unlink_inode+0x2d8/0x410 [ 2076.886115][ T3739] vfs_rmdir+0x24a/0x6a0 [ 2076.890539][ T3739] filename_rmdir+0x292/0x520 [ 2076.895478][ T3739] __se_sys_rmdir+0x2e/0x140 [ 2076.900247][ T3739] do_syscall_64+0x174/0x580 [ 2076.905033][ T3739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2076.911104][ T3739] [ 2076.913437][ T3739] -> (&new->fa_lock){...-}-{3:3} { [ 2076.918755][ T3739] IN-SOFTIRQ-R at: [ 2076.922738][ T3739] lock_acquire+0x106/0x350 [ 2076.928902][ T3739] _raw_read_lock_irqsave+0x48/0x60 [ 2076.935780][ T3739] kill_fasync+0x199/0x4d0 [ 2076.941859][ T3739] sock_wake_async+0x132/0x150 [ 2076.948457][ T3739] sock_def_readable+0x3c1/0x550 [ 2076.955228][ T3739] packet_rcv+0x11a2/0x16f0 [ 2076.961505][ T3739] dev_queue_xmit_nit+0x5c9/0xac0 [ 2076.968281][ T3739] dev_hard_start_xmit+0x1c1/0x830 [ 2076.975145][ T3739] __dev_queue_xmit+0x1435/0x37f0 [ 2076.981823][ T3739] hsr_forward_skb+0x152a/0x28e0 [ 2076.988510][ T3739] send_hsr_supervision_frame+0x733/0xcf0 [ 2076.995890][ T3739] hsr_announce+0x1db/0x370 [ 2077.002063][ T3739] call_timer_fn+0x192/0x5e0 [ 2077.008325][ T3739] __run_timer_base+0x652/0x8b0 [ 2077.014835][ T3739] run_timer_softirq+0xb7/0x170 [ 2077.021341][ T3739] handle_softirqs+0x225/0x840 [ 2077.027764][ T3739] __irq_exit_rcu+0xca/0x220 [ 2077.034019][ T3739] irq_exit_rcu+0x9/0x30 [ 2077.040007][ T3739] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2077.047485][ T3739] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2077.055210][ T3739] pv_native_safe_halt+0xf/0x20 [ 2077.061740][ T3739] default_idle+0x9/0x20 [ 2077.067752][ T3739] default_idle_call+0x72/0xb0 [ 2077.074188][ T3739] do_idle+0x36a/0x5f0 [ 2077.079920][ T3739] cpu_startup_entry+0x43/0x60 [ 2077.086354][ T3739] start_secondary+0x101/0x110 [ 2077.092873][ T3739] common_startup_64+0x13e/0x147 [ 2077.099563][ T3739] INITIAL USE at: [ 2077.103466][ T3739] lock_acquire+0x106/0x350 [ 2077.109719][ T3739] _raw_write_lock_irq+0x3d/0x50 [ 2077.116233][ T3739] fasync_remove_entry+0xf1/0x1c0 [ 2077.122841][ T3739] pipe_fasync+0xa9/0x1f0 [ 2077.128843][ T3739] __fput+0x88d/0xa50 [ 2077.134403][ T3739] task_work_run+0x1d9/0x270 [ 2077.140576][ T3739] exit_to_user_mode_loop+0x193/0x6b0 [ 2077.147702][ T3739] do_syscall_64+0x353/0x580 [ 2077.153902][ T3739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.161564][ T3739] INITIAL READ USE at: [ 2077.166093][ T3739] lock_acquire+0x106/0x350 [ 2077.172602][ T3739] _raw_read_lock_irqsave+0x48/0x60 [ 2077.180096][ T3739] kill_fasync+0x199/0x4d0 [ 2077.186636][ T3739] do_tee+0xa4d/0x10e0 [ 2077.192807][ T3739] __se_sys_tee+0x93/0x130 [ 2077.199495][ T3739] do_syscall_64+0x174/0x580 [ 2077.206091][ T3739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.214026][ T3739] } [ 2077.216532][ T3739] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2077.225343][ T3739] ... acquired at: [ 2077.229349][ T3739] _raw_read_lock_irqsave+0x48/0x60 [ 2077.234860][ T3739] kill_fasync+0x199/0x4d0 [ 2077.239481][ T3739] evdev_pass_values+0x552/0xc00 [ 2077.244612][ T3739] evdev_events+0x1e6/0x340 [ 2077.249296][ T3739] input_pass_values+0x288/0x890 [ 2077.254439][ T3739] input_event_dispose+0x330/0x6b0 [ 2077.259736][ T3739] input_inject_event+0x1dd/0x330 [ 2077.265065][ T3739] evdev_write+0x325/0x4c0 [ 2077.269669][ T3739] vfs_write+0x296/0xba0 [ 2077.274107][ T3739] ksys_write+0x150/0x270 [ 2077.278807][ T3739] do_syscall_64+0x174/0x580 [ 2077.283664][ T3739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.289736][ T3739] [ 2077.292068][ T3739] [ 2077.292068][ T3739] stack backtrace: [ 2077.298143][ T3739] CPU: 0 UID: 0 PID: 3739 Comm: syz.5.8186 Tainted: G L syzkaller #0 PREEMPT(full) [ 2077.298170][ T3739] Tainted: [L]=SOFTLOCKUP [ 2077.298177][ T3739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2077.298190][ T3739] Call Trace: [ 2077.298199][ T3739] [ 2077.298207][ T3739] dump_stack_lvl+0xe8/0x150 [ 2077.298229][ T3739] __lock_acquire+0x2a37/0x2cd0 [ 2077.298256][ T3739] ? kill_fasync+0x199/0x4d0 [ 2077.298282][ T3739] lock_acquire+0x106/0x350 [ 2077.298299][ T3739] ? kill_fasync+0x199/0x4d0 [ 2077.298325][ T3739] ? do_raw_spin_lock+0x12b/0x2f0 [ 2077.298349][ T3739] ? evdev_pass_values+0xcb/0xc00 [ 2077.298368][ T3739] _raw_read_lock_irqsave+0x48/0x60 [ 2077.298394][ T3739] ? kill_fasync+0x199/0x4d0 [ 2077.298419][ T3739] kill_fasync+0x199/0x4d0 [ 2077.298443][ T3739] ? kill_fasync+0x53/0x4d0 [ 2077.298469][ T3739] evdev_pass_values+0x552/0xc00 [ 2077.298490][ T3739] ? evdev_pass_values+0x6a1/0xc00 [ 2077.298509][ T3739] evdev_events+0x1e6/0x340 [ 2077.298525][ T3739] ? evdev_events+0x79/0x340 [ 2077.298542][ T3739] ? input_pass_values+0x8d/0x890 [ 2077.298568][ T3739] input_pass_values+0x288/0x890 [ 2077.298597][ T3739] ? input_handle_event+0x6fd/0xf10 [ 2077.298622][ T3739] input_event_dispose+0x330/0x6b0 [ 2077.298646][ T3739] input_inject_event+0x1dd/0x330 [ 2077.298669][ T3739] ? input_inject_event+0xb5/0x330 [ 2077.298693][ T3739] evdev_write+0x325/0x4c0 [ 2077.298711][ T3739] ? __lock_acquire+0x683/0x2cd0 [ 2077.298729][ T3739] ? __pfx_evdev_write+0x10/0x10 [ 2077.298755][ T3739] ? bpf_lsm_file_permission+0x9/0x20 [ 2077.298781][ T3739] ? security_file_permission+0x75/0x260 [ 2077.298803][ T3739] ? rw_verify_area+0x203/0x4c0 [ 2077.298828][ T3739] ? __pfx_evdev_write+0x10/0x10 [ 2077.298846][ T3739] vfs_write+0x296/0xba0 [ 2077.298873][ T3739] ? __pfx_vfs_write+0x10/0x10 [ 2077.298898][ T3739] ? __fget_files+0x2a/0x420 [ 2077.298921][ T3739] ? __fget_files+0x2a/0x420 [ 2077.298941][ T3739] ? __fget_files+0x3a2/0x420 [ 2077.298960][ T3739] ? __fget_files+0x2a/0x420 [ 2077.298984][ T3739] ksys_write+0x150/0x270 [ 2077.299010][ T3739] ? __pfx_ksys_write+0x10/0x10 [ 2077.299037][ T3739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.299055][ T3739] do_syscall_64+0x174/0x580 [ 2077.299073][ T3739] ? trace_irq_disable+0x3b/0x140 [ 2077.299099][ T3739] ? clear_bhb_loop+0x40/0x90 [ 2077.299119][ T3739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2077.299138][ T3739] RIP: 0033:0x7f868479ce59 [ 2077.299154][ T3739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2077.299172][ T3739] RSP: 002b:00007f8685645028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2077.299192][ T3739] RAX: ffffffffffffffda RBX: 00007f8684a15fa0 RCX: 00007f868479ce59 [ 2077.299207][ T3739] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000003 [ 2077.299219][ T3739] RBP: 00007f8684832d6f R08: 0000000000000000 R09: 0000000000000000 [ 2077.299231][ T3739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2077.299243][ T3739] R13: 00007f8684a16038 R14: 00007f8684a15fa0 R15: 00007f8684b3fa48 [ 2077.299262][ T3739] [ 2077.631619][ T8584] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 2077.699126][ T3704] vhci_hcd: connection reset by peer [ 2077.729722][ T3710] vhci_hcd: connection closed [ 2077.730008][T21215] vhci_hcd vhci_hcd.7: stop threads [ 2077.730774][ T3707] vhci_hcd: connection closed [ 2077.734910][T21215] vhci_hcd vhci_hcd.7: release socket [ 2077.734993][T21215] vhci_hcd vhci_hcd.7: disconnect device [ 2077.735148][T21215] vhci_hcd vhci_hcd.7: stop threads [ 2077.742512][ T3712] vhci_hcd: connection closed [ 2077.745795][T21215] vhci_hcd vhci_hcd.7: release socket [ 2077.771953][ T8584] usb 2-1: device descriptor read/64, error -71 [ 2077.780014][T21215] vhci_hcd vhci_hcd.7: disconnect device [ 2077.803750][T21215] vhci_hcd vhci_hcd.7: stop threads [ 2077.809548][T21215] vhci_hcd vhci_hcd.7: release socket [ 2077.815023][T21215] vhci_hcd vhci_hcd.7: disconnect device [ 2077.848274][T21215] vhci_hcd vhci_hcd.7: stop threads [ 2077.853712][T21215] vhci_hcd vhci_hcd.7: release socket [ 2077.860433][T21215] vhci_hcd vhci_hcd.7: disconnect device [ 2077.886021][ T8584] usb usb2-port1: attempt power cycle [ 2078.676190][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2078.684814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2080.536401][T11121] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 2082.946036][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2082.955030][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog