last executing test programs: 16m13.871188386s ago: executing program 4 (id=969): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0x6, 0xcaf, 0x8, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x1, 0x7ff, 0x100, 0x46, 0x1, 0x2, 0x401, 0x1, r3}, &(0x7f0000000280)=0x20) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020000100ecc2000000000000020020000000000100000000140003006c6f00"/48], 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002100002800c00028008000180000000000c0004400000ba"], 0xec}}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r7, r6, &(0x7f0000002700)=0x23, 0x1c) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000001480)={0x10004, 0x1, 0x8080000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) syz_clone3(&(0x7f0000000200)={0x1201a3400, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2d}, &(0x7f0000000480)=""/4096, 0x1000, &(0x7f00000000c0)=""/222, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, r9, {0x4}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={0x0, r6}, 0x18) r10 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r10, r10, r10}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'poly1305-simd\x00'}}) r11 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="5838202ee9fe00f766c47245444b", 0xe, r11) 16m9.977483652s ago: executing program 4 (id=979): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x4}, @device_a, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x0, {0xb, 0x7}, "2f8b9df0b4cb34d5"}]}}, 0x1e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) memfd_create(&(0x7f0000000600)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5p\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc', 0xe) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x4}, @device_a, @device_a, @multi={{0x1, 0x1, 0x1, 0x0, 0x1}, [{0x0, 0x0, {0xb, 0x7}, "2f8b9df0b4cb34d5"}]}}, 0x1e) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) memfd_create(&(0x7f0000000600)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;X\x14\x97\xabh\xd1/\x84\x8a\x91$GY\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2\x02\x00\x00\x00\x00\x00\x00\x006\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\x00\x00\x00\x00h\xaa\x15\x9a\xf7\x03\x00%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5p\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x9b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\xb35\x00\xfb\xac8wAph\xb4\x9d\x14\xf6\xec+f\'\xa3\xb9\xaf\x87X\xec\x13\x9c\xc5\x84\xde\x1b\x11\xe8\\}\xf81\xe6U3\xf9~\xdfD[\x1a\x02\x1f\xd2\x1as-\x9c\x01\x86\xa7\xb8\xc5\xeeOg\x99j\xedu\xafO@\x8e\xf24w\xad\x130Z&\xcb\x81\xfc', 0xe) (async) 16m7.253164976s ago: executing program 4 (id=986): unshare(0x2040400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_CONTINUE(r2, 0xc028aa05, &(0x7f00000000c0)={{&(0x7f0000000000/0x2000)=nil, 0x2000}, 0x1}) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) 16m6.892439287s ago: executing program 4 (id=987): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="6664607894a0b4ed9a4df6408a9db63da4783d", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mq_open(0x0, 0x42, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x100040) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)) ioctl$SG_IO(r3, 0x2285, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x48) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x800, 0x3, 0x16f, 0x8, 0x5, 0x1}, 0x0, 0x0) r8 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 16m5.68848785s ago: executing program 4 (id=991): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4a2000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) socket$kcm(0x2d, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12) mlock2(&(0x7f00005c2000/0x1000)=nil, 0x1000, 0x1) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x50bc, 0x4005, 0x2, {0x3, @raw_data="22b3fa3fa86c00cb30d6b3592ac49b44d0155513b3f18caaec61392335e391ed27ad13f4ed64abf904fb4d0bc3b2d5a46b04f4c88c476b86f31f62d65801d552b047a9de78ee28b8959ecc1f023a0ad059560e4aa29262bc7e764543182bf229d37d186ef2f860114936d8b8c1bd404bbc41a0b0f5acb46555e0d2b96c49fbdaba0740ffc411e1f2d45e452d05374fa15c0b5a524d945271af98f178d10d8e052947c82ae8dd85aab202353ed2aeb0be5b240baa5dd3d997e664963bd4594bd1ce040949f2f9d32d"}}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[], 0x27) r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r2, 0x71) r7 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x14, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) 16m2.099301679s ago: executing program 4 (id=1000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0xb6, 0x5, 0x8000, 0x0, "57b5e82e26f683ff2d53da47995c34ffb7c0b2975f409ff34498020095456ec0"}) 16m1.452368587s ago: executing program 32 (id=1000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c773666420f3a428ce80c00000000fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x4e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000100)={0xb6, 0x5, 0x8000, 0x0, "57b5e82e26f683ff2d53da47995c34ffb7c0b2975f409ff34498020095456ec0"}) 8m46.712715349s ago: executing program 1 (id=2593): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x8, 0x5, 0x0, 0xd1, 0x39, 0x7, 0xfc, 0x3, 0x8, 0x5, 0x6, 0x0, 0x9, 0xc, 0x12, 0x0, 0x7f, 0x3, '\x00', 0x6, 0x48000}) socket(0x5, 0x3, 0xe) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa640f01cfc4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61fb3232f1895ba91d703a697000ee0005000400000000000900020073797a3000000000240007800c00025a5d40d02daa624c6e7696040b07800c00e53fac1414280c0001800800014080ffffff05e034bd76001400020000000500"], 0x6c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x444, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xd, 0xa}, {}, {0xc, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x414, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0x2}}, @TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7a77, 0x5, 0x6, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x6, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000002, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x72, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4000004, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0x6, 0x4, 0x2, 0x5, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0xb60, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0xfffe, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0x81, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x444}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) 8m45.628852827s ago: executing program 1 (id=2596): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r2, 0x0, 0x80488ee) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfffffc5c, 0x6, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40281, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f00000008c0)={0x5, 0x4, 0x0, 'queue0\x00', 0x3}) 8m43.868441936s ago: executing program 1 (id=2603): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_clone3(&(0x7f0000000480)={0x1000000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x15, 0x0, 0x0}, 0x58) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x7fffffff, @remote, 0x0, 0x6}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x1, 0x7}], 0x10}}], 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000200)={@ethernet={0x1}, {&(0x7f0000000080)=""/178, 0xb2}, &(0x7f0000000000), 0x16}, 0xa0) 8m43.69915899s ago: executing program 1 (id=2606): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12f, 0x0) ptrace$getsig(0x4202, 0x0, 0xc, &(0x7f0000000540)) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x4) 8m41.766296009s ago: executing program 1 (id=2613): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r2, 0x0, 0x80488ee) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0xfffffc5c, 0x6, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x40281, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f00000008c0)={0x5, 0x4, 0x0, 'queue0\x00', 0x3}) 8m39.300008895s ago: executing program 1 (id=2619): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, &(0x7f0000000040)=@usbdevfs_driver={0x942, 0xa1a6, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1, 0x2, 0x3, 0x12) 8m24.185627918s ago: executing program 33 (id=2619): r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x74, 0x101341) ioctl$USBDEVFS_IOCTL(r0, 0x8008551c, &(0x7f0000000040)=@usbdevfs_driver={0x942, 0xa1a6, 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/81, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1, 0x2, 0x3, 0x12) 7.81320355s ago: executing program 3 (id=4444): open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0xb1) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x100000000) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0xb1) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) write$char_usb(r1, 0x0, 0x0) (async) truncate(&(0x7f0000000180)='./file0\x00', 0x100000000) (async) 7.285926396s ago: executing program 5 (id=4446): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x1, 0xffffffac, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x80000000, 0x80, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0xff, 0x2, 0x7, 0x0, 0x8, 0x0, 0x0, 0x6, 0xae4f, 0x2, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xdffffffffffffffc, 0x0, 0x0, 0x4d, 0x6, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0xfff, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x10000000003, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x3, 0x223, 0x0, 0x0, 0x2, 0x200000000000, 0x0, 0x6e, 0xc, 0x0, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffff10a, 0x3, 0x3, 0x1, 0x5, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x1400000000000000, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x71, 0x1]}) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000600)}) fremovexattr(r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000080)=0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000008}) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=0xee00, @ANYRES8=r2], 0x2c}}, 0x0) socket$rds(0x15, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000200)={0x1, r3}) open(&(0x7f0000000040)='./file1\x00', 0x1a1142, 0x0) (fail_nth: 14) 6.640761292s ago: executing program 5 (id=4448): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip_vs\x00') read$eventfd(r2, &(0x7f0000000340), 0x8) r3 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40000) ioctl$NBD_DO_IT(r3, 0x1261) write$6lowpan_enable(r0, &(0x7f0000000040)='0', 0x1) syz_usb_connect(0x5, 0x607, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], 0x0) 4.56114573s ago: executing program 3 (id=4457): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) r3 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a70, 0x10000, 0x22, 0x335, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x7) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb8) close(0x3) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/169, 0xa9}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x9a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) r8 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r8, 0x0) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) r9 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xb34f, 0x800, 0x0, 0xbfdfffff, 0x0, r6}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000300)={0x1, 0xfffff800, @name="06a719502448f4061d025b6891a24edc2820a085dd94aec6725ebcc4a578679b"}) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2040}}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dc4a) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x182) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='trusted.[%]<]\x00'], &(0x7f0000000200)=""/234, 0xea) 4.423217439s ago: executing program 0 (id=4458): socket$nl_route(0x10, 0x3, 0x0) unshare(0x2040600) (async) unshare(0x2040600) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) close(0xffffffffffffffff) clock_nanosleep(0x1, 0x1, 0x0, 0x0) (async) clock_nanosleep(0x1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) pread64(r0, 0x0, 0x0, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc0000001900f3fe2abd700001000000ff010000000000000000000000000001ac1e000100000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000ffffffe100000000000000000000000000000000000000009bff292c8de0e9b6e0862afa00000000010000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000003000000b8599e166db424c9aae03a476b6e000000000300000000440008004000080000009cfe4f85cc0ca0edba00d6246d17eaa031d9cd9a0db9d8b01d4710a6e991b475b8490d757edf286f38935a50abbd26c5001a688c5ab7556e010f00000000000000000000000000a277df73879c5f4a47c978bdc3e225ae88"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000940)=ANY=[@ANYBLOB="fc0000001900f3fe2abd700001000000ff010000000000000000000000000001ac1e000100000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000ffffffe100000000000000000000000000000000000000009bff292c8de0e9b6e0862afa00000000010000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000003000000b8599e166db424c9aae03a476b6e000000000300000000440008004000080000009cfe4f85cc0ca0edba00d6246d17eaa031d9cd9a0db9d8b01d4710a6e991b475b8490d757edf286f38935a50abbd26c5001a688c5ab7556e010f00000000000000000000000000a277df73879c5f4a47c978bdc3e225ae88"], 0xfc}}, 0x0) preadv(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) (async) preadv(r2, &(0x7f0000000040), 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000004040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = socket$caif_stream(0x25, 0x1, 0x0) recvmsg(r8, &(0x7f0000000280)={&(0x7f00000001c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1}, 0x40000002) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x20000000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x3, 0x1000, 0x0, r6, r7, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r3, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)=ANY=[@ANYBLOB="68020000200000042cbd7000fddbdf253c00000064010102000000000000000000000000640101000000000000000000000000004e2200004e230004020000202c000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="e4000600fc000000000000000000000000000000fc0100000000000000000000000000014e2300004e2380012800808032000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20010040}, 0x4080) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.264758225s ago: executing program 0 (id=4459): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x8}, {r0, 0x3048}], 0x2, 0x0, 0x0, 0x0) 4.255730688s ago: executing program 0 (id=4460): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x20) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000005, 0x11, r1, 0x0) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000000)='./file2\x00') 4.174823624s ago: executing program 2 (id=4461): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000040)={0x420, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x410, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x3f9, 0x9e, 0x0, 0x1, [@typed={0x5, 0x14e, 0x0, 0x0, @str='\x00'}, @generic="9cd426e1a1d579c1e0f7497cbe160c85696dd637c7bb8495333dbc7ea41aae4e1396341f05abd202bc580baa871f7aee27f22f11cbbc518b35402fbed5b02e180c1f7c043179", @nested={0x110, 0xa0, 0x0, 0x1, [@typed={0x8, 0x10b, 0x0, 0x0, @pid=r1}, @generic="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", @typed={0x8, 0x74, 0x0, 0x0, @u32=0x6}]}, @typed={0x4, 0xa6}, @nested={0x118, 0x84, 0x0, 0x1, [@nested={0x4, 0xeb}, @typed={0x5, 0xf4, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xef, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0x7c}, @typed={0x4, 0x100}, @nested={0x4, 0x5b}, @nested={0x4, 0xe8}, @generic="f585e66de6027ab678b6e93102942e857055b06a5399bf6d14ef22ae701a1fc1c6485cdfca804886c83e854dd6c635537d4372feaaba90955a34f4068dc4870a13abb3c6865eaf5026bd71c3711ab160cde955f7758622796bdbcac25a7f4f13c8aaff6a46e830ec45fe8efc84ac88dbe146620eb3cb0ee56454e0efeb3eb95fdba28ec7a07051cfb8b32ff7b63e1a6148feae1d8ba752b8d2b59c2ac0a845002d5285f3d0d7a2288b77fbdc00e3e1fd706fc1a3bb512c7b860c95ddbdfe3c53a0f3717e7eb67842206b7d2c9b09cf4b00211e989cdc1b68f883c4669793fb18eeb69cbe7d88da31", @typed={0x5, 0x33, 0x0, 0x0, @str='\x00'}]}, @nested={0x10, 0xb2, 0x0, 0x1, [@nested={0x4, 0xb6}, @nested={0x4, 0x13a}, @nested={0x4, 0x91}]}, @generic="cb06cad9e9bb1dd0f0a663cef1d692e70d34e197218fe6eeb2ed30488596eb6ca0db59458031b224f5eca2a61f32a0cb1ad695a1b064547587821f2e3335de77ead4d1", @typed={0xf8, 0x11b, 0x0, 0x0, @binary="1cea1ea5d4a985bc51ffd4f12d221ff9360d9adfa610899f7d3f611138840103f1fab7a5b67230ca9e0ae45da2e10ca858466d64ab9f7b4461e1904a45c4ca85ddc2e961c8089d46bda9a9ccd2a86c049c5fec4d2eae03a61aac0f4d9c10b2adcdfc736d33661cadf472d9c32dfba3257e03c97e85a5913cd22535e82a64e493561970cb12e0b7a89376878e740089133dee9fd5542ac1cde6bd6127acb5132f49c01aa4175790db37cecb26f2e182b457bf4200c244a2c46a67b92e495069e8c63f72a56072164dc4b244dd91ce85c18f57e612ea196a84580dce0da0650f352d074bfb2897413b0517200bf766581ed61bd1cd"}, @typed={0x8, 0x124, 0x0, 0x0, @pid=r2}, @nested={0x28, 0x62, 0x0, 0x1, [@nested={0x4, 0x74}, @nested={0x4, 0x118}, @nested={0x4, 0xcd}, @typed={0x4, 0x36}, @nested={0x4, 0x36}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x64}, @generic, @nested={0x4, 0x117}]}]}]}]}, 0x420}], 0x1, 0x0, 0x0, 0x4009074}, 0x0) 4.028461703s ago: executing program 2 (id=4462): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='^\x00', &(0x7f0000000180)='\x00', 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffb}, {0x0, 0xfef2, 0xfffffffffffffffd, 0x40000000000}, 0x7f, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d4, 0x32}, 0x2, @in=@broadcast, 0xffffbffe, 0x3, 0x0, 0x8, 0x7f, 0x0, 0x7}}, 0xe8) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x620}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r2], 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf0f046, 0xff80}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40008042}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x140c, 0x20, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000081}, 0x80) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x5c}}, 0x4000000) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000080)) r10 = syz_open_dev$video(&(0x7f0000000540), 0x28000, 0x8080) ioctl$VIDIOC_TRY_FMT(r10, 0xc0d05640, &(0x7f0000000580)={0xe, @sliced={0x6, [0x3, 0x6, 0x987, 0x7, 0x7fff, 0x1e9c, 0x9, 0x2, 0x5, 0x2, 0xfff, 0x2, 0x9, 0x5, 0x5, 0xf28, 0x532, 0x1000, 0x9, 0x6db6, 0x9, 0x3, 0x2, 0x10, 0x4, 0x9, 0x0, 0xf16, 0x9, 0x3, 0x3, 0x2, 0x710, 0x7, 0x80, 0x5, 0x1, 0x8, 0x1, 0x7, 0x2, 0x5, 0x0, 0x8000, 0x1, 0x9, 0x9], 0x2}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0xff, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x6, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140)=@x86={0x6, 0x52, 0xfb, 0x0, 0x7, 0x4, 0x3, 0x17, 0xf, 0x9, 0x0, 0x62, 0x0, 0x3, 0x9, 0x3, 0x6, 0x7, 0x0, '\x00', 0x4, 0x2}) ioctl$KVM_RUN(r9, 0xae80, 0x0) futex_waitv(&(0x7f00000007c0)=[{0x0, 0xffffffffffffffff, 0x2}], 0x1, 0x0, 0x0, 0x0) r11 = syz_open_dev$sg(&(0x7f00000001c0), 0x8, 0x40) ioctl$SG_GET_COMMAND_Q(r11, 0x2270, &(0x7f0000000240)) 4.012689336s ago: executing program 0 (id=4463): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x983c, 0x1, 0x1, 0x1bc}, &(0x7f0000000240)=0x0, &(0x7f00000007c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x51, 0x0, 0x80, 0x2, 0x0, 0x127}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000000c0)={0x1, r2, 0x31, {0x5, 0x1}, 0xd}, 0x1) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst={0x6, 0x3, 0x6, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005ae4c4109605015e2189a902030109021b0001000000000904d60001b5e1450009eeaa64b737b335f0f3377eaac1bc49058300ff03030704"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000ac0)=ANY=[@ANYBLOB="400e10"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) syz_usb_control_io$printer(r5, 0x0, 0x0) 3.893333848s ago: executing program 6 (id=4464): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') (async) r2 = socket(0x18, 0x4, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'tunl0\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x60080, 0x0) ioctl$TCXONC(r3, 0x540a, 0xfffffffffffffffd) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) 3.740634619s ago: executing program 2 (id=4465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000000101ed000000000000000002000000180002801400018008000100e000000108000200e0000001"], 0x2c}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) accept4(r2, &(0x7f0000000140)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000000)=0x80, 0x80000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000000101ed000000000000000002000000180002801400018008000100e000000108000200e0000001"], 0x2c}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) (async) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) (async) accept4(r2, &(0x7f0000000140)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000000)=0x80, 0x80000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) 3.723212949s ago: executing program 6 (id=4466): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0xe) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x200, 0x20800) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000500)={0x0, 0x7f, 0x1, 0x1}) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@fallback, 0x7, 0x15, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000900)={0x0, 0x9, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000d00)={0x0, 0x2d1a, 0x1, [0x101, 0x9, 0xfffffffffffffffa, 0x281d8e35, 0xffffffffffffff27], [0x77, 0x8001, 0x2, 0x4, 0x2, 0x4, 0x0, 0x1, 0x0, 0x7, 0x1000, 0x1, 0xae85, 0x4, 0x2, 0x62, 0x80000000, 0x3, 0x10001, 0x1ac257ea, 0x1c91, 0xffffffff, 0x9, 0x80, 0x1, 0x4, 0x6, 0x6, 0x9, 0x2, 0x2, 0xfffffffffffffffc, 0x2e, 0x9, 0x1, 0x9, 0x7, 0x259, 0x6e1, 0x7fffffffffffffff, 0x5, 0x6, 0xe3, 0x2, 0x1, 0x6, 0xffffffff, 0x0, 0x8000000000000001, 0x0, 0xdae, 0xb, 0x7, 0x2, 0x0, 0x3, 0x576, 0x0, 0x400, 0x0, 0x4, 0x8, 0x1, 0x7, 0x8, 0x9, 0x9, 0xfffffffffffffff1, 0x6, 0x4, 0x3, 0x101, 0xffff, 0x40, 0xea1, 0x7, 0x7, 0x3, 0xf, 0x61, 0xd, 0x5, 0x7, 0x7fffffff, 0x9, 0xfffffffffffffff9, 0x65a, 0x3, 0x9, 0x3ff, 0x0, 0x1, 0x6, 0x3, 0x464, 0x0, 0x3, 0x7, 0x6e, 0xf, 0x100000001, 0x7, 0x9, 0x9, 0x5e4, 0x0, 0x4, 0xccb, 0x6, 0xfffffffffffffffb, 0x7, 0x7, 0x7fff, 0x0, 0xf, 0x2, 0xffffffffffffff02, 0x3, 0x5, 0x2, 0x9]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001140)={0x0, 0x1, {0x9, @usage=0x1, r6, 0x2, 0x4, 0x80000001, 0x0, 0x10001, 0x18, @struct={0x1, 0xfffd}, 0x101, 0x8, [0x1, 0xd, 0x7, 0x2, 0xd56e, 0x100000000]}, {0x72, @usage=0x8, r7, 0x1ef, 0x200, 0x6, 0xa3, 0x5, 0x88, @struct={0xffff, 0x1}, 0x2, 0x10001, [0x0, 0x7, 0x6, 0x7, 0x3, 0x8]}, {0x1, @struct={0x6, 0xfffffffa}, r8, 0x4, 0x0, 0x9, 0x5, 0x3, 0x40, @struct={0x5, 0x2}, 0x4, 0x1, [0x401, 0x3, 0x3b0, 0x4, 0x8000, 0x58e]}, {0x3, 0x1, 0x7fff}}) socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) r10 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x280000, 0x0) ioctl$SNDCTL_SEQ_SYNC(r10, 0x5101) socket$netlink(0x10, 0x3, 0xb) socket$tipc(0x1e, 0x2, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000001540)={0x5, 0x1, {0x1ff, @struct={0x6f, 0xae3}, r7, 0x4, 0x3, 0x3, 0x5, 0x76b39060, 0x48, @struct={0x9, 0xfffffffa}, 0x3, 0xff, [0x0, 0x3, 0xe555, 0xffffffff, 0x2, 0x392a]}, {0x5, @usage=0x3, r9, 0x6, 0xfffffffffffffff8, 0x27497168, 0x4, 0x5, 0x8, @struct={0x1, 0x1}, 0x9, 0x3ff, [0x8, 0x4, 0xff, 0x9, 0x5, 0x80eb]}, {0x5, @struct, r6, 0x1000, 0x4, 0x8000000000000000, 0x0, 0x5d, 0x3, @usage=0x80000001, 0x8, 0x4, [0x80000001, 0x7, 0x0, 0x0, 0x9, 0x4]}, {0x800000000000, 0xe733, 0x40}}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13], 0x90}}, 0x0) 3.379960876s ago: executing program 2 (id=4467): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) lseek(r0, 0x80, 0x3) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000000)={0xae00000000000000, 0x80a0000, 0x1800000, 0x0, 0x10}) (async) syz_usb_disconnect(r1) (async) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SNDCTL_MIDI_INFO(r5, 0xc074510c, &(0x7f0000000100)={"7dd314b99591cca3a118b3adb41dd10b9ac9b0d5ef474ac6fa33220a23f0", 0x4, 0x471, 0x2, [0x7f, 0x2, 0x101, 0x1, 0x57, 0x6, 0x9, 0xffffffc8, 0x3, 0x800, 0xfffffffd, 0xa5, 0x0, 0x3, 0x6c2, 0x10001, 0xfee, 0xffffd152]}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 3.367162635s ago: executing program 5 (id=4468): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000040)=0x9001, 0x4) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setresgid(0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403", @ANYRES32], 0x0) 3.129886909s ago: executing program 6 (id=4469): ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x1, 0xffffffac, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x80000000, 0x80, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0xff, 0x2, 0x7, 0x0, 0x8, 0x0, 0x0, 0x6, 0xae4f, 0x2, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0xdffffffffffffffc, 0x0, 0x0, 0x4d, 0x6, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0xfff, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0x8ffffffff, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x10000000003, 0xfffffffffffffffd, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x3, 0x223, 0x0, 0x0, 0x2, 0x200000000000, 0x0, 0x6e, 0xc, 0x0, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffff10a, 0x3, 0x3, 0x1, 0x5, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x4, 0x0, 0x0, 0x1400000000000000, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x71, 0x1]}) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000600)}) fremovexattr(r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000080)=0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x20000008}) openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=0xee00, @ANYRES8=r2], 0x2c}}, 0x0) socket$rds(0x15, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0104000000000000000001000000000000000841000100000018ff"], 0x68}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000640)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f000070f000/0x4000)=nil, &(0x7f0000496000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00002c1000/0x14000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000e9000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f00008e9000/0x1000)=nil, &(0x7f00003fd000/0xc00000)=nil, &(0x7f00000005c0)="d8c12786a5c202ccad5416a70575b0ccbb7b9a6ece54e9397b90ea4756a63bd7734f7e4c05390114f5e97ea47d38c63ab516b859a9da20807974caa129b47e6208118985dc3e88ada73cc3af05fdd166445259d699fe", 0x56}, 0x68) ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000200)={0x1, r3}) open(&(0x7f0000000040)='./file1\x00', 0x1a1142, 0x0) 3.12910396s ago: executing program 2 (id=4470): socket$inet6(0xa, 0x3, 0x8000000003c) creat(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000009c0)={0x6c, r3, 0x1, 0x470bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x48, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @broadcast, @from_mac, {0x0, 0x20}, @value=@ver_80211n={0x0, 0x9, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0xe, @default, 0x40, @void, @void, @val={0x3, 0x1, 0x2c}, @val={0x4, 0x6, {0x0, 0x5, 0x2, 0xe8}}, @val={0x6, 0x2, 0xd}, @val={0x5, 0x3, {0x0, 0xd4, 0x2}}, @val={0x25, 0x3, {0x1, 0xc, 0xd}}, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @void, @void, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x6a845ecb6f203e71}, 0x24008080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() r6 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7279, 0x0, 0x2, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.795004621s ago: executing program 3 (id=4471): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket(0x10, 0x80000, 0xfffffffd) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x68, 0x28, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r5, {0x1}, {0xd}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000804}, 0x40) socket$qrtr(0x2a, 0x2, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r7, 0x1, 0xa, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "9f2dccacf7364d6e1bd9000000000008", "32ec00", "bb10000000000001"}, 0x28) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) r8 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000040)={0x1, r8}) r9 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000a00), 0x0, 0x40c00) readv(r10, &(0x7f0000000280)=[{&(0x7f0000000a40)=""/191, 0xbf}, {0x0}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xa}}) 2.755510614s ago: executing program 6 (id=4472): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x0) syz_io_uring_setup(0x3487, &(0x7f0000000140)={0x0, 0x5b17, 0x1, 0x2, 0x2e3}, 0xfffffffffffffffc, &(0x7f00000001c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') writev(r3, &(0x7f0000000200)=[{&(0x7f0000000080)="58b2", 0x2}, {&(0x7f00000000c0)="fc", 0x1}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x110, r3, 0x0) 2.344771669s ago: executing program 6 (id=4473): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000000)="dd", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="e3", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000080)={r3}) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 2.183193131s ago: executing program 2 (id=4474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000029c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008204"]) r5 = getpid() syz_clone3(&(0x7f00000011c0)={0x4040000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0xfffffffffffffd44, 0x0, &(0x7f0000000040)=[r5, r5], 0x1}, 0x58) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) syz_usb_connect(0x0, 0xe6, &(0x7f0000000280)=ANY=[@ANYRESHEX=r5], 0x0) 2.098689138s ago: executing program 6 (id=4475): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r1) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0xffffffff, 0x25a848a, 0xffff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = syz_io_uring_setup(0x3ccf, &(0x7f00000006c0)={0x0, 0xffffffff, 0x10100, 0x0, 0x2f1, 0x0, r1}, &(0x7f0000000480), &(0x7f0000000300)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0xc5f7}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x7, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) (async) io_setup(0xfff, &(0x7f00000004c0)=0x0) io_pgetevents(r10, 0x8, 0x4, &(0x7f0000000500)=[{}, {}, {}, {}], &(0x7f0000000580)={0x77359400}, &(0x7f0000000640)={&(0x7f0000000600)={[0x8]}, 0x8}) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5044de904b9ea7d64200000000000000020000002400048020000180070001006374000014000280080002400000000208000140040000160900010073797a30000000000900020073797a3200000000140000001100410000000000000000000000000a6a47e8220991c59f6c416006c600468b502c5846cdb792167b990506009e91122b86c523c9819b746d5b7b164f998a640e09ef14042721f2270bf3fa2438af"], 0x78}}, 0x0) r11 = socket(0x1a, 0x800, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x4) 1.808598896s ago: executing program 0 (id=4476): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000580)={0xa0244080, &(0x7f0000000100), &(0x7f00000002c0), &(0x7f0000000300), {0x35}, &(0x7f0000000340)=""/203, 0xcb, &(0x7f0000000440)=""/147, &(0x7f0000000500)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) syz_io_uring_setup(0x98b, &(0x7f0000000040)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, 0x0, 0x0) userfaultfd(0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) preadv2(r1, &(0x7f0000000140), 0x10000000000002dd, 0x10001, 0xa78, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x23af, 0x400400) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000180)=""/214) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 833.70508ms ago: executing program 5 (id=4477): setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0xaaaaaaaaaaaadd6, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(r1) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000040)={0x1, 0x4, 0x3, 0x8, '\x00', 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x80000) 832.736165ms ago: executing program 0 (id=4478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000700000000fcffffff"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080003010040"]) 832.509058ms ago: executing program 34 (id=4478): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000700000000fcffffff"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080003010040"]) 762.525124ms ago: executing program 5 (id=4480): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xfff2}, {0x0, 0x8}, {0x0, 0xb}}}, 0x24}}, 0x20040000) 527.283518ms ago: executing program 3 (id=4481): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000200)=[{r1, 0x40}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x94, r4, 0xc79c59394d69f4e3, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x106}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfb}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0xffffffffffffff80}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c014) r5 = dup(r2) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000100)=0x772, 0x400008) write$UHID_INPUT(r5, &(0x7f0000002080)={0x2, {"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", 0x1000}}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000130101c0"]) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x2, @tick=0x4, {0x1}, {}, @raw32={[0x80ef]}}], 0x1c) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x8, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 201.589096ms ago: executing program 5 (id=4482): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) fcntl$lock(r3, 0x24, &(0x7f0000000440)={0x300, 0x2, 0x800, 0xfffffffffffffffc}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x10, 0x0, &(0x7f00000002c0)) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x800) r6 = syz_io_uring_setup(0x5c12, &(0x7f0000000080)={0x0, 0x6c0e, 0x10000}, &(0x7f0000000440), &(0x7f0000000340)=0x0) syz_io_uring_setup(0x17c2, &(0x7f00000017c0)={0x0, 0x82ea, 0x800, 0x1, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0xb15, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000430001"], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0xfffffffffffffd5c, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x400, 0x4, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x48014}, 0x4000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) 124.721513ms ago: executing program 3 (id=4483): socket$alg(0x26, 0x5, 0x0) (async) syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006881c340ac051b02d7ac010203010902360001000000000904b6000403d7020009050700080007010109050f03"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) process_vm_readv(r2, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000140)=""/204, 0xcc}, {&(0x7f0000000a80)=""/43, 0x2b}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000540)=""/8, 0x8}, {&(0x7f0000000580)=""/99, 0x63}, {&(0x7f0000000600)=""/31, 0x1f}, {&(0x7f0000000640)=""/97, 0x61}], 0xa, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/160, 0xa0}, {&(0x7f0000000c00)=""/91, 0x5b}, {&(0x7f00000008c0)=""/80, 0x50}, {&(0x7f0000000940)=""/1, 0x1}, {&(0x7f0000000980)=""/232, 0xe8}], 0x5, 0x0) (async) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x2e, 0x2, 0x1, "d569e8e1dd2f1ae97ee8589301f453a0c04b1410b2eafa4496ba216b1e8ac11e", 0x384c4150}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b00)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)={0x38, r1, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 0s ago: executing program 3 (id=4484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014002000000008000840000000000500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x8) write$cgroup_int(r4, &(0x7f0000000080)=0x400000008002, 0x12) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r5, &(0x7f0000000140), 0x8, 0x0) pipe(&(0x7f0000000080)) r6 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r7, 0x25, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usbip_server_init(0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0x7f, 0xc9, 0xb6}}}}, 0xa) setsockopt$inet6_buf(r8, 0x29, 0x14, 0x0, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r9, 0x0, 0x0) chdir(0x0) socket$nl_route(0x10, 0x3, 0x0) close(r6) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000380)={0xc0, 0x0, 0x8000}) kernel console output (not intermixed with test programs): Gadget: couldn't find an available UDC or it's busy [ 1278.664054][T22673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.758247][T22678] tipc: Started in network mode [ 1278.763491][T22678] tipc: Node identity 00000000000000000000000000004001, cluster identity 4711 [ 1278.785957][T22678] tipc: Enabling of bearer rejected, failed to enable media [ 1278.894506][T17589] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1279.085608][ T5830] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1279.209915][T22688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4165'. [ 1279.376894][T22694] bridge0: entered promiscuous mode [ 1279.444664][T22694] bridge0: entered allmulticast mode [ 1279.865275][ T47] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1280.004520][ T47] usb 1-1: device descriptor read/64, error -71 [ 1280.320008][ T47] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1280.374486][ T5915] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1280.476595][ T47] usb 1-1: device descriptor read/64, error -71 [ 1280.534989][ T5915] usb 6-1: Using ep0 maxpacket: 32 [ 1280.550190][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.560702][ T5915] usb 6-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1280.574972][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.592570][ T5915] usb 6-1: config 0 descriptor?? [ 1280.598133][ T47] usb usb1-port1: attempt power cycle [ 1280.944809][ T47] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1281.022743][ T47] usb 1-1: device descriptor read/8, error -71 [ 1281.048126][ T5915] stadia 0003:18D1:9400.0043: item fetching failed at offset 0/4 [ 1281.063379][ T5915] stadia 0003:18D1:9400.0043: parse failed [ 1281.073660][ T5915] stadia 0003:18D1:9400.0043: probe with driver stadia failed with error -22 [ 1281.225829][T22617] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 1281.266094][ T5915] usb 3-1: USB disconnect, device number 86 [ 1281.309736][ T47] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1281.355570][ T47] usb 1-1: device descriptor read/8, error -71 [ 1281.438520][T22725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.453635][T22725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.489583][ T47] usb usb1-port1: unable to enumerate USB device [ 1281.500737][ T30] audit: type=1326 audit(1747771547.164:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.5.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b7d8e969 code=0x7ffc0000 [ 1281.550999][ T30] audit: type=1326 audit(1747771547.174:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.5.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4b7d8e969 code=0x7ffc0000 [ 1281.609500][ T30] audit: type=1326 audit(1747771547.174:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.5.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b7d8e969 code=0x7ffc0000 [ 1281.652023][ T30] audit: type=1326 audit(1747771547.174:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.5.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b7d8e969 code=0x7ffc0000 [ 1281.677754][ T30] audit: type=1326 audit(1747771547.174:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.5.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff4b7d8e969 code=0x7ffc0000 [ 1281.703350][ T30] audit: type=1326 audit(1747771547.174:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.5.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b7d8e969 code=0x7ffc0000 [ 1281.704633][T17589] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1281.725786][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.732559][ T30] audit: type=1326 audit(1747771547.174:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22715 comm="syz.5.4173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4b7d8e969 code=0x7ffc0000 [ 1281.793486][ T5915] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1281.980036][T17589] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1281.987796][ T5915] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1282.001765][T17589] usb 4-1: can't read configurations, error -61 [ 1282.009454][ T5915] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1282.022756][ T5915] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1282.032353][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1282.043609][ T5915] usb 3-1: Product: syz [ 1282.050174][ T5915] usb 3-1: Manufacturer: syz [ 1282.057440][ T5915] usb 3-1: SerialNumber: syz [ 1282.075046][ T5915] usb 3-1: config 0 descriptor?? [ 1282.090205][ T5915] usb 3-1: selecting invalid altsetting 0 [ 1282.144559][T17589] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1282.290477][ T5901] usb 3-1: USB disconnect, device number 87 [ 1282.313310][T17589] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1282.332111][T17589] usb 4-1: can't read configurations, error -61 [ 1282.349165][T17589] usb usb4-port1: attempt power cycle [ 1282.694776][T17589] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1282.729983][T17589] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1282.738217][T17589] usb 4-1: can't read configurations, error -61 [ 1282.875201][T17589] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1282.910582][T17589] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1282.921809][T17589] usb 4-1: can't read configurations, error -61 [ 1282.946075][T17589] usb usb4-port1: unable to enumerate USB device [ 1283.014581][ T5915] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1283.396674][ T5915] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 1283.411814][ T5915] usb 1-1: config 0 has no interface number 0 [ 1283.426405][ T5915] usb 1-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19 [ 1283.446876][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.463398][ T5915] usb 1-1: Product: syz [ 1283.481954][ T5915] usb 1-1: Manufacturer: syz [ 1283.522411][ T5915] usb 1-1: SerialNumber: syz [ 1283.559034][ T47] usb 6-1: USB disconnect, device number 97 [ 1283.641508][ T5915] usb 1-1: config 0 descriptor?? [ 1283.825252][ T5915] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state. [ 1283.857423][ T5915] dvb-usb: bulk message failed: -22 (2/0) [ 1283.866812][ T5915] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1283.892695][ T5915] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353)) [ 1283.914006][ T5915] usb 1-1: media controller created [ 1283.925546][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1283.947773][ T5915] usb 1-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 1283.961718][ T5915] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1284.064541][ T47] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1284.194607][ T5915] rc_core: IR keymap rc-dtt200u not found [ 1284.200467][ T5915] Registered IR keymap rc-empty [ 1284.248059][ T5915] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1284.291331][ T5915] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input117 [ 1284.340464][ T5915] dvb-usb: schedule remote query interval to 300 msecs. [ 1284.353552][ T5915] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected. [ 1284.373744][ T5915] usb 1-1: USB disconnect, device number 107 [ 1284.524245][ T5915] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected. [ 1284.648733][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4184'. [ 1284.659192][T22754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4184'. [ 1284.737770][T22761] usb usb8: usbfs: process 22761 (syz.3.4183) did not claim interface 0 before use [ 1285.234667][ T5901] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1285.384716][ T5901] usb 1-1: Using ep0 maxpacket: 8 [ 1285.399118][ T5901] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 1285.417890][ T5901] usb 1-1: config 0 has no interface number 0 [ 1285.429252][ T5901] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1285.440853][ T5901] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1285.470639][ T5901] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1285.500614][ T5901] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1285.541794][ T5901] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1285.554451][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.562506][ T5901] usb 1-1: Product: syz [ 1285.574820][ T47] usb 6-1: device descriptor read/64, error -71 [ 1285.590642][ T5901] usb 1-1: Manufacturer: syz [ 1285.600622][ T5901] usb 1-1: SerialNumber: syz [ 1285.628774][ T5901] usb 1-1: config 0 descriptor?? [ 1285.844674][ T47] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1285.876799][ T5901] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1286.028512][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1286.038932][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1286.049863][ T47] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1286.060598][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.082985][ T47] usb 6-1: config 0 descriptor?? [ 1286.099396][ T47] hdpvr 6-1:0.0: Could not find bulk-in endpoint [ 1286.116985][ T47] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12 [ 1286.496591][T22791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.505180][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880790bf800: rx timeout, send abort [ 1286.513701][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880790bf800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1286.540284][T22791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.704581][ T5901] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1286.760248][ T5887] usb 6-1: USB disconnect, device number 99 [ 1286.870568][ T5901] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 1286.924757][ T5901] usb 4-1: config 0 has no interface number 0 [ 1286.969594][ T5901] usb 4-1: config 0 interface 239 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1286.989703][T15830] usb 1-1: USB disconnect, device number 108 [ 1287.021354][ T5901] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1287.051762][ T5901] usb 4-1: config 0 interface 239 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1287.071891][ T5901] usb 4-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=60.d9 [ 1287.089086][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.098495][ T5901] usb 4-1: Product: syz [ 1287.102795][ T5901] usb 4-1: Manufacturer: syz [ 1287.112982][ T5901] usb 4-1: SerialNumber: syz [ 1287.133943][ T5901] usb 4-1: config 0 descriptor?? [ 1287.143506][T22790] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1287.151136][T22799] syzkaller1: entered promiscuous mode [ 1287.181108][T22799] syzkaller1: entered allmulticast mode [ 1287.377497][T22790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.391974][T22790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.423682][ T5901] usb 4-1: probing VID:PID(2201:012C) [ 1287.451079][ T5901] usb 4-1: vub300 testing BULK OUT EndPoint(0) 02 [ 1287.467955][ T5901] usb 4-1: vub300 testing BULK IN EndPoint(1) 82 [ 1287.488157][ T5901] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 1287.516323][ T5901] vub300 4-1:0.239: probe with driver vub300 failed with error -22 [ 1287.544788][T22806] fuse: Unknown parameter '0x0000000000000005' [ 1287.555345][ T5901] usb 4-1: USB disconnect, device number 108 [ 1287.604344][T22809] binder: 22808:22809 ioctl c018620b 200000000000 returned -14 [ 1288.264789][ T47] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1288.404564][ T2149] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 1288.424842][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 1288.432690][ T47] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1288.442819][ T47] usb 6-1: config 0 has no interface number 0 [ 1288.449374][ T47] usb 6-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 1288.460494][ T47] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1288.470696][ T47] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1288.481204][ T47] usb 6-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 1288.494974][ T47] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1288.505026][ T47] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1288.515051][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.523097][ T47] usb 6-1: Product: syz [ 1288.527410][ T47] usb 6-1: Manufacturer: syz [ 1288.532212][ T47] usb 6-1: SerialNumber: syz [ 1288.540086][ T47] usb 6-1: config 0 descriptor?? [ 1288.547268][T22831] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1288.560528][T22831] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1288.579950][ T2149] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1288.588413][ T2149] usb 4-1: not running at top speed; connect to a high speed hub [ 1288.600591][ T2149] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 1288.609649][ T2149] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1288.619998][ T2149] usb 4-1: config 5 has no interface number 0 [ 1288.626699][ T2149] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1288.637803][ T2149] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1288.651037][ T2149] usb 4-1: config 5 interface 246 has no altsetting 0 [ 1288.661381][ T2149] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1288.673629][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.681889][ T2149] usb 4-1: Product: syz [ 1288.686298][ T2149] usb 4-1: Manufacturer: syz [ 1288.690991][ T2149] usb 4-1: SerialNumber: syz [ 1288.769195][T22831] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1288.777887][T22831] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1288.995640][T15830] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 1289.048630][T22834] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 1289.150075][T15830] usb 3-1: string descriptor 0 read error: -22 [ 1289.157615][T15830] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1289.157692][ T2149] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1289.167606][T15830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.170718][T15830] usb 3-1: config 0 descriptor?? [ 1289.188919][ T2149] usb 4-1: USB disconnect, device number 109 [ 1289.190610][T12223] usb 4-1: Failed to submit usb control message: -71 [ 1289.210474][T12223] usb 4-1: unable to send the bmi data to the device: -71 [ 1289.238895][T12223] usb 4-1: unable to get target info from device [ 1289.248910][T15830] usbtest 3-1:0.0: FX2 device [ 1289.253636][T15830] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 1289.272524][T12223] usb 4-1: could not get target info (-71) [ 1289.290818][T12223] usb 4-1: could not probe fw (-71) [ 1289.389461][ T47] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffea [ 1289.424212][ T5915] usb 3-1: USB disconnect, device number 88 [ 1289.593927][T22831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.608827][T22831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.639963][ T47] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1289.662154][ T47] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1289.673337][ T47] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 1289.698683][ T47] usb 6-1: USB disconnect, device number 100 [ 1290.016511][ T5915] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1290.038009][T22869] netlink: 'syz.2.4213': attribute type 3 has an invalid length. [ 1290.046781][T22869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4213'. [ 1290.184632][ T47] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1290.206439][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1290.217772][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1290.230997][ T5915] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 1290.240665][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.252189][ T5915] usb 4-1: config 0 descriptor?? [ 1290.344516][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 1290.352478][ T47] usb 1-1: config 162 has an invalid interface number: 253 but max is 0 [ 1290.361523][ T47] usb 1-1: config 162 has no interface number 0 [ 1290.368230][ T47] usb 1-1: config 162 interface 253 has no altsetting 0 [ 1290.379646][ T47] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 1290.389459][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.397652][ T47] usb 1-1: Product: syz [ 1290.401880][ T47] usb 1-1: Manufacturer: syz [ 1290.406649][ T47] usb 1-1: SerialNumber: syz [ 1290.520741][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 1290.538388][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1290.559065][ T5915] usb 4-1: USB disconnect, device number 110 [ 1290.620234][ T47] go7007 1-1:162.253: probe with driver go7007 failed with error -12 [ 1290.751163][T22878] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.4215'. [ 1290.822232][ T5915] usb 1-1: USB disconnect, device number 109 [ 1291.524698][T15830] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1291.534672][ T5915] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1291.727713][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 1291.747403][ T5915] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1291.756081][ T5915] usb 6-1: config 0 has no interface number 0 [ 1291.772577][ T5915] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1291.794003][ T5915] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1291.803607][ T30] audit: type=1326 audit(1747771557.474:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22897 comm="syz.6.4219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f482898e969 code=0x0 [ 1291.882558][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.894805][T15830] usb 3-1: Using ep0 maxpacket: 16 [ 1291.903347][T15830] usb 3-1: config 0 has no interfaces? [ 1291.926030][ T5915] usb 6-1: config 0 descriptor?? [ 1291.939595][T15830] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1291.949146][T15830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.973853][ T5915] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1292.037373][T15830] usb 3-1: Product: syz [ 1292.047867][T15830] usb 3-1: Manufacturer: syz [ 1292.052532][T15830] usb 3-1: SerialNumber: syz [ 1292.126877][T15830] usb 3-1: config 0 descriptor?? [ 1292.284219][T22911] fuse: Bad value for 'fd' [ 1292.426307][T22893] dns_resolver: Unsupported content type (8) [ 1293.864990][ T5915] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1294.044750][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1294.058445][ T5915] usb 4-1: config 84 has an invalid interface number: 151 but max is 0 [ 1294.067478][ T5915] usb 4-1: config 84 has no interface number 0 [ 1294.073825][ T5915] usb 4-1: config 84 interface 151 has no altsetting 0 [ 1294.105153][ T5915] usb 4-1: New USB device found, idVendor=0421, idProduct=0419, bcdDevice=32.ab [ 1294.114824][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.128032][ T5915] usb 4-1: Product: syz [ 1294.133254][ T5915] usb 4-1: Manufacturer: syz [ 1294.138589][ T5915] usb 4-1: SerialNumber: syz [ 1294.746610][ T5901] usb 3-1: USB disconnect, device number 89 [ 1295.128057][T22927] netlink: 'syz.3.4224': attribute type 12 has an invalid length. [ 1296.208176][T11037] usb 6-1: USB disconnect, device number 101 [ 1296.344639][ T5881] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1296.514559][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 1296.526630][ T5881] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1296.548042][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.580665][ T5881] usb 3-1: config 0 has no interface number 0 [ 1296.593897][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1296.653507][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.679469][T11037] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1296.692407][ T5881] usb 3-1: Product: syz [ 1296.708689][ T5881] usb 3-1: Manufacturer: syz [ 1296.721775][ T5881] usb 3-1: SerialNumber: syz [ 1296.745628][ T5881] usb 3-1: config 0 descriptor?? [ 1296.848480][T11037] usb 6-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.858914][T11037] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1296.867087][T11037] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1296.876976][T11037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.898906][T11037] usb 6-1: config 0 descriptor?? [ 1296.988641][T22933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.998591][T22933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1297.009211][T22933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4225'. [ 1297.018567][T22933] netlink: 'syz.2.4225': attribute type 7 has an invalid length. [ 1297.026869][T22933] netlink: 'syz.2.4225': attribute type 8 has an invalid length. [ 1297.035295][T22933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4225'. [ 1297.124617][ T5901] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1297.146632][ T5881] usb 3-1: USB disconnect, device number 90 [ 1297.222931][ T5915] usb 4-1: bad CDC descriptors [ 1297.260160][ T5915] usb 4-1: USB disconnect, device number 111 [ 1297.268262][ T5901] usb 1-1: device descriptor read/64, error -71 [ 1297.328363][T11037] magicmouse 0003:05AC:0269.0044: item fetching failed at offset 5/7 [ 1297.338136][T11037] magicmouse 0003:05AC:0269.0044: magicmouse hid parse failed [ 1297.346176][T11037] magicmouse 0003:05AC:0269.0044: probe with driver magicmouse failed with error -22 [ 1297.543043][T22935] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4226'. [ 1297.552545][ T5901] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1297.618154][ T5915] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1297.704756][ T5901] usb 1-1: device descriptor read/64, error -71 [ 1297.777349][ T5915] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1297.802040][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1297.815426][ T5901] usb usb1-port1: attempt power cycle [ 1297.818686][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64 [ 1297.837685][ T5915] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1297.847562][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.857819][ T5915] usb 4-1: Product: syz [ 1297.862215][ T5915] usb 4-1: Manufacturer: syz [ 1297.869072][ T5915] usb 4-1: SerialNumber: syz [ 1297.885273][ T5915] usb 4-1: config 0 descriptor?? [ 1297.891633][T22943] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1297.906664][ T5915] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input118 [ 1297.974291][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1297.982131][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1297.989533][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1297.997017][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.004433][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.011843][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.019242][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.026714][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.034578][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.042598][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.050073][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.057433][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.064824][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.072202][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.079629][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.087006][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.094348][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.101879][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.109417][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.116809][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.124189][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.131973][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.139482][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.146845][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.154170][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.161577][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.169053][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.176408][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.183770][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.191210][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.198671][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.206091][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.213946][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.221299][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.228663][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.236547][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.243956][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.251290][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.258619][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.276991][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.284367][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.291719][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.299343][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.306697][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.314147][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.321624][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.328987][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.336845][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.344298][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.351742][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.359108][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.366741][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.374079][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.381512][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.388855][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.396227][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.403577][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.410972][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.418304][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.425696][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.433040][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.441172][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.448629][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.456063][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.463389][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.470711][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.478058][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.485411][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.492791][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.500161][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.507643][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.515169][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.522535][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.529897][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.537222][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.545005][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.552423][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.559778][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.567395][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.574767][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.582163][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.589505][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.596834][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.604165][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.611514][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.618931][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.626275][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.633687][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.641096][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.650091][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.657686][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.665414][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.672852][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.680200][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.687555][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.694914][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.702277][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.709659][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.717039][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.724493][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.731850][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.739471][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.747114][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.754794][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.762214][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.769815][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.777149][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.784474][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.784672][ T5901] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1298.791873][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.806889][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.814284][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.821650][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.829216][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.836697][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.844243][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.846790][ T5901] usb 1-1: device descriptor read/8, error -71 [ 1298.854766][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.865308][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.872701][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.880182][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.887597][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.894997][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.902415][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.909802][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.917187][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.924566][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.931950][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.939376][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.946841][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.954347][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.961762][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.969166][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.976540][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.983869][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.991197][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1298.998530][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.005832][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.013161][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.021021][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.028357][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.035717][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.043073][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.050410][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.057955][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.065332][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.072656][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.079977][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.087307][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.094636][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.101996][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.109352][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.116675][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.123984][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.131317][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.138724][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.146035][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.153434][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.160903][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.168242][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.175619][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.182982][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.190408][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.197808][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.205195][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.212553][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.219920][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.224829][ T5901] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1299.227267][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.242089][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.249448][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.256884][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.264526][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.272179][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.279590][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.286982][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.294498][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.295811][ T5901] usb 1-1: device descriptor read/8, error -71 [ 1299.301873][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.315420][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.322923][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.330311][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.337786][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.345229][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.352607][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.360261][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.367804][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.375195][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.382576][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.390024][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.397437][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.404852][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.412230][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.419609][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.427019][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.434397][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.441778][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.449236][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.456607][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.464186][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.471648][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.479079][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.479100][ T5183] usb 4-1: control msg error: -71 [ 1299.486446][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.486681][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.486888][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.496072][ T5901] usb usb1-port1: unable to enumerate USB device [ 1299.500808][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.528182][ C1] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.535421][ C1] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 1299.548705][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.556210][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.563499][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.571343][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1299.575615][ T5915] usb 4-1: USB disconnect, device number 112 [ 1299.578492][ C0] usb 4-1: pegasus_irq - usb_submit_urb failed with result -19 [ 1299.621429][ T5183] usb 4-1: control msg error: -71 [ 1299.806019][ T2149] usb 6-1: USB disconnect, device number 102 [ 1300.201364][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.209356][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.347716][T22965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4237'. [ 1300.412776][T22967] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1300.455736][ T5901] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 1300.638622][ T5901] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1300.668896][ T5901] usb 1-1: not running at top speed; connect to a high speed hub [ 1300.682193][ T5901] usb 1-1: config 1 has an invalid descriptor of length 151, skipping remainder of the config [ 1300.708734][ T5901] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1300.851718][ T5901] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1300.861277][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.880727][ T5901] usb 1-1: Product: syz [ 1300.888494][ T5901] usb 1-1: Manufacturer: syz [ 1300.901147][ T5901] usb 1-1: SerialNumber: syz [ 1301.104595][T15830] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1301.140729][ T5901] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1301.159179][ T5901] usb 1-1: USB disconnect, device number 114 [ 1301.301217][T15830] usb 3-1: config 0 has no interfaces? [ 1301.310655][T15830] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1301.320016][T15830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.328125][T15830] usb 3-1: Product: syz [ 1301.332409][T15830] usb 3-1: Manufacturer: syz [ 1301.337711][T15830] usb 3-1: SerialNumber: syz [ 1301.345467][T15830] usb 3-1: config 0 descriptor?? [ 1301.488483][ T2149] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1301.674892][ T2149] usb 4-1: Using ep0 maxpacket: 32 [ 1301.703467][ T2149] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1301.726170][ T2149] usb 4-1: config 7 has an invalid interface number: 111 but max is 0 [ 1301.754941][ T2149] usb 4-1: config 7 has no interface number 0 [ 1301.775232][ T2149] usb 4-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 1301.813671][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.833905][ T2149] usb 4-1: Product: syz [ 1301.844037][ T2149] usb 4-1: Manufacturer: syz [ 1301.854157][ T2149] usb 4-1: SerialNumber: syz [ 1302.089669][T22976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.109895][T22976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.124694][ T47] usb 1-1: new low-speed USB device number 115 using dummy_hcd [ 1302.316980][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.336467][ T47] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1302.357870][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1302.374070][T23000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.383849][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.408284][T23000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.457648][ T47] usb 1-1: config 0 descriptor?? [ 1302.597208][ T2149] usb 4-1: bad CDC descriptors [ 1302.624657][ T5915] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1302.641579][ T2149] usb 4-1: USB disconnect, device number 113 [ 1302.818052][T23004] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4247'. [ 1303.694515][ T5915] usb 6-1: device descriptor read/64, error -71 [ 1303.769167][ T2149] usb 3-1: USB disconnect, device number 91 [ 1303.944999][ T5915] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1304.114431][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 1304.140262][ T5915] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1304.152945][ T5915] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1304.163406][ T5915] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1304.174003][ T5915] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1304.184696][ T5915] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1304.198313][ T5915] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1304.208726][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.764511][T15830] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1304.926920][T15830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1304.968884][T15830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1305.023234][ T5915] usb 1-1: USB disconnect, device number 115 [ 1305.030729][T15830] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1305.060311][T15830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.104592][T15830] usb 3-1: config 0 descriptor?? [ 1305.115008][T23034] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1305.253440][T23038] vivid-007: ================= START STATUS ================= [ 1305.282871][T23038] vivid-007: Enable Output Cropping: true [ 1305.295374][T23038] vivid-007: Enable Output Composing: true [ 1305.301684][T23038] vivid-007: Enable Output Scaler: true [ 1305.337221][T23038] vivid-007: Tx RGB Quantization Range: Automatic [ 1305.354089][T23038] vivid-007: Transmit Mode: HDMI [ 1305.361479][T23038] vivid-007: Hotplug Present: 0x00000000 [ 1305.369216][T23038] vivid-007: RxSense Present: 0x00000000 [ 1305.375518][T23038] vivid-007: EDID Present: 0x00000000 [ 1305.381884][T23038] vivid-007: ================== END STATUS ================== [ 1305.505717][T23048] loop2: detected capacity change from 0 to 7 [ 1305.528646][T23048] Dev loop2: unable to read RDB block 7 [ 1305.550393][T23048] loop2: unable to read partition table [ 1305.575487][T23048] loop2: partition table beyond EOD, truncated [ 1305.584017][T23048] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1305.764475][T15830] usbhid 3-1:0.0: can't add hid device: -71 [ 1305.780977][T15830] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1305.805195][T15830] usb 3-1: USB disconnect, device number 92 [ 1306.264672][T15830] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1306.424655][T15830] usb 1-1: Using ep0 maxpacket: 16 [ 1306.437021][T15830] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1306.448547][T15830] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.460028][T15830] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1306.472845][T15830] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1306.482699][T15830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.490867][T15830] usb 1-1: Product: syz [ 1306.495274][T15830] usb 1-1: Manufacturer: syz [ 1306.499907][T15830] usb 1-1: SerialNumber: syz [ 1306.674797][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1306.824801][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1306.832316][ T10] usb 3-1: config 3 has an invalid interface number: 70 but max is 0 [ 1306.841161][ T10] usb 3-1: config 3 has no interface number 0 [ 1306.850548][ T10] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=17.33 [ 1306.860095][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.868333][ T10] usb 3-1: Product: syz [ 1306.872704][ T10] usb 3-1: Manufacturer: syz [ 1306.877439][ T10] usb 3-1: SerialNumber: syz [ 1306.914953][T15830] usb 1-1: 0:2 : does not exist [ 1307.105830][ T10] RobotFuzz Open Source InterFace, OSIF 3-1:3.70: failure sending bit rate [ 1307.115030][ T10] RobotFuzz Open Source InterFace, OSIF 3-1:3.70: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 1307.135564][ T10] usb 3-1: USB disconnect, device number 93 [ 1307.594862][T15830] usb 1-1: USB disconnect, device number 116 [ 1307.661165][T15398] udevd[15398]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.050953][ T47] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1308.272556][ T47] usb 3-1: not running at top speed; connect to a high speed hub [ 1308.289326][ T47] usb 3-1: config 6 has an invalid interface number: 72 but max is 1 [ 1308.301252][ T47] usb 3-1: config 6 has an invalid descriptor of length 1, skipping remainder of the config [ 1308.316977][ T47] usb 3-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 1308.328407][ T47] usb 3-1: config 6 has no interface number 0 [ 1308.338248][ T47] usb 3-1: config 6 interface 72 altsetting 11 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1308.351824][ T47] usb 3-1: config 6 interface 72 has no altsetting 0 [ 1308.372808][ T47] usb 3-1: New USB device found, idVendor=05c6, idProduct=9234, bcdDevice=89.58 [ 1308.384585][ T10] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1308.386416][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.404297][ T47] usb 3-1: Product: syz [ 1308.410614][ T47] usb 3-1: Manufacturer: syz [ 1308.418859][ T47] usb 3-1: SerialNumber: syz [ 1308.554652][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1308.565793][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1308.580754][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1308.605874][ T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1308.619045][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.633221][ T10] usb 4-1: config 0 descriptor?? [ 1308.665488][ T47] usb 3-1: USB disconnect, device number 94 [ 1308.668964][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1308.724570][T15830] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1308.869987][T23069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1308.893732][T23069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4263'. [ 1308.907972][T15830] usb 1-1: Using ep0 maxpacket: 32 [ 1308.916536][T15830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1308.933968][T15830] usb 1-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64 [ 1308.944341][T15830] usb 1-1: config 1 interface 0 altsetting 38 bulk endpoint 0x82 has invalid maxpacket 64 [ 1308.956029][T15830] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1308.970176][T15830] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1308.979919][T15830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.988702][T15830] usb 1-1: Product: syz [ 1308.993163][T15830] usb 1-1: Manufacturer: syz [ 1308.998140][T15830] usb 1-1: SerialNumber: syz [ 1309.007262][T23077] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1309.021254][T23077] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1309.244705][T23077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.257685][T23077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1309.812258][T23010] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 1309.913482][T15830] usblp 1-1:1.0: usblp1: USB Bidirectional printer dev 117 if 0 alt 38 proto 2 vid 0x0525 pid 0xA4A8 [ 1309.952821][T15830] usb 1-1: USB disconnect, device number 117 [ 1309.990504][ T5901] usb 6-1: USB disconnect, device number 104 [ 1309.997419][T15830] usblp1: removed [ 1311.049712][ T5901] usb 4-1: USB disconnect, device number 114 [ 1311.515550][T23108] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 23108 comm: syz.5.4272) [ 1311.663191][ T30] audit: type=1800 audit(1747771577.324:2991): pid=23108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4272" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=115069 res=0 errno=0 [ 1311.757233][ T2149] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1311.993802][ T2149] usb 4-1: config 0 has no interfaces? [ 1312.086342][ T2149] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1312.109281][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.135565][ T2149] usb 4-1: Product: syz [ 1312.139792][ T2149] usb 4-1: Manufacturer: syz [ 1312.160513][ T2149] usb 4-1: SerialNumber: syz [ 1312.209356][ T2149] usb 4-1: config 0 descriptor?? [ 1315.006051][T23150] tipc: Enabling of bearer rejected, failed to enable media [ 1315.704958][ T5901] usb 4-1: USB disconnect, device number 115 [ 1315.731259][T23156] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551611) [ 1315.794590][T23156] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 1316.439575][T23178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1316.464688][ T5915] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1316.844742][T23183] kernel profiling enabled (shift: 63) [ 1316.879827][T23183] profiling shift: 63 too large [ 1316.914668][ T47] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1317.111726][T23188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.154721][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 1317.214661][T23191] tipc: Enabling of bearer rejected, failed to enable media [ 1317.577158][ T47] usb 6-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=ac.b4 [ 1317.627472][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.675621][ T47] usb 6-1: Product: syz [ 1317.684793][ T47] usb 6-1: Manufacturer: syz [ 1317.703667][ T47] usb 6-1: SerialNumber: syz [ 1317.795862][ T47] usb 6-1: config 0 descriptor?? [ 1318.114662][ T47] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1318.325848][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 1318.366819][ T47] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1318.401774][ T47] usb 4-1: config 0 has no interface number 0 [ 1318.450891][ T47] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1318.472514][ T5915] usb 6-1: USB disconnect, device number 105 [ 1318.513327][ T47] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1318.580358][ T47] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1318.624748][ T47] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1318.653429][ T47] usb 4-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 1318.675443][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.692865][ T47] usb 4-1: Product: syz [ 1318.697631][ T2149] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1318.720125][ T47] usb 4-1: Manufacturer: syz [ 1318.735590][ T47] usb 4-1: SerialNumber: syz [ 1318.759288][ T47] usb 4-1: config 0 descriptor?? [ 1318.864814][ T2149] usb 3-1: Using ep0 maxpacket: 8 [ 1318.885640][ T2149] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1318.909138][ T2149] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1318.933444][ T2149] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1318.953718][ T2149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.981047][ T47] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 1319.008592][ T2149] usb 3-1: Product: syz [ 1319.027599][ T2149] usb 3-1: Manufacturer: syz [ 1319.032433][ T47] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 1319.053352][ T2149] usb 3-1: SerialNumber: syz [ 1319.080904][ T2149] usb 3-1: config 0 descriptor?? [ 1319.092534][ T47] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 1319.123596][ T2149] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1319.147009][ T47] usb 4-1: USB disconnect, device number 117 [ 1319.320674][ T2149] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1319.341479][ T2149] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1319.362693][ T2149] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1319.431656][T23214] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4299'. [ 1320.199929][T23227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1320.757712][ T30] audit: type=1326 audit(1747771586.434:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23234 comm="syz.0.4304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb8b58e969 code=0x0 [ 1321.405345][ T5901] usb 3-1: USB disconnect, device number 95 [ 1321.714481][ T5887] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1321.765381][ T2149] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1321.893607][ T5887] usb 6-1: Using ep0 maxpacket: 32 [ 1321.894570][ T47] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1321.934551][ T2149] usb 4-1: Using ep0 maxpacket: 32 [ 1321.943058][T23245] loop2: detected capacity change from 0 to 7 [ 1321.951044][T23245] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 1321.965872][ T5887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.979944][ T5887] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1321.984857][T23245] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1322.008449][T23245] Dev loop2: unable to read RDB block 7 [ 1322.014134][T23245] loop2: unable to read partition table [ 1322.048886][T23245] loop2: partition table beyond EOD, truncated [ 1322.049923][ T5887] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1322.065638][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.079337][ T5887] usb 6-1: Product: syz [ 1322.086410][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 1322.088583][ T5887] usb 6-1: Manufacturer: syz [ 1322.118075][T23245] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1322.128086][ T5887] usb 6-1: SerialNumber: syz [ 1322.137135][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1322.161429][ T5887] usb 6-1: config 0 descriptor?? [ 1322.161504][ T47] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1322.191098][ T47] usb 1-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1322.200617][ T2149] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1322.233618][ T47] usb 1-1: Product: syz [ 1322.239454][ T2149] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1322.268172][ T2149] usb 4-1: can't read configurations, error -71 [ 1322.275192][ T47] usb 1-1: Manufacturer: syz [ 1322.323861][ T47] usb 1-1: SerialNumber: syz [ 1322.339534][ T47] usb 1-1: config 0 descriptor?? [ 1322.353327][ T47] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1322.561862][T23251] openvswitch: netlink: Missing valid actions attribute. [ 1322.588204][T23251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1322.592917][T23265] x_tables: duplicate underflow at hook 3 [ 1322.613123][ T47] gspca_zc3xx: reg_w_i err -71 [ 1322.839144][T23269] openvswitch: netlink: Missing valid actions attribute. [ 1322.913168][T23269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1323.184546][ T2149] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1323.204554][ T47] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1323.211031][ T47] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1323.285372][ T47] usb 1-1: USB disconnect, device number 118 [ 1323.359891][ T2149] usb 4-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 1323.369885][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.393513][ T2149] usb 4-1: Product: syz [ 1323.400715][ T2149] usb 4-1: Manufacturer: syz [ 1323.406161][ T2149] usb 4-1: SerialNumber: syz [ 1323.442691][ T2149] usb 4-1: config 0 descriptor?? [ 1323.999471][ T47] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1324.031221][ T2149] gspca_main: touptek-2.14.0 probing 0547:6801 [ 1324.164514][ T47] usb 1-1: device descriptor read/64, error -71 [ 1324.234228][T15830] usb 4-1: USB disconnect, device number 119 [ 1324.404661][ T47] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1324.544515][ T47] usb 1-1: device descriptor read/64, error -71 [ 1324.654749][ T47] usb usb1-port1: attempt power cycle [ 1324.725460][ T2149] usb 6-1: USB disconnect, device number 106 [ 1324.888087][T23297] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4319'. [ 1325.104820][ T47] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1325.150879][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1325.167471][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1325.192255][ T47] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1325.249157][T15830] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1325.274525][T23313] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1325.284648][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.296391][ T47] usb 1-1: config 0 descriptor?? [ 1325.306398][ T47] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 1325.313279][ T47] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1325.406667][T15830] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1325.435864][T15830] usb 3-1: not running at top speed; connect to a high speed hub [ 1325.473670][T15830] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 1325.510254][T15830] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1325.558320][T15830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.567949][T15830] usb 3-1: Product: syz [ 1325.572154][T15830] usb 3-1: Manufacturer: syz [ 1325.595477][T15830] usb 3-1: SerialNumber: syz [ 1325.612715][T23317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.621779][T23317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1326.107346][T15830] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1326.127859][ T5901] usb 1-1: USB disconnect, device number 121 [ 1326.147446][T15830] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1326.172593][T15830] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1326.201016][T15830] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1326.221984][T15830] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1326.238223][T15830] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1326.250033][T15830] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1326.276534][T15830] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1326.571943][T23321] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1326.597189][T23321] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1326.604485][T15830] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1326.609197][T23321] fuse: Unknown parameter 'hrOup_id' [ 1326.643619][T15830] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1326.757054][T15830] usb 3-1: USB disconnect, device number 96 [ 1326.850778][T15398] udevd[15398]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1327.720921][T23347] tipc: Enabling of bearer rejected, failed to enable media [ 1327.729746][T15830] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1327.743109][T23349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1327.750408][T23349] IPv6: NLM_F_CREATE should be set when creating new route [ 1327.886127][ T47] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1327.894912][T15830] usb 3-1: Using ep0 maxpacket: 8 [ 1327.904317][T15830] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1327.919475][T15830] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1327.932159][ T30] audit: type=1326 audit(1747771593.614:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23350 comm="syz.5.4333" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff4b7d8e969 code=0x0 [ 1327.954256][ C1] vkms_vblank_simulate: vblank timer overrun [ 1327.964186][T15830] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1328.014566][T15830] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1328.038974][T15830] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1328.048988][T15830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.062644][ T47] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 1328.113590][ T47] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1328.152367][ T47] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.40 [ 1328.172605][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.218409][ T47] usb 1-1: Product: syz [ 1328.246551][ T47] usb 1-1: Manufacturer: syz [ 1328.271556][ T47] usb 1-1: SerialNumber: syz [ 1328.283502][T15830] usb 3-1: GET_CAPABILITIES returned 0 [ 1328.321241][T15830] usbtmc 3-1:16.0: can't read capabilities [ 1329.071585][T23370] 8021q: VLANs not supported on ip6tnl0 [ 1329.214462][ T2149] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1329.364633][ T2149] usb 6-1: Using ep0 maxpacket: 32 [ 1329.373819][ T2149] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1329.391545][ T2149] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.428531][ T2149] usb 6-1: config 0 descriptor?? [ 1329.450504][ T2149] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1330.035837][T23374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4337'. [ 1330.356058][T15830] usb 3-1: USB disconnect, device number 97 [ 1330.455298][ T2149] gspca_sq930x: ucbus_write failed -71 [ 1330.484000][ T2149] sq930x 6-1:0.0: probe with driver sq930x failed with error -71 [ 1330.529405][ T2149] usb 6-1: USB disconnect, device number 107 [ 1330.536519][ T47] usbhid 1-1:1.0: can't add hid device: -71 [ 1330.542537][ T47] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1330.578868][ T47] usb 1-1: USB disconnect, device number 122 [ 1330.599660][T23381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4340'. [ 1330.783374][T23388] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4341' sets config #0 [ 1330.793744][T23388] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4341' sets config #1 [ 1330.824692][T15830] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1330.998675][T15830] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1331.008520][T15830] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1331.032975][T15830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1331.063841][T15830] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1331.090639][T15830] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1331.104150][T15830] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1331.192077][T15830] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1331.235199][T23397] tipc: Enabling of bearer rejected, failed to enable media [ 1331.258473][T15830] usb 3-1: Product: syz [ 1331.269494][T15830] usb 3-1: Manufacturer: syz [ 1331.306413][T15830] cdc_wdm 3-1:1.0: skipping garbage [ 1331.442846][T15830] cdc_wdm 3-1:1.0: skipping garbage [ 1331.490253][T15830] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1331.543538][T15830] cdc_wdm 3-1:1.0: Unknown control protocol [ 1331.553042][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4347'. [ 1331.717651][T23404] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4347'. [ 1331.859628][ C1] cdc_wdm 3-1:1.0: unknown notification 214 received: index 34522 len 13445 [ 1332.405573][T23427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1333.520972][T23433] FAULT_INJECTION: forcing a failure. [ 1333.520972][T23433] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.533891][T23433] CPU: 1 UID: 0 PID: 23433 Comm: syz.3.4353 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1333.533912][T23433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1333.533922][T23433] Call Trace: [ 1333.533931][T23433] [ 1333.533938][T23433] dump_stack_lvl+0x189/0x250 [ 1333.533968][T23433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1333.533990][T23433] ? __pfx__printk+0x10/0x10 [ 1333.534007][T23433] ? __pfx___might_resched+0x10/0x10 [ 1333.534022][T23433] ? fs_reclaim_acquire+0x7d/0x100 [ 1333.534048][T23433] should_fail_ex+0x414/0x560 [ 1333.534069][T23433] should_failslab+0xa8/0x100 [ 1333.534091][T23433] __kmalloc_noprof+0xcb/0x4f0 [ 1333.534110][T23433] ? tomoyo_encode+0x28b/0x550 [ 1333.534133][T23433] tomoyo_encode+0x28b/0x550 [ 1333.534157][T23433] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1333.534187][T23433] tomoyo_check_open_permission+0x1c1/0x3b0 [ 1333.534204][T23433] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 1333.534220][T23433] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1333.534235][T23433] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 1333.534285][T23433] ? tomoyo_file_open+0x166/0x220 [ 1333.534308][T23433] security_file_open+0xb1/0x270 [ 1333.534323][T23433] do_dentry_open+0x35e/0x1970 [ 1333.534354][T23433] ? devcgroup_check_permission+0x86d/0x980 [ 1333.534392][T23433] vfs_open+0x3b/0x340 [ 1333.534419][T23433] ? path_openat+0x2ecd/0x3830 [ 1333.534442][T23433] path_openat+0x2ee5/0x3830 [ 1333.534461][T23433] ? arch_stack_walk+0xfc/0x150 [ 1333.534512][T23433] ? __lock_acquire+0xaac/0xd20 [ 1333.534551][T23433] ? __pfx_path_openat+0x10/0x10 [ 1333.534570][T23433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.534613][T23433] do_filp_open+0x1fa/0x410 [ 1333.534645][T23433] ? __pfx_do_filp_open+0x10/0x10 [ 1333.534677][T23433] ? _raw_spin_unlock+0x28/0x50 [ 1333.534694][T23433] ? alloc_fd+0x64c/0x6c0 [ 1333.534721][T23433] do_sys_openat2+0x121/0x1c0 [ 1333.534737][T23433] ? __pfx_do_sys_openat2+0x10/0x10 [ 1333.534752][T23433] ? ksys_write+0x1f0/0x250 [ 1333.534768][T23433] ? rcu_is_watching+0x15/0xb0 [ 1333.534788][T23433] __x64_sys_open+0x11e/0x150 [ 1333.534804][T23433] do_syscall_64+0xf6/0x210 [ 1333.534826][T23433] ? clear_bhb_loop+0x60/0xb0 [ 1333.534844][T23433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.534859][T23433] RIP: 0033:0x7fb2e998e969 [ 1333.534873][T23433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1333.534887][T23433] RSP: 002b:00007fb2ea7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1333.534903][T23433] RAX: ffffffffffffffda RBX: 00007fb2e9bb5fa0 RCX: 00007fb2e998e969 [ 1333.534914][T23433] RDX: 0000000000000000 RSI: 00000000001a1142 RDI: 0000200000000040 [ 1333.534924][T23433] RBP: 00007fb2ea7b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.534934][T23433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.534942][T23433] R13: 0000000000000000 R14: 00007fb2e9bb5fa0 R15: 00007fb2e9cdfa28 [ 1333.534965][T23433] [ 1333.558700][T15830] usb 3-1: USB disconnect, device number 98 [ 1333.887017][T23433] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1334.062945][T23435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4355'. [ 1334.083051][T23437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4354'. [ 1334.084938][T23438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4354'. [ 1334.101235][T23435] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4355'. [ 1334.121455][T23437] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4354'. [ 1334.135173][T23435] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1334.205251][T23444] tipc: Enabling of bearer rejected, failed to enable media [ 1334.715008][ T47] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1334.884473][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 1334.899990][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.904581][ T5887] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1334.911288][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.934769][ T47] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1334.961970][ T30] audit: type=1326 audit(1747771600.644:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23461 comm="syz.0.4363" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb8b58e969 code=0x0 [ 1334.984074][ T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.007978][ T47] usb 6-1: config 0 descriptor?? [ 1335.110703][T23446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4358'. [ 1335.138232][ T5887] usb 4-1: config 0 has an invalid interface number: 249 but max is 0 [ 1335.162235][ T5887] usb 4-1: config 0 has no interface number 0 [ 1335.171872][ T5887] usb 4-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1335.188414][ T5887] usb 4-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 1335.200992][ T5887] usb 4-1: config 0 interface 249 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1335.222071][ T5887] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87 [ 1335.283438][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.460165][ T5887] usb 4-1: config 0 descriptor?? [ 1335.488799][ T5887] port100 4-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint [ 1335.649149][T23471] FAULT_INJECTION: forcing a failure. [ 1335.649149][T23471] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.674989][ T47] savu 0003:1E7D:2D5A.0045: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1335.696313][ T47] usb 6-1: USB disconnect, device number 108 [ 1335.758605][ T5881] usb 4-1: USB disconnect, device number 120 [ 1335.812505][T23471] CPU: 1 UID: 0 PID: 23471 Comm: syz.2.4364 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1335.812534][T23471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1335.812548][T23471] Call Trace: [ 1335.812557][T23471] [ 1335.812566][T23471] dump_stack_lvl+0x189/0x250 [ 1335.812606][T23471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1335.812637][T23471] ? __pfx__printk+0x10/0x10 [ 1335.812664][T23471] ? __pfx___might_resched+0x10/0x10 [ 1335.812683][T23471] ? fs_reclaim_acquire+0x7d/0x100 [ 1335.812724][T23471] should_fail_ex+0x414/0x560 [ 1335.812752][T23471] should_failslab+0xa8/0x100 [ 1335.812783][T23471] __kmalloc_cache_noprof+0x70/0x3d0 [ 1335.812811][T23471] ? snd_seq_oss_open+0xe3/0xea0 [ 1335.812839][T23471] snd_seq_oss_open+0xe3/0xea0 [ 1335.812858][T23471] ? do_dentry_open+0x35e/0x1970 [ 1335.812888][T23471] ? path_openat+0x2ee5/0x3830 [ 1335.812907][T23471] ? do_filp_open+0x1fa/0x410 [ 1335.812927][T23471] ? do_sys_openat2+0x121/0x1c0 [ 1335.812943][T23471] ? __x64_sys_open+0x11e/0x150 [ 1335.812960][T23471] ? do_syscall_64+0xf6/0x210 [ 1335.812985][T23471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.813011][T23471] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1335.813048][T23471] ? __lock_acquire+0xaac/0xd20 [ 1335.813085][T23471] ? __mutex_trylock_common+0x153/0x260 [ 1335.813112][T23471] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1335.813141][T23471] ? rcu_is_watching+0x15/0xb0 [ 1335.813161][T23471] ? trace_contention_end+0x39/0x120 [ 1335.813184][T23471] ? __mutex_lock+0x330/0xe80 [ 1335.813216][T23471] ? __lock_acquire+0xaac/0xd20 [ 1335.813249][T23471] ? odev_open+0x5c/0xa0 [ 1335.813271][T23471] ? __pfx___mutex_lock+0x10/0x10 [ 1335.813308][T23471] ? do_raw_spin_unlock+0x122/0x240 [ 1335.813339][T23471] ? soundcore_open+0x2da/0x490 [ 1335.813364][T23471] odev_open+0x67/0xa0 [ 1335.813384][T23471] chrdev_open+0x4cc/0x5e0 [ 1335.813416][T23471] ? __pfx_chrdev_open+0x10/0x10 [ 1335.813453][T23471] ? __pfx_chrdev_open+0x10/0x10 [ 1335.813488][T23471] do_dentry_open+0xdf0/0x1970 [ 1335.813538][T23471] vfs_open+0x3b/0x340 [ 1335.813566][T23471] ? path_openat+0x2ecd/0x3830 [ 1335.813592][T23471] path_openat+0x2ee5/0x3830 [ 1335.813612][T23471] ? arch_stack_walk+0xfc/0x150 [ 1335.813678][T23471] ? __pfx_path_openat+0x10/0x10 [ 1335.813697][T23471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.813741][T23471] do_filp_open+0x1fa/0x410 [ 1335.813767][T23471] ? __pfx_do_filp_open+0x10/0x10 [ 1335.813814][T23471] ? _raw_spin_unlock+0x28/0x50 [ 1335.813837][T23471] ? alloc_fd+0x64c/0x6c0 [ 1335.813877][T23471] do_sys_openat2+0x121/0x1c0 [ 1335.813899][T23471] ? __pfx_do_sys_openat2+0x10/0x10 [ 1335.813920][T23471] ? ksys_write+0x1f0/0x250 [ 1335.813941][T23471] ? rcu_is_watching+0x15/0xb0 [ 1335.813968][T23471] __x64_sys_open+0x11e/0x150 [ 1335.813993][T23471] do_syscall_64+0xf6/0x210 [ 1335.814021][T23471] ? clear_bhb_loop+0x60/0xb0 [ 1335.814047][T23471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.814067][T23471] RIP: 0033:0x7f7ef838e969 [ 1335.814086][T23471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1335.814104][T23471] RSP: 002b:00007f7ef91a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1335.814127][T23471] RAX: ffffffffffffffda RBX: 00007f7ef85b5fa0 RCX: 00007f7ef838e969 [ 1335.814141][T23471] RDX: 0000000000000000 RSI: 00000000001a1142 RDI: 0000200000000040 [ 1335.814154][T23471] RBP: 00007f7ef91a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1335.814166][T23471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1335.814178][T23471] R13: 0000000000000000 R14: 00007f7ef85b5fa0 R15: 00007f7ef86dfa28 [ 1335.814209][T23471] [ 1336.225430][T23472] fido_id[23472]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1336.470984][T23478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4366'. [ 1336.522285][T23484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4369'. [ 1336.531996][T23484] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4369'. [ 1336.542920][T23484] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1336.704965][ T5887] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1336.734552][ T47] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1336.871633][ T5887] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1336.881426][ T5887] usb 3-1: can't read configurations, error -22 [ 1336.914782][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 1336.928859][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 1336.945219][ T47] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 1336.959693][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1336.970270][ T47] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1336.987371][ T47] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1337.052050][ T5887] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1337.079513][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.098794][ T47] usb 1-1: Product: syz [ 1337.108736][ T47] usb 1-1: Manufacturer: syz [ 1337.119168][ T47] usb 1-1: SerialNumber: syz [ 1337.151104][ T47] usb 1-1: config 0 descriptor?? [ 1337.176861][T23478] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1337.199362][ C1] port100 1-1:0.0: NFC: Urb failure (status -71) [ 1337.210360][ T47] port100 1-1:0.0: NFC: Could not get supported command types [ 1337.236312][ T5887] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1337.259486][ T5887] usb 3-1: can't read configurations, error -22 [ 1337.295693][ T5887] usb usb3-port1: attempt power cycle [ 1337.414554][ T5881] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1337.489358][ T47] usb 1-1: USB disconnect, device number 123 [ 1337.584565][ T5881] usb 4-1: Using ep0 maxpacket: 32 [ 1337.631018][ T5881] usb 4-1: config 0 interface 0 altsetting 181 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1337.644633][ T5887] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1337.662645][ T5881] usb 4-1: config 0 interface 0 altsetting 181 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1337.688537][ T5887] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1337.697230][ T5887] usb 3-1: can't read configurations, error -22 [ 1337.714428][ T5881] usb 4-1: config 0 interface 0 altsetting 181 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1337.754424][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1337.774480][ T5881] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1337.800452][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.819249][ T5881] usb 4-1: Product: syz [ 1337.824720][ T5887] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1337.825192][ T5881] usb 4-1: Manufacturer: syz [ 1337.837844][ T5881] usb 4-1: SerialNumber: syz [ 1337.851776][ T5881] usb 4-1: config 0 descriptor?? [ 1337.871981][ T5881] usb 4-1: no audio or video endpoints found [ 1337.888944][ T5887] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 1337.906585][ T5887] usb 3-1: can't read configurations, error -22 [ 1337.923523][ T5887] usb usb3-port1: unable to enumerate USB device [ 1338.072406][T23496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.094947][T23496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.104247][ T5887] usb 4-1: USB disconnect, device number 121 [ 1338.202002][T23512] binder: 23504:23512 ioctl c0306201 2000000003c0 returned -14 [ 1338.211180][T23512] binder: 23504:23512 ioctl 4020ae46 200000000000 returned -22 [ 1338.400067][T23514] FAULT_INJECTION: forcing a failure. [ 1338.400067][T23514] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.413022][T23514] CPU: 1 UID: 0 PID: 23514 Comm: syz.0.4379 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1338.413042][T23514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1338.413052][T23514] Call Trace: [ 1338.413059][T23514] [ 1338.413065][T23514] dump_stack_lvl+0x189/0x250 [ 1338.413094][T23514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1338.413116][T23514] ? __pfx__printk+0x10/0x10 [ 1338.413135][T23514] ? __pfx___might_resched+0x10/0x10 [ 1338.413150][T23514] ? fs_reclaim_acquire+0x7d/0x100 [ 1338.413176][T23514] should_fail_ex+0x414/0x560 [ 1338.413196][T23514] should_failslab+0xa8/0x100 [ 1338.413220][T23514] __kmalloc_cache_noprof+0x70/0x3d0 [ 1338.413239][T23514] ? snd_seq_create_port+0xc7/0x760 [ 1338.413274][T23514] snd_seq_create_port+0xc7/0x760 [ 1338.413316][T23514] snd_seq_ioctl_create_port+0x2a4/0x950 [ 1338.413343][T23514] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 1338.413376][T23514] snd_seq_oss_open+0x545/0xea0 [ 1338.413407][T23514] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1338.413439][T23514] ? __lock_acquire+0xaac/0xd20 [ 1338.413465][T23514] ? __mutex_trylock_common+0x153/0x260 [ 1338.413484][T23514] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1338.413504][T23514] ? rcu_is_watching+0x15/0xb0 [ 1338.413518][T23514] ? trace_contention_end+0x39/0x120 [ 1338.413548][T23514] ? __pfx___mutex_lock+0x10/0x10 [ 1338.413573][T23514] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1338.413589][T23514] ? __pfx_free_devinfo+0x10/0x10 [ 1338.413607][T23514] ? do_raw_spin_unlock+0x122/0x240 [ 1338.413637][T23514] ? soundcore_open+0x2da/0x490 [ 1338.413662][T23514] odev_open+0x67/0xa0 [ 1338.413682][T23514] chrdev_open+0x4cc/0x5e0 [ 1338.413711][T23514] ? __pfx_chrdev_open+0x10/0x10 [ 1338.413737][T23514] ? __pfx_chrdev_open+0x10/0x10 [ 1338.413756][T23514] do_dentry_open+0xdf0/0x1970 [ 1338.413790][T23514] vfs_open+0x3b/0x340 [ 1338.413810][T23514] ? path_openat+0x2ecd/0x3830 [ 1338.413828][T23514] path_openat+0x2ee5/0x3830 [ 1338.413841][T23514] ? arch_stack_walk+0xfc/0x150 [ 1338.413886][T23514] ? __pfx_path_openat+0x10/0x10 [ 1338.413899][T23514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.413929][T23514] do_filp_open+0x1fa/0x410 [ 1338.413947][T23514] ? __pfx_do_filp_open+0x10/0x10 [ 1338.413986][T23514] ? _raw_spin_unlock+0x28/0x50 [ 1338.414002][T23514] ? alloc_fd+0x64c/0x6c0 [ 1338.414030][T23514] do_sys_openat2+0x121/0x1c0 [ 1338.414046][T23514] ? __pfx_do_sys_openat2+0x10/0x10 [ 1338.414060][T23514] ? ksys_write+0x1f0/0x250 [ 1338.414077][T23514] ? rcu_is_watching+0x15/0xb0 [ 1338.414096][T23514] __x64_sys_open+0x11e/0x150 [ 1338.414114][T23514] do_syscall_64+0xf6/0x210 [ 1338.414135][T23514] ? clear_bhb_loop+0x60/0xb0 [ 1338.414154][T23514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.414168][T23514] RIP: 0033:0x7fbb8b58e969 [ 1338.414182][T23514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1338.414196][T23514] RSP: 002b:00007fbb8c332038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1338.414213][T23514] RAX: ffffffffffffffda RBX: 00007fbb8b7b5fa0 RCX: 00007fbb8b58e969 [ 1338.414224][T23514] RDX: 0000000000000000 RSI: 00000000001a1142 RDI: 0000200000000040 [ 1338.414234][T23514] RBP: 00007fbb8c332090 R08: 0000000000000000 R09: 0000000000000000 [ 1338.414244][T23514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1338.414253][T23514] R13: 0000000000000000 R14: 00007fbb8b7b5fa0 R15: 00007fbb8b8dfa28 [ 1338.414275][T23514] [ 1338.414284][T23514] ALSA: seq_oss: can't create port [ 1338.826583][T23517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4380'. [ 1338.838391][T23517] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4380'. [ 1338.850184][T23517] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1339.205478][ T5881] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1339.412914][ T5881] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1339.422489][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.485486][ T5881] usb 4-1: config 0 descriptor?? [ 1339.495467][ T5881] cp210x 4-1:0.0: cp210x converter detected [ 1339.898510][ T5881] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1339.919606][ T5887] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1340.090957][ T5887] usb 3-1: too many configurations: 151, using maximum allowed: 8 [ 1340.113415][T23521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1340.158828][T23521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1340.193670][ T5887] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1340.208596][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1340.209116][ T5881] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1340.219328][ T5887] usb 3-1: Product: syz [ 1340.244462][ T5887] usb 3-1: Manufacturer: syz [ 1340.249165][ T5887] usb 3-1: SerialNumber: syz [ 1340.282524][ T5887] usb 3-1: config 0 descriptor?? [ 1340.348250][ T5887] ims_pcu 3-1:0.0: Zero length descriptor [ 1340.381825][ T5881] usb 4-1: USB disconnect, device number 122 [ 1340.408968][ T5881] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1340.424660][ T5887] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 1340.477447][ T5881] cp210x 4-1:0.0: device disconnected [ 1340.518661][ T2149] usb 3-1: USB disconnect, device number 103 [ 1341.104228][T23560] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request [ 1342.057966][T23571] hsr0: entered promiscuous mode [ 1342.070259][T23571] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4394'. [ 1342.739009][T23571] hsr_slave_0: left promiscuous mode [ 1342.765056][T23571] hsr_slave_1: left promiscuous mode [ 1342.874494][ T5901] usb 3-1: new full-speed USB device number 104 using dummy_hcd [ 1342.946391][T23571] hsr0 (unregistering): left promiscuous mode [ 1343.115547][ T5901] usb 3-1: config 0 has no interfaces? [ 1343.131233][ T5901] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1343.140577][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.150054][ T5901] usb 3-1: Product: syz [ 1343.160418][ T5901] usb 3-1: Manufacturer: syz [ 1343.176218][ T5901] usb 3-1: SerialNumber: syz [ 1343.200392][ T5901] usb 3-1: config 0 descriptor?? [ 1343.440493][T23574] program syz.2.4395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1343.844946][ T5901] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1343.974527][T23581] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4398'. [ 1343.996395][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 1344.018543][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.051679][ T5901] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1344.096508][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.143530][ T5901] usb 1-1: config 0 descriptor?? [ 1344.576972][ T5901] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1344.618766][ T5901] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1344.674450][ T5901] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1344.702451][ T5901] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1344.724323][ T5901] mcp2221 0003:04D8:00DD.0046: unknown main item tag 0x0 [ 1344.725921][T23587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4399'. [ 1344.797397][ T5901] mcp2221 0003:04D8:00DD.0046: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1344.988834][ T5901] usb 1-1: USB disconnect, device number 124 [ 1345.204524][ T2149] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1345.313134][ T5881] usb 3-1: USB disconnect, device number 104 [ 1345.334975][ T2149] usb 4-1: device descriptor read/64, error -71 [ 1345.429723][T23600] fuse: Bad value for 'user_id' [ 1345.434950][T23600] fuse: Bad value for 'user_id' [ 1345.574569][ T2149] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1345.742217][ T2149] usb 4-1: device descriptor read/64, error -71 [ 1345.775745][T23616] FAULT_INJECTION: forcing a failure. [ 1345.775745][T23616] name failslab, interval 1, probability 0, space 0, times 0 [ 1345.790261][T23616] CPU: 1 UID: 0 PID: 23616 Comm: syz.2.4410 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1345.790290][T23616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1345.790304][T23616] Call Trace: [ 1345.790314][T23616] [ 1345.790323][T23616] dump_stack_lvl+0x189/0x250 [ 1345.790362][T23616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1345.790392][T23616] ? __pfx__printk+0x10/0x10 [ 1345.790416][T23616] ? __pfx___might_resched+0x10/0x10 [ 1345.790453][T23616] ? fs_reclaim_acquire+0x7d/0x100 [ 1345.790504][T23616] should_fail_ex+0x414/0x560 [ 1345.790539][T23616] should_failslab+0xa8/0x100 [ 1345.790571][T23616] __kmalloc_cache_noprof+0x70/0x3d0 [ 1345.790598][T23616] ? snd_seq_prioq_new+0x47/0xa0 [ 1345.790632][T23616] snd_seq_prioq_new+0x47/0xa0 [ 1345.790658][T23616] snd_seq_queue_alloc+0x12f/0x790 [ 1345.790689][T23616] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 1345.790715][T23616] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 1345.790741][T23616] snd_seq_oss_open+0x5e0/0xea0 [ 1345.790773][T23616] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1345.790820][T23616] ? __lock_acquire+0xaac/0xd20 [ 1345.790869][T23616] ? rcu_is_watching+0x15/0xb0 [ 1345.790889][T23616] ? trace_contention_end+0x39/0x120 [ 1345.790930][T23616] ? __pfx___mutex_lock+0x10/0x10 [ 1345.790963][T23616] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1345.790984][T23616] ? __pfx_free_devinfo+0x10/0x10 [ 1345.791004][T23616] ? do_raw_spin_unlock+0x122/0x240 [ 1345.791034][T23616] ? soundcore_open+0x2da/0x490 [ 1345.791058][T23616] odev_open+0x67/0xa0 [ 1345.791078][T23616] chrdev_open+0x4cc/0x5e0 [ 1345.791109][T23616] ? __pfx_chrdev_open+0x10/0x10 [ 1345.791145][T23616] ? __pfx_chrdev_open+0x10/0x10 [ 1345.791171][T23616] do_dentry_open+0xdf0/0x1970 [ 1345.791221][T23616] vfs_open+0x3b/0x340 [ 1345.791249][T23616] ? path_openat+0x2ecd/0x3830 [ 1345.791274][T23616] path_openat+0x2ee5/0x3830 [ 1345.791294][T23616] ? arch_stack_walk+0xfc/0x150 [ 1345.791360][T23616] ? __pfx_path_openat+0x10/0x10 [ 1345.791379][T23616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.791423][T23616] do_filp_open+0x1fa/0x410 [ 1345.791448][T23616] ? __pfx_do_filp_open+0x10/0x10 [ 1345.791491][T23616] ? _raw_spin_unlock+0x28/0x50 [ 1345.791508][T23616] ? alloc_fd+0x64c/0x6c0 [ 1345.791535][T23616] do_sys_openat2+0x121/0x1c0 [ 1345.791551][T23616] ? __pfx_do_sys_openat2+0x10/0x10 [ 1345.791566][T23616] ? ksys_write+0x1f0/0x250 [ 1345.791590][T23616] __x64_sys_open+0x11e/0x150 [ 1345.791607][T23616] do_syscall_64+0xf6/0x210 [ 1345.791629][T23616] ? clear_bhb_loop+0x60/0xb0 [ 1345.791647][T23616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.791661][T23616] RIP: 0033:0x7f7ef838e969 [ 1345.791676][T23616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1345.791689][T23616] RSP: 002b:00007f7ef91a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1345.791706][T23616] RAX: ffffffffffffffda RBX: 00007f7ef85b5fa0 RCX: 00007f7ef838e969 [ 1345.791717][T23616] RDX: 0000000000000000 RSI: 00000000001a1142 RDI: 0000200000000040 [ 1345.791727][T23616] RBP: 00007f7ef91a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1345.791737][T23616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1345.791745][T23616] R13: 0000000000000000 R14: 00007f7ef85b5fa0 R15: 00007f7ef86dfa28 [ 1345.791768][T23616] [ 1345.954706][ T5901] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 1345.957476][ T2149] usb usb4-port1: attempt power cycle [ 1346.137275][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1346.152991][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1346.164961][ T5901] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1346.174065][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.211619][ T5901] usb 6-1: config 0 descriptor?? [ 1346.223334][T23620] fuse: Unknown parameter 'gr¹ÅriðbJÿÂõe"Æ »/' [ 1346.474722][ T2149] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1346.506190][ T2149] usb 4-1: device descriptor read/8, error -71 [ 1346.648898][T23611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1346.651945][ T5901] isku 0003:1E7D:319C.0047: item fetching failed at offset 5/7 [ 1346.930262][ T2149] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1346.976000][T23611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1346.992068][ T5901] isku 0003:1E7D:319C.0047: parse failed [ 1346.995289][ T2149] usb 4-1: device descriptor read/8, error -71 [ 1346.997940][ T5901] isku 0003:1E7D:319C.0047: probe with driver isku failed with error -22 [ 1347.133335][ T5901] usb 6-1: USB disconnect, device number 109 [ 1347.137605][ T2149] usb usb4-port1: unable to enumerate USB device [ 1347.474491][T15830] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1347.584524][ T5887] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1347.626636][T15830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1347.636950][T15830] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1347.647417][T15830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1347.660844][T15830] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1347.671512][T15830] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1347.682002][T15830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.695269][T15830] usb 1-1: config 0 descriptor?? [ 1347.734630][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 1347.742291][ T5887] usb 3-1: config 0 has an invalid interface number: 110 but max is 0 [ 1347.751388][ T5887] usb 3-1: config 0 has no interface number 0 [ 1347.761205][ T5887] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=3a.e4 [ 1347.770821][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.779158][ T5887] usb 3-1: Product: syz [ 1347.783497][ T5887] usb 3-1: Manufacturer: syz [ 1347.788988][ T5887] usb 3-1: SerialNumber: syz [ 1347.798498][ T5887] usb 3-1: config 0 descriptor?? [ 1347.813072][ T5887] igorplugusb 3-1:0.110: endpoint incorrect [ 1347.941093][ T2149] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1348.027696][ T5887] usb 3-1: USB disconnect, device number 105 [ 1348.094510][ T2149] usb 6-1: Using ep0 maxpacket: 8 [ 1348.102327][ T2149] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1348.146788][ T2149] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1348.168445][ T2149] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1348.176926][ T2149] usb 6-1: Product: syz [ 1348.181228][ T2149] usb 6-1: Manufacturer: syz [ 1348.197592][ T2149] usb 6-1: SerialNumber: syz [ 1348.420978][ T2149] usb 6-1: Invalid connection information received from device [ 1348.488622][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4419'. [ 1348.666452][T23645] FAULT_INJECTION: forcing a failure. [ 1348.666452][T23645] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.682057][T23645] CPU: 1 UID: 0 PID: 23645 Comm: syz.6.4421 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1348.682087][T23645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1348.682100][T23645] Call Trace: [ 1348.682109][T23645] [ 1348.682118][T23645] dump_stack_lvl+0x189/0x250 [ 1348.682157][T23645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1348.682187][T23645] ? __pfx__printk+0x10/0x10 [ 1348.682214][T23645] ? __pfx___might_resched+0x10/0x10 [ 1348.682238][T23645] should_fail_ex+0x414/0x560 [ 1348.682272][T23645] should_failslab+0xa8/0x100 [ 1348.682304][T23645] __kmalloc_cache_noprof+0x70/0x3d0 [ 1348.682339][T23645] ? snd_seq_timer_new+0x54/0x6e0 [ 1348.682374][T23645] snd_seq_timer_new+0x54/0x6e0 [ 1348.682412][T23645] snd_seq_queue_alloc+0x18f/0x790 [ 1348.682443][T23645] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 1348.682469][T23645] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 1348.682496][T23645] snd_seq_oss_open+0x5e0/0xea0 [ 1348.682528][T23645] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1348.682563][T23645] ? __lock_acquire+0xaac/0xd20 [ 1348.682616][T23645] ? rcu_is_watching+0x15/0xb0 [ 1348.682637][T23645] ? trace_contention_end+0x39/0x120 [ 1348.682681][T23645] ? __pfx___mutex_lock+0x10/0x10 [ 1348.682716][T23645] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1348.682738][T23645] ? __pfx_free_devinfo+0x10/0x10 [ 1348.682758][T23645] ? do_raw_spin_unlock+0x122/0x240 [ 1348.682788][T23645] ? soundcore_open+0x2da/0x490 [ 1348.682813][T23645] odev_open+0x67/0xa0 [ 1348.682834][T23645] chrdev_open+0x4cc/0x5e0 [ 1348.682865][T23645] ? __pfx_chrdev_open+0x10/0x10 [ 1348.682901][T23645] ? __pfx_chrdev_open+0x10/0x10 [ 1348.682928][T23645] do_dentry_open+0xdf0/0x1970 [ 1348.682978][T23645] vfs_open+0x3b/0x340 [ 1348.683007][T23645] ? path_openat+0x2ecd/0x3830 [ 1348.683032][T23645] path_openat+0x2ee5/0x3830 [ 1348.683052][T23645] ? arch_stack_walk+0xfc/0x150 [ 1348.683117][T23645] ? __pfx_path_openat+0x10/0x10 [ 1348.683136][T23645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.683179][T23645] do_filp_open+0x1fa/0x410 [ 1348.683205][T23645] ? __pfx_do_filp_open+0x10/0x10 [ 1348.683271][T23645] ? _raw_spin_unlock+0x28/0x50 [ 1348.683294][T23645] ? alloc_fd+0x64c/0x6c0 [ 1348.683340][T23645] do_sys_openat2+0x121/0x1c0 [ 1348.683363][T23645] ? __pfx_do_sys_openat2+0x10/0x10 [ 1348.683384][T23645] ? ksys_write+0x1f0/0x250 [ 1348.683407][T23645] ? rcu_is_watching+0x15/0xb0 [ 1348.683434][T23645] __x64_sys_open+0x11e/0x150 [ 1348.683459][T23645] do_syscall_64+0xf6/0x210 [ 1348.683489][T23645] ? clear_bhb_loop+0x60/0xb0 [ 1348.683514][T23645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.683535][T23645] RIP: 0033:0x7f482898e969 [ 1348.683555][T23645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1348.683573][T23645] RSP: 002b:00007f48298cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1348.683595][T23645] RAX: ffffffffffffffda RBX: 00007f4828bb5fa0 RCX: 00007f482898e969 [ 1348.683610][T23645] RDX: 0000000000000000 RSI: 00000000001a1142 RDI: 0000200000000040 [ 1348.683623][T23645] RBP: 00007f48298cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.683636][T23645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1348.683648][T23645] R13: 0000000000000000 R14: 00007f4828bb5fa0 R15: 00007f4828cdfa28 [ 1348.683680][T23645] [ 1349.036260][T23647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.045384][T23647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.327693][T23658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4425'. [ 1349.489556][ T5901] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1349.673323][T15830] hdpvr 1-1:0.0: unexpected answer of status request, len -71 [ 1349.714991][T15830] hdpvr 1-1:0.0: device init failed [ 1349.734910][T15830] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 1349.745061][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 1349.790420][ T5901] usb 3-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1349.834783][T15830] usb 1-1: USB disconnect, device number 125 [ 1349.863699][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1349.893230][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1349.899703][T23668] tipc: Enabled bearer , priority 10 [ 1349.914034][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.931176][T23667] vxcan3: entered promiscuous mode [ 1349.970500][ T5901] usb 3-1: config 0 descriptor?? [ 1350.408284][ T5901] logitech 0003:046D:C219.0048: unknown main item tag 0x2 [ 1350.433316][ T5901] logitech 0003:046D:C219.0048: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.2-1/input0 [ 1350.455387][ T47] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1350.479251][ T5901] logitech 0003:046D:C219.0048: no inputs found [ 1350.608140][ T47] usb 4-1: device descriptor read/64, error -71 [ 1350.646986][T23655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.663290][ T2149] usb 6-1: USB disconnect, device number 110 [ 1350.754909][T23655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1350.812107][T23655] RDS: rds_bind could not find a transport for 5300::c000:0:20:0, load rds_tcp or rds_rdma? [ 1350.874498][ T47] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1350.884723][ T5915] tipc: Node number set to 16385 [ 1351.014574][ T47] usb 4-1: device descriptor read/64, error -71 [ 1351.135831][ T47] usb usb4-port1: attempt power cycle [ 1351.474781][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1351.529535][ T47] usb 4-1: device descriptor read/8, error -71 [ 1351.586814][T23690] FAULT_INJECTION: forcing a failure. [ 1351.586814][T23690] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.625013][T23690] CPU: 0 UID: 0 PID: 23690 Comm: syz.5.4434 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1351.625044][T23690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1351.625056][T23690] Call Trace: [ 1351.625063][T23690] [ 1351.625070][T23690] dump_stack_lvl+0x189/0x250 [ 1351.625100][T23690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1351.625121][T23690] ? __pfx__printk+0x10/0x10 [ 1351.625141][T23690] ? __pfx___might_resched+0x10/0x10 [ 1351.625154][T23690] ? fs_reclaim_acquire+0x7d/0x100 [ 1351.625181][T23690] should_fail_ex+0x414/0x560 [ 1351.625201][T23690] should_failslab+0xa8/0x100 [ 1351.625224][T23690] __kmalloc_cache_noprof+0x70/0x3d0 [ 1351.625244][T23690] ? snd_timer_instance_new+0x51/0x220 [ 1351.625262][T23690] snd_timer_instance_new+0x51/0x220 [ 1351.625278][T23690] snd_seq_timer_open+0x237/0x5f0 [ 1351.625311][T23690] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1351.625331][T23690] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1351.625353][T23690] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1351.625371][T23690] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1351.625396][T23690] snd_seq_queue_alloc+0x407/0x790 [ 1351.625423][T23690] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 1351.625442][T23690] snd_seq_oss_open+0x5e0/0xea0 [ 1351.625464][T23690] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1351.625490][T23690] ? __lock_acquire+0xaac/0xd20 [ 1351.625526][T23690] ? rcu_is_watching+0x15/0xb0 [ 1351.625540][T23690] ? trace_contention_end+0x39/0x120 [ 1351.625570][T23690] ? __pfx___mutex_lock+0x10/0x10 [ 1351.625595][T23690] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1351.625610][T23690] ? __pfx_free_devinfo+0x10/0x10 [ 1351.625624][T23690] ? do_raw_spin_unlock+0x122/0x240 [ 1351.625649][T23690] ? soundcore_open+0x2da/0x490 [ 1351.625666][T23690] odev_open+0x67/0xa0 [ 1351.625681][T23690] chrdev_open+0x4cc/0x5e0 [ 1351.625703][T23690] ? __pfx_chrdev_open+0x10/0x10 [ 1351.625729][T23690] ? __pfx_chrdev_open+0x10/0x10 [ 1351.625748][T23690] do_dentry_open+0xdf0/0x1970 [ 1351.625783][T23690] vfs_open+0x3b/0x340 [ 1351.625803][T23690] ? path_openat+0x2ecd/0x3830 [ 1351.625821][T23690] path_openat+0x2ee5/0x3830 [ 1351.625835][T23690] ? arch_stack_walk+0xfc/0x150 [ 1351.625880][T23690] ? __pfx_path_openat+0x10/0x10 [ 1351.625894][T23690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.625924][T23690] do_filp_open+0x1fa/0x410 [ 1351.625941][T23690] ? __pfx_do_filp_open+0x10/0x10 [ 1351.625974][T23690] ? _raw_spin_unlock+0x28/0x50 [ 1351.625989][T23690] ? alloc_fd+0x64c/0x6c0 [ 1351.626017][T23690] do_sys_openat2+0x121/0x1c0 [ 1351.626038][T23690] ? __pfx_do_sys_openat2+0x10/0x10 [ 1351.626054][T23690] ? ksys_write+0x1f0/0x250 [ 1351.626071][T23690] ? rcu_is_watching+0x15/0xb0 [ 1351.626090][T23690] __x64_sys_open+0x11e/0x150 [ 1351.626107][T23690] do_syscall_64+0xf6/0x210 [ 1351.626129][T23690] ? clear_bhb_loop+0x60/0xb0 [ 1351.626147][T23690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.626162][T23690] RIP: 0033:0x7ff4b7d8e969 [ 1351.626177][T23690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1351.626190][T23690] RSP: 002b:00007ff4b8cb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1351.626206][T23690] RAX: ffffffffffffffda RBX: 00007ff4b7fb5fa0 RCX: 00007ff4b7d8e969 [ 1351.626217][T23690] RDX: 0000000000000000 RSI: 00000000001a1142 RDI: 0000200000000040 [ 1351.626227][T23690] RBP: 00007ff4b8cb8090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.626236][T23690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1351.626245][T23690] R13: 0000000000000000 R14: 00007ff4b7fb5fa0 R15: 00007ff4b80dfa28 [ 1351.626268][T23690] [ 1352.054451][ T47] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1352.077618][ T47] usb 4-1: device descriptor read/8, error -71 [ 1352.231504][ T47] usb usb4-port1: unable to enumerate USB device [ 1352.336430][ T47] usb 3-1: USB disconnect, device number 106 [ 1352.597149][T23701] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4437'. [ 1353.664610][ T30] audit: type=1326 audit(1747771619.344:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23728 comm="syz.2.4445" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ef838e969 code=0x0 [ 1353.824453][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1354.015233][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1354.030290][T23735] FAULT_INJECTION: forcing a failure. [ 1354.030290][T23735] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.043320][T23735] CPU: 0 UID: 0 PID: 23735 Comm: syz.5.4446 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 1354.043345][T23735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1354.043355][T23735] Call Trace: [ 1354.043362][T23735] [ 1354.043368][T23735] dump_stack_lvl+0x189/0x250 [ 1354.043404][T23735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1354.043432][T23735] ? __pfx__printk+0x10/0x10 [ 1354.043456][T23735] ? __pfx___might_resched+0x10/0x10 [ 1354.043474][T23735] ? fs_reclaim_acquire+0x7d/0x100 [ 1354.043507][T23735] should_fail_ex+0x414/0x560 [ 1354.043547][T23735] should_failslab+0xa8/0x100 [ 1354.043582][T23735] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1354.043612][T23735] ? snd_timer_instance_new+0x6a/0x220 [ 1354.043637][T23735] kstrdup+0x42/0x100 [ 1354.043654][T23735] snd_timer_instance_new+0x6a/0x220 [ 1354.043669][T23735] snd_seq_timer_open+0x237/0x5f0 [ 1354.043696][T23735] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1354.043716][T23735] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1354.043737][T23735] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1354.043755][T23735] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1354.043780][T23735] snd_seq_queue_alloc+0x407/0x790 [ 1354.043806][T23735] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 1354.043825][T23735] snd_seq_oss_open+0x5e0/0xea0 [ 1354.043848][T23735] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 1354.043873][T23735] ? __lock_acquire+0xaac/0xd20 [ 1354.043915][T23735] ? rcu_is_watching+0x15/0xb0 [ 1354.043930][T23735] ? trace_contention_end+0x39/0x120 [ 1354.043960][T23735] ? __pfx___mutex_lock+0x10/0x10 [ 1354.043987][T23735] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1354.044003][T23735] ? __pfx_free_devinfo+0x10/0x10 [ 1354.044016][T23735] ? do_raw_spin_unlock+0x122/0x240 [ 1354.044037][T23735] ? soundcore_open+0x2da/0x490 [ 1354.044055][T23735] odev_open+0x67/0xa0 [ 1354.044069][T23735] chrdev_open+0x4cc/0x5e0 [ 1354.044091][T23735] ? __pfx_chrdev_open+0x10/0x10 [ 1354.044117][T23735] ? __pfx_chrdev_open+0x10/0x10 [ 1354.044135][T23735] do_dentry_open+0xdf0/0x1970 [ 1354.044170][T23735] vfs_open+0x3b/0x340 [ 1354.044190][T23735] ? path_openat+0x2ecd/0x3830 [ 1354.044207][T23735] path_openat+0x2ee5/0x3830 [ 1354.044230][T23735] ? arch_stack_walk+0xfc/0x150 [ 1354.044274][T23735] ? __pfx_path_openat+0x10/0x10 [ 1354.044288][T23735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.044318][T23735] do_filp_open+0x1fa/0x410 [ 1354.044339][T23735] ? __pfx_do_filp_open+0x10/0x10 [ 1354.044384][T23735] ? _raw_spin_unlock+0x28/0x50 [ 1354.044406][T23735] ? alloc_fd+0x64c/0x6c0 [ 1354.044444][T23735] do_sys_openat2+0x121/0x1c0 [ 1354.044466][T23735] ? __pfx_do_sys_openat2+0x10/0x10 [ 1354.044493][T23735] ? ksys_write+0x1f0/0x250 [ 1354.044516][T23735] ? rcu_is_watching+0x15/0xb0 [ 1354.044542][T23735] __x64_sys_open+0x11e/0x150 [ 1354.044567][T23735] do_syscall_64+0xf6/0x210 [ 1354.044597][T23735] ? clear_bhb_loop+0x60/0xb0 [ 1354.044623][T23735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.044643][T23735] RIP: 0033:0x7ff4b7d8e969 [ 1354.044663][T23735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1354.044682][T23735] RSP: 002b:00007ff4b8cb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1354.044704][T23735] RAX: ffffffffffffffda RBX: 00007ff4b7fb5fa0 RCX: 00007ff4b7d8e969 [ 1354.044719][T23735] RDX: 0000000000000000 RSI: 00000000001a1142 RDI: 0000200000000040 [ 1354.044733][T23735] RBP: 00007ff4b8cb8090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.044746][T23735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.044758][T23735] R13: 0000000000000000 R14: 00007ff4b7fb5fa0 R15: 00007ff4b80dfa28 [ 1354.044791][T23735] [ 1354.476104][ T10] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1354.488619][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1354.500115][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1354.510732][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1354.524306][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1354.534974][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1354.548268][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1354.558040][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.771106][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 1354.776688][ T10] usbtmc 4-1:16.0: can't read capabilities [ 1354.980054][T23750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1355.029857][T23750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1355.064690][ T47] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1355.139682][ T30] audit: type=1326 audit(1747771620.824:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23752 comm="syz.0.4451" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb8b58e969 code=0x0 [ 1355.220640][ T47] usb 6-1: device descriptor read/64, error -71 [ 1355.453003][T23763] tipc: Cannot configure node identity twice [ 1355.474479][ T47] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1355.513176][T23763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4453'. [ 1355.566476][T23763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4453'. [ 1355.624599][ T47] usb 6-1: device descriptor read/64, error -71 [ 1355.744916][ T47] usb usb6-port1: attempt power cycle [ 1355.994502][ T5915] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1356.094984][ T47] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1356.138810][ T47] usb 6-1: device descriptor read/8, error -71 [ 1356.184484][ T5915] usb 3-1: Using ep0 maxpacket: 16 [ 1356.190099][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.193480][ T5915] usb 3-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5 [ 1356.193505][ T5915] usb 3-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3 [ 1356.193521][ T5915] usb 3-1: Product: syz [ 1356.193532][ T5915] usb 3-1: Manufacturer: syz [ 1356.193545][ T5915] usb 3-1: SerialNumber: syz [ 1356.212284][ T5915] usb 3-1: config 0 descriptor?? [ 1356.216571][ T5915] usb 3-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 1356.233085][ T5915] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1356.299841][ T5915] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 1356.299900][ T5915] usb 3-1: media controller created [ 1356.342406][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1356.373791][ T5915] usb 3-1: selecting invalid altsetting 2 [ 1356.373826][ T5915] set interface failed [ 1356.373846][ T5915] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1356.373867][ T5915] error writing reg: 0xff, val: 0x00 [ 1356.426953][ T47] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1356.437830][ T5915] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1356.463183][ T47] usb 6-1: device descriptor read/8, error -71 [ 1356.479802][ T5915] usb 3-1: USB disconnect, device number 107 [ 1356.564798][ T47] usb usb6-port1: unable to enumerate USB device [ 1356.608909][ T47] usb 4-1: USB disconnect, device number 5 [ 1356.835453][T23782] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4458'. [ 1357.024475][ T47] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1357.058194][ T30] audit: type=1800 audit(1747771622.744:2997): pid=23790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4460" name="file1" dev="tmpfs" ino=1210 res=0 errno=0 [ 1357.079003][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.206464][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 1357.218668][ T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1357.262035][ T47] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1357.274403][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1357.282781][ T47] usb 4-1: Product: syz [ 1357.287508][ T47] usb 4-1: Manufacturer: syz [ 1357.292155][ T47] usb 4-1: SerialNumber: syz [ 1357.335088][ T47] usb 4-1: config 0 descriptor?? [ 1357.362496][ T47] usb 4-1: bad CDC descriptors [ 1357.376058][ T47] usb 4-1: unsupported MDLM descriptors [ 1357.505379][T23810] loop4: detected capacity change from 0 to 7 [ 1357.531447][T23810] Dev loop4: unable to read RDB block 7 [ 1357.546547][T23812] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4466'. [ 1357.560916][T23812] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4466'. [ 1357.570237][T23810] loop4: unable to read partition table [ 1357.576622][T23810] loop4: partition table beyond EOD, truncated [ 1357.604715][T23810] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1357.621216][T23812] dummy0: entered promiscuous mode [ 1357.716102][T23812] team0: entered promiscuous mode [ 1357.730447][T23812] team_slave_0: entered promiscuous mode [ 1357.768528][T23812] team_slave_1: entered promiscuous mode [ 1357.778252][ T2149] usb 4-1: USB disconnect, device number 6 [ 1358.204817][ T5915] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1358.377071][ T5915] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 1358.407016][ T5915] usb 6-1: config 0 has no interface number 0 [ 1358.482406][ T5915] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1358.561094][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.580050][ T5915] usb 6-1: Product: syz [ 1358.594508][ T5915] usb 6-1: Manufacturer: syz [ 1358.599760][ T5915] usb 6-1: SerialNumber: syz [ 1358.623295][ T5915] usb 6-1: config 0 descriptor?? [ 1358.872079][ T5915] usb 6-1: Found UVC 0.08 device syz (046d:0823) [ 1358.916244][ T5915] usb 6-1: No valid video chain found. [ 1358.945962][ T5915] usb 6-1: USB disconnect, device number 115 [ 1358.954605][ T47] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1359.159304][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 1359.167912][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.185195][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.185251][ T47] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1359.185277][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.198964][ T47] usb 4-1: config 0 descriptor?? [ 1359.271475][T23846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4474'. [ 1359.271521][T23846] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4474'. [ 1359.271578][T23846] netlink: 'syz.2.4474': attribute type 1 has an invalid length. [ 1359.508439][ T5915] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1359.642064][ T47] savu 0003:1E7D:2D5A.0049: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 1359.654157][ T5915] usb 3-1: device descriptor read/64, error -71 [ 1359.915304][ T5915] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1360.015215][T23836] ALSA: seq fatal error: cannot create timer (-19) [ 1360.029095][ T5881] usb 4-1: USB disconnect, device number 7 [ 1360.105031][ T5915] usb 3-1: device descriptor read/64, error -71 [ 1360.235611][ T5915] usb usb3-port1: attempt power cycle [ 1360.504652][T23858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4480'. [ 1360.539347][T11794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1360.554622][T11794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1360.573389][T11794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1360.597601][ T5915] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1360.614509][T11794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1360.627815][T23858] veth1_macvtap (unregistering): left allmulticast mode [ 1360.645036][T11794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1360.656661][ T5915] usb 3-1: device descriptor read/8, error -71 [ 1360.733384][T23858] macsec0 (unregistering): left allmulticast mode [ 1360.740261][T23858] macsec0 (unregistering): left promiscuous mode [ 1360.747960][T23858] bridge0: port 3(macsec0) entered disabled state [ 1360.764724][T23862] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4481'. [ 1360.773840][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4481'. [ 1360.812587][T23862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4481'. [ 1360.822258][T23862] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4481'. [ 1360.904456][ T5915] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1360.941693][ T5915] usb 3-1: device descriptor read/8, error -71 [ 1361.058727][ T5915] usb usb3-port1: unable to enumerate USB device [ 1361.291640][T23877] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1361.303260][ T5830] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 1361.312958][T23860] chnl_net:caif_netlink_parms(): no params data found [ 1361.441083][T23878] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4482'. [ 1361.508270][T12227] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 1361.518346][T12227] ref_tracker: batadv_slave_0@ffff88805a9a8610 has 1/1 users at [ 1361.518346][T12227] batadv_hard_if_event+0x122c/0x1a50 [ 1361.518346][T12227] notifier_call_chain+0x1b6/0x3e0 [ 1361.518346][T12227] register_netdevice+0x1608/0x1af0 [ 1361.518346][T12227] veth_newlink+0x5cc/0xa50 [ 1361.518346][T12227] rtnl_newlink_create+0x308/0xaf0 [ 1361.518346][T12227] rtnl_newlink+0x16d6/0x1c70 [ 1361.518346][T12227] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1361.518346][T12227] netlink_rcv_skb+0x21c/0x490 [ 1361.518346][T12227] netlink_unicast+0x758/0x8d0 [ 1361.518346][T12227] netlink_sendmsg+0x805/0xb30 [ 1361.518346][T12227] __sock_sendmsg+0x219/0x270 [ 1361.518346][T12227] __sys_sendto+0x3bd/0x520 [ 1361.518346][T12227] __x64_sys_sendto+0xde/0x100 [ 1361.518346][T12227] do_syscall_64+0xf6/0x210 [ 1361.518346][T12227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.518346][T12227] [ 1361.605740][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.630282][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.636940][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1361.778127][T23860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.801200][T23860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.887062][T23860] bridge_slave_0: entered allmulticast mode [ 1361.921112][T23860] bridge_slave_0: entered promiscuous mode [ 1362.744760][ T5830] Bluetooth: hci2: command tx timeout