last executing test programs: 17.130548596s ago: executing program 4 (id=1997): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000007c0)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0xc0, {0x7, 0x28, 0xff, 0x9010, 0x0, 0x0, 0x500, 0x81, 0x0, 0x0, 0x0, 0x10005}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7, 0x1100) syz_fuse_handle_req(r3, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0x4c201c15, {0x7, 0x2b, 0x1, 0x301100, 0x0, 0x3, 0x5, 0xded, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000009180)="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", 0x2000, &(0x7f0000005600)={&(0x7f00000003c0)={0x50, 0x0, 0x401, {0x7, 0x2b, 0x6, 0x100000, 0xe, 0x10, 0x3, 0xb, 0x0, 0x0, 0x80, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x48}}, 0x4000000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f00006dbffc), 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x101001a, 0x0, 0xfb, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = openat$cuse(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_usb_disconnect(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000300)) ptrace$ARCH_SHSTK_LOCK(0x1e, r5, 0x2, 0x5003) socket$inet6_tcp(0xa, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) get_robust_list(r6, 0x0, 0x0) 13.799830424s ago: executing program 3 (id=2003): syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x78, 0xd, 0x66, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r6, &(0x7f00000003c0)={0x8, {"ac4b292b84bd72a8d758c2b2ff1c72004134668d5e310b7d0088b3d7afc4ce236d4ac7c0365d389808a78b05023561f45af31a93113ba5f725e7e28370eee47ad75feff31d8835c190aa0f8e1a70095d64a50cc8cda17f827ba53540a6bb426526e912ab7f941dd459ab9bfcd6432eaf3598e278858b1e87554a958e31c2625045b8843a2853ea7f22be915fb9fb47c83624b3fa2be5c12acbe5eb4b2a67ecd5af46c393e88329deb4af45ebbe41f0e197245ca0b4b69c0168803c9fd27ac61b79bacb0da740f3aade73ecf04f363c4dfc691d939c573bb1222b0eb8e165d6d6edfbc770ce067bbef32856c6f514b0a38ce4cf86b89b5a4dca3dd0f48a4253cd3547f9a898f29836a51c60949ee877b24ecdb330ad61b5833a24e4e31d990dbf3a5195784d6dcd13cdad3869526b3531c5987dac7444d60e4b5334859825d5de308ade959d81e72f5593ce8adf26513d3a2c6037ac9c77c45ccae6d1de257b4dee8283fe2f47e8744ba7fd648697d55bd8582d9aba94a5caee75bad49b35f9465085d8f44b75a77515b6309bd284c305fd3a78c6526105c5d49e12d4d56938d259cebd663b6bf8e8b052be7e90c7c5a184c41068b14ec261b736e59b5a75a4f1db359971e653dc9ecdedb8ae9928fc6ca04d99995539be8ccc144dd3e0fdf46fa00638cff0e3f0ff92ae49cfe9a88c815971c52fff59935ed679fb7500b71bca52d5885c9d22fc5148b89c59bdc366786928c13430069666e03e42731c93c47508ff053d1193b15dfa6133dc3a3db587bc5ca05c697f498cb17496b5e8f6629164996f1b67f3aeb7aa282f5716d0d5bf8b9d0e674ebec3e6beccdd4e457254fd886457e4f51e454f1c1e7ce5ee5125bc825410e1303ac4e9fcff7eac2955bb43a6a01863f7f32cae717a7abc0afd2953396a19e930f06dcc5cf73aa089b6ff9b65ec2e954e87229670e42c2d44dfc79d7866968b08baee738ee6936539d22dec8a966f90fcce231c0c5232bbde8925da8abdae1efd04da31e9627bea70fb7941242588c2ed40b8e14a5d7406cf28c62b94530064b4b10dbce57ef97436d57e3cc81d05adb22838470e1c64bab7f198b3efaf753d12392465d285586fd484dfe0323536687523b175dacd2e91a959e1c0df2593a2954c44d489081915421114a38284cc6e62e43e3cb5073a8bc9989aef76332028b7c24178f47b1cba9a6a9e0a068445a75ae6f568031f617c37bc24a3ca3c950546aba27f7400029a7ffc11600e17cd5e4efd4e91963468d1185e8780db244c8da8ce027801a6ff13e2dfdb5add1800b66a1720c35f2a8219c7dbf439c7c524da32c64c7e6056b60b53c02cb620fb64c6d2f12f391a8b4a19fc0f2e0644b8302a24a2991291c726cef1d8cf765f63b1f994a479f0e81afd4e6e3300767c9debda23f2058d7f5d31497008fb1ff951ba3bcfac9abe0ea3fc8a3cfc770200d885b6fc758aef7df4b8bf305ce373e888205b90eed8f1528b33f198d0f0802eccce8ca133af7d8a27a00f8e9ec981c618f48486864cd782d3d803bdce926e1447b3ccc8f64314b6b07d3b42e563ecc4fe8fbe4ab414893191d5da7d00e30733c7b975aef14dd5a745927d10fb322ca2d079a698f8089ce1a7dd3cd83484cebdae7437dd988a00062ce950c77bf0eb1a4b40b4815685ada031fd16e4b89f66f7ec804e752efede8f3d79c78c1bd97d9e1eaa19f87715689ddc3ba55d787cae0b30dd950197da2b389838746fb853d5a65d1b281d51500b8c0c8430cc1b2b09e1794ce2ea0171d6e822ba87056dcf6663aa33396245897572ac8a762838a5738690dcc3f6bd2028a4a108355d69e801996f68828420919741b0af974856366d3196a71e606b20c153ce75a3ec121215a5b68ebccc5a15fadbfe2e703754c95dd5c77ca935944231557c480ed83b0b5a8b19f566f5003d51301a6b342cda98529b3a3ba2f76f19e70e8900a95e5de1153d6a302f985f6627a3d5d63cd7f1bc125236730ff3ddcc92a5fbbd1f4decd70752891dd71b1cd53f0841b8b3e9616b661f3b73f776c2ce7928bdeb978182c2a6eb3c94da356a9601fdf0b9b084b0bfa4b93323f0c49bf789699f77baa26ed98ac6d88e2c924f28715fa16a50d2f6382ef9f3eac4f71fc952b18c1f6710a8750921e130b7f90ac5d0006a3c8163f9a7962c87856600aec4e9cb28b7de3655eec56feb56afb525f63ab4efbb05458b702cb9c9998c241d33235e687fa16f17cc95d1e3903bc2da5b08dc511de3d7ed898eb29090b2afd2e894580c479e783374c2ae90034b55d05251d45106840b503e0b3211d0f2db7ff0bb45e9da9b900f4e80dabc95cc90d0606c72417a99794edd0fe10bf6d26248ddf04f43e565daa073832b47baf9953fb44e657dfe7beedf5bec4f0556e5cd5e308bf0857cfa984d4e2f65aff9beab8b4b000bfd9769986489f66ea5b242cb83403e47906ecaacb7dd627533d9bce8cd37d83147dc4fee263c96393a0f6cc41d502e9e49f232cbc3e2537a3aa76c1a7ccc6a83aea3041faf0f6df6a12fa6e6f7e9540e7a31c89d3c7645b5d6a17ede151761c607ce1456b303f9f64c80574690502ed3ec632bbd9860168ad5f2b7de7528c02fe2984bbc9b20ae0f1ec57a3d33b0432a96d92251a653ec39e6caf3f738485a41e38370d71da6fa538b54fa0976f9f7f3dd8763eef351d77b9b9354136d16326cf58022f1c67d801781daf637b092b43be7e467ab8b6382c570c8c32c7843b8ee7eb31db9a4fd484ba7f0f08dd87109caad8cd7b6f93ae606446b4be60baf61a65bbaa8d5309fea6aa151f12dc5725a890ba6f6c67a7ac6609ed44ba231aae3131ecc45bb69c92f98e843cc99b45fddd3ee672a3cc62d8e2056112b88995c586f56fcdb93362a018eee321e2ee9f6f5276f462486e255faaa8a7b65117cf9e744c82ab5795ce13078d8c76519d59f81013dc17083303dcad1847812a76f01b0d03d3c3621f6c75a0a749ae9d7a7c7da4d4f49a9f432a5418f40d5be850204b1ae66183c1bf83c7f74be4ccba2bc211383f9c1b9c6c5e216e5a93b091fffb0aee6aee2ccef5e200ba11428b8724690749aeb96ef39be5c4e63a7bd9dd093b96e0658cbbc54341a161356227795140d9bc5361c2c502e67acd84ef346c1e029465bd1329727f5056df7d63747cbd7c6f54a80f74bb824b07aa7006de2c18e31e49b04a52045a3895cd2567137937f22fa27f983a7e52eecf47652e2d80c4e03c55ad269550a97b37c94763cdf89b9244cddeb509429e2668fb088acdda97aea01f3bfd8df8910d8c39f5ccd46e851bb4077b392d66d56be56645295af3251aed0c8dd8cb097bfc77705e1f13c2ff79da0f9c26f08f903494295b1e1b566a4124b88f0536858039f9be3bfe7bcb66e57122bdf2fb679923ef156153d2ae1ba1de71a510d186dc9bed86265018299702e849a4ad99f655075aae194cc062d9b07c0573337538a5a6d6c6d2921fbd181d6e305df7a1d62a82154fcde4a1aafdd6f4e7e49a7f349f628ba372d49fcbcbbd71c23e234218b79cd80088b2b4ab4e20932eacaa2e91236a4c7fc82f6a49354436dcc806b50aca9264fcd9b199eafd6381178db163d4ce377389c67436fb07d58cd73e6a9204f447eb9c100c223ea391bcba8989426c5c8cdd0300279daa31bd5730d9ab69e5904d7386273a76f779335ce5e44f84d3f3686573ea71f2e64922e82bf2f08c877c54ee7cd160c79d68c500df6f69d033f2304d830c7cf109f5c993abacf15d94baefe49265e24f838af559cdb5695a8135ac2b6ca1d7b5600803b1f24dcc29148aa94905dda78a9f19b21fec2d780fb962dab7f1f7c7ea4aef475540fa0dc2b852f9cfdad43e8a6fed633854a1e1b96169f28961349a9ecd6d0f1f2473f036db92c0c0e64733668fc6d69becb06af2480ac856e9431439d914557a31e80badca76f85086fba1fc7374cc249c5983cc085c7bf3aa5ef12afb3bc72fe479507666bb38f50878fad0450dac4b39ea57ed01654b17590f9478dfab02e664ba0e34d4a764374d09de43b69d5007077b2bafb42e260aa8fd4aa3bef9a8d5dc8e2ecde7c2c2bfdaa21802b7d67588854288512602a41e25e09f59633fbd92df9478bc6e6a6b3b560dca5798a895e8dfa93ae9fea23729da6f3a40d4af3efcd4f6d2d02ffd2b0270960cdaea8af5004fdb18c5a510f2199724f17a8a18f3b1bc132df7affdf6f40310131e448c040fe446309352e24cb7fbc94ff9e1555e85f6479d4952854917eab50738aa6f4b70c445557703778056f7465f5d0d92bf10308a5a61574f5576702613770399805aed655d3443715dbf23190b6f0480e30c82840b59f69a71bbc19f00ac18d220af047ef89515d946dc77dd08c6abf28f6e796d3c70a4ae3d4ba01bb44fc6f03e31831ee89f583ef3d40f6c742778fac42ccf1e30367a469322d45a9725a1228ab0639de1f38c1f365c765ed9131a9d535cb6ffe49d556dee403e2202de0d04ec682c58e6d508fb377e3b7d9b748955ffc6b27b03207a3c15cd5114e631ca080c24e1147bb6d398629efcf288e3240d6311034057a031f9ff7efb07fc8ee34f19c32115f361f9e03b89f080111d141e2fbfbcd5a3d54e32c6ef1dde18c384d6bf2c4b5fa21e7efeb0b5c9c27a7740be213dce807e6a01acb09634aec0fe66bfb2ab4da89a13c42207577e38105e665afed154fb3805974d31289351937b4c67b937ae644d6cb3f913d2e05c3dce1917e1551304a5c437d69a2d13ab33989d729e6c2ed45f847b6cf5169ec4459d541c7a70199ebca316408f7adfb168e7ac452f507652ea3892e64a4d81d575825168426f39c41448beb5044ec5712f2e10b6d88d471eecf5f29085474fd2aae2791ffb41222a9dbb8c6d32847819c15201e95d0741ee1ab75ea046beca9bc8952b62ddd8a30fe2637996483d3104f540c9a985f8638ba17da2e618255f9a615fce90e1f96799d261cc551b9187cad7a9c5a9f6ff58e7cf9277856ca14e582efd62c3d384131e2fc21b9a01314bc69d54f235ce6118d756137b03c657bb26194b175a716ebe6ba03a01cb161a77815654da6a5ad327859e8af7d3f53cf1d34b84c0aafdbf8f3badaff20d010e97f794d83d5498b59a787ba94bb82d91637308313b4c92def68945b6d3d0e3654cb24b4926e46757e576d30024640fa293db106d789f41a1e481ace0c314920bdc82819e64720746ee22592a11f5917c1bde47db20902551fa838f81942fec3552f41261e2b7418e500ab9e5ea704141f0fc414a5cc6062c257214950de1c32b1951b169c7a613417695036e72bff2ce9c1a180fde1cf64cf85828f6eb9126465762686e64ab090e524e7edb6d03c3571f233f60ffc570b96a5c0839ce8d42bdc62499f8f56ee8c4a89ec4f35a7e38fe23c4b9b1625546c1a16087980d7a72c15fb7b50c9a212d9284a1cdaa1a4d45169a98ae6a730a2a07b8cb5adccdceb3131b1aa6c06b8fc7390f215a2c9ea2b2cac1026ed5965e92673608d28d55fc4e623034716ef0edf7d077809d09d8db38519d5d00a1a415b5bc431d8c6a4d558c930437565cd531c6e01631ee60d9e6e782580a409ab645c72a4b93f68100bc22a5275f66d54dbefc44365a07fafe99368b09a891767e5d376b1d0cbdc02679fb10f359d3ed8f7c268c7f0fbab77b483f44f08ee412c20a155d058addb21376fec84fbb3838c6b6aa4d5bd54e1b9770d87628f244e17e5ffc2b28eff9fb489f984b7", 0x1000}}, 0x1006) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x20000822) 13.330433164s ago: executing program 4 (id=2005): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r3 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x7687, 0x10100, 0x3, 0x33a}, &(0x7f0000000100)=0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=':'], 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r3, 0x22d3e, 0x0, 0x20, 0x0, 0x58) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x12, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket$netlink(0x10, 0x3, 0x12) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 13.241834996s ago: executing program 0 (id=2006): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}]}, 0x5c}}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x20, 0x23, 0x2, "f6cb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001640)={0x84, &(0x7f00000002c0)={0x20, 0x17, 0x2, "78dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x4008800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') read$FUSE(r3, &(0x7f00000095c0)={0x2020}, 0x2020) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000004540)=""/4105, 0x1009}], 0x1, 0x8001, 0x8) read(r3, &(0x7f0000000040)=""/12, 0xc) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0xb001, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000130001"], 0xe0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 12.682830441s ago: executing program 3 (id=2009): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681130000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 11.453298638s ago: executing program 2 (id=2011): syz_open_dev$sg(0x0, 0x3, 0xc80) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x284, 0x0, 0xffffffff, 0xffffffff, 0xfc, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@ip={@multicast2, @multicast2, 0xff000000, 0xff, 'wlan1\x00', 'pimreg\x00', {}, {0xff}, 0x5c, 0x1, 0x48}, 0x0, 0x94, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x17}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8000, 0x1, 0xc, 'syz1\x00', 'syz1\x00', {0x7}}}}, {{@uncond, 0x0, 0x94, 0xf4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x2, 0x3, 0x3, 0x0, 0x1], 0x0, 0x1}, {0x2, [0x1, 0x5, 0x4, 0x2, 0x4, 0x4], 0x6, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffc, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20000080, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 11.440793429s ago: executing program 3 (id=2012): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x2d, 0x0, 0x0, 0x6}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x34e5a000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x80000001, 0xfffffe0000000003, 0x4000fa11, 0xffffffff}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="ae5061f4ed993d0977300cc07cab508515acc15975bbc0c9b929f6c8ca805546677b46a8741fa189895267b07531a7401e6a7894421c698f91779f66ff9e57265d18c2075daeb68448727fb657255d4689cac46cc2cfec", 0x57, 0x14000800, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) 10.160390963s ago: executing program 0 (id=2013): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="797cb557", @ANYRES16=0x0, @ANYBLOB="07000000000000000000050000001800038008000400000000000b0002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4a, 0xfec, &(0x7f0000006680)) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) linkat(r4, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pI4 \x00'}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r5, &(0x7f0000000140)="b75b09032686a4d9627ac510959bf61fa159de0ceeb3a7ff4b77c67111bdcff99ea58a77547f3cebd71de9d506ecf4783cbe6dde764108"}, 0x1c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = timerfd_create(0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000100fcffffff000000002abd7000043500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900030000007a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000000a140000001100010000000000000000000300000a"], 0xc4}, 0x1, 0x0, 0x0, 0x8090}, 0x0) pipe2(0x0, 0x40) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 9.774217172s ago: executing program 2 (id=2014): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) futex(&(0x7f0000000180)=0x1, 0x3, 0x1, &(0x7f00000001c0), &(0x7f0000000200), 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64], 0x0) 8.59315997s ago: executing program 1 (id=2015): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1409, 0x404, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1b, r6, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x224b5bee36ba75e4}}, 0x14) unshare(0x2c020400) syz_io_uring_setup(0x5080, &(0x7f0000000180)={0x0, 0xdb0d, 0x800, 0xfffffffd, 0x3b5}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r9, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r10 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r10, 0xc05064a7, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x2, 0x4) setns(0xffffffffffffffff, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 8.345835129s ago: executing program 0 (id=2016): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="000305"], 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r3, 0x81044804, &(0x7f0000000400)={0xfffffffe, 0x300}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'lc\x00', 0x8, 0xd48, 0x55}, {@remote, 0x4e27, 0x2000, 0x3, 0x12d5c, 0x12d5c}}, 0x44) process_vm_writev(0x0, &(0x7f00000046c0)=[{&(0x7f0000000400)=""/143, 0x8f}, {&(0x7f00000004c0)=""/12, 0xc}], 0x2, 0x0, 0x3f, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r5, &(0x7f0000000000)="cc34", 0x2, 0x0, &(0x7f00000000c0)={0xa, 0xfffc, 0x27b6a97, @private2, 0x9}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x80000, 0xfffffffe, 0xb49, 0x3, 0x8, 0x4, 0x3}, 0x0) read(r4, &(0x7f00000004c0)=""/205, 0xcd) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000f14010000008000fedbdf250c00450072fd45006973736d"], 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x20040804) gettid() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0xfffffffc, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "c8444943470da91b", "42f3ae0e6500000000000000000100000800", "e7198360", "f7a5c1777af05eaa"}, 0x38) 8.302234669s ago: executing program 3 (id=2017): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x5) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x1808020, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000340)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x800100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000400)="bd5654de6ac63351d02ab8c63cd267b5ea55b74d1cb77bee09181d424367de100769c8398b30ee9d553546c44e688b4a9b2ab2452a6c56a15d6c632fa67423bae17688817d2ae1700b4d3cddf897e45a7100fbe0dc7f8d2f5d07078afeecce54a8871a92084d0f4091ecc0593f5814289a736d16c1619d0d", 0x78) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000000000010d804dd0002000000001109022400090400000103400000092105000001220500090a0002000007b007f7cc732450c493af06992d2d6b51da210cca787e407ab51260e9e00000a6d08797f78f36ffce234d0414f0eef5d80e403efa57cdf28579d2f0c440fe6a265f2efe421236cdc73758fae05bd5e7b023659c28a7f710ea45fa35ff860b3862da9b6d717278575b16fa6b2f7df05ca0913151919d297465e89b8c0391e0fe2b5d8a1bc294ed849c6fc1e30e678123c3a949dc430c48b064208c15db66e4a697ae366afb4eed0c607244795d16e46d8f9f17f29c7a5c68755ff13d"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000300)={0x14, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00ff0500000027ba2a2b5f"], 0x0}, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r7, &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x3) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$I2C_SMBUS(r10, 0x720, &(0x7f0000000140)={0x0, 0xcb, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x78, 0x0, 0x0, {0x0, 0xffffffff, 0x0, {0x2, 0xfffffffffffffffe, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x6000, 0x0, 0x0, 0xee00, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000004140)=@newtfilter={0x1020, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0xffff}, {}, {0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xff0, 0x2, [@TCA_BASIC_POLICE={0xcac, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x41, 0x7fffffff, 0x68, 0x5, 0x2, 0x2000, 0x8, 0xd74c, 0x8, 0xa, 0x4, 0x5, 0x2, 0x7, 0xfffffffd, 0xb, 0x1, 0x0, 0x1ff, 0x4, 0x8, 0x5, 0x0, 0x4, 0x7fffffff, 0xf52, 0x2, 0x3, 0x9, 0x2, 0x2, 0x40, 0x1, 0x7, 0xb067, 0xd, 0x0, 0x3, 0x3, 0xb, 0x7, 0x1, 0x2, 0xff, 0x6, 0x5c, 0x400, 0x3, 0x3, 0x6, 0xda4, 0x201, 0x3, 0x8, 0xfffffff9, 0x1, 0x8, 0x9, 0x6, 0x0, 0x5, 0x2, 0x5, 0xc, 0x5, 0x101, 0x4, 0x9, 0xfffffffb, 0x3, 0x80000000, 0xfffffff7, 0x7ff, 0x0, 0x4, 0x499, 0x8, 0x7, 0x0, 0xffffff7f, 0x3, 0x6, 0x2, 0xf633, 0xf1, 0xa, 0x2, 0xfffffff6, 0x2, 0xff, 0x40, 0x1, 0x3, 0x8000, 0x3, 0x0, 0x456, 0x0, 0xeb, 0xffffffff, 0x9, 0x8, 0x40, 0x3, 0xcbd, 0xe, 0x4962, 0x5, 0x76d, 0xb, 0x54b, 0x8, 0x7, 0x1, 0x9, 0x3, 0x81, 0x6, 0x6, 0x7, 0x1, 0x2, 0x2, 0x80000001, 0x8, 0xffffffff, 0x9aba, 0x1e3, 0xc, 0x80, 0x5, 0x8000, 0x4, 0x400, 0x401, 0x90, 0xa60, 0x6, 0xffffff25, 0x0, 0x2, 0x9a, 0x80, 0x0, 0x7f, 0x5, 0x9, 0x10000, 0x618a, 0x6, 0xfffffff3, 0x0, 0x80000000, 0xf, 0x3, 0x2, 0xd, 0x7fff, 0x4, 0xffff8001, 0x5, 0x9, 0x9, 0x8001, 0x0, 0x6, 0x9, 0x10001, 0xc, 0x1, 0xb, 0x98000000, 0x5, 0xfffffff7, 0x0, 0x4, 0x2, 0x6, 0x9, 0x4, 0x6, 0x10000, 0x200, 0x4, 0x6, 0x7fffffff, 0x1ff, 0x8, 0x7b4c, 0x4b7b, 0x8, 0x7fff, 0xe66d, 0x40, 0x1, 0xfffffff7, 0x6, 0x19c, 0x3, 0x101, 0x10000, 0x6, 0x9, 0xb2, 0x7, 0xfb1, 0x6, 0x8, 0x200000, 0x81, 0x3, 0xfffffffd, 0xfffffff9, 0x2, 0x0, 0x8001, 0x7fff, 0x1000, 0x8, 0x7fe00000, 0x4, 0x8, 0x1, 0xfffffff1, 0x7, 0x4, 0x8fad, 0xbb, 0x3, 0x4, 0x80000000, 0xfffffff8, 0x1, 0x8, 0x8, 0x7, 0x0, 0x0, 0x1, 0xb, 0x3, 0x8, 0x7, 0x2, 0x82a, 0x401, 0x50b, 0xfdb4, 0x8000, 0x4, 0x3, 0x586, 0x9, 0x1c]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x7, 0x7, 0x8, {0x0, 0x1, 0x2, 0xff, 0x2, 0x400}, {0xc, 0x1, 0x1, 0x3, 0x4, 0x21d4e18a}, 0xf, 0x1, 0x1ff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x2, 0xd, 0x50000000, 0x1ff, 0x8530, 0x3ff, 0xc0, 0x3, 0x2, 0x8, 0x8276, 0x6, 0x9cb6, 0x44bd4947, 0x9, 0x7, 0x10001, 0x200, 0xfff, 0xffff7360, 0xf, 0xb, 0x5, 0x4, 0xfffeffff, 0xfff, 0xffff, 0x7fff, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0x2, 0xffff0000, 0x3, 0x0, 0x3, 0x6, 0x2, 0xa, 0x3, 0x6509, 0x4, 0x8, 0xd83, 0xff, 0x8000, 0x101, 0x6, 0x20000000, 0x3, 0xa77, 0xa64d, 0x8, 0x1c1a, 0x0, 0x8, 0x40, 0x0, 0x2, 0x9, 0x4c, 0xd55, 0x5068f63a, 0x7, 0x5b, 0x40, 0x9, 0xfffffffd, 0x9, 0xb6d, 0x8001, 0x31, 0x9, 0x9e4, 0x1, 0x1, 0x10000, 0x401, 0x3, 0x7ff, 0xe31d, 0x400, 0xfc40, 0x5, 0x2, 0x10, 0x7, 0x7fff, 0x3, 0x2, 0x1, 0xa, 0x6, 0x81, 0xd0, 0x1, 0xe, 0xe0, 0xc0000, 0x8, 0x6, 0x6, 0x0, 0x6, 0x2, 0x80, 0x1, 0x8, 0x0, 0x9, 0x8, 0x3, 0xfffffff8, 0x9, 0xe85, 0x8000, 0x7, 0x5, 0x1, 0x2, 0x2, 0x2, 0x3, 0x4, 0x0, 0xf274, 0x4, 0x3, 0x1, 0x8, 0x0, 0x6, 0x10, 0x5, 0x1000, 0x5, 0x4, 0x4, 0x8, 0x2, 0x0, 0x3, 0x4ef, 0x81b1c8ea, 0x1, 0x2, 0x6, 0x7, 0x1, 0x0, 0x35, 0x1, 0x401, 0x3, 0xff, 0xd7, 0x2, 0x9, 0x1, 0xba1c, 0x5, 0x0, 0x1, 0xfff, 0x3, 0x4, 0x67c36367, 0x6, 0x7, 0x2, 0x83a, 0x942, 0x10, 0x1, 0x10001, 0x8, 0x3, 0x254, 0xffffffff, 0xecdb, 0x9, 0x200, 0x1000, 0x5, 0x2, 0x8, 0x100, 0x7fffffff, 0x78, 0xfffffffa, 0x0, 0x0, 0xc, 0x1ff, 0xee48, 0x0, 0x9, 0x1, 0x1, 0x1, 0x2, 0xe, 0x8, 0x3, 0x1000, 0xd0e, 0xc6, 0x1, 0xcf6, 0xb20, 0x4, 0x9a51, 0x8bd0, 0xce, 0x80, 0x0, 0x9, 0xd6, 0xc81, 0xfff, 0x4, 0x200, 0x0, 0x6, 0x8, 0x101, 0x32, 0x9dd, 0x7, 0x100, 0x38, 0xe, 0x6, 0xe, 0x6, 0x100, 0x6, 0x8, 0xb, 0xffff3583, 0x7, 0x9, 0x5, 0xfffffff9, 0x9db, 0x80000001, 0x5, 0x6ac6, 0x1000, 0x1, 0xfb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x43a}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffb}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x5, 0x5c, 0x0, 0x1, 0x2, 0x1, 0x7f, 0xb13e, 0x3, 0x2, 0x8, 0x1, 0x2, 0x8, 0x4, 0x7, 0xd8f, 0xfffffffe, 0x1c, 0x3, 0x7, 0x1, 0x8, 0x7, 0xb6c8, 0x2, 0x7, 0x1, 0x4, 0x7fff, 0x10, 0x2, 0x9, 0x0, 0x1, 0x217, 0xf9, 0x3, 0x2, 0x0, 0x0, 0xffffffff, 0x7, 0x1, 0xbc2, 0x3, 0x149, 0xfffff000, 0x101, 0x4, 0x9, 0x7, 0xffffff81, 0xb1a, 0x200, 0x1, 0x4, 0x2, 0x7fff, 0x46c, 0x1, 0x6, 0x6, 0xfff, 0xbbe4, 0xde, 0x8, 0x0, 0x6, 0xe13, 0x7, 0xc, 0xe0, 0xfffffff9, 0x5, 0x8, 0x23f23464, 0x3, 0x101, 0xff, 0x8, 0x0, 0xfffffff7, 0x8, 0xeb, 0x9, 0x0, 0x8, 0x8000, 0x6, 0x3, 0x0, 0xfffffffb, 0xd74, 0x9, 0xd, 0x1, 0xfffffff7, 0x9, 0x81, 0x7ff, 0x43, 0x969, 0x1, 0xfffff3a0, 0xc, 0x1, 0x2, 0xf, 0x3c1, 0x4, 0x2, 0x5, 0xfffffffb, 0x2, 0xd0, 0x5, 0x1000, 0x5, 0xabc5, 0x416e, 0x8001, 0xb, 0x4, 0x45a, 0x4, 0x0, 0xffffff81, 0x8, 0xc3b, 0x1, 0xb5, 0x3, 0x6, 0xf3, 0x2025, 0x260c, 0x1, 0x80000001, 0x1, 0x3, 0xdc, 0x40, 0x3, 0x5, 0xf, 0xc16d, 0x1, 0xb, 0x6, 0x8, 0x9, 0x2, 0x4, 0x5, 0x9, 0x1, 0x2, 0x401, 0x2, 0x9, 0xfffffff9, 0x1, 0x3, 0x4, 0x800, 0xe0, 0x4, 0x5, 0xf7c, 0x9, 0x737, 0x9, 0xa7, 0x9, 0x6, 0x1, 0x3, 0x1, 0x5, 0xffff0ac5, 0x229, 0x7, 0xe9f, 0xffffffc0, 0x4, 0x3, 0x0, 0x10001, 0x8, 0x5, 0xfffffc00, 0x8f8a, 0x1, 0x1, 0x89f, 0x0, 0x9, 0x1, 0x6, 0x80000001, 0x5, 0x6, 0x136, 0x8, 0x6, 0x0, 0x2b77, 0x7, 0x7, 0x5, 0x39, 0x8, 0x8, 0xa, 0x80000000, 0x3ff, 0x1ff, 0x2, 0x4, 0x9, 0x9, 0x5, 0x4, 0x694a754b, 0x6, 0xf, 0x7, 0x6, 0x0, 0x8, 0x59eae373, 0xc, 0x8, 0x7, 0xfda, 0x3, 0x9, 0x65c, 0x4, 0xb2d9, 0x10000, 0x8, 0x1000, 0x8000, 0x92, 0x4, 0x4, 0x7, 0x5e1cc48a, 0x6, 0x400, 0x200, 0x4ec9]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x0, 0x2, 0x6, {0x4, 0x0, 0x7ff, 0x1, 0x5, 0x78b}, {0x5, 0x0, 0x3, 0xa, 0x1, 0x7}, 0xba, 0x6, 0x40}}]}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_BASIC_EMATCHES={0x334, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x18c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0x9}, {0x80000001, 0xc7e9, 0xfffffffd, 0x4}}}, @TCF_EM_META={0x78, 0x2, 0x0, 0x0, {{0x80, 0x4, 0xfff7}, [@TCA_EM_META_RVALUE={0x2b, 0x3, [@TCF_META_TYPE_VAR="f48a0b7583c234", @TCF_META_TYPE_VAR="ce92dd975ee81e9d250d", @TCF_META_TYPE_VAR="65e3c2e2ad5949", @TCF_META_TYPE_VAR="e84973af", @TCF_META_TYPE_VAR="b31b", @TCF_META_TYPE_VAR="0d18383da9", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x38, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="61f48fe29f7428", @TCF_META_TYPE_VAR="69f1dcfd977a", @TCF_META_TYPE_VAR="e14632458387642e89", @TCF_META_TYPE_VAR="2089cf91f54a", @TCF_META_TYPE_VAR="0f2f413b3e394574", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x3]}]}}, @TCF_EM_META={0x5c, 0x3, 0x0, 0x0, {{0x7e, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="489cbe28b256", @TCF_META_TYPE_VAR="9b095b4c", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="e515f8fd9e"]}, @TCA_EM_META_LVALUE={0x2f, 0x2, [@TCF_META_TYPE_VAR="f5c36786e3f234d0aff3", @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="da48d409d194ff0b7fc4", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6f7f38"]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x6, 0x1, 0x5}, {0x400, 0x7ff, 0x8001, 0x6, 0xe, 0x2, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x81, 0x2, 0x7fff}, {0xa, 0x9, 0x0, "ce533c03263d5b9470"}}}, @TCF_EM_META={0x64, 0x2, 0x0, 0x0, {{0xfff6, 0x4, 0x763}, [@TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="b19c37509c", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_VAR="f9d485f6b62f2db9e2d9", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7f, 0x1}, {0x90, 0x5, 0x1}}}, @TCA_EM_META_LVALUE={0x10, 0x2, [@TCF_META_TYPE_VAR="e56613ff2a465d22", @TCF_META_TYPE_INT=0x4]}]}}]}, @TCA_EMATCH_TREE_LIST={0x19c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xb8, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x9}, "26129d30ef639773fa617a737ecb664867abbaed3c0b626fd6b9f8783a07917464dbc6bcab47349c48f88042614ffe7a7eabb52379b00e5d883411dcb27a839d1b7e00000000000000000015fed819822b0dec0272a5f873c6743a284280ff71018c7bf78bb14a7175cc32bd7b363c0ef4bb29bb697bdb682f83ab044be55e9143c1552b21f956414fd3d1e27e1bf29544fd2cbc60cbb37c8b9c4067a730b496823da6b046fda9690525"}}, @TCF_EM_IPT={0x20, 0x2, 0x0, 0x0, {{0x1, 0x9, 0xfff8}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xec}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7, 0x1, 0x2}, {0x100000, 0x691c, 0x7, 0x1, 0x5, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0xa8, 0x1, 0x0, 0x0, {{0x690, 0x0, 0x6}, "cf6fa6fcfd66443bc43e05367b6e63cb4d960fb446ea969fe4ca6e09e4f7229d20df933b2d1f2212975b18ff7004b1be8727d54c488418e3af019b30617264b3b172ef852f5fa0c14de07538f141c5a8094a5223501d6796487b3463fff305f67c7b16bb139cf0aab6857165844e815577e74307ee7837c59a898cafed886ba3f0223c742175f8842ef7d9dc268475793e5680c16aebe2ea408361dc"}}]}]}]}}]}, 0x1020}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 7.492553704s ago: executing program 4 (id=2018): futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0x93020007) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0xffffffffffffff80, 0x0, 0x0) r2 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r5, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r8, 0x2, 0x0) getdents64(r8, 0x0, 0x22) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) io_uring_enter(r2, 0x52de, 0xf62e, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x87, 0x28, 0x0, [], [{{0x9, 0x5, 0x5, 0x3}}]}}]}}]}}, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) 7.454987547s ago: executing program 2 (id=2019): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r1], 0x0) 5.453114099s ago: executing program 2 (id=2020): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r3 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x7687, 0x10100, 0x3, 0x33a}, &(0x7f0000000100)=0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=':'], 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r3, 0x22d3e, 0x0, 0x20, 0x0, 0x58) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x12, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket$netlink(0x10, 0x3, 0x12) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 5.39342981s ago: executing program 1 (id=2021): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000001300)={[0xfffffff9, 0x7f]}, 0x0, &(0x7f00000013c0)={0x0, 0x989680}, 0x8) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xb05, 0x1a30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xd, 0x80, 0xb, [{{0x9, 0x4, 0x0, 0xa1, 0x2, 0x3, 0x1, 0x0, 0x3, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x80c}}, {{{0x9, 0x5, 0x81, 0x3, 0xb10f8dc097c20e33, 0x2, 0x7, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7f, 0x8, 0x8}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x3b, 0x47, 0x80, 0x10, 0xff}, 0x75, &(0x7f00000001c0)={0x5, 0xf, 0x75, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x4, 0x6, 0xfff7}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "2cc81f036e332f571259b0280ac7fd64"}, @ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x68, 0x0, 0x9, [0xffc0ff, 0xff3f00, 0xf, 0x7f70]}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0xce50, 0xf00, 0xfe01, [0x3f00]}, @ssp_cap={0x1c, 0x10, 0xa, 0x4, 0x4, 0xa41, 0xf000, 0xfff, [0xff00c0, 0x3f30, 0x3fcf, 0x30]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x0, 0xb, 0x6}]}, 0x3, [{0xf7, &(0x7f00000003c0)=@string={0xf7, 0x3, "e249665f64b9e88243069ad9dcf07db3035d69767f7581e04d38296e52639188d4195f733832c30f4c386662427579d0c37f299ad9f1b54bafbd6c63aca26e8425f859a3ee995bb60e0c225bce5f95dda8e16b71fd890f1ba5ac31d120be33feac9447bc3ec79bc2b7391ade65a25f9a9c239d9096a0be4c7d2c2b5eb22327dcd564f481f26667f91f29ae2ef4ec17552b956a16ce2ba5bf96241d03a67de542103042d9fe52e851d3c50e51df3e84442161f6790802e574d98294cbe434f12e1cf3159a6d01cda4ffeac840e4d606276cae17ba1b14310cea70ef62481f0e6003067cabbc4efed09e1072bd8ac49ad81ab2903930"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x43e}}, {0x88, &(0x7f00000004c0)=@string={0x88, 0x3, "b2b20b0c44ee907a5ab16293adb5ffd0bece13bc42d04e20ad936d4581c3888b2ef5388f3200e12d645edc2dd44db0e96c67845f06d697f39b0689e88f82e5b7322709053475def7ff653065033aa19378ccaeb8ea6c8c8d16bbe137486f26031a9ad910df82f4d0693ce3c4b09f05501646575dbd51833c2b8d36ef1f6d88fa2c2cc85ededa"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000780)={0x14, &(0x7f00000005c0)={0x0, 0x6, 0x23, {0x23, 0x21, "280d566bc847d86b12e41e0705f5e673c3da19837455b593fe9b6f2036b4ae5f5f"}}, &(0x7f0000000600)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "2ae30872b356afc92336dd8a203815759c79b86af68fb5e19870f902ef7a6e404c1d84d43e236383063356f6dde8eef7c54b2936b6b17f1f2423c85787dbb73b97fdaad0d6b9113b2f220b23c901221f373e858a5495c0ccd32ca122dcc1a37b5a5ff29bf757e66543d899ddf7c69f13209fd05e1e8c81d144c0e16694"}}, &(0x7f00000006c0)={0x0, 0x22, 0x9, {[@local=@item_4={0x3, 0x2, 0x1, "40cb8259"}, @main=@item_012={0x1, 0x0, 0xb, '{'}, @global=@item_012={0x1, 0x1, 0x9, '^'}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb, 0x30, 0x1, {0x22, 0xa7f}}}}, &(0x7f0000000a80)={0x18, &(0x7f00000007c0)={0x0, 0x14, 0xde, "b31ab41138c15905e16aa4371a78c696a66e49bac58979027ef68f68874a559513e991aa30b7dd757c4a2217b8a1c1e05a897ea59650e7456ae2835bb74c96c798c3568ecfeb11a7480069182b9ea9622c6473af69a83a32afacf3ed1afbeb9575ab8e3967f98b7d710c749c1d962d97791b42cb31cc331a3e1597e4a55ecd0654296ca27d692f2ecda0d0a10ca502875160875e490e11027a74e5834de628e7322effd4659b383e204291807606a6672c39954c7e4336c58a76ce21baa13975d7d4c62341ee0ce56791ce46cd4cf76fc39ed3c51758e5666fd3087d9f44"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000940)={0x20, 0x1, 0xde, "e3485ae4eb6fff5d4a658d67e8204dd560561e3718152ad4f6e066d7afcb5789d41a57f3792be763c9232de593f826856f62e8ed99c10822cba40b6dd2e732732c37ea5be52a2fe907ed0960b1a8d85806d70e4adb87b64604742b2452293b334af05d42f68404be43e5322095700ebf84f3e582ce3f4991b66f9d21a672860c718f50a1287347fe5a9eae3addd18cfc80984f587a828ef522e09657511ca0b71dbad36a800d936231334bc89ec7a3c01b7be64fa5d535c582ad921735d16ac36c3cdeee335b65b685e4ba5c61e99a195b2d413e65d6096b068f7f66e895"}, &(0x7f0000000a40)={0x20, 0x3, 0x1}}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xbd}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r3, &(0x7f00000013c0)=[{&(0x7f00000029c0)=""/4096, 0xc}, {0x0, 0x24}], 0x3f, 0x0, 0x8) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001e00010d04bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="01a0000003700400"], 0x20}, 0x1, 0xa6, 0x0, 0x20008004}, 0x0) r6 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40046602, &(0x7f0000000040)=0x2000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000ac0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xa7, 0x0, 0xf1, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x10, 0x0, 0x1e}}}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000b00)={0xa, 0x6, 0x200, 0x2, 0x7, 0xfe, 0x8, 0x1}, 0x40, &(0x7f0000000b40)={0x5, 0xf, 0x40, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "00000000400600000002000099f39b78"}, @ptm_cap={0x3}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0xe, 0x0, 0xff6c}, @ssp_cap={0x18, 0x10, 0xa, 0x40, 0x3, 0x2, 0x0, 0x1, [0xfffe4f, 0x3f, 0x0]}]}, 0x2, [{0x7d, &(0x7f0000000bc0)=@string={0x7d, 0x3, "3aaabd7b7f7a3ff5f1e2159a20ffdc85e8308880e2aac0510af819b3561483d92e00399e258cfee66c25898d37545253b46d1ccabaed386e1d27db32356ab8f590a55744018c33d4f409bc1511538bc20030352ec2d9d244c4b4d1d6caf09e565e49e2266221f12d401937d72c3f8c29a8ba8f5eb71182efda4425"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0xfcff}}]}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 4.960809056s ago: executing program 0 (id=2022): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_emit_ethernet(0xe3, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0xfffd, "32ca21e2c3bc8ff4c7be5934f7a73c4901d71a0f37853ee9d3faddc308ac42039199f2ae405689f70321011c4df4bd698ce2e55aff030000afd47aac905617630fd51a78e0746a1bd00febee0383a41d32f08c0d46638b2b5619bab34a99dbcbe991cbf61e6bc086a5c7032a3e0077e45f9bd51c4868dd79b9f184785599e1b9abf47a2c513c085e1862d93bf7bf43e35b2a00000000000008f5bbf2fa8d69b35b03000000535cf520097a2b45191c435ad691a29a61f3ac4f"}}}}}, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r2, &(0x7f0000001880), 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000003c0)={0x7, 0x8, 0xfa9d, {r5, 0x6}}, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0xdf, "7c0cfdfb1e9b826bbc4ccc87fd52fe0b525cd8a0a2b1e625544fbf32391ab6f5"}) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000080)=0x5) r6 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x1, 0x10710, 0x1, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r9 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) fcntl$setlease(r9, 0x400, 0x2) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x1) io_uring_enter(r6, 0x567, 0x20, 0x0, 0x0, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84840, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r10, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1b59ded130e0fd838539f3d3287772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) close(r2) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r12, 0x1, 0x9, &(0x7f0000000080), 0x4) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r14, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="dca5580806509fdf13d23923b6348d02b61ce4a9c1bae7fbde591280d1f09f5639ff706968cdd197c8e73ec14cf7d3659fc73bfeafcf56", @ANYRES16=r1, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r13, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 4.883044991s ago: executing program 0 (id=2023): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)={0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r6 = syz_open_pts(r5, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 4.150537239s ago: executing program 4 (id=2024): syz_open_dev$sg(0x0, 0x3, 0xc80) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x9, 0x3, 0x284, 0x0, 0xffffffff, 0xffffffff, 0xfc, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@ip={@multicast2, @multicast2, 0xff000000, 0xff, 'wlan1\x00', 'pimreg\x00', {}, {0xff}, 0x5c, 0x1, 0x48}, 0x0, 0x94, 0xfc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x17}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8000, 0x1, 0xc, 'syz1\x00', 'syz1\x00', {0x7}}}}, {{@uncond, 0x0, 0x94, 0xf4, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x4, 0x2, 0x3, 0x3, 0x0, 0x1], 0x0, 0x1}, {0x2, [0x1, 0x5, 0x4, 0x2, 0x4, 0x4], 0x6, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2e0) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffc, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000216bcb9a48b4f2e306", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000ffffffffbf91000000000000b7020000b9658c8b8500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xc, 0xfe0, &(0x7f0000000a00)=""/4064, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20000080, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 4.075293536s ago: executing program 1 (id=2025): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)={0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r6 = syz_open_pts(r5, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.342335607s ago: executing program 3 (id=2026): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r3 = syz_io_uring_setup(0x24f7, &(0x7f0000000b80)={0x0, 0x7687, 0x10100, 0x3, 0x33a}, &(0x7f0000000100)=0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB=':'], 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r3, 0x22d3e, 0x0, 0x20, 0x0, 0x58) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f00003eb000/0x1000)=nil) syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex, 0x12, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) socket$netlink(0x10, 0x3, 0x12) write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x3, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x3, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1fb}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0x7e, 0xa}}}, 0x130) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[], 0x2e) 3.13410011s ago: executing program 0 (id=2027): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x107734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x2d, 0x0, 0x0, 0x6}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0xfac7, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x34e5a000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x80000001, 0xfffffe0000000003, 0x4000fa11, 0xffffffff}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="ae5061f4ed993d0977300cc07cab508515acc15975bbc0c9b929f6c8ca805546677b46a8741fa189895267b07531a7401e6a7894421c698f91779f66ff9e57265d18c2075daeb68448727fb657255d4689cac46cc2cfec", 0x57, 0x14000800, &(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10) 2.734786748s ago: executing program 2 (id=2028): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x5, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x5, 0x0, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x30}, 0x1, 0x0, 0x0, 0x440000c0}, 0x20000004) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x240400a1}, 0x40000080) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14270566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d49392ff66fe0b17f0e0000d20800000000000000a97d48619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524ce61afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78bffff55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c09273031900"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@delchain={0x554, 0x65, 0x200, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0x5}, {0xa, 0xf}, {0xffe0, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x4e4, 0x2, [@TCA_FLOW_POLICE={0x4d4, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x0, 0x7, 0x6, 0x5, {0x5, 0x1, 0x4, 0xdbd2, 0x1ff, 0x3ff}, {0x2, 0x0, 0x8, 0x1, 0x2, 0xfffeffff}, 0x200, 0x5e53, 0x9}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0xffffffffffffffff, 0xffffffa0, 0x9131, 0x1ff, {0x7, 0x2, 0x3, 0x81, 0x7, 0x5}, {0x5, 0x0, 0x9, 0x80, 0x1}, 0xfffffff9, 0x0, 0xff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x4, 0x80000000, 0x7, 0x2, 0x6, 0x1, 0x4, 0x2, 0x401, 0x0, 0x80a, 0x3, 0x1ff, 0x401, 0x0, 0x401, 0x6, 0x703, 0xfffffff8, 0x0, 0xb, 0x4, 0x4, 0x1, 0x6f1, 0x8, 0xfffffc00, 0xa, 0x5df6, 0x2, 0x8, 0x5, 0x9, 0xae61, 0x4a52, 0x2, 0x9, 0x5, 0x9, 0x3, 0x6, 0xffff2c42, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0x2, 0x2, 0x5, 0x2, 0x4aba, 0x5, 0x80, 0x9, 0x2, 0x4, 0x200003, 0x1, 0x3, 0xb, 0x4, 0x3ff, 0x9, 0x5, 0x205f, 0xd, 0x6, 0x5, 0x4, 0x3be, 0x5, 0x3, 0x2, 0xc, 0xfffffff7, 0x0, 0x0, 0xf9be, 0x7f, 0x10001, 0x2, 0x1ff, 0xf97, 0x71a, 0x10, 0xcb, 0x5, 0x4, 0x3, 0x40, 0x9, 0xa448, 0xfffffffc, 0x5, 0x8000, 0x5, 0x5, 0x2, 0x5, 0x40, 0x6, 0x2, 0x4, 0x401, 0x8, 0xfffffff5, 0x0, 0x8, 0x3, 0x2, 0x9, 0x5, 0x2, 0xffff, 0xe, 0x100, 0x3, 0x5, 0x1, 0x3254, 0x80, 0x0, 0x4, 0xda, 0x9, 0xf8, 0x5, 0x3, 0x7fff, 0x8, 0x9, 0x9a7, 0x3, 0x9, 0x9, 0x7e, 0x1, 0x1000, 0x0, 0xff, 0x5, 0xb, 0x3, 0xaa, 0xf70, 0x5, 0x6, 0x1, 0x373, 0x1ff, 0x9, 0x4, 0x8, 0x3, 0x80000, 0x9, 0x566, 0x1, 0x7f, 0xa8, 0x9, 0x6f4f6678, 0x6, 0xb, 0x5, 0x8, 0x400, 0x2, 0x9, 0x7, 0x9e71, 0x10000, 0xb, 0x9, 0xafaf, 0x6, 0x7, 0x41, 0x31, 0x6, 0xad38, 0x5, 0x11, 0x53bd2186, 0xb9, 0x0, 0x18, 0x3f18, 0x3, 0x3, 0x41e, 0x6, 0x10001, 0x1, 0x40, 0x309d86d3, 0x9, 0x7, 0x5, 0x9, 0x1, 0x80000000, 0x3ff, 0x0, 0x800, 0x1, 0x40000000, 0xffff2aef, 0xfffffffb, 0xffffffff, 0x8, 0x8, 0x7, 0x83, 0x8c3a, 0x8, 0x7, 0x4, 0x4, 0x1, 0xc5f8, 0x8, 0x4, 0xfffffffa, 0x0, 0xb6, 0x1, 0x6, 0x55, 0x1000, 0x7ff, 0x5, 0x2, 0x7fff, 0x9, 0x1, 0x4, 0x1, 0x8, 0x808, 0x3, 0x6, 0x4, 0x1, 0x2, 0xfffffff8, 0xffff, 0x9, 0xaf2, 0xc2, 0x9, 0xfffffffc, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0xe, 0x4, 0x4, {0x80, 0x2, 0x0, 0x3, 0x10, 0x3}, {0x7, 0x2, 0x6, 0x8000, 0xd, 0x401}, 0x8, 0x10001, 0x18}}]}, @TCA_FLOW_EMATCHES={0xc, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xe7b}, @TCA_RATE={0x6, 0x5, {0x80, 0x5c}}, @TCA_RATE={0x6, 0x5, {0x60, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8001}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x554}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x91bd, 0x0, 0xff, "7f12ddb357f7adf97affffff8000e500"}) syz_open_pts(r7, 0x0) ioctl$TCGETA(r7, 0x5405, &(0x7f0000000400)) timer_create(0x5, &(0x7f0000000080)={0x0, 0x11, 0x2, @tid=0xffffffffffffffff}, 0x0) unshare(0x60400) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x29, 0x1, 0x0, 0x0) 2.471940644s ago: executing program 1 (id=2029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async) r3 = socket(0x10, 0x2, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000100"], 0x9) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x5, @private2, 0x4}, @in={0x2, 0x4e22, @local}], 0x3c) (async) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) (async) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) (async) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8}) (async) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x8) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, 0x0) 2.160020102s ago: executing program 4 (id=2030): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681130000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1.932320373s ago: executing program 2 (id=2031): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = epoll_create1(0x0) syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681130000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 703.745566ms ago: executing program 4 (id=2032): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x60002003}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x0, 0x15a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2688f54c6588", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r3, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0xb0000014}) 254.305947ms ago: executing program 1 (id=2033): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_emit_ethernet(0xe3, &(0x7f0000000580)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xd5, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0xfffd, "32ca21e2c3bc8ff4c7be5934f7a73c4901d71a0f37853ee9d3faddc308ac42039199f2ae405689f70321011c4df4bd698ce2e55aff030000afd47aac905617630fd51a78e0746a1bd00febee0383a41d32f08c0d46638b2b5619bab34a99dbcbe991cbf61e6bc086a5c7032a3e0077e45f9bd51c4868dd79b9f184785599e1b9abf47a2c513c085e1862d93bf7bf43e35b2a00000000000008f5bbf2fa8d69b35b03000000535cf520097a2b45191c435ad691a29a61f3ac4f"}}}}}, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r2, &(0x7f0000001880), 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000003c0)={0x7, 0x8, 0xfa9d, {r5, 0x6}}, 0x10) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0xdf, "7c0cfdfb1e9b826bbc4ccc87fd52fe0b525cd8a0a2b1e625544fbf32391ab6f5"}) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000080)=0x5) r6 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x1, 0x10710, 0x1, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r9 = openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) fcntl$setlease(r9, 0x400, 0x2) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x1) io_uring_enter(r6, 0x567, 0x20, 0x0, 0x0, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84840, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r10, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1b59ded130e0fd838539f3d3287772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) close(r2) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r12, 0x1, 0x9, &(0x7f0000000080), 0x4) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r14, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="dca5580806509fdf13d23923b6348d02b61ce4a9c1bae7fbde591280d1f09f5639ff706968cdd197c8e73ec14cf7d3659fc73bfeafcf56", @ANYRES16=r1, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r13, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 58.429967ms ago: executing program 3 (id=2034): futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0x93020007) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0xffffffffffffff80, 0x0, 0x0) r2 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x2, 0x4000, 0x1}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r5, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r8, 0x2, 0x0) getdents64(r8, 0x0, 0x22) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) io_uring_enter(r2, 0x52de, 0xf62e, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x87, 0x28, 0x0, [], [{{0x9, 0x5, 0x5, 0x3}}]}}]}}]}}, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) 0s ago: executing program 1 (id=2035): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x68000) fcntl$setstatus(r1, 0x4, 0x2000) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x427c2, 0x19e) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x8, {0x80c, 0x1}, {0x45, 0x400}, @rumble={0xdc, 0x8}}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x70000, 0x800, 0x1ff, 0x2, 0x10000, 0x1, 0x0, 0x1, 0x0, 0x10001, 0x0, 0x19, 0x13, 0x80, 0x3, 0x2}}, @TCA_GRED_DPS={0x10, 0x3, {0x4, 0xa, 0x1, 0x5}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) kernel console output (not intermixed with test programs): T5930] gspca_vc032x: I2c Bus Busy Wait 00 [ 607.995662][ T5930] gspca_vc032x: I2c Bus Busy Wait 00 [ 608.005793][ T5930] gspca_vc032x: I2c Bus Busy Wait 00 [ 608.017513][ T5930] gspca_vc032x: Unknown sensor... [ 608.035368][ T5930] vc032x 5-1:9.48: probe with driver vc032x failed with error -22 [ 608.124308][ T5930] usb 5-1: USB disconnect, device number 95 [ 608.135509][ T5923] usb 1-1: USB disconnect, device number 109 [ 608.959696][ T5930] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 609.151309][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 609.187282][ T5930] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 609.198622][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.234543][ T5930] usb 5-1: config 0 has no interface number 0 [ 609.267579][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 609.267610][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.267632][ T5930] usb 5-1: Product: syz [ 609.267647][ T5930] usb 5-1: Manufacturer: syz [ 609.267659][ T5930] usb 5-1: SerialNumber: syz [ 609.269395][ T5930] usb 5-1: config 0 descriptor?? [ 609.276710][ T5930] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 609.276742][ T5930] usb 5-1: No valid video chain found. [ 609.286826][T12370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3965544961 (63448719376 ns) > initial count (51650093520 ns). Using initial count to start timer. [ 609.421677][T12360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1612'. [ 609.422152][T12360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'. [ 609.941107][T12386] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1617'. [ 610.069420][ T5999] usb 5-1: USB disconnect, device number 96 [ 610.122666][T12390] netlink: 'syz.0.1618': attribute type 1 has an invalid length. [ 610.313908][T12394] futex_wake_op: syz.3.1619 tries to shift op by 32; fix this program [ 611.632516][T12420] fuse: Bad value for 'user_id' [ 611.643178][T12420] fuse: Bad value for 'user_id' [ 612.079699][ T5930] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 612.362122][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.376706][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 612.389165][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 612.406932][ T5930] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 612.720840][ T5930] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 612.730212][ T5930] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 612.754022][ T5930] usb 1-1: Manufacturer: syz [ 612.778669][ T5930] usb 1-1: config 0 descriptor?? [ 613.286810][ T5930] rc_core: IR keymap rc-hauppauge not found [ 613.294131][ T5930] Registered IR keymap rc-empty [ 613.301948][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 613.370592][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 613.423248][ T5930] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 613.587798][ T5930] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input90 [ 613.618296][ T5947] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 613.666392][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 613.719791][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 613.749939][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 613.771563][ T5947] usb 5-1: device descriptor read/64, error -71 [ 613.830461][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 613.859855][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 613.879853][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 613.899747][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 613.989817][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 614.009934][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 614.049859][ T5930] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 614.059725][ T5947] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 614.190638][ T5930] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 614.209681][ T5947] usb 5-1: device descriptor read/64, error -71 [ 614.249832][ T5930] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 614.275902][ T5930] usb 1-1: USB disconnect, device number 110 [ 614.320108][ T5947] usb usb5-port1: attempt power cycle [ 614.681651][ T5947] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 614.721965][ T5947] usb 5-1: device descriptor read/8, error -71 [ 615.180334][ T5947] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 615.303523][ T5947] usb 5-1: device descriptor read/8, error -71 [ 615.420146][ T5947] usb usb5-port1: unable to enumerate USB device [ 615.921927][T12468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 616.388786][ T5947] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 616.579768][ T5947] usb 3-1: device descriptor read/64, error -71 [ 616.989743][ T5947] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 617.137080][ T5947] usb 3-1: device descriptor read/64, error -71 [ 617.231216][ T5938] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 617.350060][ T5947] usb usb3-port1: attempt power cycle [ 617.791324][ T5947] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 617.839866][ T5947] usb 3-1: device descriptor read/8, error -71 [ 617.860106][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 617.868543][ T5938] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 617.889674][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.897707][ T5938] usb 1-1: Product: syz [ 617.960029][ T5938] usb 1-1: Manufacturer: syz [ 617.967473][ T5938] usb 1-1: SerialNumber: syz [ 618.005986][ T5938] usb 1-1: config 0 descriptor?? [ 618.030891][ T5938] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 618.119715][ T5947] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 618.190506][ T5947] usb 3-1: device descriptor read/8, error -71 [ 618.220271][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1651'. [ 618.320152][ T5947] usb usb3-port1: unable to enumerate USB device [ 618.436852][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.455586][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.493521][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.532834][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.551242][ T5938] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 618.594879][T12505] pim6reg1: entered promiscuous mode [ 618.604855][T12505] pim6reg1: entered allmulticast mode [ 618.765316][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.777718][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.849246][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.860113][ T5999] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 618.860517][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.982087][T12503] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1652'. [ 619.009835][T12486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.056040][T12486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.109842][ T5999] usb 5-1: Using ep0 maxpacket: 16 [ 619.116988][ T5999] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 619.126896][ T5999] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.142099][ T5999] usb 5-1: config 0 has no interface number 0 [ 619.152587][ T5999] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 619.163192][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.171822][ T5999] usb 5-1: Product: syz [ 619.177231][ T5999] usb 5-1: Manufacturer: syz [ 619.182593][ T5999] usb 5-1: SerialNumber: syz [ 619.472895][ T5999] usb 5-1: config 0 descriptor?? [ 619.491688][ T5999] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 619.513813][ T5999] usb 5-1: No valid video chain found. [ 619.910191][ T5999] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 620.081540][ T5999] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.102508][ T5999] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 620.116323][ T5999] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 620.117372][ T5947] usb 1-1: USB disconnect, device number 111 [ 620.139106][ T5999] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.150354][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.195580][ T5999] usb 2-1: Product: syz [ 620.204860][ T5999] usb 2-1: Manufacturer: syz [ 620.209501][ T5999] usb 2-1: SerialNumber: syz [ 620.220132][ T5930] usb 5-1: USB disconnect, device number 101 [ 620.268468][ T5999] usb 2-1: bad CDC descriptors [ 620.343690][ T5923] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 620.468468][T12516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.483277][T12516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.519727][ T5923] usb 3-1: device descriptor read/64, error -71 [ 620.654710][ T5947] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 620.789774][ T5923] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 620.822012][ T5947] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.834328][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 620.847486][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 620.866863][ T5947] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 620.885828][ T5947] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 620.895896][ T5947] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 620.904616][ T5947] usb 1-1: Manufacturer: syz [ 620.941358][ T5923] usb 3-1: device descriptor read/64, error -71 [ 620.964264][ T5947] usb 1-1: config 0 descriptor?? [ 621.063556][ T5923] usb usb3-port1: attempt power cycle [ 621.093702][ T5999] usb 2-1: USB disconnect, device number 82 [ 621.349746][ T5947] rc_core: IR keymap rc-hauppauge not found [ 621.363210][ T5947] Registered IR keymap rc-empty [ 621.379048][T12545] program syz.4.1666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.384566][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.410616][ T5923] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 621.461555][ T5923] usb 3-1: device descriptor read/8, error -71 [ 621.471068][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.511558][ T5947] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 621.547532][ T5947] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input91 [ 621.569910][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.595002][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.622099][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.640321][ T5945] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 621.649933][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.669762][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.689830][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.710471][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.720206][ T5923] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 621.741929][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.760497][ T5923] usb 3-1: device descriptor read/8, error -71 [ 621.780196][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.792660][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.804015][ T5947] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 621.814507][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 621.826146][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 621.843168][ T5947] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 621.853835][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 621.867640][ T5947] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 621.879195][ T5923] usb usb3-port1: unable to enumerate USB device [ 621.891288][ T5945] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 621.909903][ T5947] usb 1-1: USB disconnect, device number 112 [ 621.917129][ T5945] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 621.945790][ T5945] usb 2-1: Manufacturer: syz [ 621.952849][ T5945] usb 2-1: config 0 descriptor?? [ 622.269776][ T5945] rc_core: IR keymap rc-hauppauge not found [ 622.275821][ T5945] Registered IR keymap rc-empty [ 622.286106][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.331395][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.360489][ T5945] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 622.387369][ T5945] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input92 [ 622.415501][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.449783][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.484665][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.523759][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.563260][T12562] bond0: (slave bond_slave_1): Releasing backup interface [ 622.619773][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.649862][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.683563][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.721029][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.759748][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.800329][ T5945] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 622.822952][ T5945] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 622.899250][ T5945] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 622.932770][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 622.954257][ T5945] usb 2-1: USB disconnect, device number 83 [ 624.410333][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.419752][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.672705][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1682'. [ 625.570780][ T5930] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 625.744335][ T5930] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 625.754585][ T5930] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 625.771286][ T5930] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 625.784893][ T5945] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 625.801620][ T5930] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 625.813629][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 625.823265][ T5930] usb 4-1: Product: syz [ 625.827674][ T5930] usb 4-1: Manufacturer: syz [ 625.833150][ T5930] usb 4-1: SerialNumber: syz [ 625.950751][ T5945] usb 1-1: device descriptor read/64, error -71 [ 626.092167][ T5930] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 626.216006][ T5945] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 626.291954][T12612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.302261][T12612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.314469][ T5923] usb 4-1: USB disconnect, device number 110 [ 626.322357][ T5923] usblp0: removed [ 626.360075][ T5945] usb 1-1: device descriptor read/64, error -71 [ 626.473949][ T5945] usb usb1-port1: attempt power cycle [ 626.829687][ T5945] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 626.884794][ T5945] usb 1-1: device descriptor read/8, error -71 [ 626.999941][T12641] FAULT_INJECTION: forcing a failure. [ 626.999941][T12641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.035435][T12641] CPU: 0 UID: 0 PID: 12641 Comm: syz.3.1692 Not tainted syzkaller #0 PREEMPT(full) [ 627.035453][T12641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 627.035460][T12641] Call Trace: [ 627.035466][T12641] [ 627.035471][T12641] dump_stack_lvl+0x189/0x250 [ 627.035489][T12641] ? __pfx____ratelimit+0x10/0x10 [ 627.035501][T12641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.035514][T12641] ? __pfx__printk+0x10/0x10 [ 627.035534][T12641] should_fail_ex+0x414/0x560 [ 627.035554][T12641] _copy_to_user+0x31/0xb0 [ 627.035570][T12641] simple_read_from_buffer+0xe1/0x170 [ 627.035588][T12641] proc_fail_nth_read+0x1b3/0x220 [ 627.035606][T12641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.035619][T12641] ? rw_verify_area+0x2a6/0x4d0 [ 627.035632][T12641] ? __lock_acquire+0xab9/0xd20 [ 627.035647][T12641] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.035659][T12641] vfs_read+0x200/0xa30 [ 627.035672][T12641] ? fdget_pos+0x247/0x320 [ 627.035684][T12641] ? __pfx___mutex_lock+0x10/0x10 [ 627.035696][T12641] ? __pfx_vfs_read+0x10/0x10 [ 627.035710][T12641] ? __fget_files+0x2a/0x420 [ 627.035726][T12641] ? __fget_files+0x3a0/0x420 [ 627.035735][T12641] ? __fget_files+0x2a/0x420 [ 627.035748][T12641] ksys_read+0x145/0x250 [ 627.035763][T12641] ? __pfx_ksys_read+0x10/0x10 [ 627.035778][T12641] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.035791][T12641] __do_fast_syscall_32+0xb6/0x2b0 [ 627.035804][T12641] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.035817][T12641] do_fast_syscall_32+0x34/0x80 [ 627.035828][T12641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 627.035842][T12641] RIP: 0023:0xf703e539 [ 627.035852][T12641] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 627.035861][T12641] RSP: 002b:00000000f542e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 627.035873][T12641] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f542e620 [ 627.035881][T12641] RDX: 000000000000000f RSI: 00000000f73c4ff4 RDI: 0000000000000000 [ 627.035888][T12641] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 627.035894][T12641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 627.035900][T12641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 627.035915][T12641] [ 627.319776][ T5945] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 627.340154][ T5945] usb 1-1: device descriptor read/8, error -71 [ 627.347105][T12633] delete_channel: no stack [ 627.456724][ T5945] usb usb1-port1: unable to enumerate USB device [ 628.119858][ T5923] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 628.389515][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 628.416163][ T5923] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 628.497150][ T5923] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 628.530074][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.569789][ T5923] usb 5-1: config 0 descriptor?? [ 628.601094][T12664] pim6reg1: entered promiscuous mode [ 628.612348][ T5923] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 628.628539][T12664] pim6reg1: entered allmulticast mode [ 628.644986][ T5923] dvb-usb: bulk message failed: -22 (3/0) [ 628.652129][T12662] batadv_slave_1: entered promiscuous mode [ 628.671000][ T5923] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 628.682252][T12662] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1697'. [ 628.704227][ T5923] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 628.729776][ T5923] usb 5-1: media controller created [ 628.746349][T12667] futex_wake_op: syz.3.1699 tries to shift op by 32; fix this program [ 628.767374][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 628.812010][T12662] batadv_slave_1: left promiscuous mode [ 628.824013][ T5923] dvb-usb: bulk message failed: -22 (6/0) [ 628.866582][ T5923] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 628.894642][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input93 [ 628.940148][ T5930] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 628.971570][ T5923] dvb-usb: schedule remote query interval to 150 msecs. [ 629.027337][ T5923] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 629.052204][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1700'. [ 629.119865][ T5930] usb 2-1: Using ep0 maxpacket: 16 [ 629.139186][ T5930] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 629.160036][ T30] audit: type=1326 audit(1757710964.508:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.2.1701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 629.168081][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.211517][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 629.218707][ T5923] dvb-usb: error while querying for an remote control event. [ 629.228408][ T30] audit: type=1326 audit(1757710964.548:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.2.1701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 629.253371][ T5930] usb 2-1: config 0 has no interface number 0 [ 629.253732][ T30] audit: type=1326 audit(1757710964.568:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12672 comm="syz.2.1701" exe="/root/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 629.332834][ T5930] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 629.352185][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.375305][ T5930] usb 2-1: Product: syz [ 629.380110][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 629.380158][ T5923] dvb-usb: error while querying for an remote control event. [ 629.434585][ T5930] usb 2-1: Manufacturer: syz [ 629.446696][ T5930] usb 2-1: SerialNumber: syz [ 629.539706][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 629.545492][ T5945] dvb-usb: error while querying for an remote control event. [ 629.628382][ T5930] usb 2-1: config 0 descriptor?? [ 629.723522][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 629.757164][ T5923] dvb-usb: error while querying for an remote control event. [ 629.847324][ T5930] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 629.854601][ T5930] usb 2-1: No valid video chain found. [ 629.871963][ T5930] usb 2-1: USB disconnect, device number 84 [ 629.940569][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 629.950465][ T5923] dvb-usb: error while querying for an remote control event. [ 630.132289][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1703'. [ 630.254264][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 630.260315][ T5923] dvb-usb: error while querying for an remote control event. [ 630.452125][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 630.467278][ T5923] dvb-usb: error while querying for an remote control event. [ 630.629919][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 630.683697][ T5923] dvb-usb: error while querying for an remote control event. [ 630.879876][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 630.885770][ T5923] dvb-usb: error while querying for an remote control event. [ 631.052283][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 631.058135][ T5923] dvb-usb: error while querying for an remote control event. [ 631.239816][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 631.249774][ T5923] dvb-usb: error while querying for an remote control event. [ 631.540756][ T5923] dvb-usb: bulk message failed: -22 (1/0) [ 631.546665][ T5923] dvb-usb: error while querying for an remote control event. [ 631.679772][ T5945] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 631.720099][ T5947] dvb-usb: bulk message failed: -22 (1/0) [ 631.725939][ T5947] dvb-usb: error while querying for an remote control event. [ 631.900200][ T5947] dvb-usb: bulk message failed: -22 (1/0) [ 631.906043][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 631.911269][ T5947] dvb-usb: error while querying for an remote control event. [ 631.940503][ T5945] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 631.957615][ T5945] usb 1-1: config 0 has no interface number 0 [ 632.027117][ T5945] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 632.044235][ T5947] usb 5-1: USB disconnect, device number 102 [ 632.074395][ T5945] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 632.108718][ T5947] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 632.123354][ T5945] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 632.274131][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 632.324769][ T5945] usb 1-1: Product: syz [ 632.339838][ T5945] usb 1-1: SerialNumber: syz [ 632.360055][ T5945] usb 1-1: config 0 descriptor?? [ 632.398735][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'. [ 632.465017][ T5945] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 632.505395][ T5945] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input94 [ 633.761651][ C0] cm109_urb_ctl_callback: 49 callbacks suppressed [ 633.761669][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 633.775371][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 633.782680][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 633.790354][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 633.797543][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 633.804713][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 633.811885][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 633.819027][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 633.826225][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 633.833379][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 633.840793][ T5945] usb 1-1: USB disconnect, device number 117 [ 633.846854][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 633.878947][ T5945] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 633.963413][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1712'. [ 634.846274][T12729] fuse: Unknown parameter 'alúQ&ë¢;Or' [ 635.556844][T12744] FAULT_INJECTION: forcing a failure. [ 635.556844][T12744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.595029][T12744] CPU: 1 UID: 0 PID: 12744 Comm: syz.1.1721 Not tainted syzkaller #0 PREEMPT(full) [ 635.595057][T12744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 635.595070][T12744] Call Trace: [ 635.595079][T12744] [ 635.595087][T12744] dump_stack_lvl+0x189/0x250 [ 635.595118][T12744] ? __pfx____ratelimit+0x10/0x10 [ 635.595140][T12744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.595164][T12744] ? __pfx__printk+0x10/0x10 [ 635.595192][T12744] ? __might_fault+0xb0/0x130 [ 635.595248][T12744] should_fail_ex+0x414/0x560 [ 635.595282][T12744] _copy_from_user+0x2d/0xb0 [ 635.595309][T12744] drm_ioctl+0x58a/0xb10 [ 635.595327][T12744] ? __lock_acquire+0xab9/0xd20 [ 635.595360][T12744] ? __pfx_drm_setversion+0x10/0x10 [ 635.595384][T12744] ? __pfx_drm_ioctl+0x10/0x10 [ 635.595416][T12744] ? __fget_files+0x3a0/0x420 [ 635.595433][T12744] ? __fget_files+0x2a/0x420 [ 635.595450][T12744] ? drm_compat_ioctl+0x112/0x330 [ 635.595478][T12744] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 635.595507][T12744] __ia32_compat_sys_ioctl+0x543/0x840 [ 635.595537][T12744] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 635.595563][T12744] ? __fget_files+0x3a0/0x420 [ 635.595588][T12744] ? fput+0xa0/0xd0 [ 635.595609][T12744] ? ksys_write+0x22a/0x250 [ 635.595645][T12744] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.595669][T12744] __do_fast_syscall_32+0xb6/0x2b0 [ 635.595691][T12744] ? lockdep_hardirqs_on+0x9c/0x150 [ 635.595713][T12744] do_fast_syscall_32+0x34/0x80 [ 635.595736][T12744] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 635.595760][T12744] RIP: 0023:0xf7f14539 [ 635.595778][T12744] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 635.595796][T12744] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 635.595817][T12744] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0106407 [ 635.595832][T12744] RDX: 0000000080000dc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 635.595845][T12744] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 635.595857][T12744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 635.595870][T12744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 635.595899][T12744] [ 636.019876][ T5938] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 636.180696][T12753] netlink: 'syz.1.1724': attribute type 1 has an invalid length. [ 636.212559][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.222869][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 636.240385][ T5938] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 636.253304][ T5938] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 636.272602][ T5938] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 636.284319][ T5938] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 636.294208][ T5938] usb 1-1: Manufacturer: syz [ 636.305142][ T5938] usb 1-1: config 0 descriptor?? [ 636.599687][ T5938] rc_core: IR keymap rc-hauppauge not found [ 636.605738][ T5938] Registered IR keymap rc-empty [ 636.610775][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.630750][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.651843][ T5938] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 636.669410][ T5938] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input95 [ 636.687420][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.711411][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.739798][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.779825][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.790144][ T5945] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 636.829892][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.879768][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.909885][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.943801][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 636.956575][ T5945] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.012095][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 637.012513][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 637.032274][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 637.044979][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 637.066684][ T5938] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 637.078584][ T5945] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 637.088876][ T5945] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 637.099292][ T5945] usb 4-1: Manufacturer: syz [ 637.106592][ T5938] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 637.113284][ T5945] usb 4-1: config 0 descriptor?? [ 637.125244][ T5938] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 637.148065][ T5938] usb 1-1: USB disconnect, device number 118 [ 637.356358][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 637.373763][T12764] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1727'. [ 637.402271][T12764] netlink: 'syz.4.1727': attribute type 3 has an invalid length. [ 637.423319][ T5945] rc_core: IR keymap rc-hauppauge not found [ 637.429238][ T5945] Registered IR keymap rc-empty [ 637.439721][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.469713][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.511762][ T5945] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1 [ 637.557786][ T5945] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc1/input96 [ 637.631086][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.679867][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.728924][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.821767][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.869838][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.909873][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.949720][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 638.029770][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 638.110807][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 638.140322][ T5945] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 638.174281][ T5945] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 638.219714][ T5945] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 638.239017][T12761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.290209][ T5945] usb 4-1: USB disconnect, device number 111 [ 638.829747][ T5947] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 639.039803][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 639.049026][ T5947] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 639.058508][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.103036][ T5947] usb 1-1: Product: syz [ 639.109404][ T5947] usb 1-1: Manufacturer: syz [ 639.182037][ T5947] usb 1-1: SerialNumber: syz [ 639.266678][ T5947] usb 1-1: config 0 descriptor?? [ 639.324618][ T5947] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 639.785936][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.801928][ T5945] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 639.815346][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.880284][ T5947] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 639.900392][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.952393][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.983064][ T5945] usb 2-1: config 6 has an invalid descriptor of length 4, skipping remainder of the config [ 640.000474][ T5945] usb 2-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 640.018678][ T5945] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 640.037299][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.045921][ T5945] usb 2-1: Product: syz [ 640.074640][ T5945] usb 2-1: Manufacturer: syz [ 640.079511][ T5945] usb 2-1: SerialNumber: syz [ 640.481638][T12811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.533677][T12811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.558149][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.610445][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.623214][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.634312][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.490916][ T5938] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 641.930054][ T5963] usb 1-1: USB disconnect, device number 119 [ 642.049692][ T5938] usb 3-1: Using ep0 maxpacket: 8 [ 642.064686][ T5938] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 642.077856][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.109549][ T5938] usb 3-1: Product: syz [ 642.113884][ T5938] usb 3-1: Manufacturer: syz [ 642.139113][ T5938] usb 3-1: SerialNumber: syz [ 642.170331][ T5938] usb 3-1: config 0 descriptor?? [ 642.226617][ T5938] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 642.623394][T12814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.635199][T12814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.872450][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1740'. [ 642.891664][ T5938] gspca_sonixj: reg_w1 err -110 [ 642.903616][T12819] netlink: 'syz.2.1740': attribute type 23 has an invalid length. [ 642.942057][ T5938] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 643.325763][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1741'. [ 643.373550][T12824] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1741'. [ 643.412282][T12823] netlink: 'syz.1.1741': attribute type 3 has an invalid length. [ 644.799856][ T5923] usb 3-1: USB disconnect, device number 115 [ 645.742982][T12875] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1754'. [ 645.881823][T12878] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1756'. [ 646.934704][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1759'. [ 646.947082][T12890] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1759'. [ 646.958581][T12890] netlink: 'syz.2.1759': attribute type 3 has an invalid length. [ 647.799699][ T5999] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 647.975795][ T5999] usb 5-1: Using ep0 maxpacket: 8 [ 648.080557][ T5999] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 648.139736][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.230092][ T5999] usb 5-1: Product: syz [ 648.234290][ T5999] usb 5-1: Manufacturer: syz [ 648.269639][ T5999] usb 5-1: SerialNumber: syz [ 648.284805][ T5999] usb 5-1: config 0 descriptor?? [ 648.430556][ T5999] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 648.623140][T12892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.634966][T12892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.938704][T12892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 648.983737][T12892] netlink: 'syz.4.1761': attribute type 23 has an invalid length. [ 649.000670][ T5999] gspca_sonixj: reg_w1 err -110 [ 649.005630][ T5999] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 649.479690][ T5938] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 649.583877][T12932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.630183][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 649.643847][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.656518][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.669038][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 649.683071][ T5938] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 649.742387][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.771618][ T5938] usb 3-1: config 0 descriptor?? [ 650.172638][ T5999] usb 5-1: USB disconnect, device number 103 [ 650.209731][ T5923] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 650.210101][T12927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.261654][T12927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.399819][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 650.423924][ T5923] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 650.432024][ T5923] usb 4-1: config 0 has no interface number 0 [ 650.438351][ T5923] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 650.451439][ T5923] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 650.468309][ T5923] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 650.498704][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 650.541192][ T5923] usb 4-1: Product: syz [ 650.565259][ T5923] usb 4-1: SerialNumber: syz [ 650.589433][ T5923] usb 4-1: config 0 descriptor?? [ 650.638481][ T5923] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 650.658756][ T5923] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input97 [ 651.002530][T12954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1776'. [ 651.446702][ C0] cm109_urb_ctl_callback: 3 callbacks suppressed [ 651.446728][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 651.448381][ T5963] usb 4-1: USB disconnect, device number 112 [ 651.453107][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 651.528586][ T5963] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 651.950061][T12960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.963249][T12960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.155561][ T5938] usbhid 3-1:0.0: can't add hid device: -71 [ 652.173832][ T5938] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 652.216627][ T5938] usb 3-1: USB disconnect, device number 116 [ 652.532100][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1778'. [ 652.548777][T12962] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1778'. [ 652.624685][T12968] netlink: 'syz.0.1778': attribute type 3 has an invalid length. [ 652.986789][T12970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 653.087144][T12977] futex_wake_op: syz.2.1783 tries to shift op by 32; fix this program [ 653.879747][ T5999] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 654.253383][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 654.265419][ T5999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 654.431435][T12986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.570339][ T5999] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 654.606624][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.769807][ T5999] usb 3-1: Product: syz [ 654.856143][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1786'. [ 654.919635][ T5999] usb 3-1: Manufacturer: syz [ 654.946589][ T5999] usb 3-1: SerialNumber: syz [ 655.014637][ T5999] usb 3-1: config 0 descriptor?? [ 655.039056][ T5999] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 655.419702][ T5963] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 655.839977][ T5963] usb 4-1: Using ep0 maxpacket: 8 [ 655.945242][ T5963] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 655.957643][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.053776][ T5963] usb 4-1: Product: syz [ 656.221138][ T5963] usb 4-1: Manufacturer: syz [ 656.231707][ T5963] usb 4-1: SerialNumber: syz [ 656.255137][ T5963] usb 4-1: config 0 descriptor?? [ 656.269972][ T5963] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 656.846966][T12991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.867456][T12991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.039531][ T5963] gspca_sonixj: reg_w1 err -110 [ 657.049004][ T5963] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 657.508712][ T5863] usb 3-1: USB disconnect, device number 117 [ 657.630113][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1785'. [ 657.811601][T12991] netlink: 'syz.3.1785': attribute type 23 has an invalid length. [ 658.037876][T13024] pim6reg1: entered promiscuous mode [ 658.049510][T13024] pim6reg1: entered allmulticast mode [ 658.080010][ T5863] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 658.333969][ T5938] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 658.349781][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 658.367990][ T5863] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 658.392239][ T5863] usb 3-1: config 0 has no interface number 0 [ 658.456315][ T5863] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.470311][ T5863] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 658.646811][T13038] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1797'. [ 658.719712][ T5938] usb 1-1: Using ep0 maxpacket: 16 [ 658.726314][ T5938] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 658.749888][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.827406][ T5938] usb 1-1: config 0 has no interface number 0 [ 658.844648][ T5938] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 658.853815][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.864907][ T5938] usb 1-1: Product: syz [ 658.870710][ T5938] usb 1-1: Manufacturer: syz [ 658.946610][ T5938] usb 1-1: SerialNumber: syz [ 658.996978][ T5863] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 659.006207][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 659.016040][ T5863] usb 3-1: Product: syz [ 659.020460][ T5863] usb 3-1: SerialNumber: syz [ 659.031566][ T5863] usb 3-1: config 0 descriptor?? [ 659.044969][ T5863] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 659.120755][ T5938] usb 1-1: config 0 descriptor?? [ 659.126646][ T5863] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input98 [ 659.154736][ T5938] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 659.173046][ T5938] usb 1-1: No valid video chain found. [ 659.302118][ T5923] usb 4-1: USB disconnect, device number 113 [ 659.348466][ T5938] usb 1-1: USB disconnect, device number 120 [ 660.015912][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 660.016415][ T5999] usb 3-1: USB disconnect, device number 118 [ 660.022908][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 660.208238][T13042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1798'. [ 660.220195][T13042] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1798'. [ 660.230892][T13042] netlink: 'syz.3.1798': attribute type 3 has an invalid length. [ 660.349938][ T5999] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 660.951065][T13052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 663.539738][ T5999] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 663.987551][ T5999] usb 3-1: Using ep0 maxpacket: 8 [ 664.005889][ T5999] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 664.034178][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.065152][ T5999] usb 3-1: Product: syz [ 664.069400][ T5999] usb 3-1: Manufacturer: syz [ 664.118525][ T5999] usb 3-1: SerialNumber: syz [ 664.155221][ T5999] usb 3-1: config 0 descriptor?? [ 664.172959][ T5999] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 664.338484][T13103] loop6: detected capacity change from 0 to 524287999 [ 664.353915][T13103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1812'. [ 664.390825][T13078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 664.405160][T13078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.415091][ T6350] Buffer I/O error on dev loop6, logical block 65535998, async page read [ 664.524556][T13103] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1812'. [ 664.619674][ T5923] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 664.644580][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1808'. [ 664.689979][ T5999] gspca_sonixj: reg_w1 err -110 [ 664.725773][ T5999] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 664.789840][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 664.797711][ T5923] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 664.809936][ T5923] usb 4-1: config 0 has no interface number 0 [ 664.826392][ T5923] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 664.844844][ T5923] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 664.869545][ T5923] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 664.888846][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 664.900424][ T5923] usb 4-1: Product: syz [ 664.904595][ T5923] usb 4-1: SerialNumber: syz [ 664.912958][ T5923] usb 4-1: config 0 descriptor?? [ 664.938356][ T5923] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 664.956572][ T5923] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input99 [ 664.982357][T13078] netlink: 'syz.2.1808': attribute type 23 has an invalid length. [ 665.382003][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1814'. [ 665.393405][T13109] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1814'. [ 665.405017][T13109] netlink: 'syz.4.1814': attribute type 3 has an invalid length. [ 666.087051][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 666.087456][ T5938] usb 4-1: USB disconnect, device number 114 [ 666.094041][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 666.142916][ T5938] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 666.164854][ T5930] usb 3-1: USB disconnect, device number 119 [ 666.597367][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 667.372227][T13128] futex_wake_op: syz.0.1820 tries to shift op by 32; fix this program [ 667.449674][ T5999] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 667.761201][ T5999] usb 5-1: device descriptor read/64, error -71 [ 668.249764][ T5930] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 668.319750][ T5999] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 668.436516][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 668.447728][ T5930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 668.457577][ T5999] usb 5-1: device descriptor read/64, error -71 [ 668.479968][ T5930] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 668.490531][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.524844][ T5930] usb 1-1: Product: syz [ 668.529054][ T5930] usb 1-1: Manufacturer: syz [ 668.567092][ T5930] usb 1-1: SerialNumber: syz [ 668.578156][ T5999] usb usb5-port1: attempt power cycle [ 668.610379][ T5930] usb 1-1: config 0 descriptor?? [ 668.618992][ T5930] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 668.689339][T13142] futex_wake_op: syz.3.1823 tries to shift op by 32; fix this program [ 668.711519][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.731583][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.926050][ T5999] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 669.010506][ T5999] usb 5-1: device descriptor read/8, error -71 [ 669.521589][ T5999] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 669.550308][ T5999] usb 5-1: device descriptor read/8, error -71 [ 669.664738][ T5999] usb usb5-port1: unable to enumerate USB device [ 669.666794][ T5923] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 669.679850][ T5963] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 669.842458][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 669.858050][ T5963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 669.887830][ T5963] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 669.899212][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.907450][ T5963] usb 4-1: Product: syz [ 669.933629][ T5963] usb 4-1: Manufacturer: syz [ 669.952720][ T5963] usb 4-1: SerialNumber: syz [ 669.974293][ T5963] usb 4-1: config 0 descriptor?? [ 669.999438][ T5963] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 670.063755][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 670.166805][ T5923] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 670.188022][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.410870][ T5999] usb 1-1: USB disconnect, device number 121 [ 670.555929][ T5923] usb 3-1: Product: syz [ 670.560722][ T5923] usb 3-1: Manufacturer: syz [ 670.565359][ T5923] usb 3-1: SerialNumber: syz [ 670.575071][ T5923] usb 3-1: config 0 descriptor?? [ 670.614098][ T5923] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 670.851140][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1827'. [ 670.865477][T13162] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1827'. [ 670.878284][T13162] netlink: 'syz.4.1827': attribute type 3 has an invalid length. [ 670.924743][T13147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.999037][T13147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.092776][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1825'. [ 671.114936][T13152] netlink: 'syz.2.1825': attribute type 23 has an invalid length. [ 671.142579][ T5923] gspca_sonixj: reg_w1 err -110 [ 671.148227][ T5923] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 672.154206][ T5863] usb 4-1: USB disconnect, device number 115 [ 672.559795][ T5923] usb 3-1: USB disconnect, device number 120 [ 672.789855][T13183] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1829'. [ 673.497794][T13191] FAULT_INJECTION: forcing a failure. [ 673.497794][T13191] name failslab, interval 1, probability 0, space 0, times 0 [ 673.623242][T13191] CPU: 0 UID: 0 PID: 13191 Comm: syz.4.1834 Not tainted syzkaller #0 PREEMPT(full) [ 673.623270][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 673.623288][T13191] Call Trace: [ 673.623297][T13191] [ 673.623306][T13191] dump_stack_lvl+0x189/0x250 [ 673.623335][T13191] ? __pfx____ratelimit+0x10/0x10 [ 673.623357][T13191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.623388][T13191] ? __pfx__printk+0x10/0x10 [ 673.623422][T13191] ? __pfx___might_resched+0x10/0x10 [ 673.623447][T13191] should_fail_ex+0x414/0x560 [ 673.623483][T13191] should_failslab+0xa8/0x100 [ 673.623513][T13191] kmem_cache_alloc_noprof+0x73/0x3c0 [ 673.623541][T13191] ? mas_alloc_nodes+0x2e9/0x8e0 [ 673.623566][T13191] mas_alloc_nodes+0x2e9/0x8e0 [ 673.623596][T13191] mas_preallocate+0x3ad/0x6f0 [ 673.623634][T13191] ? __pfx_mas_preallocate+0x10/0x10 [ 673.623676][T13191] ? __mas_set_range+0x12f/0x3c0 [ 673.623707][T13191] __split_vma+0x2fa/0xa00 [ 673.623741][T13191] ? __pfx___split_vma+0x10/0x10 [ 673.623774][T13191] ? can_vma_merge_right+0x1b9/0x720 [ 673.623807][T13191] vma_modify+0x12c3/0x1970 [ 673.623849][T13191] vma_modify_flags_uffd+0x204/0x250 [ 673.623877][T13191] ? __pfx_vma_modify_flags_uffd+0x10/0x10 [ 673.623919][T13191] ? mas_find+0xb0e/0xd30 [ 673.623943][T13191] userfaultfd_register_range+0x4d7/0x670 [ 673.623976][T13191] ? __pfx_userfaultfd_register_range+0x10/0x10 [ 673.624009][T13191] ? mas_find+0x343/0xd30 [ 673.624035][T13191] userfaultfd_ioctl+0x40b5/0x4c80 [ 673.624065][T13191] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 673.624092][T13191] ? security_file_ioctl_compat+0x40/0x2d0 [ 673.624131][T13191] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 673.624187][T13191] ? kasan_quarantine_put+0xdd/0x220 [ 673.624222][T13191] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 673.624252][T13191] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 673.624285][T13191] ? do_vfs_ioctl+0xbe8/0x1430 [ 673.624311][T13191] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 673.624350][T13191] ? __lock_acquire+0xab9/0xd20 [ 673.624416][T13191] ? __fget_files+0x3a0/0x420 [ 673.624433][T13191] ? __fget_files+0x2a/0x420 [ 673.624455][T13191] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 673.624485][T13191] __ia32_compat_sys_ioctl+0x543/0x840 [ 673.624513][T13191] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 673.624538][T13191] ? __fget_files+0x3a0/0x420 [ 673.624563][T13191] ? fput+0xa0/0xd0 [ 673.624585][T13191] ? ksys_write+0x22a/0x250 [ 673.624621][T13191] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.624646][T13191] __do_fast_syscall_32+0xb6/0x2b0 [ 673.624670][T13191] ? lockdep_hardirqs_on+0x9c/0x150 [ 673.624695][T13191] do_fast_syscall_32+0x34/0x80 [ 673.624717][T13191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 673.624741][T13191] RIP: 0023:0xf703e539 [ 673.624759][T13191] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 673.624777][T13191] RSP: 002b:00000000f542e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 673.624799][T13191] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c020aa00 [ 673.624813][T13191] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 673.624826][T13191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 673.624839][T13191] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 673.624851][T13191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 673.624881][T13191] [ 674.259706][ T5938] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 674.284292][T13211] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1841'. [ 674.337594][T13213] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1841'. [ 674.381209][T13212] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 674.394839][ T5938] usb 4-1: device descriptor read/64, error -71 [ 674.475941][ T5963] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 674.498856][T13202] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.502792][T13202] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.609964][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.610834][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.611603][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.612635][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.649481][T13218] futex_wake_op: syz.1.1842 tries to shift op by 32; fix this program [ 674.650141][ T5938] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 674.673460][ T5963] usb 3-1: config 0 has no interfaces? [ 674.743771][ T5963] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 674.753862][ T5963] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.804883][ T5938] usb 4-1: device descriptor read/64, error -71 [ 674.828035][T13220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.828446][T13220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.910156][ T5938] usb usb4-port1: attempt power cycle [ 674.928577][ T5963] usb 3-1: config 0 descriptor?? [ 675.215429][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'. [ 675.249134][T13209] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1840'. [ 675.257340][T13206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.259539][ T5938] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 675.274964][T13206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.319492][T13216] netlink: 'syz.0.1840': attribute type 3 has an invalid length. [ 675.329701][ T5863] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 675.344134][ T5947] usb 3-1: USB disconnect, device number 121 [ 675.410130][ T5938] usb 4-1: device descriptor read/8, error -71 [ 675.479834][ T5863] usb 5-1: Using ep0 maxpacket: 8 [ 675.488984][ T5863] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 675.498618][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.511489][ T5863] usb 5-1: Product: syz [ 675.519209][ T5863] usb 5-1: Manufacturer: syz [ 675.525456][ T5863] usb 5-1: SerialNumber: syz [ 675.562692][ T5863] usb 5-1: config 0 descriptor?? [ 675.575374][ T5863] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 675.650002][ T5938] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 675.683278][ T5938] usb 4-1: device descriptor read/8, error -71 [ 675.776052][T13222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.787616][T13222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.821216][ T5938] usb usb4-port1: unable to enumerate USB device [ 675.850266][ T5947] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 675.873249][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 675.919809][T13222] netlink: 'syz.4.1843': attribute type 23 has an invalid length. [ 676.009784][ T5947] usb 3-1: Using ep0 maxpacket: 16 [ 676.016769][ T5947] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.028277][ T5947] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 676.091461][ T5863] gspca_sonixj: reg_w1 err -110 [ 676.103332][ T5863] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 676.111972][ T5947] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 676.484372][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.499152][ T5947] usb 3-1: Product: syz [ 676.516099][ T5947] usb 3-1: Manufacturer: syz [ 676.524595][ T5947] usb 3-1: SerialNumber: syz [ 677.797170][T13245] futex_wake_op: syz.0.1847 tries to shift op by 32; fix this program [ 678.063000][ T5923] usb 5-1: USB disconnect, device number 108 [ 678.135971][ T5947] usb 3-1: 0:2 : does not exist [ 678.144000][ T5947] usb 3-1: unit 5 not found! [ 678.454785][ T5947] usb 3-1: USB disconnect, device number 122 [ 679.041179][T13254] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1848'. [ 679.527465][T13265] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1850'. [ 680.029712][ T5947] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 680.564283][ T5947] usb 1-1: config 0 has no interfaces? [ 680.581577][ T5947] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 680.640588][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.764891][ T5947] usb 1-1: config 0 descriptor?? [ 680.869706][ T5938] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 680.959075][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 680.972840][T13281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.981619][T13281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.004400][T13273] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1854'. [ 681.010680][T13264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.018339][T13273] netlink: 'syz.2.1854': attribute type 3 has an invalid length. [ 681.040194][ T5938] usb 5-1: device descriptor read/64, error -71 [ 681.051391][T13264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.077996][ T5947] usb 1-1: USB disconnect, device number 122 [ 681.209795][ T5963] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 681.320272][ T5938] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 681.379836][ T5963] usb 4-1: Using ep0 maxpacket: 32 [ 681.388004][ T5963] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 681.432961][ T5963] usb 4-1: config 0 has no interface number 0 [ 681.442622][ T5963] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 681.452030][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.460128][ T5938] usb 5-1: device descriptor read/64, error -71 [ 681.474579][ T5963] usb 4-1: Product: syz [ 681.478976][ T5963] usb 4-1: Manufacturer: syz [ 681.487137][ T5963] usb 4-1: SerialNumber: syz [ 681.494299][ T5963] usb 4-1: config 0 descriptor?? [ 681.504211][ T5963] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 681.569809][ T5947] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 681.590001][ T5938] usb usb5-port1: attempt power cycle [ 681.708962][ T5963] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 681.719827][ T5923] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 681.727704][ T5947] usb 1-1: Using ep0 maxpacket: 16 [ 681.732792][ T5963] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 681.747842][ T5947] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 681.758412][ T5947] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 681.773671][ T5947] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 681.788897][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.797170][ T5947] usb 1-1: Product: syz [ 681.801621][ T5947] usb 1-1: Manufacturer: syz [ 681.807849][ T5947] usb 1-1: SerialNumber: syz [ 681.899891][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 681.918757][ T5923] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 681.928033][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.929674][ T5938] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 681.936253][ T5923] usb 3-1: Product: syz [ 681.947966][ T5923] usb 3-1: Manufacturer: syz [ 681.952757][ T5923] usb 3-1: SerialNumber: syz [ 681.960239][ T5923] usb 3-1: config 0 descriptor?? [ 681.970689][ T5923] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 681.978957][ T5938] usb 5-1: device descriptor read/8, error -71 [ 682.123064][T13277] capability: warning: `syz.3.1856' uses 32-bit capabilities (legacy support in use) [ 682.141824][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 682.142259][ T5945] usb 4-1: USB disconnect, device number 120 [ 682.163735][ T5945] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 682.185295][T13283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.203643][ T5945] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 682.215821][T13283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.226490][ T5938] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 682.233583][ T5945] quatech2 4-1:0.51: device disconnected [ 682.267109][ T5947] usb 1-1: 0:2 : does not exist [ 682.291295][ T5938] usb 5-1: device descriptor read/8, error -71 [ 682.300145][ T5947] usb 1-1: unit 5 not found! [ 682.327422][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'. [ 682.359391][T13283] netlink: 'syz.2.1858': attribute type 23 has an invalid length. [ 682.369554][ T5947] usb 1-1: USB disconnect, device number 123 [ 682.412004][ T5938] usb usb5-port1: unable to enumerate USB device [ 682.486398][ T5923] gspca_sonixj: reg_w1 err -110 [ 682.493456][ T5923] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 684.040450][T13312] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1867'. [ 684.488422][T13314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1866'. [ 684.684308][ T5923] usb 3-1: USB disconnect, device number 123 [ 685.206203][T13333] FAULT_INJECTION: forcing a failure. [ 685.206203][T13333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.206226][T13333] CPU: 0 UID: 0 PID: 13333 Comm: syz.4.1872 Not tainted syzkaller #0 PREEMPT(full) [ 685.206239][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 685.206246][T13333] Call Trace: [ 685.206251][T13333] [ 685.206256][T13333] dump_stack_lvl+0x189/0x250 [ 685.206273][T13333] ? __pfx____ratelimit+0x10/0x10 [ 685.206285][T13333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.206297][T13333] ? __pfx__printk+0x10/0x10 [ 685.206312][T13333] ? __might_fault+0xb0/0x130 [ 685.206333][T13333] should_fail_ex+0x414/0x560 [ 685.206352][T13333] _copy_from_user+0x2d/0xb0 [ 685.206367][T13333] memdup_user+0x5e/0xd0 [ 685.206379][T13333] kvm_arch_vcpu_ioctl+0x1a78/0x2a80 [ 685.206395][T13333] ? __lock_acquire+0xab9/0xd20 [ 685.206412][T13333] ? kvm_arch_vcpu_ioctl+0x5f8/0x2a80 [ 685.206430][T13333] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 685.206460][T13333] ? __lock_acquire+0xab9/0xd20 [ 685.206485][T13333] ? is_bpf_text_address+0x26/0x2b0 [ 685.206504][T13333] ? is_bpf_text_address+0x292/0x2b0 [ 685.206519][T13333] ? is_bpf_text_address+0x26/0x2b0 [ 685.206535][T13333] ? kernel_text_address+0xa5/0xe0 [ 685.206550][T13333] ? __kernel_text_address+0xd/0x40 [ 685.206564][T13333] ? unwind_get_return_address+0x4d/0x90 [ 685.206576][T13333] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 685.206589][T13333] ? arch_stack_walk+0xfc/0x150 [ 685.206610][T13333] ? __lock_acquire+0xab9/0xd20 [ 685.206630][T13333] ? __mutex_trylock_common+0x153/0x260 [ 685.206643][T13333] ? __pfx___mutex_trylock_common+0x10/0x10 [ 685.206653][T13333] ? security_file_ioctl_compat+0xcb/0x2d0 [ 685.206667][T13333] ? __do_fast_syscall_32+0xb6/0x2b0 [ 685.206681][T13333] ? rcu_is_watching+0x15/0xb0 [ 685.206691][T13333] ? trace_contention_end+0x39/0x120 [ 685.206703][T13333] ? __mutex_lock+0x335/0x1350 [ 685.206721][T13333] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 685.206736][T13333] ? __pfx___mutex_lock+0x10/0x10 [ 685.206751][T13333] ? kasan_quarantine_put+0xdd/0x220 [ 685.206775][T13333] kvm_vcpu_ioctl+0x74d/0xe90 [ 685.206791][T13333] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 685.206803][T13333] ? do_vfs_ioctl+0xbe8/0x1430 [ 685.206818][T13333] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 685.206838][T13333] ? __lock_acquire+0xab9/0xd20 [ 685.206863][T13333] kvm_vcpu_compat_ioctl+0x203/0x390 [ 685.206878][T13333] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 685.206892][T13333] ? __fget_files+0x3a0/0x420 [ 685.206900][T13333] ? __fget_files+0x2a/0x420 [ 685.206911][T13333] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 685.206927][T13333] __ia32_compat_sys_ioctl+0x543/0x840 [ 685.206942][T13333] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 685.206955][T13333] ? __fget_files+0x3a0/0x420 [ 685.206968][T13333] ? fput+0xa0/0xd0 [ 685.206979][T13333] ? ksys_write+0x22a/0x250 [ 685.206998][T13333] ? lockdep_hardirqs_on+0x9c/0x150 [ 685.207011][T13333] __do_fast_syscall_32+0xb6/0x2b0 [ 685.207023][T13333] ? lockdep_hardirqs_on+0x9c/0x150 [ 685.207035][T13333] do_fast_syscall_32+0x34/0x80 [ 685.207047][T13333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 685.207060][T13333] RIP: 0023:0xf703e539 [ 685.207070][T13333] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 685.207079][T13333] RSP: 002b:00000000f542e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 685.207091][T13333] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000004008ae89 [ 685.207098][T13333] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 685.207105][T13333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 685.207111][T13333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 685.207117][T13333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 685.207131][T13333] [ 685.439796][ T5923] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 685.779120][ T5923] usb 1-1: config 0 has no interfaces? [ 685.779147][ T5923] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 685.779160][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.787909][ T5923] usb 1-1: config 0 descriptor?? [ 685.880095][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.880133][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.028837][ T5947] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 686.142945][T13334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.390344][T13335] tty tty4: ldisc open failed (-12), clearing slot 3 [ 686.395872][T13334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.406173][ T5923] usb 1-1: USB disconnect, device number 124 [ 686.410818][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 686.462660][T13328] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 686.498751][ T5947] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 686.523867][ T5947] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.564658][ T5947] usb 5-1: config 0 has no interface number 0 [ 686.566609][ T5947] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 686.566633][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.566645][ T5947] usb 5-1: Product: syz [ 686.566653][ T5947] usb 5-1: Manufacturer: syz [ 686.566663][ T5947] usb 5-1: SerialNumber: syz [ 686.568328][ T5947] usb 5-1: config 0 descriptor?? [ 686.965211][T13342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.004863][ T5945] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 687.070472][ T5947] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 687.070508][ T5947] usb 5-1: No valid video chain found. [ 687.079469][ T5947] usb 5-1: USB disconnect, device number 113 [ 687.130238][ T5863] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 687.179804][ T5945] usb 3-1: device descriptor read/64, error -71 [ 687.281935][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 687.288088][ T5863] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 687.288114][ T5863] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 687.299072][ T5863] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 687.299103][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.299125][ T5863] usb 1-1: Product: syz [ 687.299141][ T5863] usb 1-1: Manufacturer: syz [ 687.299157][ T5863] usb 1-1: SerialNumber: syz [ 687.479828][ T5945] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 687.609773][ T5945] usb 3-1: device descriptor read/64, error -71 [ 687.719956][ T5945] usb usb3-port1: attempt power cycle [ 687.821505][ T5863] usb 1-1: 0:2 : does not exist [ 687.826457][ T5863] usb 1-1: unit 5 not found! [ 687.886959][ T5863] usb 1-1: USB disconnect, device number 125 [ 688.065236][ T5945] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 688.110529][ T5945] usb 3-1: device descriptor read/8, error -71 [ 688.383198][ T5945] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 688.431880][ T5945] usb 3-1: device descriptor read/8, error -71 [ 688.483404][T13367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.533260][T13367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.550265][ T5945] usb usb3-port1: unable to enumerate USB device [ 688.619739][T13361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.641649][T13361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.721173][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1880'. [ 688.772086][T13361] netlink: 'syz.1.1880': attribute type 23 has an invalid length. [ 689.094635][T13380] ptrace attach of ""[13381] was attempted by "./syz-executor exec"[13380] [ 690.757545][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 691.478841][T13403] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1886'. [ 691.740918][T13388] netlink: 'syz.3.1886': attribute type 3 has an invalid length. [ 692.005329][T13420] futex_wake_op: syz.4.1891 tries to shift op by 32; fix this program [ 692.610915][ T5945] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 692.994058][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 693.118026][ T5863] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 693.132062][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 693.155813][ T5945] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 693.197047][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.289149][ T5945] usb 5-1: Product: syz [ 693.340113][ T5945] usb 5-1: Manufacturer: syz [ 693.346090][ T5863] usb 3-1: config 3 has an invalid interface number: 7 but max is 0 [ 693.391094][ T5863] usb 3-1: config 3 has no interface number 0 [ 693.412049][ T5945] usb 5-1: SerialNumber: syz [ 693.422488][ T5863] usb 3-1: config 3 interface 7 has no altsetting 0 [ 693.445989][ T5945] usb 5-1: config 0 descriptor?? [ 693.460046][ T5863] usb 3-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=3f.7b [ 693.503555][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.515861][ T5945] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 693.532828][ T5863] usb 3-1: Product: syz [ 693.583083][ T5863] usb 3-1: Manufacturer: syz [ 693.588415][ T5863] usb 3-1: SerialNumber: syz [ 693.926652][T13436] input: syz1 as /devices/virtual/input/input100 [ 694.139776][ T10] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 694.436956][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.450898][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 694.519797][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.577438][T13454] futex_wake_op: syz.0.1899 tries to shift op by 32; fix this program [ 694.612984][ T10] usb 4-1: Product: syz [ 694.621833][ T10] usb 4-1: Manufacturer: syz [ 694.637587][ T10] usb 4-1: SerialNumber: syz [ 694.673678][ T10] usb 4-1: config 0 descriptor?? [ 695.289803][ T5945] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 695.326022][ T5938] usb 5-1: USB disconnect, device number 114 [ 695.470475][ T10] usb 4-1: USB disconnect, device number 121 [ 695.609925][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 695.708273][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 695.733355][ T5945] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 695.743684][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.775235][ T5863] radio-si470x 3-1:3.7: si470x_get_report: usb_control_msg returned -71 [ 695.792427][ T5945] usb 1-1: Product: syz [ 695.798171][ T5863] radio-si470x 3-1:3.7: probe with driver radio-si470x failed with error -5 [ 695.807422][ T5945] usb 1-1: Manufacturer: syz [ 695.812683][ T5945] usb 1-1: SerialNumber: syz [ 695.850286][ T5863] usb 3-1: USB disconnect, device number 2 [ 695.860851][ T5945] usb 1-1: config 0 descriptor?? [ 695.902409][ T5945] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 696.095592][ T5963] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 696.270424][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 696.273379][ T5963] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 696.273407][ T5963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.273427][ T5963] usb 4-1: config 0 has no interface number 0 [ 696.276170][ T5963] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 696.276199][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.276221][ T5963] usb 4-1: Product: syz [ 696.276237][ T5963] usb 4-1: Manufacturer: syz [ 696.276253][ T5963] usb 4-1: SerialNumber: syz [ 696.279254][ T5963] usb 4-1: config 0 descriptor?? [ 696.457983][ T5963] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 696.458020][ T5963] usb 4-1: No valid video chain found. [ 696.684245][T13469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.895621][ T5945] usb 4-1: USB disconnect, device number 122 [ 697.964104][T13484] pim6reg1: entered promiscuous mode [ 697.969507][T13484] pim6reg1: entered allmulticast mode [ 697.978136][T13484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.183642][T13489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.346772][T13484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.626040][ T5938] usb 1-1: USB disconnect, device number 126 [ 699.823118][T13509] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1911'. [ 700.280701][T13520] netlink: 'syz.4.1915': attribute type 1 has an invalid length. [ 701.122079][T13531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.039810][ T5863] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 703.043383][T13548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.063822][T13548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.220597][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 703.231192][T13552] pim6reg1: entered promiscuous mode [ 703.310972][T13552] pim6reg1: entered allmulticast mode [ 703.319145][ T5863] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 703.326882][ T5863] usb 1-1: can't read configurations, error -61 [ 703.481632][ T5863] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 703.592301][ T5963] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 703.829751][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 703.878685][ T5963] usb 3-1: Using ep0 maxpacket: 16 [ 704.039986][ T5863] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 704.047718][ T5863] usb 1-1: can't read configurations, error -61 [ 704.080608][ T5863] usb usb1-port1: attempt power cycle [ 704.232036][ T5963] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 704.250006][ T5963] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 704.289725][ T5963] usb 3-1: config 0 has no interface number 0 [ 704.301548][ T5963] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 704.301579][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.301599][ T5963] usb 3-1: Product: syz [ 704.301615][ T5963] usb 3-1: Manufacturer: syz [ 704.301630][ T5963] usb 3-1: SerialNumber: syz [ 704.339750][ T5963] usb 3-1: config 0 descriptor?? [ 704.386562][ T5963] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 704.388819][ T5963] usb 3-1: No valid video chain found. [ 704.449688][ T5863] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 704.641144][T13568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.728997][ T5938] usb 3-1: USB disconnect, device number 3 [ 704.729770][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 704.743285][ T5863] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 704.743324][ T5863] usb 1-1: can't read configurations, error -61 [ 704.820590][ T5963] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 704.880615][ T5863] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 704.900801][ T5863] usb 1-1: Using ep0 maxpacket: 16 [ 704.912084][ T5863] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 704.922317][ T5863] usb 1-1: can't read configurations, error -61 [ 704.929081][ T5863] usb usb1-port1: unable to enumerate USB device [ 704.982497][ T5963] usb 4-1: config 0 has no interfaces? [ 704.988418][ T5963] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 705.137303][ T5963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.183433][ T5963] usb 4-1: config 0 descriptor?? [ 705.464781][T13563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.474760][T13563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.518213][ T5945] usb 4-1: USB disconnect, device number 123 [ 705.960100][ T5945] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 706.309678][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 706.366472][ T5945] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.376967][ T5945] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 706.439867][T13581] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 706.584928][T13581] block device autoloading is deprecated and will be removed. [ 706.596770][ T5945] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 706.606018][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.614040][ T5945] usb 4-1: Product: syz [ 706.618260][ T5945] usb 4-1: Manufacturer: syz [ 706.656311][ T5945] usb 4-1: SerialNumber: syz [ 707.052098][T13593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 707.521215][T13563] fuse: Bad value for 'fd' [ 707.760033][ T5945] usb 4-1: 0:2 : does not exist [ 707.764982][ T5945] usb 4-1: unit 5 not found! [ 707.882954][ T5945] usb 4-1: USB disconnect, device number 124 [ 707.981346][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 708.124926][T13601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.133752][T13601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.240163][ T5938] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 708.461139][ T5938] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 708.516697][ T5938] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.533635][ T5938] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.549376][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.725286][T13617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.725549][T13617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.773959][ T5938] usb 3-1: usb_control_msg returned -32 [ 708.774009][ T5938] usbtmc 3-1:16.0: can't read capabilities [ 708.879766][ T5963] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 708.983302][ T5930] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 709.049557][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 709.054753][ T5963] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 709.054779][ T5963] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 709.054799][ T5963] usb 4-1: config 0 has no interface number 0 [ 709.057125][ T5963] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 709.057153][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.057174][ T5963] usb 4-1: Product: syz [ 709.057189][ T5963] usb 4-1: Manufacturer: syz [ 709.057204][ T5963] usb 4-1: SerialNumber: syz [ 709.064178][ T5963] usb 4-1: config 0 descriptor?? [ 709.182162][T13619] usbtmc 3-1:16.0: usbtmc_ioctl_request failed -32 [ 709.186007][ T5963] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 709.191657][ T5945] usb 3-1: USB disconnect, device number 4 [ 709.201322][ T5963] usb 4-1: No valid video chain found. [ 709.207942][ T5930] usb 5-1: config 0 has no interfaces? [ 709.225427][ T5930] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 709.257876][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.285691][ T5930] usb 5-1: config 0 descriptor?? [ 709.316593][T13621] netlink: 'syz.0.1943': attribute type 49 has an invalid length. [ 709.415543][ T5930] usb 4-1: USB disconnect, device number 125 [ 709.603260][T13631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.612629][T13631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.628327][T13631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.637661][T13631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.704951][T13615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.713957][T13615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.756647][ T5930] usb 5-1: USB disconnect, device number 115 [ 709.774966][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1944'. [ 709.804650][T13631] netlink: 'syz.1.1944': attribute type 23 has an invalid length. [ 710.209889][ T5930] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 710.379793][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 710.383822][ T5930] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.383849][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.388552][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 710.550139][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.550168][ T5930] usb 5-1: Product: syz [ 710.550186][ T5930] usb 5-1: Manufacturer: syz [ 710.550201][ T5930] usb 5-1: SerialNumber: syz [ 710.629709][ T5947] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 710.804652][ T5947] usb 4-1: config 0 has no interfaces? [ 710.804682][ T5947] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 710.804697][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.806926][ T5947] usb 4-1: config 0 descriptor?? [ 710.999525][T13615] fuse: Bad value for 'fd' [ 711.017729][T13642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.037678][T13642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.054783][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 711.063345][ T5930] usb 5-1: 0:2 : does not exist [ 711.068294][ T5930] usb 5-1: unit 5 not found! [ 711.093233][ T5930] usb 5-1: USB disconnect, device number 116 [ 711.112356][ T5947] usb 4-1: USB disconnect, device number 126 [ 711.379512][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.739731][ T5947] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 711.919754][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 711.921316][ T5947] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.921332][ T5947] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.925354][ T5947] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 711.925378][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.925390][ T5947] usb 4-1: Product: syz [ 711.925398][ T5947] usb 4-1: Manufacturer: syz [ 711.925406][ T5947] usb 4-1: SerialNumber: syz [ 712.368900][T13638] fuse: Bad value for 'fd' [ 712.378392][ T5947] usb 4-1: 0:2 : does not exist [ 712.391654][ T5947] usb 4-1: unit 5 not found! [ 712.409745][ T5930] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 712.434406][ T5947] usb 4-1: USB disconnect, device number 127 [ 712.472487][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 712.559854][ T5945] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 712.586459][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 712.599145][ T5930] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 712.608711][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.616824][ T5930] usb 3-1: Product: syz [ 712.621278][ T5930] usb 3-1: Manufacturer: syz [ 712.625932][ T5930] usb 3-1: SerialNumber: syz [ 712.635627][ T5930] usb 3-1: config 0 descriptor?? [ 712.719878][ T5945] usb 5-1: Using ep0 maxpacket: 16 [ 712.731265][ T5945] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 712.742470][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.751155][ T5945] usb 5-1: Product: syz [ 712.755403][ T5945] usb 5-1: Manufacturer: syz [ 712.760387][ T5945] usb 5-1: SerialNumber: syz [ 712.775872][ T5945] usb 5-1: config 0 descriptor?? [ 712.791471][ T5945] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 713.306932][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.439050][T13667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.449817][ T5947] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 713.459407][ T5945] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110 [ 713.515238][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.536266][ T5930] usb 3-1: USB disconnect, device number 5 [ 713.579322][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.588248][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.612409][ T5947] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.625073][T13670] futex_wake_op: syz.2.1957 tries to shift op by 32; fix this program [ 713.633051][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 713.667815][ T5947] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 713.694206][ T5947] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 713.728425][ T5947] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 713.747463][ T5947] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 713.762123][ T5947] usb 4-1: Manufacturer: syz [ 713.805395][ T5947] usb 4-1: config 0 descriptor?? [ 713.812594][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.822073][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 713.849151][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.869675][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.134346][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.156573][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.349802][ T5930] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 714.439703][ T5947] rc_core: IR keymap rc-hauppauge not found [ 714.445720][ T5947] Registered IR keymap rc-empty [ 714.458039][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.492270][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.530979][ T5947] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 714.544737][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 714.635286][ T5947] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input101 [ 714.639753][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 714.676801][ T5930] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 714.686659][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.696812][ T5930] usb 3-1: Product: syz [ 714.717186][ T5930] usb 3-1: Manufacturer: syz [ 714.722200][ T5930] usb 3-1: SerialNumber: syz [ 714.731626][ T5930] usb 3-1: config 0 descriptor?? [ 714.743622][ T5930] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 714.755684][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.820283][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.839743][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.866456][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.910182][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.995143][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 715.036796][T13679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.046584][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 715.061495][T13679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.132852][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 715.185287][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 715.222040][ T5947] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 715.255798][ T5947] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 715.265255][ T5947] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 715.292496][ T5947] usb 4-1: USB disconnect, device number 2 [ 715.414668][T13686] FAULT_INJECTION: forcing a failure. [ 715.414668][T13686] name failslab, interval 1, probability 0, space 0, times 0 [ 715.439965][ T5945] usb 5-1: USB disconnect, device number 117 [ 715.446243][T13686] CPU: 0 UID: 0 PID: 13686 Comm: syz.0.1961 Not tainted syzkaller #0 PREEMPT(full) [ 715.446268][T13686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 715.446280][T13686] Call Trace: [ 715.446288][T13686] [ 715.446296][T13686] dump_stack_lvl+0x189/0x250 [ 715.446326][T13686] ? __pfx____ratelimit+0x10/0x10 [ 715.446344][T13686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 715.446365][T13686] ? __pfx__printk+0x10/0x10 [ 715.446400][T13686] ? __lock_acquire+0xab9/0xd20 [ 715.446436][T13686] should_fail_ex+0x414/0x560 [ 715.446469][T13686] should_failslab+0xa8/0x100 [ 715.446496][T13686] kmem_cache_alloc_noprof+0x73/0x3c0 [ 715.446519][T13686] ? skb_clone+0x212/0x3a0 [ 715.446548][T13686] skb_clone+0x212/0x3a0 [ 715.446577][T13686] __netlink_deliver_tap+0x404/0x850 [ 715.446609][T13686] ? netlink_deliver_tap+0x2e/0x1b0 [ 715.446629][T13686] netlink_deliver_tap+0x19c/0x1b0 [ 715.446650][T13686] netlink_unicast+0x7fa/0x9e0 [ 715.446685][T13686] ? __pfx_netlink_unicast+0x10/0x10 [ 715.446713][T13686] ? netlink_sendmsg+0x642/0xb30 [ 715.446732][T13686] ? skb_put+0x11b/0x210 [ 715.446758][T13686] netlink_sendmsg+0x805/0xb30 [ 715.446788][T13686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.446808][T13686] ? __import_iovec+0x5d4/0x7f0 [ 715.446830][T13686] ? aa_sock_msg_perm+0xf1/0x1d0 [ 715.446849][T13686] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 715.446869][T13686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 715.446889][T13686] __sock_sendmsg+0x21c/0x270 [ 715.446920][T13686] ____sys_sendmsg+0x505/0x830 [ 715.446948][T13686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 715.446987][T13686] ___sys_sendmsg+0x21f/0x2a0 [ 715.447014][T13686] ? __pfx____sys_sendmsg+0x10/0x10 [ 715.447072][T13686] ? __fget_files+0x2a/0x420 [ 715.447086][T13686] ? __fget_files+0x3a0/0x420 [ 715.447114][T13686] __sys_sendmsg+0x164/0x220 [ 715.447137][T13686] ? __pfx___sys_sendmsg+0x10/0x10 [ 715.447177][T13686] ? lockdep_hardirqs_on+0x9c/0x150 [ 715.447202][T13686] __do_fast_syscall_32+0xb6/0x2b0 [ 715.447224][T13686] ? lockdep_hardirqs_on+0x9c/0x150 [ 715.447247][T13686] do_fast_syscall_32+0x34/0x80 [ 715.447267][T13686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 715.447289][T13686] RIP: 0023:0xf7f81539 [ 715.447305][T13686] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 715.447322][T13686] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 715.447343][T13686] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 715.447355][T13686] RDX: 0000000020008084 RSI: 0000000000000000 RDI: 0000000000000000 [ 715.447366][T13686] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 715.447377][T13686] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 715.447396][T13686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 715.447421][T13686] [ 715.734294][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 716.051018][ T5930] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 716.369536][ T5930] usb 1-1: Using ep0 maxpacket: 16 [ 716.375044][ T5930] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 716.375071][ T5930] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.375091][ T5930] usb 1-1: config 0 has no interface number 0 [ 716.383976][ T5930] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 716.384002][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.384014][ T5930] usb 1-1: Product: syz [ 716.384022][ T5930] usb 1-1: Manufacturer: syz [ 716.384030][ T5930] usb 1-1: SerialNumber: syz [ 716.387895][ T5930] usb 1-1: config 0 descriptor?? [ 716.467622][T13702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.538856][ T5945] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 716.600605][ T5930] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 716.600628][ T5930] usb 1-1: No valid video chain found. [ 716.640609][ T5963] usb 3-1: USB disconnect, device number 6 [ 716.741997][ T5945] usb 4-1: config 0 has no interfaces? [ 716.742063][ T5945] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 716.742090][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.744978][ T5945] usb 4-1: config 0 descriptor?? [ 716.999696][ T5947] usb 1-1: USB disconnect, device number 5 [ 717.078248][T13701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.078640][T13701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.097488][ T5930] usb 4-1: USB disconnect, device number 3 [ 717.539824][ T5963] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 717.539942][ T5947] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 717.729724][ T5963] usb 4-1: Using ep0 maxpacket: 16 [ 717.733205][ T5947] usb 3-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 717.746170][ T5963] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 717.759731][ T5963] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 717.767135][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.799844][ T5945] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 717.818744][ T5963] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 717.834527][ T5947] usb 3-1: Product: syz [ 717.838810][ T5947] usb 3-1: Manufacturer: syz [ 717.843437][ T5947] usb 3-1: SerialNumber: syz [ 717.851627][ T5947] usb 3-1: config 0 descriptor?? [ 717.858649][ T5947] f81232 3-1:0.0: f81232 converter detected [ 717.870599][ T5963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.885575][ T5947] usb 3-1: f81232 converter now attached to ttyUSB0 [ 717.893349][ T5963] usb 4-1: Product: syz [ 717.904021][ T5963] usb 4-1: Manufacturer: syz [ 717.918930][ T5963] usb 4-1: SerialNumber: syz [ 717.989722][ T5945] usb 5-1: Using ep0 maxpacket: 8 [ 718.000927][ T5945] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 718.010915][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.018921][ T5945] usb 5-1: Product: syz [ 718.024079][ T5945] usb 5-1: Manufacturer: syz [ 718.028706][ T5945] usb 5-1: SerialNumber: syz [ 718.036433][ T5945] usb 5-1: config 0 descriptor?? [ 718.039925][ T5930] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 718.056766][ T5945] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 718.078636][ T5947] usb 3-1: USB disconnect, device number 7 [ 718.087364][ T5947] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 718.108510][ T5947] f81232 3-1:0.0: device disconnected [ 718.201143][ T5930] usb 1-1: not running at top speed; connect to a high speed hub [ 718.210524][ T5930] usb 1-1: config 1 interface 0 has no altsetting 0 [ 718.219530][ T5930] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 718.228995][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.237135][ T5930] usb 1-1: Product: syz [ 718.241369][ T5930] usb 1-1: Manufacturer: syz [ 718.247608][ T5930] usb 1-1: SerialNumber: syz [ 718.253693][T13716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.273418][T13716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.317397][T13716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1972'. [ 718.328877][T13716] netlink: 'syz.4.1972': attribute type 23 has an invalid length. [ 718.482383][T13725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1974'. [ 718.500279][T13725] loop8: detected capacity change from 0 to 16384 [ 718.513135][ T5963] usb 4-1: 0:2 : does not exist [ 718.518720][ T5963] usb 4-1: unit 5 not found! [ 718.565060][ T5963] usb 4-1: USB disconnect, device number 4 [ 718.573484][ T5945] gspca_sonixj: reg_w1 err -110 [ 718.628120][ T5945] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 718.716859][ T6350] udevd[6350]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 718.750235][T13728] loop8: detected capacity change from 16384 to 0 [ 718.751452][ C0] I/O error, dev loop8, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 718.783615][ C0] I/O error, dev loop8, sector 5376 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 719.071229][ T5999] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 719.230082][ T5999] usb 3-1: Using ep0 maxpacket: 16 [ 719.237133][ T5999] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 719.245629][ T5999] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.255947][ T5999] usb 3-1: config 0 has no interface number 0 [ 719.507689][T13739] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1977'. [ 719.627974][ T5999] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 719.641310][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.650099][ T5999] usb 3-1: Product: syz [ 719.654575][ T5999] usb 3-1: Manufacturer: syz [ 719.659495][ T5999] usb 3-1: SerialNumber: syz [ 719.673212][ T5999] usb 3-1: config 0 descriptor?? [ 719.885548][ T5999] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 719.896438][ T5999] usb 3-1: No valid video chain found. [ 719.942383][ T5999] usb 3-1: USB disconnect, device number 8 [ 720.222667][T13741] futex_wake_op: syz.3.1978 tries to shift op by 32; fix this program [ 720.506714][ T5999] usb 5-1: USB disconnect, device number 118 [ 720.789867][ T5938] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 721.213894][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 721.234926][ T5938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 721.294821][ T5930] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input102 [ 721.366098][ T5938] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 721.462666][ T5945] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 721.546002][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.548587][ T5218] bcm5974 1-1:1.0: could not read from device [ 721.677267][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 721.738246][ T5938] usb 4-1: Product: syz [ 721.746715][ T5938] usb 4-1: Manufacturer: syz [ 721.747584][ T5945] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 721.781684][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.785874][ T5938] usb 4-1: SerialNumber: syz [ 721.841099][ T5930] usb 1-1: USB disconnect, device number 6 [ 721.896905][ T5945] usb 3-1: config 0 has no interface number 0 [ 721.899063][ T5938] usb 4-1: config 0 descriptor?? [ 721.959560][ T5945] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 721.985014][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.041290][ T5945] usb 3-1: Product: syz [ 722.057756][ T5938] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 722.117161][ T5945] usb 3-1: Manufacturer: syz [ 722.196751][ T5945] usb 3-1: SerialNumber: syz [ 722.332851][ T5945] usb 3-1: config 0 descriptor?? [ 722.360044][ T5945] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 722.385968][ T5945] usb 3-1: No valid video chain found. [ 722.806807][ T5945] usb 3-1: USB disconnect, device number 9 [ 723.113959][T13773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.128246][T13773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.497463][T13775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.644644][ T5945] usb 4-1: USB disconnect, device number 5 [ 725.509291][ T5938] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 726.077766][ T5938] usb 4-1: Using ep0 maxpacket: 8 [ 726.091638][ T5938] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 726.113001][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.124958][ T5938] usb 4-1: Product: syz [ 726.129140][ T5938] usb 4-1: Manufacturer: syz [ 726.138958][ T5938] usb 4-1: SerialNumber: syz [ 726.156234][ T5938] usb 4-1: config 0 descriptor?? [ 726.193796][ T5938] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 726.405461][T13791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 726.429503][T13791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 726.507638][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1990'. [ 726.529184][T13791] netlink: 'syz.3.1990': attribute type 23 has an invalid length. [ 726.810798][ T5938] gspca_sonixj: reg_w1 err -110 [ 726.847436][ T5938] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 727.038976][T13817] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1994'. [ 728.072984][ T5923] usb 4-1: USB disconnect, device number 6 [ 728.557218][ T5938] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 728.609913][ T5923] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 728.678427][T13840] futex_wake_op: syz.1.2000 tries to shift op by 32; fix this program [ 728.710055][ T5930] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 728.772738][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 728.793112][ T5923] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 728.822138][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.855101][ T5923] usb 4-1: config 0 has no interface number 0 [ 728.887636][ T5938] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 729.037760][ T5923] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 729.058747][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.087697][ T5923] usb 4-1: Product: syz [ 729.097390][ T5923] usb 4-1: Manufacturer: syz [ 729.114683][ T5923] usb 4-1: SerialNumber: syz [ 729.149299][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 729.162713][ T5938] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 729.178472][ T5923] usb 4-1: config 0 descriptor?? [ 729.205426][ T5923] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 729.225339][ T5923] usb 4-1: No valid video chain found. [ 729.232739][T13849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.246043][T13849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.276096][ T5930] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 729.286977][ T5938] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 729.309769][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.336800][ T5938] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 729.357520][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.379000][ T5930] usb 3-1: config 0 descriptor?? [ 729.413580][ T5938] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 729.416868][ T5923] usb 4-1: USB disconnect, device number 7 [ 729.425228][ T5938] usb 5-1: invalid MIDI out EP 0 [ 729.436173][T13835] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 730.819094][ T5930] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 730.848637][ T5938] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 731.518415][ T5947] usb 3-1: USB disconnect, device number 10 [ 731.635877][T13858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2004'. [ 731.657318][T13858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2004'. [ 731.796615][ T5923] usb 5-1: USB disconnect, device number 119 [ 732.055449][T13865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.070578][T13865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.233875][ T5923] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 732.419836][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 732.589000][ T5923] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 732.608916][ T5923] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 732.623631][ T5923] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 732.635452][ T5923] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 732.651832][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.669720][ T5923] usb 1-1: Product: syz [ 732.675428][ T5923] usb 1-1: Manufacturer: syz [ 732.706265][T13869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2008'. [ 732.729186][ T5923] usb 1-1: SerialNumber: syz [ 732.779917][T13876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.791105][T13876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.935531][T13878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2010'. [ 733.178563][ T5923] usb 1-1: 0:2 : does not exist [ 734.392676][ T5923] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 734.539477][ T5923] usb 1-1: USB disconnect, device number 7 [ 734.712555][ T5871] udevd[5871]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.482361][T13901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2013'. [ 735.504544][T13901] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2013'. [ 735.529535][T13901] netlink: 'syz.0.2013': attribute type 3 has an invalid length. [ 735.619874][ T5923] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 735.779861][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 736.110345][T13908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.221134][ T5923] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 736.248131][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 736.474766][ T5923] usb 3-1: config 0 has no interface number 0 [ 736.487330][ T5923] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 736.519811][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.562478][ T5923] usb 3-1: Product: syz [ 736.566863][ T5923] usb 3-1: Manufacturer: syz [ 736.572121][ T5923] usb 3-1: SerialNumber: syz [ 736.587639][ T5923] usb 3-1: config 0 descriptor?? [ 736.626362][ T5923] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 736.656121][ T5923] usb 3-1: No valid video chain found. [ 736.763837][T13913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2015'. [ 736.835766][ T5923] usb 3-1: USB disconnect, device number 11 [ 737.142442][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 737.458216][ T10] usb 1-1: device descriptor read/64, error -71 [ 737.719754][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 737.729713][ T5947] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 737.825021][T13927] futex_wake_op: syz.4.2018 tries to shift op by 32; fix this program [ 737.873816][ T10] usb 1-1: device descriptor read/64, error -71 [ 737.899916][ T5947] usb 4-1: Using ep0 maxpacket: 16 [ 737.906201][ T5947] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 737.916883][ T5947] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 737.928206][ T5947] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 738.017101][ T5930] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 738.018106][ T10] usb usb1-port1: attempt power cycle [ 738.361292][ T5947] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 738.381061][ T5947] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 738.402227][ T5947] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 738.414368][ T5947] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 738.426450][ T5947] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 738.440631][ T5947] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 738.452595][ T5947] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 738.463855][ T5947] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 738.475341][ T5947] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 738.499664][ T5947] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 738.520639][ T5947] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 738.530873][ T5947] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 738.552316][ T5947] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 738.563119][ T5947] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 738.574612][ T5947] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.02 [ 738.624035][ T5947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.639939][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 738.653678][ T5930] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 738.680860][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.698990][ T5930] usb 3-1: config 0 has no interface number 0 [ 738.718602][ T5930] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 738.729807][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 738.750720][ T10] usb 1-1: device descriptor read/8, error -71 [ 738.759319][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.779055][ T5930] usb 3-1: Product: syz [ 738.790631][ T5930] usb 3-1: Manufacturer: syz [ 738.803105][ T5930] usb 3-1: SerialNumber: syz [ 738.809774][ T5945] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 738.836647][ T5930] usb 3-1: config 0 descriptor?? [ 739.024827][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 739.043792][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 739.052217][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 739.074682][ T5930] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 739.084425][ T5945] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 739.094137][ T10] usb 1-1: device descriptor read/8, error -71 [ 739.117613][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.131528][ T5930] usb 3-1: No valid video chain found. [ 739.131538][ T5945] usb 5-1: Product: syz [ 739.131555][ T5945] usb 5-1: Manufacturer: syz [ 739.147305][ T5945] usb 5-1: SerialNumber: syz [ 739.157178][ T5930] usb 3-1: USB disconnect, device number 12 [ 739.158754][ T5945] usb 5-1: config 0 descriptor?? [ 739.174474][ T5945] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 739.223588][ T10] usb usb1-port1: unable to enumerate USB device [ 740.040842][T13936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.075332][T13934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.108643][T13934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.138310][T13934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.196815][T13934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.342720][T13945] dlm: non-version read from control device 36 [ 740.896168][ T10] usb 5-1: USB disconnect, device number 120 [ 741.448009][ T5999] usb 4-1: USB disconnect, device number 8 [ 742.801178][T13967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.167715][T14001] futex_wake_op: syz.3.2034 tries to shift op by 32; fix this program [ 745.234128][T14003] [ 745.236521][T14003] ===================================================== [ 745.243456][T14003] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 745.250912][T14003] syzkaller #0 Not tainted [ 745.255302][T14003] ----------------------------------------------------- [ 745.262210][T14003] syz.1.2035/14003 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 745.269907][T14003] ffff888027de17f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 745.278586][T14003] [ 745.278586][T14003] and this task is already holding: [ 745.285927][T14003] ffff888054c5e028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 745.295650][T14003] which would create a new lock dependency: [ 745.301527][T14003] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 745.309632][T14003] [ 745.309632][T14003] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 745.319076][T14003] (&client->buffer_lock){..-.}-{3:3} [ 745.319108][T14003] [ 745.319108][T14003] ... which became SOFTIRQ-irq-safe at: [ 745.332164][T14003] lock_acquire+0x120/0x360 [ 745.336763][T14003] _raw_spin_lock+0x2e/0x40 [ 745.341355][T14003] evdev_pass_values+0xb9/0xbd0 [ 745.346313][T14003] evdev_events+0x1e6/0x340 [ 745.350979][T14003] input_pass_values+0x285/0x890 [ 745.356084][T14003] input_event_dispose+0x3e5/0x6b0 [ 745.361293][T14003] input_event+0x89/0xe0 [ 745.365615][T14003] hidinput_hid_event+0x1362/0x1ca0 [ 745.370899][T14003] hid_process_event+0x4be/0x620 [ 745.375912][T14003] hid_report_raw_event+0xe91/0x16d0 [ 745.381315][T14003] hid_input_report+0x43e/0x520 [ 745.386239][T14003] hid_irq_in+0x47e/0x6d0 [ 745.390647][T14003] __usb_hcd_giveback_urb+0x376/0x540 [ 745.396093][T14003] dummy_timer+0x862/0x4550 [ 745.400674][T14003] __hrtimer_run_queues+0x52c/0xc60 [ 745.405949][T14003] hrtimer_run_softirq+0x187/0x2b0 [ 745.411139][T14003] handle_softirqs+0x283/0x870 [ 745.415974][T14003] __irq_exit_rcu+0xca/0x1f0 [ 745.420636][T14003] irq_exit_rcu+0x9/0x30 [ 745.424951][T14003] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 745.430658][T14003] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 745.436712][T14003] finish_task_switch+0x26b/0x950 [ 745.441812][T14003] __schedule+0x17a0/0x4cc0 [ 745.446389][T14003] preempt_schedule_irq+0xb5/0x150 [ 745.451574][T14003] irqentry_exit+0x6f/0x90 [ 745.456067][T14003] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 745.462124][T14003] lock_release+0x2b5/0x3e0 [ 745.466718][T14003] unwind_next_frame+0x19a9/0x2390 [ 745.471911][T14003] arch_stack_walk+0x11c/0x150 [ 745.476754][T14003] stack_trace_save+0x9c/0xe0 [ 745.481513][T14003] kasan_save_stack+0x3e/0x60 [ 745.486271][T14003] kasan_record_aux_stack+0xbd/0xd0 [ 745.491543][T14003] call_rcu+0x157/0x9c0 [ 745.495780][T14003] kmem_cache_free+0x309/0x400 [ 745.500625][T14003] __put_anon_vma+0x12b/0x2d0 [ 745.505385][T14003] unlink_anon_vmas+0x503/0x670 [ 745.510319][T14003] free_pgtables+0x72b/0x9c0 [ 745.514979][T14003] exit_mmap+0x444/0xb50 [ 745.519301][T14003] __mmput+0x118/0x430 [ 745.523441][T14003] exit_mm+0x1da/0x2c0 [ 745.527586][T14003] do_exit+0x648/0x2300 [ 745.531820][T14003] do_group_exit+0x21c/0x2d0 [ 745.536486][T14003] __x64_sys_exit_group+0x3f/0x40 [ 745.542024][T14003] x64_sys_call+0x21f7/0x2200 [ 745.546793][T14003] do_syscall_64+0xfa/0x3b0 [ 745.551373][T14003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.557350][T14003] [ 745.557350][T14003] to a SOFTIRQ-irq-unsafe lock: [ 745.564367][T14003] (tasklist_lock){.+.+}-{3:3} [ 745.564394][T14003] [ 745.564394][T14003] ... which became SOFTIRQ-irq-unsafe at: [ 745.577009][T14003] ... [ 745.577020][T14003] lock_acquire+0x120/0x360 [ 745.584198][T14003] _raw_read_lock+0x36/0x50 [ 745.588792][T14003] __do_wait+0xde/0x740 [ 745.593046][T14003] do_wait+0x1f8/0x520 [ 745.597198][T14003] kernel_wait+0xab/0x170 [ 745.601607][T14003] call_usermodehelper_exec_work+0xbe/0x230 [ 745.607584][T14003] process_scheduled_works+0xae1/0x17b0 [ 745.613275][T14003] worker_thread+0x8a0/0xda0 [ 745.618027][T14003] kthread+0x70e/0x8a0 [ 745.622176][T14003] ret_from_fork+0x436/0x7d0 [ 745.626841][T14003] ret_from_fork_asm+0x1a/0x30 [ 745.631685][T14003] [ 745.631685][T14003] other info that might help us debug this: [ 745.631685][T14003] [ 745.641909][T14003] Chain exists of: [ 745.641909][T14003] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 745.641909][T14003] [ 745.655025][T14003] Possible interrupt unsafe locking scenario: [ 745.655025][T14003] [ 745.663325][T14003] CPU0 CPU1 [ 745.668676][T14003] ---- ---- [ 745.674022][T14003] lock(tasklist_lock); [ 745.678252][T14003] local_irq_disable(); [ 745.684991][T14003] lock(&client->buffer_lock); [ 745.692348][T14003] lock(&new->fa_lock); [ 745.699098][T14003] [ 745.702536][T14003] lock(&client->buffer_lock); [ 745.707550][T14003] [ 745.707550][T14003] *** DEADLOCK *** [ 745.707550][T14003] [ 745.715674][T14003] 7 locks held by syz.1.2035/14003: [ 745.720855][T14003] #0: ffff888029e31118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 745.729989][T14003] #1: ffff888029cc1230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 745.740083][T14003] #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 745.749743][T14003] #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 745.759309][T14003] #4: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 745.768598][T14003] #5: ffff888054c5e028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 745.778798][T14003] #6: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 745.787853][T14003] [ 745.787853][T14003] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 745.798246][T14003] -> (&client->buffer_lock){..-.}-{3:3} { [ 745.803971][T14003] IN-SOFTIRQ-W at: [ 745.807941][T14003] lock_acquire+0x120/0x360 [ 745.814094][T14003] _raw_spin_lock+0x2e/0x40 [ 745.820243][T14003] evdev_pass_values+0xb9/0xbd0 [ 745.826735][T14003] evdev_events+0x1e6/0x340 [ 745.832880][T14003] input_pass_values+0x285/0x890 [ 745.839455][T14003] input_event_dispose+0x3e5/0x6b0 [ 745.846207][T14003] input_event+0x89/0xe0 [ 745.852095][T14003] hidinput_hid_event+0x1362/0x1ca0 [ 745.858936][T14003] hid_process_event+0x4be/0x620 [ 745.865516][T14003] hid_report_raw_event+0xe91/0x16d0 [ 745.872440][T14003] hid_input_report+0x43e/0x520 [ 745.878928][T14003] hid_irq_in+0x47e/0x6d0 [ 745.884899][T14003] __usb_hcd_giveback_urb+0x376/0x540 [ 745.892111][T14003] dummy_timer+0x862/0x4550 [ 745.898250][T14003] __hrtimer_run_queues+0x52c/0xc60 [ 745.905086][T14003] hrtimer_run_softirq+0x187/0x2b0 [ 745.911841][T14003] handle_softirqs+0x283/0x870 [ 745.918247][T14003] __irq_exit_rcu+0xca/0x1f0 [ 745.924471][T14003] irq_exit_rcu+0x9/0x30 [ 745.930355][T14003] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 745.937635][T14003] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 745.945253][T14003] finish_task_switch+0x26b/0x950 [ 745.951922][T14003] __schedule+0x17a0/0x4cc0 [ 745.958059][T14003] preempt_schedule_irq+0xb5/0x150 [ 745.964804][T14003] irqentry_exit+0x6f/0x90 [ 745.970871][T14003] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 745.978755][T14003] lock_release+0x2b5/0x3e0 [ 745.984905][T14003] unwind_next_frame+0x19a9/0x2390 [ 745.991688][T14003] arch_stack_walk+0x11c/0x150 [ 745.998095][T14003] stack_trace_save+0x9c/0xe0 [ 746.004411][T14003] kasan_save_stack+0x3e/0x60 [ 746.010729][T14003] kasan_record_aux_stack+0xbd/0xd0 [ 746.017574][T14003] call_rcu+0x157/0x9c0 [ 746.023368][T14003] kmem_cache_free+0x309/0x400 [ 746.029779][T14003] __put_anon_vma+0x12b/0x2d0 [ 746.036102][T14003] unlink_anon_vmas+0x503/0x670 [ 746.042597][T14003] free_pgtables+0x72b/0x9c0 [ 746.048825][T14003] exit_mmap+0x444/0xb50 [ 746.054708][T14003] __mmput+0x118/0x430 [ 746.060418][T14003] exit_mm+0x1da/0x2c0 [ 746.066128][T14003] do_exit+0x648/0x2300 [ 746.071921][T14003] do_group_exit+0x21c/0x2d0 [ 746.078150][T14003] __x64_sys_exit_group+0x3f/0x40 [ 746.084816][T14003] x64_sys_call+0x21f7/0x2200 [ 746.091137][T14003] do_syscall_64+0xfa/0x3b0 [ 746.097278][T14003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.104838][T14003] INITIAL USE at: [ 746.108720][T14003] lock_acquire+0x120/0x360 [ 746.114788][T14003] _raw_spin_lock+0x2e/0x40 [ 746.120857][T14003] evdev_pass_values+0xb9/0xbd0 [ 746.127266][T14003] evdev_events+0x1e6/0x340 [ 746.133317][T14003] input_pass_values+0x285/0x890 [ 746.139803][T14003] input_event_dispose+0x3e5/0x6b0 [ 746.146469][T14003] input_event+0x89/0xe0 [ 746.152268][T14003] hidinput_hid_event+0x1362/0x1ca0 [ 746.159020][T14003] hid_process_event+0x4be/0x620 [ 746.165508][T14003] hid_report_raw_event+0xe91/0x16d0 [ 746.172345][T14003] hid_input_report+0x43e/0x520 [ 746.178748][T14003] hid_irq_in+0x47e/0x6d0 [ 746.184636][T14003] __usb_hcd_giveback_urb+0x376/0x540 [ 746.191562][T14003] dummy_timer+0x862/0x4550 [ 746.197612][T14003] __hrtimer_run_queues+0x52c/0xc60 [ 746.204359][T14003] hrtimer_run_softirq+0x187/0x2b0 [ 746.211025][T14003] handle_softirqs+0x283/0x870 [ 746.217348][T14003] __irq_exit_rcu+0xca/0x1f0 [ 746.223499][T14003] irq_exit_rcu+0x9/0x30 [ 746.229292][T14003] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 746.236474][T14003] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.244010][T14003] finish_task_switch+0x26b/0x950 [ 746.250598][T14003] __schedule+0x17a0/0x4cc0 [ 746.256649][T14003] preempt_schedule_irq+0xb5/0x150 [ 746.263309][T14003] irqentry_exit+0x6f/0x90 [ 746.269363][T14003] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 746.276900][T14003] lock_release+0x2b5/0x3e0 [ 746.282963][T14003] unwind_next_frame+0x19a9/0x2390 [ 746.289624][T14003] arch_stack_walk+0x11c/0x150 [ 746.295940][T14003] stack_trace_save+0x9c/0xe0 [ 746.302166][T14003] kasan_save_stack+0x3e/0x60 [ 746.308395][T14003] kasan_record_aux_stack+0xbd/0xd0 [ 746.315167][T14003] call_rcu+0x157/0x9c0 [ 746.320874][T14003] kmem_cache_free+0x309/0x400 [ 746.327195][T14003] __put_anon_vma+0x12b/0x2d0 [ 746.333437][T14003] unlink_anon_vmas+0x503/0x670 [ 746.339845][T14003] free_pgtables+0x72b/0x9c0 [ 746.345986][T14003] exit_mmap+0x444/0xb50 [ 746.351793][T14003] __mmput+0x118/0x430 [ 746.357436][T14003] exit_mm+0x1da/0x2c0 [ 746.363058][T14003] do_exit+0x648/0x2300 [ 746.368767][T14003] do_group_exit+0x21c/0x2d0 [ 746.374910][T14003] __x64_sys_exit_group+0x3f/0x40 [ 746.381490][T14003] x64_sys_call+0x21f7/0x2200 [ 746.387722][T14003] do_syscall_64+0xfa/0x3b0 [ 746.393782][T14003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.401224][T14003] } [ 746.403719][T14003] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 746.411870][T14003] [ 746.411870][T14003] the dependencies between the lock to be acquired [ 746.411883][T14003] and SOFTIRQ-irq-unsafe lock: [ 746.425384][T14003] -> (tasklist_lock){.+.+}-{3:3} { [ 746.430692][T14003] HARDIRQ-ON-R at: [ 746.434836][T14003] lock_acquire+0x120/0x360 [ 746.441336][T14003] _raw_read_lock+0x36/0x50 [ 746.447835][T14003] __do_wait+0xde/0x740 [ 746.453982][T14003] do_wait+0x1f8/0x520 [ 746.460041][T14003] kernel_wait+0xab/0x170 [ 746.466362][T14003] call_usermodehelper_exec_work+0xbe/0x230 [ 746.474247][T14003] process_scheduled_works+0xae1/0x17b0 [ 746.481865][T14003] worker_thread+0x8a0/0xda0 [ 746.488442][T14003] kthread+0x70e/0x8a0 [ 746.494498][T14003] ret_from_fork+0x436/0x7d0 [ 746.501071][T14003] ret_from_fork_asm+0x1a/0x30 [ 746.507829][T14003] SOFTIRQ-ON-R at: [ 746.511983][T14003] lock_acquire+0x120/0x360 [ 746.518477][T14003] _raw_read_lock+0x36/0x50 [ 746.524974][T14003] __do_wait+0xde/0x740 [ 746.531121][T14003] do_wait+0x1f8/0x520 [ 746.537177][T14003] kernel_wait+0xab/0x170 [ 746.543497][T14003] call_usermodehelper_exec_work+0xbe/0x230 [ 746.551471][T14003] process_scheduled_works+0xae1/0x17b0 [ 746.558998][T14003] worker_thread+0x8a0/0xda0 [ 746.565571][T14003] kthread+0x70e/0x8a0 [ 746.571625][T14003] ret_from_fork+0x436/0x7d0 [ 746.578203][T14003] ret_from_fork_asm+0x1a/0x30 [ 746.584960][T14003] INITIAL USE at: [ 746.589015][T14003] lock_acquire+0x120/0x360 [ 746.595426][T14003] _raw_write_lock_irq+0xa2/0xf0 [ 746.602270][T14003] copy_process+0x224f/0x3c00 [ 746.608858][T14003] kernel_clone+0x21e/0x840 [ 746.615265][T14003] user_mode_thread+0xdd/0x140 [ 746.621944][T14003] rest_init+0x23/0x300 [ 746.628013][T14003] start_kernel+0x3a9/0x410 [ 746.634425][T14003] x86_64_start_reservations+0x24/0x30 [ 746.641793][T14003] x86_64_start_kernel+0x143/0x1c0 [ 746.648808][T14003] common_startup_64+0x13e/0x147 [ 746.655656][T14003] INITIAL READ USE at: [ 746.660144][T14003] lock_acquire+0x120/0x360 [ 746.666991][T14003] _raw_read_lock+0x36/0x50 [ 746.673834][T14003] __do_wait+0xde/0x740 [ 746.680328][T14003] do_wait+0x1f8/0x520 [ 746.686732][T14003] kernel_wait+0xab/0x170 [ 746.693400][T14003] call_usermodehelper_exec_work+0xbe/0x230 [ 746.701630][T14003] process_scheduled_works+0xae1/0x17b0 [ 746.709521][T14003] worker_thread+0x8a0/0xda0 [ 746.716457][T14003] kthread+0x70e/0x8a0 [ 746.722867][T14003] ret_from_fork+0x436/0x7d0 [ 746.729804][T14003] ret_from_fork_asm+0x1a/0x30 [ 746.736919][T14003] } [ 746.739580][T14003] ... key at: [] tasklist_lock+0x18/0x40 [ 746.747469][T14003] ... acquired at: [ 746.751437][T14003] lock_acquire+0x120/0x360 [ 746.756112][T14003] _raw_read_lock+0x36/0x50 [ 746.760787][T14003] send_sigio+0x101/0x370 [ 746.765277][T14003] kill_fasync+0x24d/0x4d0 [ 746.769852][T14003] lease_break_callback+0x26/0x30 [ 746.775042][T14003] __break_lease+0x6a2/0x1620 [ 746.779879][T14003] vfs_truncate+0x428/0x520 [ 746.784544][T14003] do_sys_truncate+0xdb/0x190 [ 746.789383][T14003] __ia32_compat_sys_truncate+0x5b/0x70 [ 746.795092][T14003] __do_fast_syscall_32+0xb6/0x2b0 [ 746.800369][T14003] do_fast_syscall_32+0x34/0x80 [ 746.805379][T14003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.811877][T14003] [ 746.814181][T14003] -> (&f_owner->lock){....}-{3:3} { [ 746.819474][T14003] INITIAL USE at: [ 746.823441][T14003] lock_acquire+0x120/0x360 [ 746.829679][T14003] _raw_write_lock_irq+0xa2/0xf0 [ 746.836340][T14003] __f_setown+0x67/0x370 [ 746.842307][T14003] generic_setlease+0xd60/0x1240 [ 746.848973][T14003] fcntl_setlease+0x3a2/0x4c0 [ 746.855540][T14003] do_fcntl+0x6a9/0x1910 [ 746.861538][T14003] do_compat_fcntl64+0x477/0x720 [ 746.868220][T14003] __do_fast_syscall_32+0xb6/0x2b0 [ 746.875065][T14003] do_fast_syscall_32+0x34/0x80 [ 746.881731][T14003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.889788][T14003] INITIAL READ USE at: [ 746.894281][T14003] lock_acquire+0x120/0x360 [ 746.900954][T14003] _raw_read_lock_irqsave+0xaf/0x100 [ 746.908411][T14003] send_sigio+0x38/0x370 [ 746.914903][T14003] kill_fasync+0x24d/0x4d0 [ 746.921572][T14003] lease_break_callback+0x26/0x30 [ 746.928769][T14003] __break_lease+0x6a2/0x1620 [ 746.935608][T14003] do_dentry_open+0x8b7/0x13f0 [ 746.942538][T14003] vfs_open+0x3b/0x340 [ 746.948863][T14003] dentry_open+0x61/0xa0 [ 746.955264][T14003] do_mq_open+0x59e/0x780 [ 746.961783][T14003] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 746.969577][T14003] __do_fast_syscall_32+0xb6/0x2b0 [ 746.976856][T14003] do_fast_syscall_32+0x34/0x80 [ 746.983866][T14003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 746.992360][T14003] } [ 746.994928][T14003] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 747.003862][T14003] ... acquired at: [ 747.007735][T14003] lock_acquire+0x120/0x360 [ 747.012406][T14003] _raw_read_lock_irqsave+0xaf/0x100 [ 747.017863][T14003] send_sigio+0x38/0x370 [ 747.022270][T14003] kill_fasync+0x24d/0x4d0 [ 747.026847][T14003] lease_break_callback+0x26/0x30 [ 747.032038][T14003] __break_lease+0x6a2/0x1620 [ 747.036879][T14003] do_dentry_open+0x8b7/0x13f0 [ 747.041815][T14003] vfs_open+0x3b/0x340 [ 747.046045][T14003] dentry_open+0x61/0xa0 [ 747.050536][T14003] do_mq_open+0x59e/0x780 [ 747.055040][T14003] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 747.060837][T14003] __do_fast_syscall_32+0xb6/0x2b0 [ 747.066113][T14003] do_fast_syscall_32+0x34/0x80 [ 747.071128][T14003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.077644][T14003] [ 747.080041][T14003] -> (&new->fa_lock){....}-{3:3} { [ 747.085160][T14003] INITIAL USE at: [ 747.089038][T14003] lock_acquire+0x120/0x360 [ 747.095097][T14003] _raw_write_lock_irq+0xa2/0xf0 [ 747.101583][T14003] fasync_remove_entry+0xf1/0x1c0 [ 747.108158][T14003] lease_modify+0x1ca/0x3c0 [ 747.114221][T14003] locks_remove_file+0x4bf/0xea0 [ 747.120719][T14003] __fput+0x3ab/0xa70 [ 747.126252][T14003] task_work_run+0x1d1/0x260 [ 747.132399][T14003] exit_to_user_mode_loop+0xec/0x110 [ 747.139241][T14003] __do_fast_syscall_32+0x1f4/0x2b0 [ 747.146001][T14003] do_fast_syscall_32+0x34/0x80 [ 747.152405][T14003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.160288][T14003] INITIAL READ USE at: [ 747.164604][T14003] lock_acquire+0x120/0x360 [ 747.171115][T14003] _raw_read_lock_irqsave+0xaf/0x100 [ 747.178393][T14003] kill_fasync+0x199/0x4d0 [ 747.184798][T14003] lease_break_callback+0x26/0x30 [ 747.191812][T14003] __break_lease+0x6a2/0x1620 [ 747.198476][T14003] do_dentry_open+0x8b7/0x13f0 [ 747.205226][T14003] vfs_open+0x3b/0x340 [ 747.211276][T14003] dentry_open+0x61/0xa0 [ 747.217502][T14003] do_mq_open+0x59e/0x780 [ 747.223831][T14003] __ia32_compat_sys_mq_open+0x1f9/0x250 [ 747.231458][T14003] __do_fast_syscall_32+0xb6/0x2b0 [ 747.238567][T14003] do_fast_syscall_32+0x34/0x80 [ 747.245405][T14003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.253736][T14003] } [ 747.256219][T14003] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 747.264889][T14003] ... acquired at: [ 747.268679][T14003] lock_acquire+0x120/0x360 [ 747.273351][T14003] _raw_read_lock_irqsave+0xaf/0x100 [ 747.278806][T14003] kill_fasync+0x199/0x4d0 [ 747.283384][T14003] evdev_pass_values+0x627/0xbd0 [ 747.288483][T14003] evdev_events+0x1e6/0x340 [ 747.293145][T14003] input_pass_values+0x285/0x890 [ 747.298241][T14003] input_event_dispose+0x330/0x6b0 [ 747.303517][T14003] input_inject_event+0x1dd/0x340 [ 747.308722][T14003] evdev_write+0x2fc/0x480 [ 747.313313][T14003] vfs_write+0x27b/0xb30 [ 747.317730][T14003] ksys_write+0x145/0x250 [ 747.322229][T14003] __do_fast_syscall_32+0xb6/0x2b0 [ 747.327519][T14003] do_fast_syscall_32+0x34/0x80 [ 747.332542][T14003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.339037][T14003] [ 747.341350][T14003] [ 747.341350][T14003] stack backtrace: [ 747.347223][T14003] CPU: 1 UID: 0 PID: 14003 Comm: syz.1.2035 Not tainted syzkaller #0 PREEMPT(full) [ 747.347244][T14003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 747.347256][T14003] Call Trace: [ 747.347263][T14003] [ 747.347272][T14003] dump_stack_lvl+0x189/0x250 [ 747.347297][T14003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 747.347317][T14003] ? __pfx__printk+0x10/0x10 [ 747.347343][T14003] validate_chain+0x1f05/0x2140 [ 747.347370][T14003] __lock_acquire+0xab9/0xd20 [ 747.347397][T14003] ? kill_fasync+0x199/0x4d0 [ 747.347415][T14003] lock_acquire+0x120/0x360 [ 747.347438][T14003] ? kill_fasync+0x199/0x4d0 [ 747.347461][T14003] _raw_read_lock_irqsave+0xaf/0x100 [ 747.347488][T14003] ? kill_fasync+0x199/0x4d0 [ 747.347506][T14003] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 747.347531][T14003] ? do_raw_spin_lock+0x121/0x290 [ 747.347559][T14003] kill_fasync+0x199/0x4d0 [ 747.347577][T14003] ? kill_fasync+0x53/0x4d0 [ 747.347596][T14003] evdev_pass_values+0x627/0xbd0 [ 747.347617][T14003] ? evdev_pass_values+0x631/0xbd0 [ 747.347636][T14003] evdev_events+0x1e6/0x340 [ 747.347652][T14003] ? evdev_events+0x79/0x340 [ 747.347669][T14003] ? input_pass_values+0x8d/0x890 [ 747.347684][T14003] input_pass_values+0x285/0x890 [ 747.347702][T14003] ? input_handle_event+0x70c/0xf30 [ 747.347726][T14003] input_event_dispose+0x330/0x6b0 [ 747.347750][T14003] input_inject_event+0x1dd/0x340 [ 747.347772][T14003] ? input_inject_event+0xb6/0x340 [ 747.347795][T14003] evdev_write+0x2fc/0x480 [ 747.347814][T14003] ? __pfx_evdev_write+0x10/0x10 [ 747.347832][T14003] ? bpf_lsm_file_permission+0x9/0x20 [ 747.347854][T14003] ? security_file_permission+0x75/0x290 [ 747.347877][T14003] ? rw_verify_area+0x255/0x4d0 [ 747.347898][T14003] ? __lock_acquire+0xab9/0xd20 [ 747.347921][T14003] ? __pfx_evdev_write+0x10/0x10 [ 747.347938][T14003] vfs_write+0x27b/0xb30 [ 747.347962][T14003] ? __pfx_vfs_write+0x10/0x10 [ 747.347983][T14003] ? __fget_files+0x2a/0x420 [ 747.347998][T14003] ? __fget_files+0x2a/0x420 [ 747.348012][T14003] ? __fget_files+0x3a0/0x420 [ 747.348025][T14003] ? __fget_files+0x2a/0x420 [ 747.348042][T14003] ksys_write+0x145/0x250 [ 747.348064][T14003] ? __pfx_ksys_write+0x10/0x10 [ 747.348087][T14003] ? lockdep_hardirqs_on+0x9c/0x150 [ 747.348105][T14003] __do_fast_syscall_32+0xb6/0x2b0 [ 747.348125][T14003] ? lockdep_hardirqs_on+0x9c/0x150 [ 747.348142][T14003] do_fast_syscall_32+0x34/0x80 [ 747.348161][T14003] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.348182][T14003] RIP: 0023:0xf7f14539 [ 747.348197][T14003] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 747.348214][T14003] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 747.348232][T14003] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000040 [ 747.348245][T14003] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 747.348256][T14003] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 747.348267][T14003] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 747.348278][T14003] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 747.348293][T14003] [ 747.720948][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.727273][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.099664][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 748.250845][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 748.264253][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 748.275622][ T10] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 748.284808][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.292901][ T10] usb 4-1: Product: syz [ 748.297074][ T10] usb 4-1: Manufacturer: syz [ 748.301678][ T10] usb 4-1: SerialNumber: syz [ 748.307116][ T10] usb 4-1: config 0 descriptor?? [ 748.314439][ T10] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 749.555850][ T5999] usb 4-1: USB disconnect, device number 9