last executing test programs: 52m49.859960021s ago: executing program 0 (id=544): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x6c48, 0x400, 0x4, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e7f, 0x60, 0x0, 0x0) 52m47.864404842s ago: executing program 0 (id=560): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) creat(0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r2, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 52m45.311729446s ago: executing program 0 (id=564): openat$dma_heap(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000), 0x0, 0x1e}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x0, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000) mount_setattr(r0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x275a, 0x2) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)='X\x00\x00', 0x3}], 0x1) 52m43.80731266s ago: executing program 0 (id=559): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) unshare(0x2c020400) 52m42.396332155s ago: executing program 0 (id=566): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0xff, 0x0, 0x0, 0x0, @time={0x400, 0x101}, {0x0, 0x3}, {}, @ext={0x0, 0x0}}, {0x0, 0x3, 0x0, 0x7, @tick, {}, {0x0, 0x5}, @raw32={[0x0, 0xffffffff, 0x5dd]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x1, 0xfe}}}, {0x0, 0x1, 0x1, 0x0, @tick=0x800401, {}, {}, @quote={{0x2, 0x2}, 0x9}}], 0x8c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, 0x0) 52m41.750868927s ago: executing program 0 (id=568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket(0x1e, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x800) 52m41.028273063s ago: executing program 32 (id=568): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket(0x1e, 0x5, 0x0) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x800) 51.48951849s ago: executing program 5 (id=7663): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400300012800b000100627269646765000020000280060006007c00000008000500010000000c08fdff00"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r6, &(0x7f0000000040), &(0x7f000009de80), 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) 49.27683917s ago: executing program 1 (id=7666): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000003c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x6, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x8}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}}) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x0, 0x40, 0x1, 0x5, 0x6, 0x8, 0x9, 0x0, 0x2, 0x4}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000007f000000430000000100000000000000", @ANYRES32, @ANYBLOB="0000000000e2ffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000001c0), 0x71, r5}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c000500100003042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b4a5af8840000000140012800b00010062617461647600000400028008001f0007000000"], 0x3c}}, 0x0) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r5, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x400c011}, 0x40) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 49.189622471s ago: executing program 5 (id=7668): ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x60080, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000010010000010000"], 0x10}, 0x40) recvmsg(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x405c5504, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b567189d306e2f215fc78c87c49eb9d0a4975"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket(0x22, 0x2, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x8}}}}}}, 0x0) 46.968613259s ago: executing program 2 (id=7670): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = fsopen(&(0x7f0000000240)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1eb640) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) writev(0xffffffffffffffff, &(0x7f00000014c0)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fffffff, 0x2, 0x1a00, 0x0, 0xffffffffffffffff, 0x2fc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) pipe2$watch_queue(0x0, 0x80) write$sysctl(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x2) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x8850) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x281, 0x3) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x2, @rand_addr=0x64010101}, 0x10) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)={@loopback, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x3, [@remote, @loopback, @dev={0xac, 0x14, 0x14, 0x21}]}, 0x1c) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r7, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) 44.736854937s ago: executing program 1 (id=7672): r0 = syz_open_dev$vcsn(0x0, 0xe82e, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0x82, @rand_addr=' \x01\x00', 0x5}}, 0xb, 0xdb06, 0x9, 0x8000, 0x8, 0x1, 0x3}, &(0x7f0000000280)=0x9c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xf39, 0x7fff, 0x6, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, r7, 0x2, 0x1, 0x0, 0xc}, 0x50) fsmount(r6, 0x0, 0x80) socket(0x9, 0x4, 0x1) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001400010603000000000000002b040000547b2a3ea65d00dbb49f7e93a2f9133d724e85fc57dbe37af8fd2aa02bc264029f0292da6d8229e714edcfd9a60cf1042a3b57a459f06b51786a9866cf85aa59a6eb2fdf42e4fe5a7c2edff36fe81b33b1edd67ce351c4a23e8b3b3e58f2c06c1d78369fdb14d18e895f5f0eafd7f0feb35c13d80814eb2f88a69610d4a2790d15958739ba9aa4b9933a16447285cd25f8308d73cc369c"], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) 44.555974571s ago: executing program 2 (id=7673): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0xffffffffffffffff, 0x10, 0x2}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setitimer(0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unshare(0x40000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x24, r5, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x142, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x64, r5, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 44.206774114s ago: executing program 5 (id=7675): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) pipe2(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_INIT(r2, &(0x7f0000000100)={0x78}, 0xfeb1) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000005c0)={{0xdddd2000, 0xf000, 0xd, 0xf7, 0x6, 0x5, 0x1, 0xb, 0x0, 0xf8, 0xb, 0x29}, {0xffff1000, 0x1000, 0xd, 0x0, 0x3, 0x0, 0x3, 0x1, 0xa, 0x70, 0xb, 0x3}, {0x3000, 0xa002, 0x19, 0x8, 0x29, 0x6, 0xf5, 0x7, 0xf4, 0x6, 0x4, 0x10}, {0x4, 0xe000, 0xc, 0xc, 0x21, 0x0, 0x3, 0x9, 0x9, 0x1, 0x3, 0x6}, {0xeeee0000, 0xeeee0000, 0x0, 0x5b, 0x8, 0x4, 0xe, 0x2, 0x8, 0x6, 0x2, 0x14}, {0x4, 0xf000, 0x10, 0x0, 0xfc, 0x3, 0xf8, 0x81, 0x5, 0x8, 0x0, 0xc}, {0x166672000, 0x8080000, 0x0, 0x5, 0x8, 0xfd, 0x1, 0xee, 0x9, 0xa, 0x80, 0x3}, {0xeeee8000, 0xb000, 0xc, 0x4, 0x5, 0x7, 0x2f, 0x0, 0x4, 0xd, 0x9, 0x3}, {0xffff1000}, {0xeeeeb000, 0x1}, 0x2, 0x0, 0x6000, 0x400, 0x9, 0x9801, 0x1000, [0x9, 0x8001, 0x1000, 0xd378]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f00000000c0)={0x10, 0x1}) 42.320358129s ago: executing program 1 (id=7678): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400300012800b000100627269646765000020000280060006007c00000008000500010000000c08fdff00"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r5, &(0x7f0000000040), &(0x7f000009de80), 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) 40.585270794s ago: executing program 2 (id=7679): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = add_key(0x0, 0x0, &(0x7f0000000980), 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r2) r3 = syz_open_dev$sndpcmc(0x0, 0x5, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000080)={0x80, 0x6, 0x181, 0x0, 0x0, 0x2, 0x0}) r4 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x2000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f00000001c0)={0x6, 0x42474752, 0xf00, 0x872, 0x0, @discrete={0x3, 0x80000000}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0x2, 0x1], [{0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x235, 0x85}, {0x0, 0x1}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0xfeffffff}, {}, {0xffffffff}, {}, {0x0, 0x3}], 0xc}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000000)='\x00', 0x1) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)={0x1, 0x0, @auto=[0x35]}, 0x9, r2) close_range(r5, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 40.423658108s ago: executing program 3 (id=7680): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x1a, "cfeacfbd6c9555bb04b2f81c4d07"}}]}, 0x30}}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r2, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) 38.927138391s ago: executing program 1 (id=7681): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) creat(0x0, 0x122) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = dup3(0xffffffffffffffff, r4, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r7, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) 38.516454098s ago: executing program 5 (id=7682): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660010000000000000005000000ed5100000000000000010000000000007e00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6}) close_range(r3, r6, 0x0) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffff72e, @private1, 0xfffffe01}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="0bcfcc8b8f9e41dc2f59741c32dbbd98de411e97aa2a306f1fb091e7e8994029d76ccf27f73ec6fdda0475062dcdfc62858ee49dbed0fc7986da5df5ce69096275e3a0e5346985d7178021807642b01d2b5d5b3e9ed8794182b0792e1e2618b9a4fcd955d46ece7ce99cc7326dbeb249090d8d2b45759a56ce35bad7f6bcfdd6bac5db16528bf678a21c26bca3d5", 0x8e}, {&(0x7f0000000480)="24c751e6bd3906db3d411c2532e0b6e4ef65ca7cd609ab2a9e7907acb79eb0fc25432c0be758675d2a204ecfa174b9807e5f717a2faddda0a5a189eac119e58b4d37c0ca2e2187a97d27df6907224ebf2d24c70c4d5c60b58905089e38acc9f42c90e67d0f511430ad03a2037771f26aad15c2960fa27ea00231ed200cf0f13ae2287f0fb389ff952d4d783337a3d44949423eed7f45b3a02f66b1305d1178a8a43acd9c2d78503d688e9078df615db1fb39f56b5325060db3a2d3dfc95135b40f940dd0d4fdeb2f8bf3", 0xca}, {0x0}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="10000000290000003e000000090000004c0000002900000036000000290600000000000007300000000102c5031d9400000000000002000000000000000700000000000000010000000000008002000000000000000400000000009a6674ed8b45200105b35067be8a0f06ba8f7f880f57779444cd6788bd2cd1f105e10adab0e8e9e23ea379d4cc5226f26d03e0aa15531b5a5034a21b4cdb5ca69e57f546c72b82955d37780f35d59c"], 0x5c}, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000007c0), 0x29) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsopen(&(0x7f0000000040)='udf\x00', 0x0) 36.572278381s ago: executing program 3 (id=7683): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000140)=@raw=[@exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) wait4(r3, &(0x7f0000001100), 0x0, &(0x7f0000001140)) r4 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r4, r4, r4}, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) 36.564671876s ago: executing program 2 (id=7694): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @binary="0aac0f0004ac0f00"}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x70c}, {r2, 0x2}, {r3, 0x4}], 0x3, &(0x7f00000001c0)={r4, r5+60000000}, &(0x7f0000000380)={[0xa66e, 0xfffffffc]}, 0x8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x49, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f0000000040)={0x4, 0x0, 0x6, 0x7, 0x2}) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000050700bbc0000000010007000000", @ANYRES32, @ANYBLOB="00000000000000001800120008000100736974000c0002000800020006"], 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @rand_addr=0x64010100}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2f}]}}}]}, 0x40}}, 0x0) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) 36.253415871s ago: executing program 5 (id=7685): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0xca, &(0x7f0000001300)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x3, 0x2d, 0xbc, 0x68, 0x0, 0x7, 0x1, 0x0, @broadcast, @multicast1, {[@timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x80000001}]}, @timestamp={0x44, 0x8, 0xa6, 0x0, 0xa, [0x5e]}, @timestamp_addr={0x44, 0x3c, 0x65, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfb1}, {@remote, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb70}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x2}, {@broadcast, 0x80000001}, {@local, 0x9}, {@private=0xa010101, 0x8}]}]}}, @redirect={0x5, 0x3, 0x0, @empty, {0x13, 0x4, 0x1, 0x1d, 0x8, 0x65, 0xf, 0x5, 0x2, 0x6, @broadcast, @multicast1, {[@ssrr={0x89, 0x7, 0x77, [@local]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0xc, "b2dbefe37e745d094f56"}, {0x1, 0x2}, {0x5, 0xd, "fff2fd43fdd82794801792"}, {0x1, 0xd, "37ff93ae02b06a962c1e2e"}]}]}}, "c1f4cce9"}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[], 0x40}}, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000004400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0x5b01, 0x0) syz_usb_disconnect(r6) 34.818484044s ago: executing program 1 (id=7686): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000305000000000000002500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010062726964676500000c0002800500190006000000"], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x280) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000300)=@generic={0x3, 0x1, 0x3}) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 34.129365838s ago: executing program 2 (id=7687): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) socket(0x840000000002, 0x3, 0xfa) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sched_setattr(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x3, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0xf, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "0d95f73abd"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x81, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0x9, 0x40, 0x9, 0x12}, @country_functional={0x12, 0x24, 0x7, 0xe, 0x4, [0x8001, 0xfff7, 0xd18, 0x9, 0x0, 0x200]}, @country_functional={0x10, 0x24, 0x7, 0x8, 0x7d, [0x1, 0x5, 0x2f8, 0xfff9, 0x8]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0xa0, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0xd6, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x95, 0xc}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x8, 0x8, 0x5, 0x40, 0x7}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0xfff, 0x8800, 0x8001, [0xc000, 0x3f00]}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0a}}, {0x10, &(0x7f0000000240)=@string={0x10, 0x3, "25253b4ca0f599c8eae58be279d9"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1009}}]}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x33565348, 0x0, 0x8, [{0x6, 0x5}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) 34.001886854s ago: executing program 4 (id=7688): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x100001) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) pipe2(0x0, 0x800) set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0, 0x7}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) 32.555547999s ago: executing program 3 (id=7689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0xe0000000000000, 0xfefffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x0, 0xbdb], 0xffff1001, 0x4000}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40884}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3b}, @NFTA_LOG_PREFIX={0x7, 0x2, 0x1, 0x0, '.\xfa\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="03000000000000000000210000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = accept4$unix(r2, &(0x7f00000002c0), &(0x7f00000001c0)=0x6e, 0x800) setsockopt$sock_timeval(r10, 0x1, 0x42, &(0x7f0000000380), 0x8) ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x1) ioctl$KVM_RUN(r9, 0xae80, 0x0) 32.009327908s ago: executing program 5 (id=7690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0xffffffffffffffff, 0x10, 0x2}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setitimer(0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unshare(0x40000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x24, r5, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x142, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x64, r5, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 31.666177665s ago: executing program 4 (id=7691): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000100001042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b01000001c80400300012800b000100627269646765000020000280060006007c00000008000500010000000c08fdff00"], 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r5, &(0x7f0000000040), &(0x7f000009de80), 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x95) 31.289823338s ago: executing program 1 (id=7693): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000133000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, &(0x7f0000b19000/0x4000)=nil, &(0x7f0000366000/0x3000)=nil, &(0x7f000035a000/0x4000)=nil, &(0x7f000098a000/0x4000)=nil, &(0x7f00002e5000/0x4000)=nil, &(0x7f0000bbc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000df5000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)="ada7add567670a893303eaca99ec08a42110bab48f38e5c0369a48607dd74355876dd0e61df947f3145c8a894ad3daedd22306b5bafd8ca6f504be890ae4d155872984bc3bce634b66d1833aa47691208b3806bbb89d60389ba39c63ba6ca1a75f2ccd711f09da1a348252cc49da3a3d5d0d5a2e857c0cf1676c65ebd21fcb27d1dbf133ec9a3964088dd5e3d0e1bcff875a618059bd875f605c9b7889fce9a99d42f00a77baf16740aa889bbfb2b2fac4639af50b691b3fa97561291dee2a0baabbc5f8930b29ae429ad642fb9a02bb3e7bbba2878123ce52680dae62036449461c2660fd213f7bda03d709c2d370e96ce6", 0xf2, r1}, 0x68) r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x0, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x4, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x6, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) r8 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$setperm(0x5, r8, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f00000000c0)) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) r10 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'e', 0x3a, '\x00\x00eh`\x1a\x00+^\x01\xa0\xfdZ\x020\x93-M\x93\xf4\x7fj\x05B\xf5,\xf4\xe8\x18<\xfd{\xe9\xd2\xfb\xf6\xa2COg\x84\xc8\xd7\x1c\x93\x87\xc2y\xe4%\xff\x14\x91\xfc\xbdRDs[\xc0\x03^~\x1d\xda\xd5\xf5\x83B\xc4?\xe9[:\x1d\xf9\x95\x8e\xfe\x10,\\^\x84\x8d\xb39\xfeu\xbd\x05cN ~\xbf:Z\xfd!$\xfc\x01@\xc0\xc2\xe0i+\xd7\xac\xaa\xd2!\b\x1b\xa8\x9f\x9f\xe3\x06\xe3~&\xe0x8\x84\xa9\xc3\xb6\xed\x92\x95\xa5\xbb\xb8\x04dB\xfd', 0x3a, './file1'}, 0xb5) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 29.803667644s ago: executing program 2 (id=7695): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000a40), 0x5d, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000004ef60ad12b1ef9b432a2903d90400000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001200010a27bd7000fdffffff800000001400a800fe80000000000000000000000000ffffad8b19fc299aa4ec222d5ad3651a326a175b2e1ba82e1675d3d0e3b5b008c0570400b4ebf31a585fd14b29242bc92047080de64c5f16d40f5f76c60bf39bdc84eebeaae7f8f1dfbfac48db129321e15c58330d9ad91f2a7cddd8722a32da62c6a3f777558612d20d4f2eb60e345aa09e8fe7b2d6836594b25f2bb7d8a84e6cccee637f5038c90b3a4887c38a7d55000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f00000003c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000140), 0x60041, 0x0) 29.776785735s ago: executing program 4 (id=7696): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000340)={0x1, @pix_mp={0x328, 0x1, 0x31424752, 0x7, 0x7, [{0xa, 0x2}, {0xfffffffe, 0x1ff}, {0x0, 0x6}, {0x8, 0x8}, {0x1, 0x4}, {0x6, 0x5}, {0xfffffff9, 0x40}, {0x3, 0x2ba}], 0x0, 0x7, 0x1, 0x1, 0x1}}) r4 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@host}) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r5, 0x7a5, &(0x7f0000000140)={{@host, 0x25}, 0x1}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r4, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000028c0)=""/4086, 0xff6) 29.773480979s ago: executing program 3 (id=7705): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) socket(0x840000000002, 0x3, 0xfa) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sched_setattr(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) syz_usb_connect$cdc_ecm(0x5, 0x8e, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0x3, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0xf, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "0d95f73abd"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x81, 0x2}, [@obex={0x5, 0x24, 0x15, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x3, 0x9, 0x40, 0x9, 0x12}, @country_functional={0x12, 0x24, 0x7, 0xe, 0x4, [0x8001, 0xfff7, 0xd18, 0x9, 0x0, 0x200]}, @country_functional={0x10, 0x24, 0x7, 0x8, 0x7d, [0x1, 0x5, 0x2f8, 0xfff9, 0x8]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7, 0xa0, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0xd6, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0x95, 0xc}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x8, 0x8, 0x5, 0x40, 0x7}, 0x19, &(0x7f00000001c0)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0xfff, 0x8800, 0x8001, [0xc000, 0x3f00]}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc0a}}, {0x10, &(0x7f0000000240)=@string={0x10, 0x3, "25253b4ca0f599c8eae58be279d9"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1009}}]}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x33565348, 0x0, 0x8, [{0x6, 0x5}, {0x9, 0x5}, {0x8, 0x3}, {0x4, 0x9}, {0x2, 0xb68a}, {0x6, 0x7ff}, {0x3, 0x2}, {0x50ad0a9a}], 0x9, 0x7f, 0x2, 0x2}}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x2000000) 27.651678059s ago: executing program 4 (id=7697): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500) socket$nl_netfilter(0x10, 0x3, 0xc) lsm_set_self_attr(0x65, 0x0, 0x20, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000240)=0x1e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 26.119702838s ago: executing program 3 (id=7698): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = io_uring_setup(0x3eaa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a3}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, &(0x7f0000003d40)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405668, &(0x7f0000000100)={0x0, 0x20, 0x2}) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x91, 0x4) 25.942159734s ago: executing program 4 (id=7699): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) get_robust_list(0x0, 0x0, &(0x7f0000000180)) shmget(0x1, 0x3000, 0x78000a04, &(0x7f0000768000/0x3000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0xff, 0x300}}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC], 0x50}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008004) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000400010073797a3100000000140003801000"], 0x40}}, 0x8000) r4 = openat(0xffffffffffffffff, 0x0, 0x6a1c2, 0x50) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001014100025bd7000fbd3df25030001000085ae0008004b0013000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040043}, 0x4c045) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) 24.339086022s ago: executing program 3 (id=7700): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2000000, 0x0, 0x7fffffffffffffff, 0x9, 0x100000000000008, 0xffffffff, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r3}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=@random={'trusted.', '/dev/rnullb0\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x2, 0x3}}, 0x20) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) socket$tipc(0x1e, 0x5, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x3c, r6, 0x401, 0x70bd2b, 0x1000800, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xc5a1ce0}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x200}]}, 0x3c}}, 0x0) 16.517393448s ago: executing program 33 (id=7690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0), 0xffffffffffffffff, 0x10, 0x2}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) unshare(0x40000080) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setitimer(0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unshare(0x40000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)={0x24, r5, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x142, 0x0, 0x1, [{0x4}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x64, r5, 0x2, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 16.023466059s ago: executing program 34 (id=7693): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000133000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, &(0x7f0000b19000/0x4000)=nil, &(0x7f0000366000/0x3000)=nil, &(0x7f000035a000/0x4000)=nil, &(0x7f000098a000/0x4000)=nil, &(0x7f00002e5000/0x4000)=nil, &(0x7f0000bbc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000df5000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)="ada7add567670a893303eaca99ec08a42110bab48f38e5c0369a48607dd74355876dd0e61df947f3145c8a894ad3daedd22306b5bafd8ca6f504be890ae4d155872984bc3bce634b66d1833aa47691208b3806bbb89d60389ba39c63ba6ca1a75f2ccd711f09da1a348252cc49da3a3d5d0d5a2e857c0cf1676c65ebd21fcb27d1dbf133ec9a3964088dd5e3d0e1bcff875a618059bd875f605c9b7889fce9a99d42f00a77baf16740aa889bbfb2b2fac4639af50b691b3fa97561291dee2a0baabbc5f8930b29ae429ad642fb9a02bb3e7bbba2878123ce52680dae62036449461c2660fd213f7bda03d709c2d370e96ce6", 0xf2, r1}, 0x68) r4 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x0, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x4, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x6, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) r8 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "a8cfec1040c4c04dd41ec2264a856281649ccb419f5b625a1254d840dd56a0779c7ca83df072feb076993263e373f2e6a57807c340fc13e69230cce7912d533a", 0x1a}, 0x48, 0xfffffffffffffff9) keyctl$setperm(0x5, r8, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f00000000c0)) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r9, 0xc0d05640, &(0x7f0000000040)={0x2, @vbi={0xbd, 0x8, 0x47425247, 0x41495043, [0x3fe], [0x7fff], 0x1}}) r10 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'e', 0x3a, '\x00\x00eh`\x1a\x00+^\x01\xa0\xfdZ\x020\x93-M\x93\xf4\x7fj\x05B\xf5,\xf4\xe8\x18<\xfd{\xe9\xd2\xfb\xf6\xa2COg\x84\xc8\xd7\x1c\x93\x87\xc2y\xe4%\xff\x14\x91\xfc\xbdRDs[\xc0\x03^~\x1d\xda\xd5\xf5\x83B\xc4?\xe9[:\x1d\xf9\x95\x8e\xfe\x10,\\^\x84\x8d\xb39\xfeu\xbd\x05cN ~\xbf:Z\xfd!$\xfc\x01@\xc0\xc2\xe0i+\xd7\xac\xaa\xd2!\b\x1b\xa8\x9f\x9f\xe3\x06\xe3~&\xe0x8\x84\xa9\xc3\xb6\xed\x92\x95\xa5\xbb\xb8\x04dB\xfd', 0x3a, './file1'}, 0xb5) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 16.020224625s ago: executing program 4 (id=7703): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) unshare(0x20040600) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) preadv(r3, 0x0, 0x0, 0x6, 0x9) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) removexattr(&(0x7f0000000580)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x3}}, 0x20) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 14.520806639s ago: executing program 35 (id=7695): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000a40), 0x5d, 0x4000000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000004ef60ad12b1ef9b432a2903d90400000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001200010a27bd7000fdffffff800000001400a800fe80000000000000000000000000ffffad8b19fc299aa4ec222d5ad3651a326a175b2e1ba82e1675d3d0e3b5b008c0570400b4ebf31a585fd14b29242bc92047080de64c5f16d40f5f76c60bf39bdc84eebeaae7f8f1dfbfac48db129321e15c58330d9ad91f2a7cddd8722a32da62c6a3f777558612d20d4f2eb60e345aa09e8fe7b2d6836594b25f2bb7d8a84e6cccee637f5038c90b3a4887c38a7d55000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f00000003c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000140), 0x60041, 0x0) 9.009215886s ago: executing program 36 (id=7700): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2000000, 0x0, 0x7fffffffffffffff, 0x9, 0x100000000000008, 0xffffffff, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r3}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=@random={'trusted.', '/dev/rnullb0\x00'}) syz_open_dev$ttys(0xc, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x2, 0x3}}, 0x20) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) socket$tipc(0x1e, 0x5, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x3c, r6, 0x401, 0x70bd2b, 0x1000800, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xc5a1ce0}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x200}]}, 0x3c}}, 0x0) 0s ago: executing program 37 (id=7703): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) unshare(0x20040600) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) preadv(r3, 0x0, 0x0, 0x6, 0x9) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {0x0}}, 0x18) removexattr(&(0x7f0000000580)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x3}}, 0x20) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): caif0 may have been left with an inconsistent configuration, please check. [ 3009.769332][ T5920] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3009.983083][ T9663] IPVS: length: 149 != 17667290688 [ 3010.049279][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3010.077403][ T5920] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 3010.179624][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3010.198835][ T5920] usb 3-1: config 0 descriptor?? [ 3010.854207][ T5920] cypress 0003:04B4:BCA1.0044: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.2-1/input0 [ 3011.081516][ T9652] netlink: 'syz.2.7092': attribute type 10 has an invalid length. [ 3011.100485][ T9652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7092'. [ 3012.405029][ T5920] usb 3-1: USB disconnect, device number 37 [ 3012.947664][ T9690] hub 1-0:1.0: USB hub found [ 3012.957114][ T9690] hub 1-0:1.0: 1 port detected [ 3013.033108][ T9696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3013.040665][ T9696] IPv6: NLM_F_CREATE should be set when creating new route [ 3013.047895][ T9696] IPv6: NLM_F_CREATE should be set when creating new route [ 3013.055309][ T9696] IPv6: NLM_F_CREATE should be set when creating new route [ 3013.519735][ T6398] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3013.732395][T23338] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 3013.930319][ T6398] usb 4-1: Using ep0 maxpacket: 16 [ 3013.939238][T23338] usb 5-1: Using ep0 maxpacket: 8 [ 3013.957712][ T6398] usb 4-1: config 0 has no interfaces? [ 3014.008181][T23338] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3014.029401][T23338] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3014.047943][T23338] usb 5-1: Product: syz [ 3014.057267][T23338] usb 5-1: Manufacturer: syz [ 3014.068208][T23338] usb 5-1: SerialNumber: syz [ 3014.081484][ T6398] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3014.110887][ T6398] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3014.124105][T23338] usb 5-1: config 0 descriptor?? [ 3014.157266][T23338] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3014.169956][T23338] usb 5-1: setting power ON [ 3014.174583][T23338] dvb-usb: bulk message failed: -22 (2/0) [ 3014.180561][ T6398] usb 4-1: Manufacturer: syz [ 3014.260130][T23338] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3014.260441][ T6398] usb 4-1: config 0 descriptor?? [ 3014.729415][T23338] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3014.739569][T23338] usb 5-1: media controller created [ 3014.981142][ T9694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3014.995692][ T9694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3015.002854][T23338] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3015.106480][T23338] usb 5-1: selecting invalid altsetting 6 [ 3015.254668][T23338] usb 5-1: digital interface selection failed (-22) [ 3015.278298][T23338] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3015.408053][T23338] usb 5-1: setting power OFF [ 3015.446848][T23338] dvb-usb: bulk message failed: -22 (2/0) [ 3015.675569][T23338] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3015.870634][T23338] (NULL device *): no alternate interface [ 3016.137625][T23338] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3016.157240][ T9707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7102'. [ 3016.423799][T23338] usb 5-1: USB disconnect, device number 43 [ 3016.567906][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3016.579267][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3016.593315][ T9710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3016.630447][ T9710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3016.666030][ T6398] usb 4-1: USB disconnect, device number 46 [ 3019.580033][ T9731] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7114'. [ 3019.816099][ T9735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3020.759542][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.766045][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3023.387342][ T9761] hub 9-0:1.0: USB hub found [ 3023.433145][ T9761] hub 9-0:1.0: 1 port detected [ 3023.902123][ T9758] kthread_run failed with err -4 [ 3025.579200][ T9784] hub 1-0:1.0: USB hub found [ 3025.585341][ T9784] hub 1-0:1.0: 1 port detected [ 3025.756325][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3025.764989][ T6467] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3025.904740][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3025.949544][ T6467] usb 3-1: Using ep0 maxpacket: 8 [ 3026.007052][ T6467] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3026.046361][ T9787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3026.055140][ T6467] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3026.071402][ T9787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3026.090990][ T6467] usb 3-1: Product: syz [ 3026.104213][ T6467] usb 3-1: Manufacturer: syz [ 3026.108836][ T6467] usb 3-1: SerialNumber: syz [ 3026.225781][ T6467] usb 3-1: config 0 descriptor?? [ 3026.238197][ T6467] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3026.255646][ T6467] usb 3-1: setting power ON [ 3026.266021][ T6467] dvb-usb: bulk message failed: -22 (2/0) [ 3026.472786][ T6467] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3026.774357][ T6467] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3026.789592][ T6467] usb 3-1: media controller created [ 3026.863722][ T6467] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3027.076147][ T6467] usb 3-1: selecting invalid altsetting 6 [ 3027.090874][ T6467] usb 3-1: digital interface selection failed (-22) [ 3027.124097][ T6467] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3027.211097][ T6467] usb 3-1: setting power OFF [ 3027.215760][ T6467] dvb-usb: bulk message failed: -22 (2/0) [ 3027.329358][ T6467] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3027.358220][ T6467] (NULL device *): no alternate interface [ 3027.500216][ T6467] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3028.762842][ T6467] usb 3-1: USB disconnect, device number 38 [ 3030.114224][ T9824] netlink: 'syz.4.7122': attribute type 13 has an invalid length. [ 3030.239901][ T9824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3030.948835][ T9830] IPVS: length: 149 != 17667290688 [ 3031.359607][ T9836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7125'. [ 3031.831929][ T9843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7126'. [ 3032.864630][ T9845] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3035.885353][T23338] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3036.059073][T23338] usb 4-1: Using ep0 maxpacket: 16 [ 3036.100270][T23338] usb 4-1: config 0 has no interfaces? [ 3036.196230][T23338] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3036.217701][T23338] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3036.334374][T23338] usb 4-1: Manufacturer: syz [ 3036.485068][ T9889] hub 1-0:1.0: USB hub found [ 3036.497532][ T9889] hub 1-0:1.0: 1 port detected [ 3036.742022][T23338] usb 4-1: config 0 descriptor?? [ 3037.074771][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3037.089824][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3038.716132][ T5905] usb 4-1: USB disconnect, device number 47 [ 3038.841396][ T6533] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 3039.113134][ T6533] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3039.152016][ T6533] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 3039.184996][ T6533] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 3039.231314][ T6533] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3039.252029][ T6533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3039.353326][ T9895] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3039.470712][ T9895] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3039.496515][ T6533] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3039.529015][ T5920] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3039.879607][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 3039.913282][ T9915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3039.934486][ T5920] usb 4-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 3040.015146][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51264, setting to 1024 [ 3040.031730][ T5920] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3040.039592][ T6467] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3040.050147][ T9915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3040.285834][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3040.330013][ T5920] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 3040.371363][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3040.501950][ T5920] usb 4-1: Product: syz [ 3040.507280][ T5920] usb 4-1: Manufacturer: syz [ 3040.513012][ T6467] usb 3-1: Using ep0 maxpacket: 16 [ 3040.527492][ T6467] usb 3-1: config 0 has no interfaces? [ 3040.535459][ T6467] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3040.545055][ T6467] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3040.563448][ T6467] usb 3-1: Manufacturer: syz [ 3040.602175][ T6467] usb 3-1: config 0 descriptor?? [ 3040.734692][ T5920] usb 4-1: SerialNumber: syz [ 3040.756578][ T9904] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3040.772316][ T5920] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 3040.787020][ T5920] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 3040.803620][ T5920] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 3040.871055][ T9910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3040.892295][ T9910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3041.085732][ T9901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7139'. [ 3042.815662][ T6533] usb 5-1: USB disconnect, device number 44 [ 3042.925329][ T5920] usb 4-1: USB disconnect, device number 48 [ 3043.004301][ T6398] usb 3-1: USB disconnect, device number 39 [ 3043.356181][ T9935] hub 9-0:1.0: USB hub found [ 3043.369048][ T9935] hub 9-0:1.0: 1 port detected [ 3043.590035][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3043.805502][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3043.866879][ T9938] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 3043.995650][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3044.226485][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3046.120888][ T6533] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3046.330028][ T6533] usb 4-1: Using ep0 maxpacket: 8 [ 3046.361339][ T6533] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3046.410867][ T6533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3046.423297][ T6533] usb 4-1: Product: syz [ 3046.427809][ T6533] usb 4-1: Manufacturer: syz [ 3046.467893][ T6533] usb 4-1: SerialNumber: syz [ 3046.509993][ T6533] usb 4-1: config 0 descriptor?? [ 3046.517547][ T6533] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3046.535827][ T6533] usb 4-1: setting power ON [ 3046.543321][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7152'. [ 3046.607404][ T6533] dvb-usb: bulk message failed: -22 (2/0) [ 3046.708161][ T6533] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3046.725745][ T6533] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3046.794710][ T6533] usb 4-1: media controller created [ 3046.859460][ T6533] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3047.026559][ T6533] usb 4-1: selecting invalid altsetting 6 [ 3047.055211][ T6533] usb 4-1: digital interface selection failed (-22) [ 3047.091797][ T6533] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3047.122332][ T6533] usb 4-1: setting power OFF [ 3047.127221][ T6533] dvb-usb: bulk message failed: -22 (2/0) [ 3047.128973][ T9967] IPVS: length: 149 != 17667290688 [ 3047.217059][ T6533] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3047.242136][ T6533] (NULL device *): no alternate interface [ 3047.337245][ T6533] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3047.500139][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7153'. [ 3047.840945][ T9972] IPVS: length: 149 != 17667290688 [ 3047.935629][ T6533] usb 4-1: USB disconnect, device number 49 [ 3049.709151][ T5920] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 3049.989004][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 3050.112083][ T5920] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 3050.149238][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3050.195233][ T5920] usb 6-1: Product: syz [ 3050.218489][ T5920] usb 6-1: Manufacturer: syz [ 3050.225526][ T5920] usb 6-1: SerialNumber: syz [ 3050.275512][ T5920] usb 6-1: config 0 descriptor?? [ 3050.348421][ T5920] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 3050.378548][ T5920] usb 6-1: setting power ON [ 3050.458471][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 3050.517089][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3050.539911][ T5920] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 3050.575384][ T5920] usb 6-1: media controller created [ 3050.740305][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3050.953751][ T5920] usb 6-1: selecting invalid altsetting 6 [ 3050.983452][ T5920] usb 6-1: digital interface selection failed (-22) [ 3051.004096][ T5920] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 3051.014195][ T5920] usb 6-1: setting power OFF [ 3051.021794][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 3051.027691][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 3051.040100][ T5920] (NULL device *): no alternate interface [ 3051.092589][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 3052.548737][ T5920] usb 6-1: USB disconnect, device number 17 [ 3052.864793][T10016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3053.079948][T10016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3053.113824][T10016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3053.157975][T10016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3053.469051][ T6533] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 3054.139676][ T6533] usb 6-1: Using ep0 maxpacket: 8 [ 3054.162031][ T6533] usb 6-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config [ 3054.439932][ T6533] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 576 [ 3054.495838][ T6533] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3054.554973][ T6533] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 3054.564894][ T6533] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3054.573640][ T6533] usb 6-1: Product: syz [ 3054.606239][ T6533] usb 6-1: Manufacturer: syz [ 3054.635012][ T6533] usb 6-1: SerialNumber: syz [ 3054.681721][T10024] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3054.739945][ T6533] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 3054.787179][ T6533] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 3054.824594][ T6533] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 3055.015911][T10018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7158'. [ 3056.464786][ T5905] usb 6-1: USB disconnect, device number 18 [ 3056.749790][T10043] netlink: 'syz.4.7163': attribute type 13 has an invalid length. [ 3056.820121][T10043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3056.870600][T10049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7165'. [ 3057.344502][T10049] IPVS: length: 149 != 17667290688 [ 3057.809977][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7169'. [ 3058.135494][T10061] IPVS: length: 149 != 17667290688 [ 3059.845268][ T8052] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3059.968634][ T8052] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3059.991352][ T8052] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3060.105585][T10079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7176'. [ 3060.873801][T10079] IPVS: length: 149 != 17667290688 [ 3061.366258][T10087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7177'. [ 3062.139365][ T6398] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3062.229150][T23338] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3062.319625][ T6398] usb 3-1: Using ep0 maxpacket: 8 [ 3062.355687][ T6398] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 3062.374125][ T6398] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 42761, setting to 1024 [ 3062.408087][ T6398] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3062.431426][T23338] usb 4-1: Using ep0 maxpacket: 16 [ 3062.438796][T23338] usb 4-1: config 0 has no interfaces? [ 3062.446000][T23338] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3062.488087][T23338] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3062.527663][T23338] usb 4-1: Manufacturer: syz [ 3062.810454][ T6398] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 3062.824092][ T6398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3062.840563][ T6398] usb 3-1: Product: syz [ 3062.849349][ T6398] usb 3-1: Manufacturer: syz [ 3062.854170][ T6398] usb 3-1: SerialNumber: syz [ 3062.883286][T10096] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3062.893390][T23338] usb 4-1: config 0 descriptor?? [ 3062.902589][T10096] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3063.059920][ T6398] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 3063.080835][ T6398] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 3063.087231][ T6398] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 3063.151307][T10100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3063.222302][T10100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3063.297798][T10106] netlink: 'syz.5.7181': attribute type 13 has an invalid length. [ 3063.410680][T10106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3063.542802][T10096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7180'. [ 3064.252633][T10118] netlink: 'syz.4.7184': attribute type 13 has an invalid length. [ 3064.280132][T10118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3064.593165][ T5920] usb 4-1: USB disconnect, device number 50 [ 3064.624644][T10120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3064.705844][T10120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3064.771037][T10120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3064.834062][T10120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3065.121993][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7185'. [ 3065.325926][T10125] IPVS: length: 149 != 17667290688 [ 3065.794523][ T5920] usb 3-1: USB disconnect, device number 40 [ 3066.352147][T10132] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7186'. [ 3066.795912][T10131] IPVS: length: 149 != 17667290688 [ 3067.229865][T23338] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3067.519029][T23338] usb 4-1: Using ep0 maxpacket: 16 [ 3067.628456][T23338] usb 4-1: config 0 has no interfaces? [ 3067.692288][T23338] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3067.758734][T10145] tipc: Resetting bearer [ 3067.767434][T10145] tipc: Resetting bearer [ 3067.957202][T23338] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3067.991564][T23338] usb 4-1: Manufacturer: syz [ 3068.103849][T23338] usb 4-1: config 0 descriptor?? [ 3068.449778][T10136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3068.471829][T10136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3068.492606][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7190'. [ 3068.774139][T10151] IPVS: length: 149 != 17667290688 [ 3069.845019][T23338] usb 4-1: USB disconnect, device number 51 [ 3073.594952][T23338] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 3073.878034][T23338] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3073.929408][T23338] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 3073.986344][T23338] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 3073.998677][T23338] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3073.999506][ T6398] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 3074.169166][T23338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3074.254981][ T6398] usb 5-1: Using ep0 maxpacket: 8 [ 3074.264915][T10193] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3074.285938][ T6398] usb 5-1: config 1 has an invalid descriptor of length 23, skipping remainder of the config [ 3074.304781][ T6398] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 576 [ 3074.355768][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7199'. [ 3074.370989][T10216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7199'. [ 3074.522767][T10193] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3074.556389][T23338] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3074.754482][ T6398] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3074.887733][ T6398] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 3075.070308][ T6398] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3075.078355][ T6398] usb 5-1: Product: syz [ 3075.397527][ T6398] usb 5-1: Manufacturer: syz [ 3075.404923][ T6398] usb 5-1: SerialNumber: syz [ 3075.421650][T10206] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3075.508066][ T6398] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 3075.801276][ T6398] usbtest 5-1:1.0: couldn't get endpoints, -22 [ 3075.915892][ T6398] usbtest 5-1:1.0: probe with driver usbtest failed with error -22 [ 3076.162362][T10204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7198'. [ 3076.885547][ T6398] usb 6-1: USB disconnect, device number 19 [ 3077.673623][ T6533] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3078.076226][ T6533] usb 4-1: Using ep0 maxpacket: 16 [ 3078.089505][ T6533] usb 4-1: config 0 has no interfaces? [ 3078.121492][ T6533] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3078.121529][ T6533] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3078.121552][ T6533] usb 4-1: Manufacturer: syz [ 3078.124933][ T6533] usb 4-1: config 0 descriptor?? [ 3078.476607][T10232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3078.476873][T10232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3078.493403][ T6533] usb 5-1: USB disconnect, device number 45 [ 3079.925025][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7209'. [ 3080.400402][ T6398] usb 4-1: USB disconnect, device number 52 [ 3080.519506][T10257] IPVS: length: 149 != 176933024328 [ 3082.125349][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.131847][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3084.466166][T10298] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 3085.006202][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7217'. [ 3085.139399][ T6533] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 3085.691486][ T6533] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3085.767141][ T6533] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 3085.840041][ T6533] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 3085.981143][ T6533] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3086.021912][ T6533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3086.062209][T10294] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3086.117977][T10294] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3086.148812][ T6533] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3086.194040][T10311] netlink: 'syz.1.7218': attribute type 4 has an invalid length. [ 3086.345301][T10312] netlink: 'syz.1.7218': attribute type 4 has an invalid length. [ 3086.380178][T10311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3086.404280][T10311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3087.464233][T10318] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 3087.637614][T10318] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 3087.691488][T10318] bond0 (unregistering): Released all slaves [ 3087.814467][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7225'. [ 3088.109671][T10334] IPVS: length: 149 != 176933024328 [ 3088.626335][ T5920] usb 3-1: USB disconnect, device number 41 [ 3088.719393][ T6398] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 3089.029448][ T6398] usb 6-1: Using ep0 maxpacket: 16 [ 3089.078153][ T6398] usb 6-1: config 0 has no interfaces? [ 3089.209508][ T6398] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3089.319519][T23338] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 3089.334374][ T6398] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3089.396255][ T6398] usb 6-1: Manufacturer: syz [ 3089.444076][ T6398] usb 6-1: config 0 descriptor?? [ 3089.504201][T23338] usb 3-1: Using ep0 maxpacket: 16 [ 3089.532760][T23338] usb 3-1: config 0 has no interfaces? [ 3089.542402][T23338] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3089.560328][T23338] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3089.594931][T23338] usb 3-1: Manufacturer: syz [ 3089.621294][T23338] usb 3-1: config 0 descriptor?? [ 3089.712134][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3089.745013][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3089.845052][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3089.854748][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3090.797060][T10356] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 3091.790855][ T6398] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3091.903465][T10370] netlink: 'syz.3.7232': attribute type 13 has an invalid length. [ 3091.961329][ T6398] usb 5-1: Using ep0 maxpacket: 16 [ 3091.979873][ T6398] usb 5-1: config 0 has no interfaces? [ 3091.986345][T10370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3092.008401][ T6398] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3092.226908][T23338] usb 3-1: USB disconnect, device number 42 [ 3092.238102][ T6398] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3092.250330][ T6398] usb 5-1: Manufacturer: syz [ 3092.293542][ T5920] usb 6-1: USB disconnect, device number 20 [ 3092.312270][ T6398] usb 5-1: config 0 descriptor?? [ 3092.747785][T10359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3092.773752][T10359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3093.122071][ T5920] usb 5-1: USB disconnect, device number 46 [ 3093.314369][T10373] kthread_run failed with err -4 [ 3093.939637][ T5920] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 3094.037411][T10391] program syz.1.7237 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3094.419176][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 3094.544005][T10395] netlink: 'syz.4.7238': attribute type 13 has an invalid length. [ 3094.571208][ T5920] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 3094.581799][ T5920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 42761, setting to 1024 [ 3094.593275][ T5920] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3094.610302][T10395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3094.634656][ T5920] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 3094.644113][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3094.652605][ T5920] usb 6-1: Product: syz [ 3094.659426][ T5920] usb 6-1: Manufacturer: syz [ 3094.664143][ T5920] usb 6-1: SerialNumber: syz [ 3094.812919][T10385] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3094.892408][T10385] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3095.046405][ T5920] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 3095.080114][ T5920] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 3095.104228][ T5920] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 3095.245074][T10385] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7236'. [ 3095.879087][ T6398] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3096.034814][T10405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7241'. [ 3096.049839][ T6398] usb 4-1: Using ep0 maxpacket: 16 [ 3096.057991][ T6398] usb 4-1: config 0 has no interfaces? [ 3096.070988][ T6398] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3096.088579][ T6398] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3096.231926][ T6398] usb 4-1: Manufacturer: syz [ 3096.284088][ T6398] usb 4-1: config 0 descriptor?? [ 3096.564947][T10399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3096.578777][T10399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3096.917986][ T5920] usb 6-1: USB disconnect, device number 21 [ 3097.543402][T10424] vim2m vim2m.0: vidioc_s_fmt queue busy [ 3098.657162][ T6533] usb 4-1: USB disconnect, device number 53 [ 3099.459056][T23338] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3099.512858][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7247'. [ 3099.807510][T23338] usb 5-1: Using ep0 maxpacket: 16 [ 3099.834257][T23338] usb 5-1: config 0 has no interfaces? [ 3099.890407][T23338] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3100.014198][T23338] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3100.053557][T10437] IPVS: length: 149 != 17667290688 [ 3100.059135][T23338] usb 5-1: Manufacturer: syz [ 3100.078020][T23338] usb 5-1: config 0 descriptor?? [ 3100.251350][T10444] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 3100.413147][T10432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3100.476138][T10432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3100.536945][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7259'. [ 3100.766768][T10451] IPVS: length: 149 != 17667290688 [ 3102.199852][ T6533] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3102.369694][ T6533] usb 4-1: Using ep0 maxpacket: 32 [ 3102.380966][ T6533] usb 4-1: config 0 has an invalid descriptor of length 219, skipping remainder of the config [ 3102.405084][ T6533] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3102.421512][ T6533] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 3102.422689][T23338] usb 5-1: USB disconnect, device number 47 [ 3102.432432][ T6533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3102.466037][ T6533] usb 4-1: config 0 descriptor?? [ 3102.564681][ T6533] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3102.585157][T10473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7254'. [ 3102.902069][T10465] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 3102.925779][T10465] bond0 (unregistering): Released all slaves [ 3103.815095][T10485] sg_write: data in/out 8316/1 bytes for SCSI command 0x1c-- guessing data in; [ 3103.815095][T10485] program syz.3.7252 not setting count and/or reply_len properly [ 3104.989564][ T6398] usb 4-1: USB disconnect, device number 54 [ 3105.626193][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7260'. [ 3106.193355][T10503] IPVS: length: 149 != 17667290688 [ 3106.217431][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7262'. [ 3106.229156][T23338] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 3106.679806][T23338] usb 6-1: Using ep0 maxpacket: 16 [ 3106.712507][T10510] IPVS: length: 149 != 17667290688 [ 3106.718354][T23338] usb 6-1: config 0 has no interfaces? [ 3106.739125][T23338] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3106.756257][T23338] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3106.776507][T23338] usb 6-1: Manufacturer: syz [ 3106.845267][T23338] usb 6-1: config 0 descriptor?? [ 3107.156100][T10500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3107.171621][T10500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3107.409911][T10517] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 3107.674939][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7264'. [ 3108.467973][ T6533] usb 6-1: USB disconnect, device number 22 [ 3108.702263][T10536] netlink: 'syz.3.7266': attribute type 13 has an invalid length. [ 3108.926160][T10536] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3109.051733][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7267'. [ 3109.066111][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7267'. [ 3110.486406][T10549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3110.506120][T10549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3113.619529][ T6398] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3113.835544][ T6398] usb 4-1: Using ep0 maxpacket: 16 [ 3113.843703][ T6398] usb 4-1: config 0 has no interfaces? [ 3113.874551][ T6398] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3113.884238][ T6398] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3113.894281][ T6398] usb 4-1: Manufacturer: syz [ 3113.933053][ T6398] usb 4-1: config 0 descriptor?? [ 3114.192297][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3114.209754][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3114.792040][T10598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7279'. [ 3115.556217][ T6398] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 3115.710118][ T6398] usb 6-1: Using ep0 maxpacket: 16 [ 3115.808207][ T6398] usb 6-1: config 0 has no interfaces? [ 3115.840956][ T6398] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3115.979219][ T6398] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3115.987257][ T6398] usb 6-1: Manufacturer: syz [ 3116.140030][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7280'. [ 3116.210233][ T6398] usb 6-1: config 0 descriptor?? [ 3116.312589][ T9785] usb 4-1: USB disconnect, device number 55 [ 3116.457205][T10606] IPVS: length: 149 != 216 [ 3116.575275][T10602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3116.647573][T10602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3117.521608][T10619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7283'. [ 3117.535593][T10619] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7283'. [ 3119.039704][ T9785] usb 6-1: USB disconnect, device number 23 [ 3121.228184][T10657] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 3122.577184][T10667] vim2m vim2m.0: vidioc_s_fmt queue busy [ 3123.757102][T10672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7291'. [ 3124.025444][T10672] IPVS: length: 149 != 216 [ 3124.499928][ T6398] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 3124.699420][ T6398] usb 6-1: Using ep0 maxpacket: 32 [ 3124.708153][ T6398] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 3124.766020][ T6398] usb 6-1: config 0 has no interface number 0 [ 3124.809861][ T6398] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3124.835492][ T6398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3124.869423][ T6398] usb 6-1: Product: syz [ 3124.887424][ T6398] usb 6-1: Manufacturer: syz [ 3124.904581][ T6398] usb 6-1: SerialNumber: syz [ 3124.934987][ T6398] usb 6-1: config 0 descriptor?? [ 3124.954103][ T6398] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3125.195428][ T6398] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3125.301732][ T6398] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3126.108118][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7297'. [ 3126.160501][T10696] IPVS: length: 149 != 216 [ 3127.483356][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3127.483791][T23338] usb 6-1: USB disconnect, device number 24 [ 3127.508584][T23338] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3127.604793][T23338] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3127.712925][T23338] quatech2 6-1:0.51: device disconnected [ 3128.220135][T10706] could not allocate digest TFM handle sha3-512-generic [ 3129.317500][T10722] netlink: 'syz.2.7301': attribute type 4 has an invalid length. [ 3129.897729][T10727] netlink: 'syz.2.7301': attribute type 4 has an invalid length. [ 3130.819028][ T5905] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 3131.038958][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 3131.068152][ T5905] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 3131.102875][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3131.176374][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 3131.216924][ T5905] pvrusb2: ********** [ 3131.229391][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 3131.279729][ T5905] pvrusb2: Important functionality might not be entirely working. [ 3131.296915][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 3131.332052][ T5905] pvrusb2: ********** [ 3131.439481][ T2346] pvrusb2: Invalid write control endpoint [ 3131.540449][ T2346] pvrusb2: Invalid write control endpoint [ 3131.547684][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 3131.591570][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 3131.617251][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 3131.637273][ T2346] pvrusb2: Device being rendered inoperable [ 3131.641004][T10735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7305'. [ 3131.653132][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 3131.661484][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 3131.676110][ T2346] pvrusb2: Attached sub-driver cx25840 [ 3131.695157][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 3131.864143][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 3132.091102][ T6533] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3132.259992][ T6533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3132.271857][ T6533] usb 5-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 3132.292880][ T6533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3132.412210][ T6533] usb 5-1: config 0 descriptor?? [ 3133.192602][ T6533] cypress 0003:04B4:BCA1.0045: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.4-1/input0 [ 3133.414720][T10740] netlink: 'syz.4.7307': attribute type 10 has an invalid length. [ 3133.443293][T10740] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7307'. [ 3133.749670][ T5905] usb 3-1: USB disconnect, device number 43 [ 3133.913061][ T6398] usb 5-1: USB disconnect, device number 48 [ 3134.969330][ T6533] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 3135.102642][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7312'. [ 3135.342287][ T6533] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 3135.410707][ T6533] usb 3-1: config 0 has no interface number 0 [ 3135.560577][T10772] IPVS: length: 149 != 17667290688 [ 3135.581724][ T6533] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 3135.591307][ T6533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3135.602378][ T6533] usb 3-1: Product: syz [ 3135.606848][ T6533] usb 3-1: Manufacturer: syz [ 3135.876029][ T6533] usb 3-1: SerialNumber: syz [ 3135.940146][ T6533] usb 3-1: config 0 descriptor?? [ 3136.019107][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7313'. [ 3136.081628][T10780] IPVS: length: 149 != 216 [ 3136.167131][T10768] netlink: 5040 bytes leftover after parsing attributes in process `syz.5.7311'. [ 3136.289224][T10781] netlink: 'syz.4.7314': attribute type 2 has an invalid length. [ 3136.312768][T10781] netlink: 'syz.4.7314': attribute type 1 has an invalid length. [ 3136.341813][T10781] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7314'. [ 3138.374037][ T6533] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 3138.424439][ T6533] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 3138.449409][ T6533] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 3138.558347][ T6533] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 3138.601580][ T6533] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 3138.661564][ T6533] usb 3-1: USB disconnect, device number 44 [ 3138.737274][ T6533] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 3138.760460][ T6533] keyspan 3-1:0.133: device disconnected [ 3139.111777][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7318'. [ 3139.121109][ T6398] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 3139.341116][ T6398] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3139.352002][ T6398] usb 4-1: config 0 has no interfaces? [ 3139.357662][ T6398] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3139.374364][ T6398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3139.419411][ T6398] usb 4-1: config 0 descriptor?? [ 3139.659593][ T6533] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 3139.839661][ T6533] usb 6-1: Using ep0 maxpacket: 16 [ 3139.901253][ T6533] usb 6-1: config 0 has no interfaces? [ 3139.941766][ T6533] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3139.975836][ T6533] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3140.019728][ T6533] usb 6-1: Manufacturer: syz [ 3140.059733][ T6533] usb 6-1: config 0 descriptor?? [ 3140.413156][T10808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3140.468245][T10808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3140.963664][T10825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7323'. [ 3141.140946][T10812] fuse: Bad value for 'fd' [ 3141.202053][T10826] IPVS: length: 149 != 17667290688 [ 3141.845392][ T5920] usb 6-1: USB disconnect, device number 25 [ 3141.965097][ T6533] usb 4-1: USB disconnect, device number 56 [ 3142.174015][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7325'. [ 3143.028316][T10839] IPVS: length: 149 != 17667290688 [ 3143.554019][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.560742][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.880252][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7329'. [ 3144.580304][T10858] IPVS: length: 149 != 17667290688 [ 3144.790932][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7331'. [ 3145.240904][T10873] IPVS: length: 149 != 17667290688 [ 3146.579487][ T6398] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 3146.896056][ T6398] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3147.060572][ T6398] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 3147.092756][T10896] vim2m vim2m.0: vidioc_s_fmt queue busy [ 3147.454853][ T6398] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 3147.476526][ T6398] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3147.486082][ T6398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3148.034072][T10879] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3148.041708][T10879] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3148.051921][ T6398] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3148.369475][T10894] netlink: 5040 bytes leftover after parsing attributes in process `syz.2.7336'. [ 3150.374188][ T6398] usb 5-1: USB disconnect, device number 49 [ 3150.981513][T10933] IPVS: length: 149 != 17667290688 [ 3151.869399][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 3151.869423][ T30] audit: type=1326 audit(1765180950.697:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.2.7343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 3151.939125][ T30] audit: type=1326 audit(1765180950.697:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.2.7343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 3152.149186][ T30] audit: type=1326 audit(1765180950.697:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.2.7343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 3152.259766][ T30] audit: type=1326 audit(1765180950.697:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.2.7343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 3152.309402][ T30] audit: type=1326 audit(1765180950.697:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.2.7343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 3152.335111][ T30] audit: type=1326 audit(1765180950.707:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.2.7343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 3152.358095][ T30] audit: type=1326 audit(1765180950.707:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.2.7343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 3152.909767][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7345'. [ 3152.969873][ T30] audit: type=1326 audit(1765180950.707:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.2.7343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 3153.159586][ T30] audit: type=1326 audit(1765180950.707:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.2.7343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 3153.229309][ T30] audit: type=1326 audit(1765180950.707:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10936 comm="syz.2.7343" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 3153.420533][T10943] IPVS: length: 149 != 17667290688 [ 3153.553940][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7346'. [ 3153.720741][T10953] netlink: 'syz.4.7347': attribute type 4 has an invalid length. [ 3153.802895][T10959] netlink: 'syz.4.7347': attribute type 4 has an invalid length. [ 3153.889998][T10957] IPVS: length: 149 != 17667290688 [ 3153.998753][T10968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7351'. [ 3154.211134][ T6398] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3154.220712][T10969] IPVS: length: 149 != 17667290688 [ 3154.379327][ T6398] usb 5-1: Using ep0 maxpacket: 8 [ 3154.386562][ T6398] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 3154.396715][ T6398] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3154.523763][ T6398] pvrusb2: Hardware description: Terratec Grabster AV400 [ 3154.531820][ T6398] pvrusb2: ********** [ 3154.535838][ T6398] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 3154.561272][T10973] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 3154.691341][ T6398] pvrusb2: Important functionality might not be entirely working. [ 3154.701975][ T6398] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 3154.727958][ T6398] pvrusb2: ********** [ 3154.801475][ T2346] pvrusb2: Invalid write control endpoint [ 3155.054520][ T2346] pvrusb2: Invalid write control endpoint [ 3155.064149][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 3155.101594][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7355'. [ 3155.130782][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 3155.478948][ T5920] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3155.500953][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 3155.531256][ T2346] pvrusb2: Device being rendered inoperable [ 3155.548104][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 3155.574304][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 3155.617328][ T2346] pvrusb2: Attached sub-driver cx25840 [ 3155.633302][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 3155.649335][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 3155.659373][ T5920] usb 4-1: config 0 has no interfaces? [ 3155.665375][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 3155.687197][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3155.698911][ T5920] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3155.735927][ T5920] usb 4-1: Manufacturer: syz [ 3155.741686][T10981] IPVS: length: 149 != 17667290688 [ 3155.753466][ T5920] usb 4-1: config 0 descriptor?? [ 3155.979601][T10976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3156.000797][T10976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3156.090770][ T5920] usb 4-1: USB disconnect, device number 57 [ 3156.480327][ T5920] usb 5-1: USB disconnect, device number 50 [ 3160.849730][T11031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7363'. [ 3161.063778][T11040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7366'. [ 3161.310028][T11031] IPVS: length: 149 != 17667290688 [ 3161.626888][T11040] libceph: resolve '0..' (ret=-3): failed [ 3162.283677][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7368'. [ 3162.304922][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7368'. [ 3162.326452][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7368'. [ 3163.496522][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7371'. [ 3163.734308][T11070] netlink: 'syz.3.7369': attribute type 4 has an invalid length. [ 3164.093865][T11073] netlink: 'syz.3.7369': attribute type 4 has an invalid length. [ 3164.419462][T23338] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3164.618973][T23338] usb 4-1: Using ep0 maxpacket: 8 [ 3164.868282][T23338] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 3164.878115][T23338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3165.198565][T23338] pvrusb2: Hardware description: Terratec Grabster AV400 [ 3165.242059][T23338] pvrusb2: ********** [ 3165.257233][T23338] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 3165.315182][T23338] pvrusb2: Important functionality might not be entirely working. [ 3165.323599][T23338] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 3165.344105][T23338] pvrusb2: ********** [ 3165.473117][ T2346] pvrusb2: Invalid write control endpoint [ 3166.097671][ T2346] pvrusb2: Invalid write control endpoint [ 3166.110157][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 3166.128695][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 3166.303632][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 3166.333276][ T2346] pvrusb2: Device being rendered inoperable [ 3166.859028][ T2346] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 3167.174042][ T2346] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 3167.224279][ T2346] pvrusb2: Attached sub-driver cx25840 [ 3167.259409][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 3167.284900][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 3167.588931][T23338] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 3167.644070][ T6533] usb 4-1: USB disconnect, device number 58 [ 3167.780025][T23338] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3167.797265][T23338] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 3167.819855][T23338] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 3167.856353][T23338] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3167.897332][T23338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3167.958438][T11093] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 3167.966844][T11093] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 3167.985651][T23338] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3169.553267][T11101] netlink: 5040 bytes leftover after parsing attributes in process `syz.3.7377'. [ 3169.681404][T11100] fuse: Bad value for 'fd' [ 3170.719479][T23338] usb 3-1: USB disconnect, device number 45 [ 3171.637462][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7384'. [ 3171.679404][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7384'. [ 3171.694316][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7384'. [ 3173.076894][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7387'. [ 3173.220986][T23338] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 3173.382880][T23338] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 3173.395820][T23338] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 3173.410621][T23338] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3173.430845][T23338] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3173.449537][T23338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3173.478321][T23338] usb 6-1: Product: syz [ 3173.496238][T23338] usb 6-1: Manufacturer: syz [ 3173.512337][T23338] usb 6-1: SerialNumber: syz [ 3174.011377][T11156] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7386'. [ 3174.732936][T11163] ipt_REJECT: TCP_RESET invalid for non-tcp [ 3174.843222][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3174.898009][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3177.942187][T23338] usb 6-1: USB disconnect, device number 26 [ 3178.076654][ T8881] udevd[8881]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3178.109749][ T6533] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 3178.157773][T11190] fuse: Bad value for 'fd' [ 3178.371545][ T6533] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 3178.527189][ T6533] usb 5-1: config 0 has no interface number 0 [ 3178.527209][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 3178.527226][ T30] audit: type=1326 audit(1765180977.427:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3178.612243][ T6533] usb 5-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 3178.621834][ T6533] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3178.632187][ T6533] usb 5-1: Product: syz [ 3178.636380][ T6533] usb 5-1: Manufacturer: syz [ 3178.644985][ T6533] usb 5-1: SerialNumber: syz [ 3178.645857][T11192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3178.653200][ T6533] usb 5-1: config 0 descriptor?? [ 3178.769859][T11192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3178.920826][ T30] audit: type=1326 audit(1765180977.427:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3178.995129][T11192] netlink: 'syz.1.7397': attribute type 10 has an invalid length. [ 3179.015550][T11192] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7397'. [ 3179.278573][ T30] audit: type=1326 audit(1765180977.427:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3179.592404][ T30] audit: type=1326 audit(1765180977.427:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3179.871050][ T30] audit: type=1326 audit(1765180977.427:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3179.917616][ T30] audit: type=1326 audit(1765180977.447:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3179.958772][ T30] audit: type=1326 audit(1765180977.447:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3179.999485][ T6398] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 3180.017094][ T30] audit: type=1326 audit(1765180977.447:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3180.159294][ T6398] usb 3-1: Using ep0 maxpacket: 16 [ 3180.167915][ T6398] usb 3-1: config 0 has no interfaces? [ 3180.175432][ T6398] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3180.191011][ T30] audit: type=1326 audit(1765180977.447:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3180.249490][ T30] audit: type=1326 audit(1765180977.447:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11187 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3180.313056][ T6398] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3180.360151][ T6398] usb 3-1: Manufacturer: syz [ 3180.405655][ T6398] usb 3-1: config 0 descriptor?? [ 3180.648239][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3180.687770][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3180.905899][T11209] program syz.1.7400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3181.151692][ T6533] keyspan 5-1:0.133: Keyspan 1 port adapter converter detected [ 3181.185703][ T6533] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 81 [ 3181.202604][ T6533] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 1 [ 3181.217489][ T6533] keyspan 5-1:0.133: found no endpoint descriptor for endpoint 2 [ 3181.231692][ T6533] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 3181.248386][ T6533] usb 5-1: USB disconnect, device number 51 [ 3181.272667][ T6533] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 3181.288557][ T6533] keyspan 5-1:0.133: device disconnected [ 3181.684901][T11223] netlink: 'syz.4.7404': attribute type 13 has an invalid length. [ 3182.565066][T23338] usb 3-1: USB disconnect, device number 46 [ 3183.261921][T11240] netlink: 'syz.2.7408': attribute type 13 has an invalid length. [ 3183.274355][T11240] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3184.656779][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7409'. [ 3184.666792][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7409'. [ 3184.676980][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7409'. [ 3185.429458][T23338] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3185.588905][T23338] usb 4-1: Using ep0 maxpacket: 16 [ 3185.599021][T23338] usb 4-1: config 0 has no interfaces? [ 3185.610316][T23338] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3185.632073][T23338] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3185.654780][T23338] usb 4-1: Manufacturer: syz [ 3185.714148][T23338] usb 4-1: config 0 descriptor?? [ 3185.729616][T11270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7412'. [ 3186.104898][T11257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3186.114231][T11257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3186.558155][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7414'. [ 3186.879259][T11276] IPVS: length: 149 != 17667290688 [ 3187.858250][T23338] usb 4-1: USB disconnect, device number 59 [ 3188.435910][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7427'. [ 3188.857297][T11296] IPVS: length: 149 != 17667290688 [ 3191.251448][T11311] netlink: 'syz.3.7421': attribute type 13 has an invalid length. [ 3192.145997][ T5905] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 3192.437704][ T5905] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3192.461675][ T5905] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 3192.578154][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7424'. [ 3192.662364][ T5905] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 3192.728046][ T5905] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3192.759981][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3192.852705][T11319] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3192.977536][T11319] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3193.268974][ T5905] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3194.529501][ T6533] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3194.720537][ T6533] usb 5-1: Using ep0 maxpacket: 16 [ 3194.739818][ T6533] usb 5-1: config 0 has no interfaces? [ 3194.751462][ T6533] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3194.773108][ T6533] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3194.806421][ T6533] usb 5-1: Manufacturer: syz [ 3194.839506][ T6533] usb 5-1: config 0 descriptor?? [ 3195.091294][T11343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3195.112767][T11343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3195.170573][T11355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7430'. [ 3195.307610][ T6533] usb 6-1: USB disconnect, device number 27 [ 3195.907332][T11365] PKCS7: Unknown OID: [5] (bad) [ 3195.913297][T11365] PKCS7: Only support pkcs7_signedData type [ 3196.491894][T11363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3197.312330][ T6533] usb 5-1: USB disconnect, device number 52 [ 3197.628688][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7435'. [ 3199.683253][T11396] netlink: 'syz.1.7440': attribute type 13 has an invalid length. [ 3199.725795][T11390] [U]  [ 3199.799774][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7437'. [ 3199.810460][T11395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7437'. [ 3200.992166][T11401] netlink: 'syz.4.7438': attribute type 13 has an invalid length. [ 3201.008129][T11401] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3203.383144][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 3203.383167][ T30] audit: type=1326 audit(1765181002.307:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.4.7445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 3203.436082][ T30] audit: type=1326 audit(1765181002.307:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.4.7445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 3203.815930][ T30] audit: type=1326 audit(1765181002.307:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.4.7445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 3203.846862][ T30] audit: type=1326 audit(1765181002.307:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.4.7445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 3203.870555][ T30] audit: type=1326 audit(1765181002.307:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.4.7445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 3204.054835][ T30] audit: type=1326 audit(1765181002.317:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.4.7445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 3204.222333][ T30] audit: type=1326 audit(1765181002.317:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.4.7445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 3204.255784][ T30] audit: type=1326 audit(1765181002.317:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.4.7445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 3204.306347][ T30] audit: type=1326 audit(1765181002.317:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.4.7445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 3204.390410][T11439] random: crng reseeded on system resumption [ 3204.399481][ T30] audit: type=1326 audit(1765181002.357:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11421 comm="syz.4.7445" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000 [ 3204.634166][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7449'. [ 3204.729007][ T5905] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 3205.369186][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.376096][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3205.510366][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3205.521563][ T5905] usb 6-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 3205.548876][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3205.559908][ T5905] usb 6-1: config 0 descriptor?? [ 3205.728969][T23338] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3206.138032][T23338] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3206.210962][T23338] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3206.320891][T23338] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3206.340092][ T5905] cypress 0003:04B4:BCA1.0046: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.5-1/input0 [ 3206.356972][T23338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3206.551105][T11440] netlink: 'syz.5.7448': attribute type 10 has an invalid length. [ 3206.629354][T11440] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7448'. [ 3206.697563][T11456] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 3206.712602][T23338] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3206.749558][ T6533] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 3206.919346][ T6533] usb 5-1: Using ep0 maxpacket: 16 [ 3207.117629][ T6533] usb 5-1: config 0 has no interfaces? [ 3207.171832][ T6533] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3207.384281][ T6533] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3207.430791][ T6533] usb 5-1: Manufacturer: syz [ 3207.491016][ T6533] usb 5-1: config 0 descriptor?? [ 3207.571892][ T5905] usb 6-1: USB disconnect, device number 28 [ 3207.616963][T11456] bridge0: entered allmulticast mode [ 3207.847217][T11464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3207.984968][T11464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3208.254710][T11456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7450'. [ 3209.462801][T11488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3209.501420][T11488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3209.726861][ T6533] usb 5-1: USB disconnect, device number 53 [ 3209.971980][ T6398] usb 4-1: USB disconnect, device number 60 [ 3211.013287][ T6398] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3211.203977][ T6398] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 3211.229653][ T6467] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 3211.242779][ T6398] usb 3-1: config 0 has no interface number 0 [ 3211.269842][ T6398] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3211.430007][ T6398] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 3211.454026][ T6398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3211.462568][ T6467] usb 5-1: Using ep0 maxpacket: 16 [ 3211.482108][ T6467] usb 5-1: config 0 has no interfaces? [ 3211.540866][ T6398] usb 3-1: Product: syz [ 3211.558186][ T6467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3211.569463][ T6398] usb 3-1: Manufacturer: syz [ 3211.621988][ T6398] usb 3-1: SerialNumber: syz [ 3211.632769][ T6467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3211.655936][ T6398] usb 3-1: config 0 descriptor?? [ 3211.702150][ T6467] usb 5-1: Manufacturer: syz [ 3211.889498][ T6467] usb 5-1: config 0 descriptor?? [ 3211.895167][ T6398] yurex 3-1:0.50: USB YUREX device now attached to Yurex #1 [ 3212.132167][T11500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3212.350335][T11500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3212.730267][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 3212.730288][ T30] audit: type=1326 audit(1765181011.597:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11502 comm="syz.3.7459" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe4539 code=0x0 [ 3213.909818][T23338] usb 5-1: USB disconnect, device number 54 [ 3215.493929][T23338] usb 3-1: USB disconnect, device number 47 [ 3215.520477][T23338] yurex 3-1:0.50: USB YUREX #1 now disconnected [ 3218.300700][ T6467] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 3218.734125][ T6467] usb 6-1: Using ep0 maxpacket: 16 [ 3218.772212][ T6467] usb 6-1: config 0 has no interfaces? [ 3218.780500][ T6467] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3218.790406][ T6467] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3218.798456][ T6467] usb 6-1: Manufacturer: syz [ 3218.843793][ T6467] usb 6-1: config 0 descriptor?? [ 3219.327525][T11558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3219.336954][T11558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3221.151720][ T6398] usb 6-1: USB disconnect, device number 29 [ 3221.210458][T23338] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 3221.469314][T23338] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 3221.537567][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7472'. [ 3221.575001][T23338] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 3221.639299][T23338] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3221.911435][T23338] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3221.941130][T23338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3221.982163][T23338] usb 4-1: Product: syz [ 3221.999083][T23338] usb 4-1: Manufacturer: syz [ 3222.012633][T23338] usb 4-1: SerialNumber: syz [ 3222.128640][T11592] IPVS: length: 149 != 17667290688 [ 3222.452211][T11606] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7471'. [ 3222.524272][T11606] ipt_REJECT: TCP_RESET invalid for non-tcp [ 3222.532809][T11606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3223.146326][T11606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3224.496156][T11624] ucma_write: process 9249 (syz.1.7476) changed security contexts after opening file descriptor, this is not allowed. [ 3224.858601][T23338] usb 4-1: USB disconnect, device number 61 [ 3225.062794][ T8881] udevd[8881]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3225.770989][T23338] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 3225.910558][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7479'. [ 3225.981788][T23338] usb 6-1: Using ep0 maxpacket: 32 [ 3226.023315][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7481'. [ 3226.215552][T23338] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 3226.278070][T23338] usb 6-1: config 0 has no interface number 0 [ 3226.296933][T23338] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 3226.308172][T11648] IPVS: length: 149 != 17667290688 [ 3226.375909][T23338] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 3226.400739][T23338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3226.421413][T23338] usb 6-1: Product: syz [ 3226.479473][T23338] usb 6-1: Manufacturer: syz [ 3226.484192][T23338] usb 6-1: SerialNumber: syz [ 3226.511338][T23338] usb 6-1: config 0 descriptor?? [ 3226.559842][T11629] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3226.570154][T11647] IPVS: length: 149 != 17667290688 [ 3227.069312][T11629] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3228.858295][ T6398] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 3229.059276][ T6398] usb 4-1: Using ep0 maxpacket: 16 [ 3229.067889][ T6398] usb 4-1: config 0 has no interfaces? [ 3229.077484][ T6398] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3229.123008][ T6398] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3229.148847][ T6398] usb 4-1: Manufacturer: syz [ 3229.160352][ T6398] usb 4-1: config 0 descriptor?? [ 3229.604865][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7478'. [ 3229.630515][T11658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3229.642502][T11658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3230.085457][T23338] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 3230.096168][T23338] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 3230.148480][T23338] asix 6-1:0.188: probe with driver asix failed with error -71 [ 3230.226650][T23338] usb 6-1: USB disconnect, device number 30 [ 3230.975911][T23338] usb 4-1: USB disconnect, device number 62 [ 3231.009714][T11680] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7486'. [ 3231.769086][T23338] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 3231.920608][T23338] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 3231.933161][T23338] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 3231.949552][ T6398] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 3232.005448][T23338] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3232.046899][T23338] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3232.056966][T23338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3232.087474][T23338] usb 3-1: Product: syz [ 3232.105618][T23338] usb 3-1: Manufacturer: syz [ 3232.117666][T23338] usb 3-1: SerialNumber: syz [ 3232.149506][ T6398] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 3232.157694][ T6398] usb 4-1: config 0 has no interface number 0 [ 3232.201018][ T6398] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3232.250885][ T6398] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 3232.261217][ T6398] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3232.300668][ T6398] usb 4-1: Product: syz [ 3232.348298][ T6398] usb 4-1: Manufacturer: syz [ 3232.361818][ T6398] usb 4-1: SerialNumber: syz [ 3232.409772][ T6398] usb 4-1: config 0 descriptor?? [ 3232.424796][ T6398] yurex 4-1:0.50: USB YUREX device now attached to Yurex #1 [ 3232.558603][T11699] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7488'. [ 3232.991073][T11702] ipt_REJECT: TCP_RESET invalid for non-tcp [ 3233.283743][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3233.297166][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3233.771613][T11717] input: syz0 as /devices/virtual/input/input108 [ 3235.277027][ T6398] usb 4-1: USB disconnect, device number 63 [ 3235.286893][ T6398] yurex 4-1:0.50: USB YUREX #1 now disconnected [ 3235.579956][T23338] usb 3-1: USB disconnect, device number 48 [ 3236.202631][T11743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3236.644744][T11743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3236.734721][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7496'. [ 3236.739698][ T6398] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 3236.764933][T11743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3236.776426][T11743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3236.969750][ T6398] usb 3-1: Using ep0 maxpacket: 16 [ 3238.992326][T11754] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7500'. [ 3239.221828][T11754] IPVS: length: 149 != 17667290688 [ 3240.834301][ T6398] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3240.847851][ T6398] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3240.880152][ T6398] usb 3-1: can't read configurations, error -71 [ 3241.489198][ T6467] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 3241.876603][ T6467] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3241.896794][ T6467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3241.985169][ T6467] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3242.019654][ T6467] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3242.056083][ T6467] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 3242.078089][ T6467] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3242.108375][ T6467] usb 4-1: config 0 descriptor?? [ 3242.513579][T11769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7502'. [ 3242.563519][T23338] usb 4-1: USB disconnect, device number 64 [ 3243.958926][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7509'. [ 3243.969360][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7509'. [ 3244.028301][T23338] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 3244.353168][T23338] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 3244.828834][T23338] usb 4-1: config 0 has no interface number 0 [ 3244.853501][T23338] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 3244.964214][T23338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3244.972409][T23338] usb 4-1: Product: syz [ 3244.976642][T23338] usb 4-1: Manufacturer: syz [ 3244.981667][T23338] usb 4-1: SerialNumber: syz [ 3244.988346][T23338] usb 4-1: config 0 descriptor?? [ 3245.908913][ T30] audit: type=1326 audit(1765181044.837:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.7511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3246.034325][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7510'. [ 3246.109924][ T30] audit: type=1326 audit(1765181044.837:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.7511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3246.521372][ T30] audit: type=1326 audit(1765181044.837:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.7511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3246.560082][ T30] audit: type=1326 audit(1765181044.837:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.7511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3246.646836][ T30] audit: type=1326 audit(1765181044.837:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.7511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3246.743125][ T30] audit: type=1326 audit(1765181044.837:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.7511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3246.875707][ T30] audit: type=1326 audit(1765181044.837:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.7511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3246.951875][ T30] audit: type=1326 audit(1765181044.837:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.7511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3247.042685][T11821] netlink: 'syz.1.7512': attribute type 4 has an invalid length. [ 3247.050855][ T30] audit: type=1326 audit(1765181044.837:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.7511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3247.089525][T11821] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7512'. [ 3247.196288][ T30] audit: type=1326 audit(1765181044.837:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11815 comm="syz.5.7511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 3247.460738][T23338] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 3247.496321][T23338] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 3247.690085][T23338] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 3247.763856][T23338] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 3247.870406][T11782] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 3247.891870][T23338] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 3247.922680][T23338] usb 4-1: USB disconnect, device number 65 [ 3247.963171][T23338] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 3247.975280][T23338] keyspan 4-1:0.133: device disconnected [ 3247.993399][T11835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7514'. [ 3248.116916][T11782] usb 6-1: Using ep0 maxpacket: 16 [ 3248.127530][T11782] usb 6-1: config 0 has no interfaces? [ 3248.142591][T11782] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3248.152392][T11782] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3248.163559][T11838] IPVS: length: 149 != 17667290688 [ 3248.169568][T11782] usb 6-1: Manufacturer: syz [ 3248.176803][T11782] usb 6-1: config 0 descriptor?? [ 3248.538589][T11826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3248.681470][T11826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3249.073338][T11820] tipc: Started in network mode [ 3249.078241][T11820] tipc: Node identity 4, cluster identity 4711 [ 3249.084666][T11820] tipc: Node number set to 4 [ 3249.330871][ T1152] tipc: Left network mode [ 3249.541785][T11843] netlink: 'syz.2.7517': attribute type 1 has an invalid length. [ 3249.749127][T23338] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 3249.849578][T11843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3250.035729][T23338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3250.047094][T23338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3250.057646][T23338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3250.076706][T23338] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3250.268071][T11459] usb 6-1: USB disconnect, device number 31 [ 3250.363120][T23338] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 3250.550336][T23338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3250.595532][T23338] usb 4-1: config 0 descriptor?? [ 3250.833941][T11863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 3251.005042][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7518'. [ 3251.037055][T11782] usb 4-1: USB disconnect, device number 66 [ 3251.775561][T11870] [U]  [ 3252.359080][T23338] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 3252.853791][T23338] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 3252.913787][T23338] usb 4-1: config 0 has no interface number 0 [ 3252.979834][T23338] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3253.101920][T23338] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 3253.176905][T23338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3253.258127][T23338] usb 4-1: Product: syz [ 3253.311399][T23338] usb 4-1: Manufacturer: syz [ 3253.340719][T23338] usb 4-1: SerialNumber: syz [ 3253.355016][T23338] usb 4-1: config 0 descriptor?? [ 3253.569562][T23338] yurex 4-1:0.50: USB YUREX device now attached to Yurex #1 [ 3254.145028][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7525'. [ 3254.212812][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7525'. [ 3254.246476][T11892] netlink: 'syz.2.7526': attribute type 13 has an invalid length. [ 3255.145425][T11894] netlink: 'syz.4.7527': attribute type 13 has an invalid length. [ 3255.215893][T11894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3255.921756][T11901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7528'. [ 3256.048657][T23338] usb 4-1: USB disconnect, device number 67 [ 3256.064800][T23338] yurex 4-1:0.50: USB YUREX #1 now disconnected [ 3256.369284][T11901] IPVS: length: 149 != 17667290688 [ 3256.689852][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7530'. [ 3257.518494][T11912] bridge0 (unregistering): left allmulticast mode [ 3257.870710][T11918] fuse: Bad value for 'fd' [ 3258.349432][T11782] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 3258.369497][ T6467] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 3258.498949][T23338] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 3258.511497][T11782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3258.522994][ T6467] usb 3-1: Using ep0 maxpacket: 16 [ 3258.532242][ T6467] usb 3-1: config 0 has no interfaces? [ 3258.539342][T11782] usb 6-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 3258.550013][ T6467] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3258.569412][ T6467] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3258.577769][ T6467] usb 3-1: Manufacturer: syz [ 3258.590571][T11782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3258.601639][ T6467] usb 3-1: config 0 descriptor?? [ 3258.648429][T11782] usb 6-1: config 0 descriptor?? [ 3258.661228][T23338] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3258.672089][T23338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3258.761776][T23338] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3258.813335][T23338] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3258.846975][T23338] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 3258.869265][T23338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3258.956410][T11917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3258.996824][T11917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3259.033745][T23338] usb 5-1: config 0 descriptor?? [ 3259.310505][T11782] cypress 0003:04B4:BCA1.0047: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.5-1/input0 [ 3259.423008][T11924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7533'. [ 3259.448462][T11782] usb 5-1: USB disconnect, device number 55 [ 3259.531495][T11918] netlink: 'syz.5.7532': attribute type 10 has an invalid length. [ 3259.547378][T11918] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7532'. [ 3259.825815][ T6467] usb 6-1: USB disconnect, device number 32 [ 3260.272278][T11942] random: crng reseeded on system resumption [ 3260.479088][T23338] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 3260.925818][T23338] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3260.985689][T23338] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 3261.019467][T23338] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 3261.126133][T23338] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3261.198554][T23338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3261.319798][T11939] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3261.327116][T11939] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3261.341675][ T5905] usb 3-1: USB disconnect, device number 51 [ 3261.385259][T23338] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3263.989000][T11782] usb 4-1: USB disconnect, device number 68 [ 3264.562076][T11981] netlink: 'syz.3.7541': attribute type 13 has an invalid length. [ 3265.594377][T11989] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7542'. [ 3265.938317][T11994] netlink: 'syz.1.7543': attribute type 13 has an invalid length. [ 3265.985580][T11994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3266.460946][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.467853][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.750912][T11782] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 3266.947835][T11782] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 3267.046189][T11782] usb 6-1: config 0 has no interface number 0 [ 3267.099738][T11782] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 3267.122752][T11782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3267.145447][T11782] usb 6-1: Product: syz [ 3267.155623][T11782] usb 6-1: Manufacturer: syz [ 3267.164236][T11782] usb 6-1: SerialNumber: syz [ 3267.300206][T11782] usb 6-1: config 0 descriptor?? [ 3267.381252][ T6467] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 3267.575097][ T6467] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3267.621260][ T6467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 3267.639794][ T6467] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 3267.650867][ T6467] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3267.776166][ T6467] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 3267.841249][ T6467] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3267.856338][ T6467] usb 5-1: config 0 descriptor?? [ 3268.205983][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7547'. [ 3268.253132][T23338] usb 5-1: USB disconnect, device number 56 [ 3269.338398][T11782] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 3269.350088][T11782] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 3269.365020][T11782] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 3269.378137][T11782] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 3269.432958][T11782] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 3269.490760][T11782] usb 6-1: USB disconnect, device number 33 [ 3269.503009][T12016] netlink: 666 bytes leftover after parsing attributes in process `syz.4.7552'. [ 3269.524625][T11782] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 3269.546261][T11782] keyspan 6-1:0.133: device disconnected [ 3269.571254][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7550'. [ 3269.893178][T12024] SET target dimension over the limit! [ 3269.939465][T12025] [U]  [ 3272.637087][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7557'. [ 3272.928956][T23338] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 3273.102627][T23338] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 3273.140334][T23338] usb 6-1: config 0 has no interface number 0 [ 3273.182377][T23338] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3273.222830][T23338] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 3273.278974][T23338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3273.287133][T23338] usb 6-1: Product: syz [ 3273.312955][T23338] usb 6-1: Manufacturer: syz [ 3273.317696][T23338] usb 6-1: SerialNumber: syz [ 3273.353425][T23338] usb 6-1: config 0 descriptor?? [ 3273.380019][T23338] yurex 6-1:0.50: USB YUREX device now attached to Yurex #1 [ 3273.696793][T12059] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7559'. [ 3275.819041][T23338] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 3275.893898][T11782] usb 6-1: USB disconnect, device number 34 [ 3275.946199][T11782] yurex 6-1:0.50: USB YUREX #1 now disconnected [ 3275.988931][T23338] usb 5-1: Using ep0 maxpacket: 16 [ 3276.004088][T23338] usb 5-1: config 0 has no interfaces? [ 3276.044379][T23338] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3276.075047][T23338] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3276.098849][T23338] usb 5-1: Manufacturer: syz [ 3276.130949][T23338] usb 5-1: config 0 descriptor?? [ 3276.742115][T12074] IPVS: length: 149 != 17667290688 [ 3276.826990][T12065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3276.837892][T12065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3279.159758][T23338] usb 5-1: USB disconnect, device number 57 [ 3280.199268][T11782] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 3280.579315][T11782] usb 6-1: Using ep0 maxpacket: 16 [ 3280.588117][T11782] usb 6-1: config 0 has no interfaces? [ 3280.833098][T11782] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3280.940360][T11782] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3280.948403][T11782] usb 6-1: Manufacturer: syz [ 3281.050238][T11782] usb 6-1: config 0 descriptor?? [ 3281.921743][T12107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3281.943241][T12107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3282.315066][T12120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7570'. [ 3282.462992][T12122] random: crng reseeded on system resumption [ 3282.812536][T12126] Failed to get privilege flags for destination (handle=0x2:0x25) [ 3282.851154][ T5905] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 3283.029263][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 3283.052494][ T5905] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 3283.069528][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3283.134217][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3283.196805][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3283.407548][ T5905] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3283.448852][ T5905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3283.768868][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3284.079743][ T5905] usb 3-1: GET_CAPABILITIES returned 0 [ 3284.085262][ T5905] usbtmc 3-1:16.0: can't read capabilities [ 3284.446877][ T5905] usb 6-1: USB disconnect, device number 35 [ 3284.932387][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7572'. [ 3285.495555][ T6467] usb 3-1: USB disconnect, device number 52 [ 3286.487231][T12149] IPVS: length: 149 != 17667290688 [ 3288.891758][T12176] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7577'. [ 3288.945425][T11782] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 3288.963277][T23338] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3289.219572][T11782] usb 4-1: Using ep0 maxpacket: 16 [ 3289.409922][T11782] usb 4-1: config 0 has no interfaces? [ 3289.420426][T11782] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3289.613456][T11782] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3289.642686][T11782] usb 4-1: Manufacturer: syz [ 3289.710615][T11782] usb 4-1: config 0 descriptor?? [ 3289.774422][T23338] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3289.786555][T23338] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3289.888149][T23338] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3289.939233][T23338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3290.064449][T12173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3290.077282][T12173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3290.107395][T23338] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3291.018142][T23338] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 3291.060604][ T8881] udevd[8881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3291.786344][T12184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3291.821013][T11782] usb 4-1: USB disconnect, device number 69 [ 3291.947844][T12184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3292.220760][T23338] usb 5-1: USB disconnect, device number 58 [ 3292.230744][T12163] delete_channel: no stack [ 3292.336042][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7584'. [ 3292.431376][ T5905] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 3292.679971][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 3292.817518][ T5905] usb 6-1: config 0 has no interfaces? [ 3292.906432][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3294.100522][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3294.129114][ T5905] usb 6-1: Manufacturer: syz [ 3294.145924][ T5905] usb 6-1: config 0 descriptor?? [ 3294.633521][T12188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3294.644821][T12188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3297.286979][T11782] usb 6-1: USB disconnect, device number 36 [ 3298.293262][T12235] bridge19: entered promiscuous mode [ 3298.415061][T12238] IPVS: length: 149 != 17667290688 [ 3298.749605][T11459] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3298.929120][T11459] usb 5-1: Using ep0 maxpacket: 8 [ 3298.942102][T11459] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 3298.951428][T11459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3299.040728][T11459] usb 5-1: Product: syz [ 3299.049910][T11459] usb 5-1: Manufacturer: syz [ 3299.086143][T11459] usb 5-1: SerialNumber: syz [ 3299.318561][T11459] usb 5-1: config 0 descriptor?? [ 3299.373405][T11459] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 3300.334415][T11459] gspca_sonixj: reg_r err -32 [ 3300.339603][T11459] sonixj 5-1:0.0: probe with driver sonixj failed with error -32 [ 3300.339996][T12239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3300.411004][T12239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3300.872790][T12258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3300.887047][T12258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3300.954830][T12258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3301.056100][T12258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3301.349443][ T6467] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 3301.989001][ T6467] usb 4-1: Using ep0 maxpacket: 16 [ 3302.073043][T11459] usb 5-1: USB disconnect, device number 59 [ 3302.113906][ T6467] usb 4-1: config 0 has no interfaces? [ 3302.260397][ T6467] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3302.279655][T12267] IPVS: length: 149 != 17667290688 [ 3302.329631][ T6467] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3302.337781][ T6467] usb 4-1: Manufacturer: syz [ 3302.562367][T12276] netlink: 'syz.4.7598': attribute type 13 has an invalid length. [ 3302.582017][ T6467] usb 4-1: config 0 descriptor?? [ 3302.680884][T12276] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3302.890459][T12254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3302.933254][T12254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3304.153984][T12287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3304.230207][T12287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3304.670388][T12286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3304.704706][T12286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3305.307290][ T6467] usb 4-1: USB disconnect, device number 70 [ 3306.112449][T12302] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7603'. [ 3308.225402][T12308] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7604'. [ 3308.263854][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7607'. [ 3308.769460][ T6467] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 3308.989812][ T6467] usb 5-1: Using ep0 maxpacket: 16 [ 3309.070644][ T6467] usb 5-1: config 0 has no interfaces? [ 3309.249382][ T6467] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3309.268770][ T6467] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3309.276795][ T6467] usb 5-1: Manufacturer: syz [ 3309.302939][ T6467] usb 5-1: config 0 descriptor?? [ 3309.845115][T12331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3309.862736][T12331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3310.750315][T12317] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3311.127829][T12348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7612'. [ 3311.549771][ T5905] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 3311.613845][T12346] vlan1: entered promiscuous mode [ 3311.623433][T12348] vxlan0: left allmulticast mode [ 3311.628454][T12348] vxlan0: left promiscuous mode [ 3311.635168][T12348] bridge0: port 3(vxlan0) entered disabled state [ 3311.823493][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 3311.862095][ T5905] usb 6-1: config 0 has no interfaces? [ 3311.919518][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3311.928682][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3311.939693][ T5905] usb 6-1: Manufacturer: syz [ 3311.961014][ T5905] usb 6-1: config 0 descriptor?? [ 3311.989279][T23338] usb 5-1: USB disconnect, device number 60 [ 3312.256352][T12350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3312.326308][T12350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3314.564068][ T6467] usb 6-1: USB disconnect, device number 37 [ 3315.483010][T11782] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 3315.497444][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 3315.562236][T12384] binder: 12372:12384 ioctl c0306201 0 returned -14 [ 3315.709789][T11782] usb 4-1: device descriptor read/64, error -32 [ 3316.019469][T11782] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 3316.265969][T11782] usb 4-1: Using ep0 maxpacket: 16 [ 3316.277557][T11782] usb 4-1: config 0 has no interfaces? [ 3316.313640][T11782] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3316.333182][T11782] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3316.348890][T11782] usb 4-1: Manufacturer: syz [ 3316.396279][T11782] usb 4-1: config 0 descriptor?? [ 3316.793592][T12370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3316.951099][T12370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3316.971615][ T5905] usb 4-1: USB disconnect, device number 72 [ 3321.134834][T11782] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 3321.520556][T11782] usb 5-1: Using ep0 maxpacket: 16 [ 3321.575157][T11782] usb 5-1: config 0 has no interfaces? [ 3321.589245][T11782] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3321.619692][T11782] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3321.653179][T11782] usb 5-1: Manufacturer: syz [ 3321.681627][T11782] usb 5-1: config 0 descriptor?? [ 3322.496563][T12429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3322.849866][T12429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3323.787069][T12446] netlink: 'syz.3.7631': attribute type 13 has an invalid length. [ 3323.807781][T12446] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3324.121910][T12450] Failed to get privilege flags for destination (handle=0x2:0x25) [ 3324.490730][T11782] usb 5-1: USB disconnect, device number 61 [ 3325.627437][T12463] fuse: Bad value for 'fd' [ 3326.392438][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3326.437914][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3326.464477][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3326.497935][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3326.965774][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7636'. [ 3327.644311][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7638'. [ 3327.662773][T12481] netlink: 'syz.2.7648': attribute type 13 has an invalid length. [ 3327.939053][T12481] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3327.959370][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.965948][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3328.585934][T12490] fuse: Bad value for 'fd' [ 3329.150471][T12484] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7637'. [ 3329.588972][ T6467] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 3329.899589][ T6467] usb 6-1: Using ep0 maxpacket: 16 [ 3332.061779][ T6467] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3332.072891][ T6467] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 3332.081031][ T6467] usb 6-1: can't read configurations, error -71 [ 3332.374490][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7647'. [ 3332.517919][T12521] bridge_slave_1: left allmulticast mode [ 3332.586505][T12521] bridge_slave_1: left promiscuous mode [ 3332.616951][T12521] bridge0: port 2(bridge_slave_1) entered disabled state [ 3332.740915][T12521] : left allmulticast mode [ 3332.745494][T12521] : left promiscuous mode [ 3332.769734][T12521] bridge0: port 1() entered disabled state [ 3332.915073][ T5905] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 3333.248989][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 3333.360500][T12521] bond0: (slave bridge0): Releasing backup interface [ 3333.420651][ T5905] usb 3-1: config 0 has no interfaces? [ 3333.543596][ T5905] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3333.641468][ T5905] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3333.658863][ T5905] usb 3-1: Manufacturer: syz [ 3333.714178][ T5905] usb 3-1: config 0 descriptor?? [ 3334.025967][T12525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3334.251047][T12525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3334.778512][T12538] Failed to get privilege flags for destination (handle=0x2:0x25) [ 3335.130079][ T5905] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 3335.281088][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3335.290577][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3335.349997][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 3335.370212][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3335.409864][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3335.516928][ T5905] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3335.600716][ T5905] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3335.628878][ T5905] usb 4-1: Manufacturer: syz [ 3335.667399][ T5905] usb 4-1: config 0 descriptor?? [ 3336.100688][T11782] usb 3-1: USB disconnect, device number 53 [ 3336.306069][T12548] IPVS: length: 149 != 17667290688 [ 3338.331596][ T5905] usb 4-1: USB disconnect, device number 73 [ 3339.439259][T11782] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 3339.609377][T11782] usb 4-1: Using ep0 maxpacket: 16 [ 3339.627763][T11782] usb 4-1: config 0 has no interfaces? [ 3339.661145][T11782] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3339.686456][T11782] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3339.702758][T11782] usb 4-1: Manufacturer: syz [ 3339.723686][T11782] usb 4-1: config 0 descriptor?? [ 3340.115467][T12571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3340.125138][T12571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3340.898585][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7663'. [ 3341.152335][T11782] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 3341.493132][T11782] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 3341.502289][T11782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3341.538896][T11782] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 3341.561688][T11782] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 3341.648216][T11782] usb 3-1: Manufacturer: syz [ 3341.735380][T11782] usb 3-1: config 0 descriptor?? [ 3341.871692][ T6467] usb 4-1: USB disconnect, device number 74 [ 3341.884001][T12594] IPVS: length: 149 != 17667290688 [ 3342.030007][T11782] rc_core: IR keymap rc-hauppauge not found [ 3342.046915][T11782] Registered IR keymap rc-empty [ 3342.182074][T12604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7665'. [ 3342.213691][T11782] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 3342.325842][T11782] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input109 [ 3342.366656][T12598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3342.468293][T12604] IPVS: length: 149 != 17667290688 [ 3342.541334][T12598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3343.179030][T12617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3343.190680][T12617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3343.425299][T12621] lo: left promiscuous mode [ 3343.435439][T12621] tunl0: left promiscuous mode [ 3343.441889][T12621] gre0: left promiscuous mode [ 3343.447919][T12621] gretap0: left promiscuous mode [ 3343.454211][T12621] erspan0: left promiscuous mode [ 3343.462666][T12621] ip_vti0: left promiscuous mode [ 3343.469705][T12621] ip6_vti0: left promiscuous mode [ 3343.476124][T12621] sit0: left promiscuous mode [ 3343.481877][T12621] ip6tnl0: left promiscuous mode [ 3343.489166][T12621] ip6gre0: left promiscuous mode [ 3343.490059][T12618] vim2m vim2m.0: vidioc_s_fmt queue busy [ 3343.503475][T12621] syz_tun: left promiscuous mode [ 3343.510880][T12621] ip6gretap0: left promiscuous mode [ 3343.516859][T12621] dummy0: left promiscuous mode [ 3343.522633][T12621] nlmon0: left promiscuous mode [ 3343.581650][T12621] caif0: left promiscuous mode [ 3343.586525][T12621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 3344.917695][ T6467] usb 3-1: USB disconnect, device number 54 [ 3345.089226][T11782] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 3345.284381][T11782] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 3345.332657][T11782] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 3345.354082][T11782] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 35185, setting to 64 [ 3345.660533][T11782] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3346.039509][T11782] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3346.305743][T12626] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3346.460930][T12626] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 3346.488195][T11782] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3346.530256][T12631] "syz.3.7669" (12631) uses obsolete ecb(arc4) skcipher [ 3347.956869][T11782] usb 6-1: USB disconnect, device number 40 [ 3348.134694][T12662] random: crng reseeded on system resumption [ 3350.135968][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7677'. [ 3350.634430][T12691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7678'. [ 3350.782992][T12685] IPVS: length: 149 != 17667290688 [ 3351.893964][T12692] IPVS: length: 149 != 17667290688 [ 3352.381804][T12703] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 3354.565761][T12718] binder: 12706:12718 ioctl c0306201 0 returned -14 [ 3356.759492][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7685'. [ 3356.772923][T12742] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7685'. [ 3357.221565][ T6467] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 3357.570434][ T6467] usb 6-1: Using ep0 maxpacket: 8 [ 3357.578278][ T6467] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 3357.597611][ T6467] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3357.648684][ T6467] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3357.711270][ T6467] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3357.728948][ T6467] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3357.772069][ T6467] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3357.829545][ T6467] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3357.880730][T12751] bridge32: entered promiscuous mode [ 3358.267646][ T6467] usb 6-1: GET_CAPABILITIES returned 0 [ 3358.276217][ T6467] usbtmc 6-1:16.0: can't read capabilities [ 3358.495793][T12742] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 3358.601922][ T6467] usb 6-1: USB disconnect, device number 41 [ 3358.879085][T23338] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 3359.359003][T23338] usb 3-1: device descriptor read/64, error -71 [ 3359.680771][T23338] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 3359.848977][T23338] usb 3-1: device descriptor read/64, error -71 [ 3359.979667][T23338] usb usb3-port1: attempt power cycle [ 3360.358938][T23338] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 3360.386588][T23338] usb 3-1: device descriptor read/8, error -71 [ 3360.586362][T12777] random: crng reseeded on system resumption [ 3360.939994][T23338] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 3361.043323][T23338] usb 3-1: device descriptor read/8, error -71 [ 3361.116533][T12787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7691'. [ 3361.186882][T23338] usb usb3-port1: unable to enumerate USB device [ 3361.622349][T12787] IPVS: length: 149 != 17667290688 [ 3362.728455][T12805] Failed to get privilege flags for destination (handle=0x2:0x25) [ 3363.026437][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7695'. [ 3363.139050][T11459] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 3363.300101][T11459] usb 4-1: device descriptor read/64, error -71 [ 3363.538913][T11459] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 3363.698861][T11459] usb 4-1: device descriptor read/64, error -71 [ 3363.819291][T11459] usb usb4-port1: attempt power cycle [ 3364.272376][T11459] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 3364.330702][T11459] usb 4-1: device descriptor read/8, error -71 [ 3364.659608][T11459] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 3364.682062][T11459] usb 4-1: device descriptor read/8, error -71 [ 3364.829731][T11459] usb usb4-port1: unable to enumerate USB device [ 3368.236847][T12834] fuse: Unknown parameter '0xffffffffffffffff' [ 3376.271140][T11459] usb 2-1: USB disconnect, device number 120 [ 3389.311440][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.317824][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.751861][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.758309][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.192450][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.199527][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 3522.429428][ T31] INFO: task syz.5.835:8846 blocked for more than 143 seconds. [ 3522.437078][ T31] Tainted: G L syzkaller #0 [ 3522.443770][ T31] Blocked by coredump. [ 3522.448375][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3522.457211][ T31] task:syz.5.835 state:D stack:25760 pid:8846 tgid:8846 ppid:7801 task_flags:0x40044c flags:0x10080003 [ 3522.469404][ T31] Call Trace: [ 3522.472708][ T31] [ 3522.475646][ T31] __schedule+0x14bc/0x5000 [ 3522.480290][ T31] ? __pfx___schedule+0x10/0x10 [ 3522.485176][ T31] ? schedule+0x91/0x360 [ 3522.489653][ T31] schedule+0x165/0x360 [ 3522.493838][ T31] schedule_preempt_disabled+0x13/0x30 [ 3522.499481][ T31] __mutex_lock+0x7e6/0x1350 [ 3522.504114][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3522.509620][ T31] ? rfkill_unregister+0xc8/0x220 [ 3522.514689][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3522.519869][ T31] ? __pfx_device_del+0x10/0x10 [ 3522.524755][ T31] ? hci_sock_dev_event+0x42d/0x630 [ 3522.530093][ T31] ? __cancel_work_sync+0x5c/0x110 [ 3522.535247][ T31] rfkill_unregister+0xc8/0x220 [ 3522.540364][ T31] hci_unregister_dev+0x374/0x5b0 [ 3522.545437][ T31] vhci_release+0x152/0x1a0 [ 3522.550090][ T31] ? __pfx_vhci_release+0x10/0x10 [ 3522.555148][ T31] __fput+0x44c/0xa70 [ 3522.559317][ T31] task_work_run+0x1d4/0x260 [ 3522.563937][ T31] ? __pfx_task_work_run+0x10/0x10 [ 3522.569149][ T31] ? kmem_cache_free+0x197/0x620 [ 3522.574107][ T31] ? do_exit+0x6c0/0x2310 [ 3522.578450][ T31] do_exit+0x6c5/0x2310 [ 3522.582761][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 3522.588179][ T31] ? do_raw_spin_lock+0x121/0x290 [ 3522.593323][ T31] ? __pfx_do_exit+0x10/0x10 [ 3522.597951][ T31] do_group_exit+0x21c/0x2d0 [ 3522.602655][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3522.607883][ T31] get_signal+0x1285/0x1340 [ 3522.612500][ T31] arch_do_signal_or_restart+0x9a/0x7a0 [ 3522.618094][ T31] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 3522.623439][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3522.629894][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 3522.635425][ T31] exit_to_user_mode_loop+0x87/0x4f0 [ 3522.640802][ T31] ? rcu_is_watching+0x15/0xb0 [ 3522.645589][ T31] __do_fast_syscall_32+0x3cb/0x570 [ 3522.650924][ T31] ? rcu_is_watching+0x15/0xb0 [ 3522.655716][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3522.660850][ T31] do_fast_syscall_32+0x34/0x80 [ 3522.665743][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3522.672195][ T31] RIP: 0023:0xf70bd539 [ 3522.676293][ T31] RSP: 002b:00000000f54ad460 EFLAGS: 00000206 ORIG_RAX: 000000000000010b [ 3522.684923][ T31] RAX: fffffffffffffdfc RBX: 0000000000000000 RCX: 0000000000000000 [ 3522.693013][ T31] RDX: 00000000f54ad494 RSI: 00000000f54ad48c RDI: 00000000f54ad494 [ 3522.701094][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3522.709176][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3522.717180][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3522.725276][ T31] [ 3522.728354][ T31] INFO: task kworker/1:0:23338 blocked for more than 143 seconds. [ 3522.736517][ T31] Tainted: G L syzkaller #0 [ 3522.743117][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3522.751878][ T31] task:kworker/1:0 state:D stack:19992 pid:23338 tgid:23338 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 3522.764027][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 3522.770858][ T31] Call Trace: [ 3522.774171][ T31] [ 3522.777098][ T31] __schedule+0x14bc/0x5000 [ 3522.781710][ T31] ? __pfx___schedule+0x10/0x10 [ 3522.786593][ T31] ? schedule+0x91/0x360 [ 3522.790971][ T31] schedule+0x165/0x360 [ 3522.795238][ T31] schedule_preempt_disabled+0x13/0x30 [ 3522.800828][ T31] __mutex_lock+0x7e6/0x1350 [ 3522.805466][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3522.810360][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 3522.816827][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3522.821970][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 3522.827928][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 3522.833768][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 3522.839937][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 3522.845684][ T31] process_scheduled_works+0xad1/0x1770 [ 3522.851429][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 3522.857460][ T31] worker_thread+0x8a0/0xda0 [ 3522.862200][ T31] kthread+0x711/0x8a0 [ 3522.866314][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3522.871512][ T31] ? __pfx_kthread+0x10/0x10 [ 3522.876131][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3522.881458][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3522.886705][ T31] ? __pfx_kthread+0x10/0x10 [ 3522.891417][ T31] ret_from_fork+0x599/0xb30 [ 3522.896037][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3522.901243][ T31] ? __switch_to_asm+0x39/0x70 [ 3522.906035][ T31] ? __switch_to_asm+0x33/0x70 [ 3522.910982][ T31] ? __pfx_kthread+0x10/0x10 [ 3522.915598][ T31] ret_from_fork_asm+0x1a/0x30 [ 3522.920454][ T31] [ 3522.923523][ T31] INFO: task syz.5.7690:12793 blocked for more than 143 seconds. [ 3522.931360][ T31] Tainted: G L syzkaller #0 [ 3522.937892][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3522.947060][ T31] task:syz.5.7690 state:D stack:28024 pid:12793 tgid:12773 ppid:7801 task_flags:0x400040 flags:0x10080002 [ 3522.959233][ T31] Call Trace: [ 3522.962542][ T31] [ 3522.965486][ T31] __schedule+0x14bc/0x5000 [ 3522.970316][ T31] ? __pfx___schedule+0x10/0x10 [ 3522.975195][ T31] ? schedule+0x91/0x360 [ 3522.979684][ T31] schedule+0x165/0x360 [ 3522.983876][ T31] schedule_preempt_disabled+0x13/0x30 [ 3522.990024][ T31] __mutex_lock+0x7e6/0x1350 [ 3522.994647][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3522.999667][ T31] ? rfkill_unregister+0xc8/0x220 [ 3523.004724][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3523.009811][ T31] ? __pfx_device_del+0x10/0x10 [ 3523.014688][ T31] ? __cancel_work_sync+0x5c/0x110 [ 3523.019937][ T31] rfkill_unregister+0xc8/0x220 [ 3523.024818][ T31] nfc_unregister_device+0x96/0x300 [ 3523.030146][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 3523.035986][ T31] virtual_ncidev_close+0x56/0x90 [ 3523.041110][ T31] __fput+0x44c/0xa70 [ 3523.045128][ T31] task_work_run+0x1d4/0x260 [ 3523.049804][ T31] ? __pfx_task_work_run+0x10/0x10 [ 3523.054969][ T31] ? __se_sys_close_range+0x4ed/0x650 [ 3523.060431][ T31] ? exit_to_user_mode_loop+0x55/0x4f0 [ 3523.066000][ T31] exit_to_user_mode_loop+0xff/0x4f0 [ 3523.071435][ T31] ? rcu_is_watching+0x15/0xb0 [ 3523.076242][ T31] __do_fast_syscall_32+0x3cb/0x570 [ 3523.081572][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3523.086641][ T31] do_fast_syscall_32+0x34/0x80 [ 3523.092712][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3523.099239][ T31] RIP: 0023:0xf70bd539 [ 3523.103539][ T31] RSP: 002b:00000000f43df55c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 3523.112083][ T31] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00000000ffffffff [ 3523.120115][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3523.128084][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3523.136159][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3523.144253][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3523.153135][ T31] [ 3523.156191][ T31] INFO: task syz.1.7693:12791 blocked for more than 144 seconds. [ 3523.164114][ T31] Tainted: G L syzkaller #0 [ 3523.170695][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3523.179582][ T31] task:syz.1.7693 state:D stack:25520 pid:12791 tgid:12783 ppid:5847 task_flags:0x400040 flags:0x10080002 [ 3523.191586][ T31] Call Trace: [ 3523.194888][ T31] [ 3523.197925][ T31] __schedule+0x14bc/0x5000 [ 3523.202642][ T31] ? __pfx___schedule+0x10/0x10 [ 3523.207555][ T31] ? schedule+0x91/0x360 [ 3523.212004][ T31] schedule+0x165/0x360 [ 3523.216226][ T31] schedule_preempt_disabled+0x13/0x30 [ 3523.221795][ T31] __mutex_lock+0x7e6/0x1350 [ 3523.226493][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3523.231611][ T31] ? nfc_dev_down+0x3b/0x290 [ 3523.236211][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3523.241312][ T31] ? do_raw_spin_lock+0x121/0x290 [ 3523.246369][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 3523.252397][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3523.257635][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 3523.263905][ T31] nfc_dev_down+0x3b/0x290 [ 3523.268340][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 3523.274950][ T31] nfc_rfkill_set_block+0x2d/0x100 [ 3523.280208][ T31] rfkill_set_block+0x1d2/0x440 [ 3523.285088][ T31] rfkill_fop_write+0x44b/0x570 [ 3523.290169][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 3523.295569][ T31] ? security_kernfs_init_security+0x250/0x290 [ 3523.301859][ T31] ? rw_verify_area+0x255/0x4d0 [ 3523.306758][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 3523.312409][ T31] vfs_write+0x27e/0xb30 [ 3523.316660][ T31] ? __pfx_vfs_write+0x10/0x10 [ 3523.321517][ T31] ? __fget_files+0x2a/0x420 [ 3523.326143][ T31] ? __fget_files+0x2a/0x420 [ 3523.330963][ T31] ? __fget_files+0x3a0/0x420 [ 3523.335663][ T31] ? __fget_files+0x2a/0x420 [ 3523.340370][ T31] ksys_write+0x145/0x250 [ 3523.344823][ T31] ? __pfx_ksys_write+0x10/0x10 [ 3523.349818][ T31] ? __do_fast_syscall_32+0xbe/0x570 [ 3523.355159][ T31] __do_fast_syscall_32+0x1f7/0x570 [ 3523.360542][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3523.365597][ T31] do_fast_syscall_32+0x34/0x80 [ 3523.370578][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3523.376945][ T31] RIP: 0023:0xf70dd539 [ 3523.381143][ T31] RSP: 002b:00000000f506855c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 3523.389923][ T31] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 3523.397946][ T31] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 3523.406029][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3523.414074][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3523.422285][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3523.430310][ T31] [ 3523.433337][ T31] INFO: task syz.2.7695:12811 blocked for more than 144 seconds. [ 3523.441253][ T31] Tainted: G L syzkaller #0 [ 3523.447760][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3523.456485][ T31] task:syz.2.7695 state:D stack:26896 pid:12811 tgid:12800 ppid:5848 task_flags:0x400040 flags:0x10080002 [ 3523.468479][ T31] Call Trace: [ 3523.471958][ T31] [ 3523.474914][ T31] __schedule+0x14bc/0x5000 [ 3523.479587][ T31] ? __pfx___schedule+0x10/0x10 [ 3523.484503][ T31] ? lock_acquire+0x16c/0x340 [ 3523.489255][ T31] ? schedule+0x91/0x360 [ 3523.493534][ T31] schedule+0x165/0x360 [ 3523.497712][ T31] schedule_preempt_disabled+0x13/0x30 [ 3523.503294][ T31] __mutex_lock+0x7e6/0x1350 [ 3523.507915][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3523.512796][ T31] ? rfkill_fop_open+0x12d/0x820 [ 3523.517763][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3523.522877][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 3523.528203][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 3523.533675][ T31] rfkill_fop_open+0x12d/0x820 [ 3523.538478][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 3523.543895][ T31] misc_open+0x2d5/0x350 [ 3523.548162][ T31] chrdev_open+0x4cc/0x5e0 [ 3523.553189][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3523.558171][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 3523.564629][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3523.569636][ T31] do_dentry_open+0x7ce/0x1420 [ 3523.574413][ T31] vfs_open+0x3b/0x340 [ 3523.578477][ T31] ? path_openat+0x33f3/0x3dd0 [ 3523.583331][ T31] path_openat+0x340e/0x3dd0 [ 3523.587948][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 3523.593410][ T31] ? stack_depot_save_flags+0x40/0x850 [ 3523.598968][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 3523.604634][ T31] ? getname_flags+0xb8/0x540 [ 3523.610335][ T31] ? __pfx_path_openat+0x10/0x10 [ 3523.615322][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3523.620672][ T31] do_filp_open+0x1fa/0x410 [ 3523.625190][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 3523.630309][ T31] ? _raw_spin_unlock+0x28/0x50 [ 3523.635185][ T31] ? alloc_fd+0x64c/0x6c0 [ 3523.639601][ T31] do_sys_openat2+0x121/0x200 [ 3523.644310][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 3523.649617][ T31] ? rcu_is_watching+0x15/0xb0 [ 3523.654408][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 3523.660096][ T31] __do_fast_syscall_32+0x1f7/0x570 [ 3523.665324][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3523.670416][ T31] do_fast_syscall_32+0x34/0x80 [ 3523.675293][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3523.681754][ T31] RIP: 0023:0xf708d539 [ 3523.685843][ T31] RSP: 002b:00000000f4bf555c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 3523.694320][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 3523.702361][ T31] RDX: 0000000000060041 RSI: 0000000000000000 RDI: 0000000000000000 [ 3523.710529][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3523.718516][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3523.726613][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3523.734691][ T31] [ 3523.737721][ T31] INFO: task syz.3.7700:12829 blocked for more than 144 seconds. [ 3523.745573][ T31] Tainted: G L syzkaller #0 [ 3523.752144][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3523.761169][ T31] task:syz.3.7700 state:D stack:28120 pid:12829 tgid:12828 ppid:5849 task_flags:0x400040 flags:0x10080002 [ 3523.773405][ T31] Call Trace: [ 3523.776702][ T31] [ 3523.779705][ T31] __schedule+0x14bc/0x5000 [ 3523.784253][ T31] ? __pfx___schedule+0x10/0x10 [ 3523.789191][ T31] ? schedule+0x91/0x360 [ 3523.793462][ T31] schedule+0x165/0x360 [ 3523.797613][ T31] schedule_preempt_disabled+0x13/0x30 [ 3523.803175][ T31] __mutex_lock+0x7e6/0x1350 [ 3523.807792][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3523.812816][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3523.817613][ T31] ? misc_open+0x51/0x350 [ 3523.822035][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3523.827099][ T31] misc_open+0x51/0x350 [ 3523.831336][ T31] chrdev_open+0x4cc/0x5e0 [ 3523.835777][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3523.840804][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 3523.847172][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3523.852182][ T31] do_dentry_open+0x7ce/0x1420 [ 3523.856978][ T31] vfs_open+0x3b/0x340 [ 3523.861148][ T31] ? path_openat+0x33f3/0x3dd0 [ 3523.865929][ T31] path_openat+0x340e/0x3dd0 [ 3523.870682][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 3523.876089][ T31] ? stack_depot_save_flags+0x40/0x850 [ 3523.881737][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 3523.887400][ T31] ? getname_flags+0xb8/0x540 [ 3523.892208][ T31] ? __pfx_path_openat+0x10/0x10 [ 3523.897179][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3523.902307][ T31] do_filp_open+0x1fa/0x410 [ 3523.906838][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 3523.912018][ T31] ? _raw_spin_unlock+0x28/0x50 [ 3523.916910][ T31] ? alloc_fd+0x64c/0x6c0 [ 3523.921436][ T31] do_sys_openat2+0x121/0x200 [ 3523.926143][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3523.931433][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 3523.936653][ T31] ? __ia32_compat_sys_rt_sigprocmask+0x25b/0x390 [ 3523.943257][ T31] ? __pfx___ia32_compat_sys_rt_sigprocmask+0x10/0x10 [ 3523.950127][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 3523.955092][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3523.960378][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 3523.965956][ T31] __do_fast_syscall_32+0x1f7/0x570 [ 3523.971219][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3523.976274][ T31] do_fast_syscall_32+0x34/0x80 [ 3523.981297][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3523.987648][ T31] RIP: 0023:0xf7fe4539 [ 3523.991793][ T31] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 3524.000286][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 3524.008253][ T31] RDX: 0000000000040241 RSI: 0000000000000000 RDI: 0000000000000000 [ 3524.016314][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3524.024444][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3524.033186][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3524.041308][ T31] [ 3524.044438][ T31] INFO: task syz.3.7700:12832 blocked for more than 144 seconds. [ 3524.052271][ T31] Tainted: G L syzkaller #0 [ 3524.058968][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3524.067654][ T31] task:syz.3.7700 state:D stack:26736 pid:12832 tgid:12828 ppid:5849 task_flags:0x400040 flags:0x10080002 [ 3524.079708][ T31] Call Trace: [ 3524.083003][ T31] [ 3524.085935][ T31] __schedule+0x14bc/0x5000 [ 3524.090555][ T31] ? __pfx___schedule+0x10/0x10 [ 3524.095437][ T31] ? schedule+0x91/0x360 [ 3524.099868][ T31] schedule+0x165/0x360 [ 3524.104060][ T31] schedule_preempt_disabled+0x13/0x30 [ 3524.109636][ T31] __mutex_lock+0x7e6/0x1350 [ 3524.114252][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3524.119296][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3524.124091][ T31] ? misc_open+0x51/0x350 [ 3524.128422][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3524.133567][ T31] misc_open+0x51/0x350 [ 3524.137747][ T31] chrdev_open+0x4cc/0x5e0 [ 3524.142262][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3524.147224][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 3524.153656][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3524.158695][ T31] do_dentry_open+0x7ce/0x1420 [ 3524.163506][ T31] vfs_open+0x3b/0x340 [ 3524.167607][ T31] ? path_openat+0x33f3/0x3dd0 [ 3524.172807][ T31] path_openat+0x340e/0x3dd0 [ 3524.177543][ T31] ? irqentry_exit+0x5dd/0x660 [ 3524.182393][ T31] ? __pfx_path_openat+0x10/0x10 [ 3524.187358][ T31] ? do_filp_open+0x1b2/0x410 [ 3524.192516][ T31] do_filp_open+0x1fa/0x410 [ 3524.197027][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 3524.202184][ T31] ? _raw_spin_unlock+0x28/0x50 [ 3524.207071][ T31] ? alloc_fd+0x64c/0x6c0 [ 3524.211500][ T31] do_sys_openat2+0x121/0x200 [ 3524.216209][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 3524.221509][ T31] ? rcu_is_watching+0x15/0xb0 [ 3524.226301][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 3524.231999][ T31] __do_fast_syscall_32+0x1f7/0x570 [ 3524.237320][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3524.242562][ T31] do_fast_syscall_32+0x34/0x80 [ 3524.247442][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3524.253839][ T31] RIP: 0023:0xf7fe4539 [ 3524.257927][ T31] RSP: 002b:00000000f507155c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 3524.266461][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 3524.274657][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 3524.282775][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3524.290903][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3524.299014][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3524.307135][ T31] [ 3524.310320][ T31] INFO: task syz.3.7700:12833 blocked for more than 145 seconds. [ 3524.318168][ T31] Tainted: G L syzkaller #0 [ 3524.324946][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3524.333782][ T31] task:syz.3.7700 state:D stack:28120 pid:12833 tgid:12828 ppid:5849 task_flags:0x400040 flags:0x10080002 [ 3524.345880][ T31] Call Trace: [ 3524.349441][ T31] [ 3524.352442][ T31] __schedule+0x14bc/0x5000 [ 3524.356966][ T31] ? __pfx___schedule+0x10/0x10 [ 3524.361935][ T31] ? schedule+0x91/0x360 [ 3524.366201][ T31] schedule+0x165/0x360 [ 3524.370516][ T31] schedule_preempt_disabled+0x13/0x30 [ 3524.376086][ T31] __mutex_lock+0x7e6/0x1350 [ 3524.380775][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3524.385746][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3524.390759][ T31] ? misc_open+0x51/0x350 [ 3524.395116][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3524.400222][ T31] misc_open+0x51/0x350 [ 3524.404398][ T31] chrdev_open+0x4cc/0x5e0 [ 3524.409010][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3524.414006][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 3524.420455][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3524.425429][ T31] do_dentry_open+0x7ce/0x1420 [ 3524.430954][ T31] vfs_open+0x3b/0x340 [ 3524.435107][ T31] ? path_openat+0x33f3/0x3dd0 [ 3524.440063][ T31] path_openat+0x340e/0x3dd0 [ 3524.444680][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 3524.450144][ T31] ? stack_depot_save_flags+0x40/0x850 [ 3524.455647][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 3524.461523][ T31] ? getname_flags+0xb8/0x540 [ 3524.466238][ T31] ? __pfx_path_openat+0x10/0x10 [ 3524.471330][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3524.476311][ T31] do_filp_open+0x1fa/0x410 [ 3524.480934][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 3524.485997][ T31] ? _raw_spin_unlock+0x28/0x50 [ 3524.490987][ T31] ? alloc_fd+0x64c/0x6c0 [ 3524.495350][ T31] do_sys_openat2+0x121/0x200 [ 3524.500145][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 3524.505381][ T31] ? rcu_is_watching+0x15/0xb0 [ 3524.510263][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 3524.515845][ T31] __do_fast_syscall_32+0x1f7/0x570 [ 3524.521262][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3524.526330][ T31] do_fast_syscall_32+0x34/0x80 [ 3524.531300][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3524.537749][ T31] RIP: 0023:0xf7fe4539 [ 3524.541926][ T31] RSP: 002b:00000000f4c4e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 3524.550417][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 3524.558417][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 3524.566558][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3524.574610][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3524.582934][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3524.591543][ T31] [ 3524.594592][ T31] INFO: task syz-executor:12836 blocked for more than 145 seconds. [ 3524.602567][ T31] Tainted: G L syzkaller #0 [ 3524.609140][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3524.617816][ T31] task:syz-executor state:D stack:23432 pid:12836 tgid:12836 ppid:5819 task_flags:0x400000 flags:0x10080002 [ 3524.629881][ T31] Call Trace: [ 3524.633203][ T31] [ 3524.636139][ T31] __schedule+0x14bc/0x5000 [ 3524.640971][ T31] ? __pfx___schedule+0x10/0x10 [ 3524.645866][ T31] ? schedule+0x91/0x360 [ 3524.650202][ T31] schedule+0x165/0x360 [ 3524.654399][ T31] schedule_preempt_disabled+0x13/0x30 [ 3524.659976][ T31] __mutex_lock+0x7e6/0x1350 [ 3524.664595][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3524.669618][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3524.674440][ T31] ? misc_open+0x51/0x350 [ 3524.678899][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3524.683961][ T31] misc_open+0x51/0x350 [ 3524.688112][ T31] chrdev_open+0x4cc/0x5e0 [ 3524.692630][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3524.697603][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 3524.704010][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3524.709052][ T31] do_dentry_open+0x7ce/0x1420 [ 3524.713904][ T31] vfs_open+0x3b/0x340 [ 3524.717995][ T31] ? path_openat+0x33f3/0x3dd0 [ 3524.722884][ T31] path_openat+0x340e/0x3dd0 [ 3524.727515][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 3524.733018][ T31] ? stack_depot_save_flags+0x40/0x850 [ 3524.738498][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 3524.744419][ T31] ? getname_flags+0xb8/0x540 [ 3524.749208][ T31] ? __pfx_path_openat+0x10/0x10 [ 3524.754363][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3524.759438][ T31] do_filp_open+0x1fa/0x410 [ 3524.763963][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 3524.769129][ T31] ? _raw_spin_unlock+0x28/0x50 [ 3524.774001][ T31] ? alloc_fd+0x64c/0x6c0 [ 3524.778334][ T31] do_sys_openat2+0x121/0x200 [ 3524.783104][ T31] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3524.788240][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 3524.793534][ T31] ? __fget_files+0x2a/0x420 [ 3524.798151][ T31] ? __fget_files+0x2a/0x420 [ 3524.802879][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 3524.808459][ T31] __do_fast_syscall_32+0x1f7/0x570 [ 3524.813768][ T31] ? rcu_is_watching+0x15/0xb0 [ 3524.818567][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3524.823671][ T31] do_fast_syscall_32+0x34/0x80 [ 3524.828555][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3524.834995][ T31] RIP: 0023:0xf70cd539 [ 3524.839152][ T31] RSP: 002b:00000000ff9a2610 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 3524.847599][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72b868e [ 3524.856010][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f7466ff4 [ 3524.864263][ T31] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 3524.872357][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3524.880368][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3524.888343][ T31] [ 3524.891466][ T31] INFO: task syz-executor:12838 blocked for more than 145 seconds. [ 3524.899478][ T31] Tainted: G L syzkaller #0 [ 3524.906007][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3524.914798][ T31] task:syz-executor state:D stack:24280 pid:12838 tgid:12838 ppid:5819 task_flags:0x400000 flags:0x10080000 [ 3524.927186][ T31] Call Trace: [ 3524.930545][ T31] [ 3524.933491][ T31] __schedule+0x14bc/0x5000 [ 3524.938010][ T31] ? __pfx___schedule+0x10/0x10 [ 3524.942958][ T31] ? schedule+0x91/0x360 [ 3524.947239][ T31] schedule+0x165/0x360 [ 3524.951552][ T31] schedule_preempt_disabled+0x13/0x30 [ 3524.957044][ T31] __mutex_lock+0x7e6/0x1350 [ 3524.961745][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3524.966777][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3524.971662][ T31] ? misc_open+0x51/0x350 [ 3524.976024][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3524.981193][ T31] misc_open+0x51/0x350 [ 3524.985385][ T31] chrdev_open+0x4cc/0x5e0 [ 3524.990178][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3524.995120][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 3525.001568][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3525.006539][ T31] do_dentry_open+0x7ce/0x1420 [ 3525.011432][ T31] vfs_open+0x3b/0x340 [ 3525.015525][ T31] ? path_openat+0x33f3/0x3dd0 [ 3525.020378][ T31] path_openat+0x340e/0x3dd0 [ 3525.024995][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 3525.030453][ T31] ? stack_depot_save_flags+0x40/0x850 [ 3525.035944][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 3525.041623][ T31] ? getname_flags+0xb8/0x540 [ 3525.046324][ T31] ? __pfx_path_openat+0x10/0x10 [ 3525.051402][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3525.056370][ T31] do_filp_open+0x1fa/0x410 [ 3525.060936][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 3525.065990][ T31] ? _raw_spin_unlock+0x28/0x50 [ 3525.071247][ T31] ? alloc_fd+0x64c/0x6c0 [ 3525.075590][ T31] do_sys_openat2+0x121/0x200 [ 3525.080363][ T31] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3525.085499][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 3525.090793][ T31] ? __fget_files+0x2a/0x420 [ 3525.095415][ T31] ? __fget_files+0x2a/0x420 [ 3525.100119][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 3525.105711][ T31] __do_fast_syscall_32+0x1f7/0x570 [ 3525.111060][ T31] ? rcu_is_watching+0x15/0xb0 [ 3525.115864][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3525.121017][ T31] do_fast_syscall_32+0x34/0x80 [ 3525.125902][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3525.132485][ T31] RIP: 0023:0xf701d539 [ 3525.136552][ T31] RSP: 002b:00000000fff7da80 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 3525.145044][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f720868e [ 3525.153100][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73b6ff4 [ 3525.161157][ T31] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 3525.169233][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3525.177201][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3525.185228][ T31] [ 3525.188263][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 3525.197457][ T31] INFO: task syz.4.7703:12840 blocked for more than 146 seconds. [ 3525.205380][ T31] Tainted: G L syzkaller #0 [ 3525.211942][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3525.220655][ T31] task:syz.4.7703 state:D stack:28120 pid:12840 tgid:12839 ppid:5846 task_flags:0x400040 flags:0x10080002 [ 3525.233209][ T31] Call Trace: [ 3525.236584][ T31] [ 3525.239607][ T31] __schedule+0x14bc/0x5000 [ 3525.244184][ T31] ? __pfx___schedule+0x10/0x10 [ 3525.249203][ T31] ? schedule+0x91/0x360 [ 3525.253494][ T31] schedule+0x165/0x360 [ 3525.257794][ T31] schedule_preempt_disabled+0x13/0x30 [ 3525.263380][ T31] __mutex_lock+0x7e6/0x1350 [ 3525.267992][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3525.273014][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3525.277808][ T31] ? misc_open+0x51/0x350 [ 3525.282190][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3525.287256][ T31] misc_open+0x51/0x350 [ 3525.291518][ T31] chrdev_open+0x4cc/0x5e0 [ 3525.295960][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3525.301156][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 3525.307624][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3525.312987][ T31] do_dentry_open+0x7ce/0x1420 [ 3525.317865][ T31] vfs_open+0x3b/0x340 [ 3525.322050][ T31] ? path_openat+0x33f3/0x3dd0 [ 3525.326838][ T31] path_openat+0x340e/0x3dd0 [ 3525.331562][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 3525.336969][ T31] ? stack_depot_save_flags+0x40/0x850 [ 3525.342524][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 3525.348182][ T31] ? getname_flags+0xb8/0x540 [ 3525.352976][ T31] ? __pfx_path_openat+0x10/0x10 [ 3525.357939][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3525.363001][ T31] do_filp_open+0x1fa/0x410 [ 3525.367525][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 3525.372725][ T31] ? _raw_spin_unlock+0x28/0x50 [ 3525.377612][ T31] ? alloc_fd+0x64c/0x6c0 [ 3525.382060][ T31] do_sys_openat2+0x121/0x200 [ 3525.386777][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 3525.392265][ T31] ? rcu_is_watching+0x15/0xb0 [ 3525.397057][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 3525.402687][ T31] __do_fast_syscall_32+0x1f7/0x570 [ 3525.407914][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3525.413043][ T31] do_fast_syscall_32+0x34/0x80 [ 3525.417920][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3525.424288][ T31] RIP: 0023:0xf70ed539 [ 3525.428372][ T31] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 3525.436918][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 3525.444968][ T31] RDX: 0000000000040241 RSI: 0000000000000000 RDI: 0000000000000000 [ 3525.452993][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3525.461002][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3525.469512][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3525.477515][ T31] [ 3525.480609][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 3525.489777][ T31] INFO: task syz.4.7703:12846 blocked for more than 146 seconds. [ 3525.497515][ T31] Tainted: G L syzkaller #0 [ 3525.504125][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3525.513247][ T31] task:syz.4.7703 state:D stack:25488 pid:12846 tgid:12839 ppid:5846 task_flags:0x400140 flags:0x10080002 [ 3525.525220][ T31] Call Trace: [ 3525.528512][ T31] [ 3525.531544][ T31] __schedule+0x14bc/0x5000 [ 3525.536093][ T31] ? __pfx___schedule+0x10/0x10 [ 3525.541030][ T31] ? schedule+0x91/0x360 [ 3525.545297][ T31] schedule+0x165/0x360 [ 3525.549548][ T31] schedule_preempt_disabled+0x13/0x30 [ 3525.555033][ T31] __mutex_lock+0x7e6/0x1350 [ 3525.559730][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3525.564521][ T31] ? misc_open+0x51/0x350 [ 3525.568937][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3525.573993][ T31] ? preempt_schedule_common+0x83/0xd0 [ 3525.579589][ T31] ? preempt_schedule+0xae/0xc0 [ 3525.584480][ T31] misc_open+0x51/0x350 [ 3525.588758][ T31] chrdev_open+0x4cc/0x5e0 [ 3525.593212][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3525.598236][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 3525.604666][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3525.609679][ T31] do_dentry_open+0x7ce/0x1420 [ 3525.614514][ T31] vfs_open+0x3b/0x340 [ 3525.618579][ T31] ? path_openat+0x33f3/0x3dd0 [ 3525.623422][ T31] path_openat+0x340e/0x3dd0 [ 3525.628030][ T31] ? trace_sched_exit_tp+0x36/0xf0 [ 3525.633997][ T31] ? __pfx_path_openat+0x10/0x10 [ 3525.639010][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3525.643982][ T31] do_filp_open+0x1fa/0x410 [ 3525.648481][ T31] ? trace_irq_disable+0x37/0x100 [ 3525.653621][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 3525.658746][ T31] ? _raw_spin_unlock+0x28/0x50 [ 3525.663703][ T31] ? alloc_fd+0x64c/0x6c0 [ 3525.668040][ T31] do_sys_openat2+0x121/0x200 [ 3525.672884][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 3525.678110][ T31] ? rcu_is_watching+0x15/0xb0 [ 3525.682967][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 3525.688547][ T31] __do_fast_syscall_32+0x1f7/0x570 [ 3525.693874][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3525.699087][ T31] do_fast_syscall_32+0x34/0x80 [ 3525.704058][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3525.710530][ T31] RIP: 0023:0xf70ed539 [ 3525.714622][ T31] RSP: 002b:00000000f507855c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 3525.723107][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800003c0 [ 3525.731142][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 3525.739205][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3525.747191][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3525.755356][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3525.763462][ T31] [ 3525.766513][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 3525.775921][ T31] INFO: task syz-executor:12849 blocked for more than 146 seconds. [ 3525.783956][ T31] Tainted: G L syzkaller #0 [ 3525.790607][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3525.799367][ T31] task:syz-executor state:D stack:23416 pid:12849 tgid:12849 ppid:5819 task_flags:0x400000 flags:0x10080000 [ 3525.811552][ T31] Call Trace: [ 3525.814828][ T31] [ 3525.817761][ T31] __schedule+0x14bc/0x5000 [ 3525.822373][ T31] ? __pfx___schedule+0x10/0x10 [ 3525.827353][ T31] ? schedule+0x91/0x360 [ 3525.831687][ T31] schedule+0x165/0x360 [ 3525.835888][ T31] schedule_preempt_disabled+0x13/0x30 [ 3525.841415][ T31] __mutex_lock+0x7e6/0x1350 [ 3525.846049][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3525.851174][ T31] ? __mutex_lock+0x5bb/0x1350 [ 3525.855967][ T31] ? misc_open+0x51/0x350 [ 3525.860387][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 3525.865449][ T31] misc_open+0x51/0x350 [ 3525.869684][ T31] chrdev_open+0x4cc/0x5e0 [ 3525.874122][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3525.879134][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 3525.885500][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 3525.890554][ T31] do_dentry_open+0x7ce/0x1420 [ 3525.895369][ T31] vfs_open+0x3b/0x340 [ 3525.899773][ T31] ? path_openat+0x33f3/0x3dd0 [ 3525.904575][ T31] path_openat+0x340e/0x3dd0 [ 3525.909280][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 3525.914677][ T31] ? stack_depot_save_flags+0x40/0x850 [ 3525.920267][ T31] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 3525.925925][ T31] ? getname_flags+0xb8/0x540 [ 3525.930694][ T31] ? __pfx_path_openat+0x10/0x10 [ 3525.935653][ T31] ? __lock_acquire+0x6b6/0x2cf0 [ 3525.940684][ T31] do_filp_open+0x1fa/0x410 [ 3525.945207][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 3525.950339][ T31] ? _raw_spin_unlock+0x28/0x50 [ 3525.955215][ T31] ? alloc_fd+0x64c/0x6c0 [ 3525.959624][ T31] do_sys_openat2+0x121/0x200 [ 3525.964324][ T31] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 3525.969507][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 3525.974726][ T31] ? __fget_files+0x2a/0x420 [ 3525.979413][ T31] ? __fget_files+0x2a/0x420 [ 3525.984033][ T31] __ia32_compat_sys_openat+0x131/0x160 [ 3525.989669][ T31] __do_fast_syscall_32+0x1f7/0x570 [ 3525.994901][ T31] ? rcu_is_watching+0x15/0xb0 [ 3525.999738][ T31] ? do_fast_syscall_32+0x34/0x80 [ 3526.004797][ T31] do_fast_syscall_32+0x34/0x80 [ 3526.009824][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3526.016192][ T31] RIP: 0023:0xf702d539 [ 3526.020490][ T31] RSP: 002b:00000000ffa02970 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 3526.029307][ T31] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f721868e [ 3526.037314][ T31] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73c6ff4 [ 3526.045428][ T31] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 3526.053473][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3526.061530][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3526.069597][ T31] [ 3526.072631][ T31] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 3526.081826][ T31] [ 3526.081826][ T31] Showing all locks held in the system: [ 3526.089658][ T31] 2 locks held by ksoftirqd/0/15: [ 3526.094696][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 3526.104744][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 3526.114004][ T31] 1 lock held by khungtaskd/31: [ 3526.118944][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3526.128932][ T31] 2 locks held by getty/5593: [ 3526.133601][ T31] #0: ffff88814d00b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3526.143441][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 3526.153684][ T31] 1 lock held by syz.5.835/8846: [ 3526.158613][ T31] #0: ffffffff8f5f3328 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 3526.168920][ T31] 3 locks held by kworker/1:0/23338: [ 3526.174195][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 3526.185249][ T31] #1: ffffc90004797b80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 3526.198874][ T31] #2: ffffffff8f5f3328 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 3526.210355][ T31] 2 locks held by syz.5.7690/12793: [ 3526.215571][ T31] #0: ffff88804bef3100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x300 [ 3526.225458][ T31] #1: ffffffff8f5f3328 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 3526.235650][ T31] 2 locks held by syz.1.7693/12791: [ 3526.240932][ T31] #0: ffffffff8f5f3328 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 3526.251119][ T31] #1: ffff88804bef3100 (&dev->mutex){....}-{4:4}, at: nfc_dev_down+0x3b/0x290 [ 3526.260210][ T31] 2 locks held by syz.2.7695/12811: [ 3526.265430][ T31] #0: ffffffff8e795968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 3526.274898][ T31] #1: ffffffff8f5f3328 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 3526.285119][ T31] 1 lock held by syz.3.7700/12829: [ 3526.290290][ T31] #0: ffffffff8e795968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 3526.298934][ T31] 1 lock held by syz.3.7700/12832: [ 3526.304054][ T31] #0: ffffffff8e795968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 3526.312586][ T31] 1 lock held by syz.3.7700/12833: [ 3526.317708][ T31] #0: ffffffff8e795968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 3526.326398][ T31] 1 lock held by syz-executor/12836: [ 3526.331864][ T31] #0: ffffffff8e795968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 3526.340465][ T31] 1 lock held by syz-executor/12838: [ 3526.345769][ T31] #0: ffffffff8e795968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 3526.354509][ T31] 1 lock held by syz.4.7703/12840: [ 3526.359704][ T31] #0: ffffffff8e795968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 3526.368202][ T31] 1 lock held by syz.4.7703/12846: [ 3526.373384][ T31] #0: ffffffff8e795968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 3526.381934][ T31] 1 lock held by syz-executor/12849: [ 3526.387240][ T31] #0: ffffffff8e795968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 3526.395768][ T31] 1 lock held by syz-executor/12850: [ 3526.401110][ T31] #0: ffffffff8e795968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 3526.409644][ T31] 1 lock held by syz-executor/12853: [ 3526.414949][ T31] #0: ffffffff8e795968 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 3526.423478][ T31] [ 3526.425827][ T31] ============================================= [ 3526.425827][ T31] [ 3526.434524][ T31] NMI backtrace for cpu 1 [ 3526.434545][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3526.434573][ T31] Tainted: [L]=SOFTLOCKUP [ 3526.434581][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3526.434592][ T31] Call Trace: [ 3526.434601][ T31] [ 3526.434610][ T31] dump_stack_lvl+0x189/0x250 [ 3526.434644][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3526.434670][ T31] ? __pfx__printk+0x10/0x10 [ 3526.434712][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 3526.434739][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 3526.434763][ T31] ? __pfx__printk+0x10/0x10 [ 3526.434795][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3526.434829][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 3526.434854][ T31] sys_info+0x135/0x170 [ 3526.434892][ T31] watchdog+0xf95/0xfe0 [ 3526.434925][ T31] ? watchdog+0x20a/0xfe0 [ 3526.434960][ T31] kthread+0x711/0x8a0 [ 3526.434991][ T31] ? __pfx_watchdog+0x10/0x10 [ 3526.435017][ T31] ? __pfx_kthread+0x10/0x10 [ 3526.435045][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3526.435069][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3526.435093][ T31] ? __pfx_kthread+0x10/0x10 [ 3526.435121][ T31] ret_from_fork+0x599/0xb30 [ 3526.435144][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3526.435175][ T31] ? __switch_to_asm+0x39/0x70 [ 3526.435199][ T31] ? __switch_to_asm+0x33/0x70 [ 3526.435224][ T31] ? __pfx_kthread+0x10/0x10 [ 3526.435251][ T31] ret_from_fork_asm+0x1a/0x30 [ 3526.435293][ T31] [ 3526.435302][ T31] Sending NMI from CPU 1 to CPUs 0: [ 3526.591294][ C0] NMI backtrace for cpu 0 [ 3526.591316][ C0] CPU: 0 UID: 0 PID: 10661 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 3526.591339][ C0] Tainted: [L]=SOFTLOCKUP [ 3526.591346][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3526.591357][ C0] Workqueue: events_unbound toggle_allocation_gate [ 3526.591382][ C0] RIP: 0010:x2apic_send_IPI+0x73/0xe0 [ 3526.591405][ C0] Code: 89 f0 48 c1 e8 03 42 0f b6 04 20 84 c0 75 42 41 8b 16 0f ae f0 0f ae e8 83 fb 02 b8 00 04 00 00 0f 45 c3 b9 30 08 00 00 0f 30 <66> 90 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 89 fe 89 fd 48 c7 [ 3526.591419][ C0] RSP: 0018:ffffc900035a75f0 EFLAGS: 00000206 [ 3526.591433][ C0] RAX: 00000000000000fb RBX: 00000000000000fb RCX: 0000000000000830 [ 3526.591445][ C0] RDX: 0000000000000001 RSI: 00000000000000fb RDI: 0000000000000001 [ 3526.591456][ C0] RBP: ffffc900035a77a0 R08: ffffffff8f817677 R09: 1ffffffff1f02ece [ 3526.591468][ C0] R10: dffffc0000000000 R11: ffffffff8171a740 R12: dffffc0000000000 [ 3526.591480][ C0] R13: dffffc0000000000 R14: ffff8880b87201b0 R15: ffffffff8d9a6dd8 [ 3526.591493][ C0] FS: 0000000000000000(0000) GS:ffff888125e44000(0000) knlGS:0000000000000000 [ 3526.591507][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3526.591519][ C0] CR2: 000055facacf2168 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 3526.591536][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3526.591546][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 3526.591557][ C0] Call Trace: [ 3526.591564][ C0] [ 3526.591573][ C0] smp_call_function_many_cond+0xabb/0x12b0 [ 3526.591601][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 3526.591625][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 3526.591646][ C0] ? perf_event_text_poke+0x13d/0x190 [ 3526.591669][ C0] ? kmem_cache_alloc_bulk_noprof+0xaa/0x720 [ 3526.591687][ C0] ? __pfx___text_poke+0x10/0x10 [ 3526.591705][ C0] ? rcu_is_watching+0x15/0xb0 [ 3526.591724][ C0] ? trace_contention_end+0x39/0x100 [ 3526.591748][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 3526.591766][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 3526.591790][ C0] smp_text_poke_batch_finish+0xe98/0x1130 [ 3526.591814][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 3526.591837][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 3526.591865][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 3526.591887][ C0] static_key_enable_cpuslocked+0x128/0x240 [ 3526.591911][ C0] static_key_enable+0x1a/0x20 [ 3526.591930][ C0] toggle_allocation_gate+0xad/0x240 [ 3526.591948][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 3526.591966][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 3526.591987][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 3526.592002][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 3526.592018][ C0] process_scheduled_works+0xad1/0x1770 [ 3526.592047][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 3526.592070][ C0] worker_thread+0x8a0/0xda0 [ 3526.592089][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3526.592113][ C0] ? __kthread_parkme+0x7b/0x200 [ 3526.592142][ C0] kthread+0x711/0x8a0 [ 3526.592163][ C0] ? __pfx_worker_thread+0x10/0x10 [ 3526.592179][ C0] ? __pfx_kthread+0x10/0x10 [ 3526.592199][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 3526.592217][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 3526.592236][ C0] ? __pfx_kthread+0x10/0x10 [ 3526.592256][ C0] ret_from_fork+0x599/0xb30 [ 3526.592273][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 3526.592292][ C0] ? __switch_to_asm+0x39/0x70 [ 3526.592311][ C0] ? __switch_to_asm+0x33/0x70 [ 3526.592330][ C0] ? __pfx_kthread+0x10/0x10 [ 3526.592350][ C0] ret_from_fork_asm+0x1a/0x30 [ 3526.592377][ C0] [ 3526.593297][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3526.593317][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3526.593343][ T31] Tainted: [L]=SOFTLOCKUP [ 3526.593350][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 3526.593362][ T31] Call Trace: [ 3526.593372][ T31] [ 3526.593381][ T31] dump_stack_lvl+0x99/0x250 [ 3526.593407][ T31] ? __asan_memcpy+0x40/0x70 [ 3526.593435][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3526.593457][ T31] ? __pfx__printk+0x10/0x10 [ 3526.593495][ T31] vpanic+0x237/0x6d0 [ 3526.593517][ T31] ? __pfx_vpanic+0x10/0x10 [ 3526.593540][ T31] ? preempt_schedule_common+0x83/0xd0 [ 3526.593570][ T31] panic+0xb9/0xc0 [ 3526.593592][ T31] ? __pfx_panic+0x10/0x10 [ 3526.593616][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 3526.593640][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 3526.593664][ T31] watchdog+0xfdf/0xfe0 [ 3526.593695][ T31] ? watchdog+0x20a/0xfe0 [ 3526.593727][ T31] kthread+0x711/0x8a0 [ 3526.593753][ T31] ? __pfx_watchdog+0x10/0x10 [ 3526.593777][ T31] ? __pfx_kthread+0x10/0x10 [ 3526.593804][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 3526.593826][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 3526.593848][ T31] ? __pfx_kthread+0x10/0x10 [ 3526.593880][ T31] ret_from_fork+0x599/0xb30 [ 3526.593902][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3526.593931][ T31] ? __switch_to_asm+0x39/0x70 [ 3526.593953][ T31] ? __switch_to_asm+0x33/0x70 [ 3526.593976][ T31] ? __pfx_kthread+0x10/0x10 [ 3526.594000][ T31] ret_from_fork_asm+0x1a/0x30 [ 3526.594039][ T31] [ 3527.108843][ T31] Kernel Offset: disabled [ 3527.113250][ T31] Rebooting in 86400 seconds..