last executing test programs: 12m6.873069492s ago: executing program 32 (id=97): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000100)={0x8, 0x8, 0x4, 0x0, 0x2, {}, {0x5, 0x2, 0x3, 0x7, 0x3, 0x0, "3a615d15"}, 0x50, 0x4, {}, 0xffffffff}) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000240)={0xf0f02a, 0x5b3871fb}) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = dup(r4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x800, 0x0, 0x59455247, 0x6, 0x2048, 0x1, 0x9, 0x9, 0x1, 0x6, 0x0, 0x5}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@access_client}, {@noextend}], [], 0x6b}}) 9m30.093585947s ago: executing program 2 (id=747): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r0) prctl$PR_SET_SECUREBITS(0x1c, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) r2 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)={0x1, 0x0, @auto=[0x9]}, 0x9, 0xfffffffffffffffc) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000280)={@id={0x2, 0x0, @c}, 0x40, r2, '\x00', @a}) msgrcv(0x0, 0x0, 0xffffffffffffff91, 0x3, 0x800) accept4(r1, &(0x7f00000000c0)=@hci, &(0x7f0000000040)=0x80, 0x80800) 9m30.060214541s ago: executing program 2 (id=748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2}}, 0x10) syz_open_procfs(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f00000004c0)={0x1, 0x1, @stop_pts=0x9}) 9m29.036478661s ago: executing program 2 (id=750): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) execve(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$peek(0x2, r0, &(0x7f0000000000)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r2, 0x10, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000009000c00000600150004000000140016800c0003"], 0x38}}, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1"], 0x0) r7 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', 0x0) listen(r4, 0x3) accept(r3, 0x0, &(0x7f0000000100)) 9m28.03608059s ago: executing program 2 (id=755): epoll_create1(0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5) syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x9, 0x0, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, 0x0, 0x0) 9m26.358052683s ago: executing program 2 (id=764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100003}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000004140)={0x9, 0xffff, 0xfff8, 0x8, 0x11, "414d2276ba0cc02b"}) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0xf45) write(r4, &(0x7f0000001ec0)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d2cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f4a19db6357a3e57802de79c221ae7c5171faa19b3dc84934b452b1c81e98bf2eaeedca4e6cce792c6e01c592688acaefe150f0ffd163d3d54d4318b5df03be5916dd0fc3cbb297cc1cda81fbc3cc8c552216b48289eb4065a84e76d035c469ed7f879f1d522715f615d3d9b4e7b270b25837894d7609", 0x10c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0xaf, 0x200080) 9m26.248123938s ago: executing program 2 (id=766): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000000040'], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r0, 0xefca115) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2$9p(&(0x7f0000000240), 0x800) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x19, 0x8, 0xb4, &(0x7f0000000540)}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6a93c2d39ca9f58ef77d540e35c4982012c47d7a621de85c4e0dca72c356b7c7e45d295fbbe4a65dea072b7f81d39eb17e2bc3b005a91f41c2a3a3fcbe811851dc788a3de178da8900c54c3a66d21197c537b4a3c6e5d6558a9777f2b5e77b29b59dd64197eacfac37ad2caac77a7738d6a112fe1004af05f3b844837f77474dc836b7781a380015dd0ace030da7f4292bd8777656289deb82ff32f1ac315c20c7cd12df54a69a5982f1e9d7a716a380e225fce445fa72df7a93a3878ed6efe5"]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x4000, &(0x7f00000005c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x4000, &(0x7f00000005c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100830, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x80000000, 0x4, 0x0, 0xf, 0x6, 0x6, 0x4, 0x0, 0x1, 0xffffffff, 0x4, 0x0, 0xff, 0x0, 0xfffffeff, [0x2]}}) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) (async) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000002c0)) syz_genetlink_get_family_id$fou(&(0x7f0000000480), r1) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, r8, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) (async) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, r8, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r9, 0xffffffffffffffff, 0x4}, 0x7) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000000)={0x980914, 0xb}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @default, 0xffffffff, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) 9m25.162958896s ago: executing program 33 (id=706): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000100)='z', 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) (async) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x11, r1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m11.190437673s ago: executing program 34 (id=766): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000000040'], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r0, 0xefca115) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) pipe2$9p(&(0x7f0000000240), 0x800) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x19, 0x8, 0xb4, &(0x7f0000000540)}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6a93c2d39ca9f58ef77d540e35c4982012c47d7a621de85c4e0dca72c356b7c7e45d295fbbe4a65dea072b7f81d39eb17e2bc3b005a91f41c2a3a3fcbe811851dc788a3de178da8900c54c3a66d21197c537b4a3c6e5d6558a9777f2b5e77b29b59dd64197eacfac37ad2caac77a7738d6a112fe1004af05f3b844837f77474dc836b7781a380015dd0ace030da7f4292bd8777656289deb82ff32f1ac315c20c7cd12df54a69a5982f1e9d7a716a380e225fce445fa72df7a93a3878ed6efe5"]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x4000, &(0x7f00000005c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}}) (async) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x4000, &(0x7f00000005c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100830, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x80000000, 0x4, 0x0, 0xf, 0x6, 0x6, 0x4, 0x0, 0x1, 0xffffffff, 0x4, 0x0, 0xff, 0x0, 0xfffffeff, [0x2]}}) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) (async) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000002c0)) syz_genetlink_get_family_id$fou(&(0x7f0000000480), r1) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, r8, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) (async) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={0xffffffffffffffff, r8, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r9, 0xffffffffffffffff, 0x4}, 0x7) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) r10 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000000)={0x980914, 0xb}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000980)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x0, 'syz0\x00', @default, 0xffffffff, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}) 7m59.824666889s ago: executing program 7 (id=1144): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x29, 0x3, 0x6, 0x5, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, 0x7, 0x1, 0x81, 0x4a07}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r5, 0x4b6a, &(0x7f0000000000)={0x1, 0x40000000, 0x0, 0xfeff200d, 0x0, 0x0}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000280)) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/mem_sleep', 0x8000, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbfe, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x9}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x7, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) r7 = socket(0x2b, 0x80801, 0x1) connect$inet6(r7, &(0x7f00000005c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x402, 0x0, @private0, 0x28}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x68040200) 7m58.900814389s ago: executing program 7 (id=1147): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) (async, rerun: 32) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) (async, rerun: 32) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) (async) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) (async) ioctl$UI_DEV_DESTROY(r1, 0x5502) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x3, @vbi={0x9, 0x0, 0x10000, 0x31303453, [0x0, 0x80], [0x8001, 0x110a], 0x1}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 7m58.740411393s ago: executing program 7 (id=1149): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff030000000000000100000001"], 0x428}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000980)={0x2, 0x0, @ioapic={0xd000, 0x4, 0x4, 0x8, 0x0, [{0x5, 0x48, 0x94, '\x00', 0x6}, {0x1, 0xaf, 0xee, '\x00', 0x8}, {0xce, 0xff, 0x1, '\x00', 0x9}, {0x5, 0x2, 0xf0, '\x00', 0x9a}, {0x1, 0x0, 0x40, '\x00', 0x8}, {0x80, 0x7, 0x6, '\x00', 0x1}, {0x3, 0x56, 0x8, '\x00', 0x3}, {0x5, 0x3, 0x2, '\x00', 0x4}, {0x1, 0x3, 0x0, '\x00', 0xd}, {0x81, 0x1, 0x6, '\x00', 0x46}, {0x0, 0x7f, 0x1, '\x00', 0x6}, {0x1, 0x8, 0x0, '\x00', 0xae}, {0x1, 0x8, 0x2, '\x00', 0xc}, {0x4, 0x9, 0x8, '\x00', 0x3}, {0x0, 0x0, 0x7, '\x00', 0x3}, {0xfc, 0x5, 0x5, '\x00', 0x2}, {0x2, 0xb, 0x7f, '\x00', 0x3}, {0x7, 0x3, 0x8, '\x00', 0x6}, {0x1c, 0x3, 0xdf}, {0x7, 0x6, 0x0, '\x00', 0x7b}, {0x7, 0x1, 0x5a, '\x00', 0x1}, {0xff, 0x6, 0x5, '\x00', 0x3}, {0x0, 0xf1, 0xfe, '\x00', 0x7}, {0x7, 0x1, 0x81, '\x00', 0x1}]}}) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 7m57.245287675s ago: executing program 7 (id=1151): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) umount2(&(0x7f0000000180)='./file0/../file0\x00', 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xffffffa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) (async) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0xffffffa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 7m56.362344555s ago: executing program 7 (id=1156): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x3}}, 0x20) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000000c0)={0x1c, 0x0, {0x3, @struct={0x8, 0x9}, 0x0, 0xffffffff, 0x7, 0x3, 0x7, 0xc46, 0x28, @struct={0x6, 0xffffffb1}, 0x7f, 0x1000, [0x101, 0x3, 0x7, 0x7, 0x7]}, {0x3, @usage=0x10000, 0x0, 0x101, 0x3, 0xffffffff, 0x9, 0x4, 0x60, @struct={0xfffffffb, 0x7a26754}, 0x4, 0xc, [0x7, 0xb6e3, 0x0, 0xfff, 0x9, 0x400]}, {0x6ae, @usage=0x4f, 0x0, 0x2, 0x6, 0x6, 0x3, 0x7fffffff, 0x1, @struct={0x7, 0xfffffffa}, 0x8, 0x7f, [0xfffffffffffffbff, 0x4, 0x8, 0x1, 0x8000000000000001]}, {0x0, 0xc, 0x6}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000004c0)={r1, 0x74, 0xf, 0x1}) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000008c0)) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000900)=0x8) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x110, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x8010, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000940)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000980), 0x0, 0x400000) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x9) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r5, 0x5761, &(0x7f00000009c0)={0x5, 0x0, [{0x80, 0x10000, 0x5, [0x7, 0x90d, 0x7, 0x2, 0x9b32, 0x26acb9d1, 0x1000, 0x638e]}, {0x5, 0xfffffffb, 0x80, [0x7ff, 0x1, 0x5, 0x5, 0xa61f, 0x2, 0x3ff, 0xffff]}, {0xd56, 0x2, 0x1000, [0x400, 0x10001, 0x6, 0x5, 0xffff0001, 0xdc, 0x400]}, {0x7, 0x10, 0x5, [0x5, 0xc3bb, 0xffff3e02, 0x1b12, 0x2, 0xba21, 0x0, 0xf]}, {0x9, 0x8000, 0x6, [0x1, 0x1ff, 0x8, 0x6, 0x7, 0xc39b, 0x3, 0x9]}]}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x80984120, &(0x7f0000000ac0)) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000b80), 0x280000, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r6, 0x800c5011, &(0x7f0000000bc0)) socket$rds(0x15, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000c00), 0x80000000000, 0x800) clock_gettime(0x0, &(0x7f0000001180)={0x0, 0x0}) recvmmsg(r5, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000c40)=""/88, 0x58}, {&(0x7f0000000cc0)=""/181, 0xb5}, {&(0x7f0000000d80)=""/108, 0x6c}, {&(0x7f0000000e00)=""/54, 0x36}, {&(0x7f0000000e40)=""/195, 0xc3}, {&(0x7f0000000f40)=""/46, 0x2e}, {&(0x7f0000000f80)=""/60, 0x3c}], 0x7, &(0x7f0000001040)=""/219, 0xdb}, 0x2}], 0x1, 0x40000000, &(0x7f00000011c0)={r7, r8+10000000}) r9 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r9, 0x80083313, &(0x7f0000001200)) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000001280)={@private2, 0x0}, &(0x7f00000012c0)=0x14) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000002540)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002500)={&(0x7f0000001300)={0x11dc, 0x13, 0x10, 0x70bd2b, 0x25dfdbff, {0x2, 0x7, 0x0, 0x3, {0x421, 0x4e22, [0x5, 0x0, 0x2, 0xb6], [0x22f, 0x2, 0x401, 0x7f], r10, [0x9, 0x6]}, 0x9, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "31eddde9a8e9d8a7fbed61d78632e7c04d4aec4a51493c309c97e6553dfa5e52499540289d584a524e4e28f4829833ddf313774bbb462a15ca00b3f49e7f7c9b1bfd353b25f97b2f7858a5d7e3e0a1a45c2586c4d58bffb22327b7f3b99460d37ff46dffc09a7e52bde453b986d35b7708aa91f46e3d6dc16c940527e4ee2ed25176aa91a3059f32976ced9985f81f4d1d3af10ab6b85a13a8f8a1308a4179e012ed00a93b341f6fe5830ceed19a0a4b874f49566dd6175e74062ed2e5bdfe5e672cbad13cc2d83e12fc46511d22cfd36ebba8"}, @INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "02ce67da55ee4bcf5b53cc5d76f0c2837e537cfe0d0cd228e0d9a89a05e606cdb3c345800bb02b7dccf85b155a2a8d4b3a95843be364fdaedc86360bc3587b59e027c7c7352a9aa2c74487a9f1eeb218c8e4a114920e52e451d6db3efa2c533b5a9a918df0ca70088d77314e5cfe4d8ba8f6eeefc7072881b2cd90e79abb5693ac72e2cb9ecb9760ed200d82a1955df8e73a1d9316e4b914edaa43b22d889b8978e217eaaf01922c45a6f0244a"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x11dc}, 0x1, 0x0, 0x0, 0x8040}, 0x8044) openat$incfs(r0, &(0x7f0000002580)='.log\x00', 0x100002, 0x81) mkdirat(r9, &(0x7f00000025c0)='./file0\x00', 0x64) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000002680)={0x3, 0x5, 0x44, &(0x7f0000002600)=""/68}) 7m55.922620384s ago: executing program 7 (id=1161): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) keyctl$dh_compute(0x15, &(0x7f0000000200), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}]}, 0x40}}, 0x804) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix={0x9, 0x1ebfffe, 0x33565348, 0x5, 0x9, 0xddc7, 0x0, 0x2, 0x0, 0xc, 0x1, 0x3}}) write$qrtrtun(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$user(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="3b7d24130deb0cf086232d8d4233b854651a01ca1aeb4f17dcc123bfd78b814dbea1335c2aac4f0dabdf1504e5441b7a4f2359cddbbb66f58494e4d4394cf8a9b37b974336307cfd59af6ff583fc06eb272d9fe3fc82d003", 0x58, 0xfffffffffffffffb) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000004c0)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x3f}, 0x48, 0x0) keyctl$search(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000380)={@desc={0x1, 0x0, @desc2}, 0x40, r4, '\x00', @a}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000340)={0x2, 0x5}) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r2, r4, r5, 0x0) 7m55.715791657s ago: executing program 35 (id=1161): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) keyctl$dh_compute(0x15, &(0x7f0000000200), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}]}}}]}, 0x40}}, 0x804) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix={0x9, 0x1ebfffe, 0x33565348, 0x5, 0x9, 0xddc7, 0x0, 0x2, 0x0, 0xc, 0x1, 0x3}}) write$qrtrtun(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$user(&(0x7f0000000040), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="3b7d24130deb0cf086232d8d4233b854651a01ca1aeb4f17dcc123bfd78b814dbea1335c2aac4f0dabdf1504e5441b7a4f2359cddbbb66f58494e4d4394cf8a9b37b974336307cfd59af6ff583fc06eb272d9fe3fc82d003", 0x58, 0xfffffffffffffffb) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000004c0)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700", 0x3f}, 0x48, 0x0) keyctl$search(0xa, r4, &(0x7f0000000300)='asymmetric\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000380)={@desc={0x1, 0x0, @desc2}, 0x40, r4, '\x00', @a}) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000340)={0x2, 0x5}) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r2, r4, r5, 0x0) 5m30.676390498s ago: executing program 5 (id=1787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_clone3(&(0x7f0000000680)={0x16000080, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000200), {0x15}, &(0x7f0000000300)=""/153, 0x99, &(0x7f0000000500)=""/250, &(0x7f0000000240)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000003c0), 0x1004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xb16b}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r3, 0x37, 0x4, 0x0, @void, @value=r4}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 5m30.229445748s ago: executing program 5 (id=1789): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x6, 0x800) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9000000010000304020000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00ce000000000000000012800b0001006272696467650000580002800c001f0001000000000000000500160001000000060027000e000000050029000000000008000400010100000c002e0000000000000000000c001e00a00000000000000008001b00fbffffff05002a000000000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, &(0x7f0000000380), &(0x7f0000000480)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xc, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r3, r3, r3], &(0x7f0000000600)=[{0x3, 0x2, 0xd}, {0x5, 0x2, 0x1, 0xa}, {0x5, 0x5, 0x4, 0x9}], 0x10, 0x5da}, 0x94) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0x59, 0x7f, 0x1, "8003e3ffff072000"}) (async) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRES8=r4], 0xff2e) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="a00000000001010400000000000000000a00000a3c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001010c000280050001000000000008000740000000000c00164000000000000100"], 0xa0}}, 0x0) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x403, 0x7fff, 0x16, "b0bfd0ff40000096004e149b78ef4100"}) (async) r7 = syz_open_pts(r5, 0x0) r8 = dup3(r7, r5, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={r0}, 0xc) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0xff) (async) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RWALK(r10, &(0x7f0000000380)=ANY=[@ANYRESOCT=r9], 0x64) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x8000, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706f6c3d6c6f6361370200006c61746976653a342c372c00d3fa987533568ffc7d854216be71ccc2c4589b3c7de017bbfd0dbb9bbff656fdb80cadf9dda5a78d363bfd5484af96f2ea42da4ef2ee52"]) 5m29.037273395s ago: executing program 5 (id=1791): setuid(0xee01) r0 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000fc0)='afs_sent_data\x00', r1, 0x0, 0x8000000000000001}, 0xfffffffffffffe5a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b111e00000000008510000002000000850000001a00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x33) write$P9_RSTATu(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/513, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x224) keyctl$clear(0x7, r5) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x1, 0xe, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES8=0x0], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xed}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000040)={0x1d, r8}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) 5m26.087924646s ago: executing program 6 (id=1800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000900)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018010000202070250000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) r4 = dup3(r1, r0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000180)={0xf010000, 0x0, 0x0, r5, 0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000180)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/79, 0x4f}, {&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000300)=""/32, 0x20}, {&(0x7f0000000880)=""/125, 0x7d}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000980)=""/229, 0xe5}], 0x6, &(0x7f0000000380)=""/12, 0xc}, 0x10000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x3, 0x0, r4, 0x7ff, '\x00', 0x0, r4, 0x2, 0x4, 0x2}, 0x50) 5m25.840812487s ago: executing program 6 (id=1803): connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) read$char_usb(r0, &(0x7f0000000040)=""/188, 0xbc) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)={0x0, 0x14, 0xab, "2a787717ee9946f6de856be1da32da59ee2d69893c0741631ad9160e326ff16a18f2ba68b3dd98d2dd4094096de4de9bbec05301c10414824825b825da3cb341af8ff69a79931ce77c1edb73e41a00d4e87d42a481233fa397502ea4c276d46335e84048f1d2c15791203c21e76c13cbf86a65e1ac72535a60a42ccec7b70adc75ff778568f53bc046c72f649702b2e2b120a85781e302185ce02e3a6c60b3f8909c4ccfa9b7aa960da816"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xa}, 0x0, 0x0, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "af1aee06db485066a395f8f42032073b84c6f81f125a198b2dda0edcac7fe4c5d3581bd12e40307a7f5433f79154ad"}}) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='ocfs2\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001600)={0x84, &(0x7f0000001200)={0x20, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)={0x40, 0x19, 0x2, "f5b4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r4, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5m25.638412195s ago: executing program 5 (id=1804): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa) close(r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, 0x0, 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5m24.288747802s ago: executing program 5 (id=1812): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000004000000000000000000cdee20f2532fbf68c6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x1c4, r5, 0x200, 0x70bd2c, 0x80000000, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x6}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xe}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x9}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7fff}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x8}, {0x5}}]}, 0x1c4}}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80140, 0x0) ioctl$TIOCGISO7816(r7, 0x80285442, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990047240000c4ded967c21aae88000200"/29], 0x30}, 0x1, 0x6c00}, 0x0) 5m23.565673428s ago: executing program 5 (id=1813): ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x40000) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRESDEC=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222cae901382a27ea1760a000000818082fdf75b250e8915"], 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0xe, 0x1, '-'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, &(0x7f0000000180)={0x14, &(0x7f0000000280)={0x0, 0x22, 0xc4, {0xc4, 0x21, "6c5fff3724741a3369cad49d7af56c34dd0ff4a5e4466e89bd6bfb4375d0fcd9bbdc84ee5b756bb46b8910fdf3902b955ff6db457bb07a05d30bdb85cac68a1ee54a2be4b83d1a8ccf38d14244b78dadcd46d00c22d5151763a84c909d225d3402610f415365d8c7f1a68c2e2d4f8c2d4e34724c83d73634e54bc366d7a655d5de8f60836cb69a9972385606600ffab7cc1ed3f437eb5e1a0f9d8eb1f0bac8be1517adb3d26f33c49dd58bcbf2dbb1f5ecde090e2e1cf61b0f166d55e8b285432143"}}, &(0x7f0000000380)={0x0, 0x3, 0x90, @string={0x90, 0x3, "dc995198a85f54ec6ceea86a1caace759fe350b0621a3efe87a0b7866a772dfcb16fd861caa5721063afa3ce5db27d64fec2344d9a8fec4a865e327c2aa8acbc0a6dcb21fcbb0a24026608dfe7cee154ebc6323a302c9099ba69ffd642fe7992e0d7229f9123fb72e46e95e28f485d1d768fcacdf7598bb46560211fa83c71f857f55f3b86d062f504b7cbc6ab7c"}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0xb, 0xfc, "e8a935d22782870abc1d8ed1029153cf0ff4e268bf967e8c819559a4868df32c27a78eb282e00423badc5ff1ee88a2f977c0a731067b11c687316238863e7e61bffb39f3b66cda52850b2f70143e7c0f4af7c438824480b5f9c1f9a1ea42ec7a26f12014db2daf2f7674c445da1c65c74c5ea5dd71c969def7ef276836d2440785d5bd0dbababfe2f472b9b4c3cb7886bbc18bd7b1e7bd384944cdb1d6ad4e5044d3db5d79ebe9f45ecca0e86380eb3f90c831a20f2874c4c609c0dc5ad5f6815e8998c9211ad7368a0019db871be7bd043d5f1ac70f40ab13d6ab071c9f08838786066b9715ac10f07ccf7bf520a8d4649c8c05cd3a7dc256e696df"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7e}, &(0x7f0000000600)={0xc0, 0x5, 0x4, "9cfbc2cd"}, &(0x7f0000000640)={0x40, 0x5, 0x3, "ee834d"}}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff040000da3e9ecb96d600080039"], 0x15) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000200)={0xb, 0x4, 0xbcc, 0x80000003, &(0x7f0000000080)=[{}, {}, {}, {}]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x40000) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRESDEC=r0], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222cae901382a27ea1760a000000818082fdf75b250e8915"], 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) (async) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0xe, 0x1, '-'}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r2, &(0x7f0000000180)={0x14, &(0x7f0000000280)={0x0, 0x22, 0xc4, {0xc4, 0x21, "6c5fff3724741a3369cad49d7af56c34dd0ff4a5e4466e89bd6bfb4375d0fcd9bbdc84ee5b756bb46b8910fdf3902b955ff6db457bb07a05d30bdb85cac68a1ee54a2be4b83d1a8ccf38d14244b78dadcd46d00c22d5151763a84c909d225d3402610f415365d8c7f1a68c2e2d4f8c2d4e34724c83d73634e54bc366d7a655d5de8f60836cb69a9972385606600ffab7cc1ed3f437eb5e1a0f9d8eb1f0bac8be1517adb3d26f33c49dd58bcbf2dbb1f5ecde090e2e1cf61b0f166d55e8b285432143"}}, &(0x7f0000000380)={0x0, 0x3, 0x90, @string={0x90, 0x3, "dc995198a85f54ec6ceea86a1caace759fe350b0621a3efe87a0b7866a772dfcb16fd861caa5721063afa3ce5db27d64fec2344d9a8fec4a865e327c2aa8acbc0a6dcb21fcbb0a24026608dfe7cee154ebc6323a302c9099ba69ffd642fe7992e0d7229f9123fb72e46e95e28f485d1d768fcacdf7598bb46560211fa83c71f857f55f3b86d062f504b7cbc6ab7c"}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0xb, 0xfc, "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"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7e}, &(0x7f0000000600)={0xc0, 0x5, 0x4, "9cfbc2cd"}, &(0x7f0000000640)={0x40, 0x5, 0x3, "ee834d"}}) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff040000da3e9ecb96d600080039"], 0x15) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000200)={0xb, 0x4, 0xbcc, 0x80000003, &(0x7f0000000080)=[{}, {}, {}, {}]}) (async) 5m22.768409098s ago: executing program 6 (id=1822): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') fchdir(r1) (async) exit(0x3) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r2, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000a0000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e140589a8", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x0, 0x20, 0xde, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @empty, @private=0xa010101}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000300)={'ip_vti0\x00', r4, 0x7, 0x7, 0xfffffff0, 0xfffffffb, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x64, 0x0, 0xec, 0x29, 0x0, @broadcast, @remote}}}}) 5m22.639502401s ago: executing program 6 (id=1823): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x100]}, 0x8, 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a9b6d1d66e1b6b1b8700000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180)) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x204) 5m22.521053225s ago: executing program 6 (id=1824): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000280), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {}, {0x7}}}, 0x24}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000980)=[{&(0x7f0000000440)="4800000014001d1009074beafd0d8c560a84606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) execveat(r6, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000240)='-\x00', &(0x7f00000002c0)='\x00']}, &(0x7f0000000540)={[&(0x7f0000000340)='&#.@', &(0x7f0000000380)='+\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='Q\xae-^\'\x00', &(0x7f00000004c0)='&)\\,\x00', &(0x7f0000000500)='r&#]!{}!\\].\\,-(%-:,\x00']}, 0x800) sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x100}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d700000010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010010000"], 0x18}, 0x0) close(r7) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) syz_open_procfs(0x0, 0x0) fchdir(r2) write$cgroup_int(r8, &(0x7f0000000040)=0x800000000001c8, 0x12) 5m22.33746457s ago: executing program 6 (id=1825): symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x0, 0x10}, 0x2f) 5m22.182255966s ago: executing program 36 (id=1825): symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x0, 0x10}, 0x2f) 5m8.520933435s ago: executing program 37 (id=1813): ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x40000) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRESDEC=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222cae901382a27ea1760a000000818082fdf75b250e8915"], 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0xe, 0x1, '-'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, &(0x7f0000000180)={0x14, &(0x7f0000000280)={0x0, 0x22, 0xc4, {0xc4, 0x21, "6c5fff3724741a3369cad49d7af56c34dd0ff4a5e4466e89bd6bfb4375d0fcd9bbdc84ee5b756bb46b8910fdf3902b955ff6db457bb07a05d30bdb85cac68a1ee54a2be4b83d1a8ccf38d14244b78dadcd46d00c22d5151763a84c909d225d3402610f415365d8c7f1a68c2e2d4f8c2d4e34724c83d73634e54bc366d7a655d5de8f60836cb69a9972385606600ffab7cc1ed3f437eb5e1a0f9d8eb1f0bac8be1517adb3d26f33c49dd58bcbf2dbb1f5ecde090e2e1cf61b0f166d55e8b285432143"}}, &(0x7f0000000380)={0x0, 0x3, 0x90, @string={0x90, 0x3, "dc995198a85f54ec6ceea86a1caace759fe350b0621a3efe87a0b7866a772dfcb16fd861caa5721063afa3ce5db27d64fec2344d9a8fec4a865e327c2aa8acbc0a6dcb21fcbb0a24026608dfe7cee154ebc6323a302c9099ba69ffd642fe7992e0d7229f9123fb72e46e95e28f485d1d768fcacdf7598bb46560211fa83c71f857f55f3b86d062f504b7cbc6ab7c"}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0xb, 0xfc, "e8a935d22782870abc1d8ed1029153cf0ff4e268bf967e8c819559a4868df32c27a78eb282e00423badc5ff1ee88a2f977c0a731067b11c687316238863e7e61bffb39f3b66cda52850b2f70143e7c0f4af7c438824480b5f9c1f9a1ea42ec7a26f12014db2daf2f7674c445da1c65c74c5ea5dd71c969def7ef276836d2440785d5bd0dbababfe2f472b9b4c3cb7886bbc18bd7b1e7bd384944cdb1d6ad4e5044d3db5d79ebe9f45ecca0e86380eb3f90c831a20f2874c4c609c0dc5ad5f6815e8998c9211ad7368a0019db871be7bd043d5f1ac70f40ab13d6ab071c9f08838786066b9715ac10f07ccf7bf520a8d4649c8c05cd3a7dc256e696df"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7e}, &(0x7f0000000600)={0xc0, 0x5, 0x4, "9cfbc2cd"}, &(0x7f0000000640)={0x40, 0x5, 0x3, "ee834d"}}) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff040000da3e9ecb96d600080039"], 0x15) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000200)={0xb, 0x4, 0xbcc, 0x80000003, &(0x7f0000000080)=[{}, {}, {}, {}]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x40000) (async) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES64=r0, @ANYRESDEC=r0], 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222cae901382a27ea1760a000000818082fdf75b250e8915"], 0x0}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) (async) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0xe, 0x1, '-'}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r2, &(0x7f0000000180)={0x14, &(0x7f0000000280)={0x0, 0x22, 0xc4, {0xc4, 0x21, "6c5fff3724741a3369cad49d7af56c34dd0ff4a5e4466e89bd6bfb4375d0fcd9bbdc84ee5b756bb46b8910fdf3902b955ff6db457bb07a05d30bdb85cac68a1ee54a2be4b83d1a8ccf38d14244b78dadcd46d00c22d5151763a84c909d225d3402610f415365d8c7f1a68c2e2d4f8c2d4e34724c83d73634e54bc366d7a655d5de8f60836cb69a9972385606600ffab7cc1ed3f437eb5e1a0f9d8eb1f0bac8be1517adb3d26f33c49dd58bcbf2dbb1f5ecde090e2e1cf61b0f166d55e8b285432143"}}, &(0x7f0000000380)={0x0, 0x3, 0x90, @string={0x90, 0x3, "dc995198a85f54ec6ceea86a1caace759fe350b0621a3efe87a0b7866a772dfcb16fd861caa5721063afa3ce5db27d64fec2344d9a8fec4a865e327c2aa8acbc0a6dcb21fcbb0a24026608dfe7cee154ebc6323a302c9099ba69ffd642fe7992e0d7229f9123fb72e46e95e28f485d1d768fcacdf7598bb46560211fa83c71f857f55f3b86d062f504b7cbc6ab7c"}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0xb, 0xfc, "e8a935d22782870abc1d8ed1029153cf0ff4e268bf967e8c819559a4868df32c27a78eb282e00423badc5ff1ee88a2f977c0a731067b11c687316238863e7e61bffb39f3b66cda52850b2f70143e7c0f4af7c438824480b5f9c1f9a1ea42ec7a26f12014db2daf2f7674c445da1c65c74c5ea5dd71c969def7ef276836d2440785d5bd0dbababfe2f472b9b4c3cb7886bbc18bd7b1e7bd384944cdb1d6ad4e5044d3db5d79ebe9f45ecca0e86380eb3f90c831a20f2874c4c609c0dc5ad5f6815e8998c9211ad7368a0019db871be7bd043d5f1ac70f40ab13d6ab071c9f08838786066b9715ac10f07ccf7bf520a8d4649c8c05cd3a7dc256e696df"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7e}, &(0x7f0000000600)={0xc0, 0x5, 0x4, "9cfbc2cd"}, &(0x7f0000000640)={0x40, 0x5, 0x3, "ee834d"}}) (async) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (async) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff040000da3e9ecb96d600080039"], 0x15) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000200)={0xb, 0x4, 0xbcc, 0x80000003, &(0x7f0000000080)=[{}, {}, {}, {}]}) (async) 1m52.26941448s ago: executing program 8 (id=2735): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c00000018000904000062d842ac80a9bd510000000000000a00000000000003000004fcff5103ded3a5e10b19d6000008001e00bef2a6b60c537a6ff9e690a4eec0d088b052114e409294d8c0f74770ebbe3aa031812979ed23a9e4a7fd11ffbdd909c2969203f297e648c0bce2170a6d0b97a38dcdf14a81b46cc930867a29e384634e59fc961d4142105e4817259ecdee926ff4dfb8832002ddecc57e31d157b04f4a193ce143a19f0642835fec641265946c25c942eb"], 0xfc80}}, 0x0) r3 = memfd_create(&(0x7f0000000340)='K=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x9b`;\x1c\xfce5W\xb8B\xf8\xd2\xdeK\xc1=\xa06p\x19\x9c\xb5w>\xd6r\x90\xd65\xa6\x89\xab\xd7\xbd\x96\x9f\xfd\xacU\x0e\xd7\x12r\x7f|\xfa\x85;}\xdc\xc1j%-_\xb9+\v\xe0\xa5\xd9K*\x84[\xfcu#\xfc\x04\x96]\x9a/\xea\xd3<\xb1\xfc\x12\xccs\x88=\xc4\xcf\xe3\xe8\xb9w!\xb0H\x0e\x1c\x050\xdf\xab\xd9>\xa4d\x83O\x14\xf61\xf9\x12\x84\x91\x00\xc3\xe0^\xf1\xacC\x87\xb15\xab\xa1\x19x\vY@\xe3\x9dD\xaf>\x96\x97\x17\xafO\xf3\x14\xb8\xdb\xa2\xaa\xe7\xe7\x1e{,\xac\x9fQ\xe7\xa7\x830\xd5\xed\'\xb0\x1f\xda\t\xb2f/\x00\xd8[\xd2\xe8\f\\.\xfc\xdbj\xa2Gl\x9f\xb3\xdb\xa05(\xf0\xe5\xd7[\xbcm\xdaLn\xb98\xd0\x99\x84\xac\xee\v\x7fMZ;\xab\xd7\xbdf\xe3\xc7 *\xac]\xac\xb6n\x0fq\xfe\xd9\x90kut\x83\x93\xf1`gW\x01{\x17-V\xbc\xcd', 0x2) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x1000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '@', 0x3a, '\\\x9e\xbd\x1d\r6\xea\x12+(\x03z', 0x3a, './file0', 0x3a, [0x50, 0x43]}, 0x36) r9 = epoll_create1(0x80000) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x418000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0], 0x0, 0x2, 0x1, 0x1}) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000040)=0x2) readv(r10, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/238, 0xee}], 0x1) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) fcntl$dupfd(r7, 0x406, r9) getpid() syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1m51.343793143s ago: executing program 8 (id=2738): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) write$uinput_user_dev(r0, &(0x7f0000002440)={'syz1\x00', {}, 0x31, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0xff, 0xffffff48, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x1, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x70, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0xa, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x2, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x81, 0x0, 0x6, 0x9, 0x7, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x7, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x21, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000800, 0x0, 0x0, 0xf, 0x2, 0x800040, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x6, 0x3, 0x9, 0x2, 0x7, 0x6, 0x8, 0x0, 0xffffffff, 0x100ff, 0xfffffffc, 0xfd, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x3, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x4, 0x0, 0x64, 0x7ffffffe, 0x5, 0xa48, 0x5, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0x0, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x1, 0x8], [0x1ff, 0x2, 0x4, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x3, 0x9, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0x6, 0x1, 0xa, 0x4, 0x0, 0x6, 0x6, 0x80000001, 0x1, 0x9, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) 1m51.187425138s ago: executing program 8 (id=2740): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x7d, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3, @ANYBLOB="6a21f4ed23d884eebd29e66cfb36dc28e7b77980ae32975d5689701dbd2d950000482fe94aaa61957c4492bed3455271078c74c2fd1791da1edb5c6ed6ef1c"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x308}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 1m49.45960405s ago: executing program 8 (id=2744): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1aa) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='devpts\x00', 0x2200892, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x72) 1m49.336109534s ago: executing program 8 (id=2746): add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x560e, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x12, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000b187cd5b7a186a1f2e00000000000000000000000000000000000000000000000000423a8c78f65bccc80e15b935afc85800a1"], 0x50) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x5) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_dev$video4linux(&(0x7f0000001040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x1b30}}) ioctl(r3, 0x8b1a, &(0x7f0000000040)) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x3, 0x0, 0x200a, 0x7, 0x9, 0x7, 0x1}}) r4 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m48.88017509s ago: executing program 8 (id=2748): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xa000, 0x2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x308000, 0x8}) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x308000, 0x8}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) (async) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x201, 0x0, &(0x7f0000000c40)="63ecedae46dc4314fbb9111a30ac", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYBLOB="0000000000000200b7080000000000000400000000000000290000f8ffffffb703deff080000000a000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2}) (async) setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2}) socket$inet6(0xa, 0x1, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x5b0043}) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000380)={0x60, 0x3, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5, &(0x7f0000000340), 0x0, 0x3, 0x6, 0x6, 0x0, 0xb}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) syz_open_dev$dri(0x0, 0x1ff, 0x0) 1m48.697406781s ago: executing program 38 (id=2748): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) (async) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xa000, 0x2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x308000, 0x8}) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x8000000, 0x308000, 0x8}) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) (async) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x201, 0x0, &(0x7f0000000c40)="63ecedae46dc4314fbb9111a30ac", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000300)={0x0, 0x80, 0x6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYBLOB="0000000000000200b7080000000000000400000000000000290000f8ffffffb703deff080000000a000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300060c1) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2}) (async) setrlimit(0xe, &(0x7f0000000200)={0x7ff, 0x2}) socket$inet6(0xa, 0x1, 0x0) (async) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x5b0043}) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000380)={0x60, 0x3, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x5, &(0x7f0000000340), 0x0, 0x3, 0x6, 0x6, 0x0, 0xb}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) connect$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) syz_open_dev$dri(0x0, 0x1ff, 0x0) 7.224124123s ago: executing program 4 (id=3225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008013}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) socket(0x1, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="a057c9", @ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x48010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000120a090000000000000000000200800c0900020073797a31000000000800044008000000080007400000001d0800030a00000000000000001100010000000000000000000000000a"], 0x60}, 0x1, 0x0, 0x0, 0x814}, 0x0) r10 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r10) 6.579689161s ago: executing program 1 (id=3226): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0x6e, 0x61, 0x8, 0x52b, 0x1803, 0xc5ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xdc, 0x0, 0x0, 0x1e, 0x9a, 0xf0}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)={0x20, 0x5, 0x5e, {0x5e, 0x22, "fc5a2864e5af186d26fc63ee50120c418d5f04c886c012827cce145bc635c09826f8f085755be130fc01eb850cd73591dd04c06fe75af1bb89995cef910efc1f683c835257de2a5a8fc64e27d15afd2067645203511989ed8f2b5f01"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f00000007c0)={0x0, 0xf, 0xbf, {0x5, 0xf, 0xffffffffffffff73, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x3, 0x2, 0x9}, @generic={0x98, 0x10, 0xb, "f4bd9ae32ff9a568db1c31e937c64df967e46ae98a74d676765b089e6f8e6f0f40de505112f4a5130f2959fc59517797055a8a55506fec541e40d182fbcf1afd9c4a56e2e46e0dd58eb60ce24cb1d1187b1eb4360556aec99a668473d75980d06d52bf4b6c2f221450653978e44a52d910b7acdaf018f718d0df7894127c47bd34ef50d5b6bb2e8163cecde26539a3a3c9862387d0"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0xa, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "63562219f400"}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x1, 0x8, 0x2, "b13a5c71", "8009cbc8"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x4, 0xf, 0x37, 0x5, 0x7, 0x6}}}, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0x17, 0xcc, "24bcf424038baa4d0899dcb2628b02d31ca37efc53c19c8bf908d83fa94953aa94e84299068966ab5924b342575c902dc95533d0a874e02ec5b06f21d5690ce1902477344db2883e3e1ccf7f2c9fda3ba7e5bde391120a5f1946af27333643716d08aaeddafe38890616e8af27b2ec066bf31c8e9fa6d31bce43f7c5e0a0bec4e5bd9c5c59afd96d1f9a5bea7807a39a5eb0e21af94f4ac7111b4b4ddd202093ab702d1df4d00081eec12239d3ee6f3166cf1f613184a61bb2387ad4bb758496b30aa7c6a030da4de47a7975"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000000c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x100, 0x40}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0xcb}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xf3}, &(0x7f00000004c0)={0x40, 0xb, 0x2, '~c'}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000540)={0x40, 0x13, 0x6, @local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "2ed4"}, &(0x7f0000000100)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x2}, 0x0}) 6.260103363s ago: executing program 4 (id=3228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006"], 0x48) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x345, 0x0, 0x8000000000000000}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$inet(0xa, 0x801, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e20, @empty=0x7f000001}}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r8, 0x8, 0x0) 5.244397095s ago: executing program 4 (id=3234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_clone3(&(0x7f0000000680)={0x16000080, &(0x7f0000000080), &(0x7f0000000180), 0x0, {0x15}, &(0x7f0000000300)=""/153, 0x99, &(0x7f0000000500)=""/250, &(0x7f0000000240)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000003c0), 0x1004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xb16b}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r4, 0x37, 0x4, 0x0, @void, @value=r5}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 4.632637836s ago: executing program 4 (id=3236): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) (async) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x2000000dfa, &(0x7f0000ff9000/0x1000)=nil, 0x3) (async) get_mempolicy(0x0, 0x0, 0x2000000dfa, &(0x7f0000ff9000/0x1000)=nil, 0x3) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) (async) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="b5870afb9763"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffffc6e5d850f33ccaa8000000003f080000080003002c756875b54b59a62b32558d0bb1ad57b23460301e930de018d07190075259e057a2a35774", @ANYRES32=r1, @ANYBLOB="14005e800800020008000000080001003f000000"], 0x30}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r3, 0x13, 0x1, 0x3, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0]}, 0x40) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) (async) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) 4.486705967s ago: executing program 4 (id=3237): openat$incfs(0xffffffffffffffff, &(0x7f0000000280)='.pending_reads\x00', 0x218201, 0x122) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509020001000000dbaaf8ff50400000bf8200000000000007080000f8ffffffbfa400000000000007090000f0ffffffc7020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x20, 0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00", 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 4.318080796s ago: executing program 9 (id=3238): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000340)=@ethtool_gstrings={0x1b, 0x1}}) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9d, 0x8b, 0xf5, 0x40, 0x46d, 0x8b8, 0xfbbc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0xdb, 0xc0, 0x2d, 0x40}}]}}]}}, 0x0) 3.728979468s ago: executing program 1 (id=3239): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) 3.693200477s ago: executing program 1 (id=3240): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 3.623919037s ago: executing program 1 (id=3242): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r1, &(0x7f000000ddc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x41046140, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x9d5e236cac7a57c6}}, 0x50) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast1}, 0xa}}, 0x26) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002a40)='hugetlbfs\x00', 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20029, &(0x7f0000000100)=ANY=[@ANYBLOB='nr_inodes=3']) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) close(r6) 3.52640448s ago: executing program 4 (id=3244): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb55a04028e2b2e2b, 0x100010, 0xffffffffffffffff, 0x9ef43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) r3 = syz_open_dev$evdev(&(0x7f00000012c0), 0x1, 0x0) ioctl$EVIOCGID(r3, 0x4b47, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643dac60d083606b29bc2059d356d60b53404a5c9784205ba9fe37e9c901e47001546e7fa59732f82ddaa05b8607c24c7370db300251015be0c2f682597d65c1f9c16e0177c69954ba17", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2036) statx(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x4800, 0x100, 0x0) acct(&(0x7f00000021c0)='./file0/file0\x00') write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004380)={0x90, 0x0, 0x6, {0x1, 0x0, 0x7fffbfff, 0x1fffffffffffd, 0x400, 0xc, {0x1, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r7, r8, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d000905"], 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.30979585s ago: executing program 1 (id=3246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_clone3(&(0x7f0000000680)={0x16000080, &(0x7f0000000080), &(0x7f0000000180), 0x0, {0x15}, &(0x7f0000000300)=""/153, 0x99, &(0x7f0000000500)=""/250, &(0x7f0000000240)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) ptrace$ARCH_GET_GS(0x1e, r0, &(0x7f00000003c0), 0x1004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xb16b}, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r4, r4, 0x37, 0x4, 0x0, @void, @value=r5}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 2.896396793s ago: executing program 1 (id=3247): getrlimit(0x9, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000300)={@empty}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8916, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12015002e727a2408680070b360a0102030109021bef00760158930080c7cbc2976694c5b7db00a0000904d105010e01000409050210407f86f14b6933c0ba5500ff03f5ebc4287152a56f99e21e92e4249e1f6c00"/95], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x11, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'syztnl2\x00', 0x0, 0x4, 0x7f, 0x8, 0x1, 0x15, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x10, 0x7f, 0xffff0000}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40c1}, 0x4c080) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYBLOB="730a00000000000001030000000103000000c204080000000000000000010e010000000400000000000001000000000000000000000000000000ffff00000000000000000000000000000900"/96], 0x60) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0xfe1c, 0x0) 2.608980776s ago: executing program 9 (id=3249): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 2.470152767s ago: executing program 9 (id=3251): add_key(&(0x7f0000000100)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket(0x2, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000810}, 0x4000010) 2.404605493s ago: executing program 0 (id=3252): r0 = socket(0x2, 0x3, 0x6) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) 2.323956116s ago: executing program 0 (id=3255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f00000000c0)="17000000020001000003be8c5e687a8a6a003c04020100ecff3f0000000300000a00c5eb0098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba6ba68751bbeb8a81d505f4a68761ed97e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb731", 0x92) 2.252906722s ago: executing program 3 (id=3256): unshare(0x2040400) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x1) 2.252684905s ago: executing program 9 (id=3257): unshare(0x22020600) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x16) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xff) 2.23088564s ago: executing program 0 (id=3258): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x77) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x803, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x4, 0x1, 0x7f, @vifc_lcl_ifindex, @remote}, 0x10) 2.201094868s ago: executing program 3 (id=3259): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000180)) 2.080666287s ago: executing program 9 (id=3260): io_setup(0x1, &(0x7f00000000c0)=0x0) io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x300, 0x2}]) 2.068472956s ago: executing program 3 (id=3261): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.045648661s ago: executing program 0 (id=3262): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.944681011s ago: executing program 3 (id=3263): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x10, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) 1.931493421s ago: executing program 9 (id=3264): openat(0xffffffffffffff9c, 0x0, 0x92341, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x8c, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1.759083924s ago: executing program 3 (id=3265): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) 1.308618028s ago: executing program 0 (id=3266): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x9, 0xc000, 0x4, 0x5, 0xff, 0x8, 0x3, 0xa, 0xb9, 0x3, 0x8e, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0xb, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x7fffffff}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x100000, 0x104000}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x5, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.227464387s ago: executing program 0 (id=3267): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x8d1}, 0x48800) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10001, 0x80}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xa7, 0x0) 0s ago: executing program 3 (id=3268): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) eventfd(0x80005) connect$inet6(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[], 0x0) kernel console output (not intermixed with test programs): 0 [ 744.262887][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.272109][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.325989][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.452250][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.460364][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.492738][ T152] IPVS: stop unused estimator thread 0... [ 744.503523][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.512043][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.916618][T17082] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 744.930665][T17082] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 744.954682][T17082] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 744.976989][ T5817] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 744.988056][T17082] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 745.156961][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 745.172913][ T5817] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 745.196532][T17082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.203283][ T5817] usb 2-1: config 0 has no interface number 0 [ 745.213435][ T5817] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 745.230160][T17082] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.237513][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.247541][ T5817] usb 2-1: Product: syz [ 745.262754][ T5817] usb 2-1: Manufacturer: syz [ 745.269658][ T5817] usb 2-1: SerialNumber: syz [ 745.270481][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.281336][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.333516][ T5817] usb 2-1: config 0 descriptor?? [ 745.343355][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.346126][ T5817] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 745.350578][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.550762][ T5817] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 745.582456][ T5817] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 745.619987][ T5821] Bluetooth: hci0: command tx timeout [ 746.087198][T17082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.970272][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.978298][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.424730][T17082] veth0_vlan: entered promiscuous mode [ 748.455596][T17082] veth1_vlan: entered promiscuous mode [ 748.493235][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 748.501645][ T9] usb 2-1: USB disconnect, device number 94 [ 748.570050][T17082] veth0_macvtap: entered promiscuous mode [ 748.585099][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 748.602169][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 748.614134][ T9] quatech2 2-1:0.51: device disconnected [ 748.617445][T17248] input: syz1 as /devices/virtual/input/input61 [ 748.634577][T17082] veth1_macvtap: entered promiscuous mode [ 748.692146][T17082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.734266][T17082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.774905][T12065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.798805][T12065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.819133][T12065] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.914940][T12065] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.024934][T12065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.059576][T12065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.142241][T12065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.217227][T12065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.342062][T17267] input: syz1 as /devices/virtual/input/input62 [ 749.360412][T17267] FAULT_INJECTION: forcing a failure. [ 749.360412][T17267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.378414][T17267] CPU: 1 UID: 0 PID: 17267 Comm: syz.0.2785 Tainted: G L syzkaller #0 PREEMPT(full) [ 749.378442][T17267] Tainted: [L]=SOFTLOCKUP [ 749.378446][T17267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 749.378453][T17267] Call Trace: [ 749.378457][T17267] [ 749.378461][T17267] dump_stack_lvl+0x16c/0x1f0 [ 749.378478][T17267] should_fail_ex+0x512/0x640 [ 749.378497][T17267] _copy_from_user+0x2e/0xd0 [ 749.378515][T17267] input_event_from_user+0x133/0x3b0 [ 749.378529][T17267] ? __pfx_input_event_from_user+0x10/0x10 [ 749.378541][T17267] ? __pfx___might_resched+0x10/0x10 [ 749.378552][T17267] ? input_event+0x5b/0xd0 [ 749.378563][T17267] uinput_write+0xbb4/0x12b0 [ 749.378581][T17267] ? __pfx_uinput_write+0x10/0x10 [ 749.378596][T17267] ? bpf_lsm_file_permission+0x9/0x10 [ 749.378607][T17267] ? security_file_permission+0x71/0x210 [ 749.378622][T17267] ? rw_verify_area+0xcf/0x6c0 [ 749.378635][T17267] ? __pfx_uinput_write+0x10/0x10 [ 749.378649][T17267] vfs_write+0x2a0/0x11d0 [ 749.378665][T17267] ? __pfx_vfs_write+0x10/0x10 [ 749.378677][T17267] ? find_held_lock+0x2b/0x80 [ 749.378693][T17267] ? __fget_files+0x204/0x3c0 [ 749.378710][T17267] ? __fget_files+0x20e/0x3c0 [ 749.378728][T17267] ksys_write+0x1f8/0x250 [ 749.378741][T17267] ? __pfx_ksys_write+0x10/0x10 [ 749.378763][T17267] do_syscall_64+0xcd/0xf80 [ 749.378778][T17267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.378788][T17267] RIP: 0033:0x7fd67098f749 [ 749.378797][T17267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.378807][T17267] RSP: 002b:00007fd671870038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 749.378818][T17267] RAX: ffffffffffffffda RBX: 00007fd670be5fa0 RCX: 00007fd67098f749 [ 749.378824][T17267] RDX: 000000000000045c RSI: 0000200000000080 RDI: 0000000000000003 [ 749.378830][T17267] RBP: 00007fd671870090 R08: 0000000000000000 R09: 0000000000000000 [ 749.378836][T17267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.378842][T17267] R13: 00007fd670be6038 R14: 00007fd670be5fa0 R15: 00007fff3a7d8ff8 [ 749.378855][T17267] [ 749.672039][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2749'. [ 749.690309][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2749'. [ 749.726853][T17269] netlink: 'syz.4.2749': attribute type 13 has an invalid length. [ 749.746047][T17272] netlink: 'syz.4.2749': attribute type 10 has an invalid length. [ 749.754805][T17272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2749'. [ 749.766116][T17272] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 749.773847][T17272] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 749.783310][T17272] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 749.787595][T17269] netlink: 'syz.4.2749': attribute type 12 has an invalid length. [ 749.842592][ T30] audit: type=1326 audit(2000000428.832:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17270 comm="syz.0.2786" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd67098f749 code=0x0 [ 749.878683][ T4110] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.887752][ T4110] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.927716][ T37] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 749.978728][ T37] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 751.402392][ T30] audit: type=1400 audit(2000000430.392:846): avc: denied { create } for pid=17294 comm="syz.4.2793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 751.506560][T17309] input: syz1 as /devices/virtual/input/input63 [ 751.528404][T17309] FAULT_INJECTION: forcing a failure. [ 751.528404][T17309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.557571][T17309] CPU: 0 UID: 0 PID: 17309 Comm: syz.4.2796 Tainted: G L syzkaller #0 PREEMPT(full) [ 751.557600][T17309] Tainted: [L]=SOFTLOCKUP [ 751.557606][T17309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 751.557616][T17309] Call Trace: [ 751.557622][T17309] [ 751.557630][T17309] dump_stack_lvl+0x16c/0x1f0 [ 751.557655][T17309] should_fail_ex+0x512/0x640 [ 751.557685][T17309] _copy_from_user+0x2e/0xd0 [ 751.557710][T17309] input_event_from_user+0x133/0x3b0 [ 751.557731][T17309] ? __pfx_input_event_from_user+0x10/0x10 [ 751.557756][T17309] ? __pfx___might_resched+0x10/0x10 [ 751.557774][T17309] ? read_tsc+0x9/0x20 [ 751.557796][T17309] ? ktime_get+0x1a7/0x310 [ 751.557815][T17309] ? input_event+0x2a/0xd0 [ 751.557834][T17309] uinput_write+0xbb4/0x12b0 [ 751.557862][T17309] ? __pfx_uinput_write+0x10/0x10 [ 751.557887][T17309] ? bpf_lsm_file_permission+0x9/0x10 [ 751.557905][T17309] ? security_file_permission+0x71/0x210 [ 751.557929][T17309] ? rw_verify_area+0xcf/0x6c0 [ 751.557950][T17309] ? __pfx_uinput_write+0x10/0x10 [ 751.557971][T17309] vfs_write+0x2a0/0x11d0 [ 751.557998][T17309] ? __pfx_vfs_write+0x10/0x10 [ 751.558016][T17309] ? find_held_lock+0x2b/0x80 [ 751.558039][T17309] ? __fget_files+0x204/0x3c0 [ 751.558066][T17309] ? __fget_files+0x20e/0x3c0 [ 751.558096][T17309] ksys_write+0x1f8/0x250 [ 751.558116][T17309] ? __pfx_ksys_write+0x10/0x10 [ 751.558144][T17309] do_syscall_64+0xcd/0xf80 [ 751.558168][T17309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.558185][T17309] RIP: 0033:0x7fc7c2d8f749 [ 751.558200][T17309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.558216][T17309] RSP: 002b:00007fc7c0ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 751.558232][T17309] RAX: ffffffffffffffda RBX: 00007fc7c2fe5fa0 RCX: 00007fc7c2d8f749 [ 751.558243][T17309] RDX: 000000000000045c RSI: 0000200000000080 RDI: 0000000000000003 [ 751.558253][T17309] RBP: 00007fc7c0ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 751.558263][T17309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.558272][T17309] R13: 00007fc7c2fe6038 R14: 00007fc7c2fe5fa0 R15: 00007ffc827e3458 [ 751.558297][T17309] [ 752.378814][ T5897] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 752.440003][T17323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.447786][T17323] batadv_slave_0: entered promiscuous mode [ 752.537102][ T5897] usb 5-1: device descriptor read/64, error -71 [ 752.783006][T17340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 752.796901][ T5897] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 752.832658][T17342] fuse: Bad value for 'fd' [ 752.851495][T17342] fuse: Unknown parameter '&d' [ 752.905745][T17345] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 752.912274][T17345] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 752.936550][T17345] vhci_hcd vhci_hcd.0: Device attached [ 752.957102][ T5897] usb 5-1: device descriptor read/64, error -71 [ 753.081364][ T5897] usb usb5-port1: attempt power cycle [ 753.157099][ T5931] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 753.280387][T17351] input: syz1 as /devices/virtual/input/input64 [ 753.291020][T17351] FAULT_INJECTION: forcing a failure. [ 753.291020][T17351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.305075][T17351] CPU: 0 UID: 0 PID: 17351 Comm: syz.1.2808 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.305100][T17351] Tainted: [L]=SOFTLOCKUP [ 753.305104][T17351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.305109][T17351] Call Trace: [ 753.305113][T17351] [ 753.305118][T17351] dump_stack_lvl+0x16c/0x1f0 [ 753.305134][T17351] should_fail_ex+0x512/0x640 [ 753.305153][T17351] _copy_from_user+0x2e/0xd0 [ 753.305169][T17351] input_event_from_user+0x133/0x3b0 [ 753.305182][T17351] ? __pfx_input_event_from_user+0x10/0x10 [ 753.305194][T17351] ? __pfx___might_resched+0x10/0x10 [ 753.305205][T17351] ? read_tsc+0x9/0x20 [ 753.305219][T17351] ? ktime_get+0x1a7/0x310 [ 753.305232][T17351] ? input_event+0x2a/0xd0 [ 753.305243][T17351] uinput_write+0xbb4/0x12b0 [ 753.305261][T17351] ? __pfx_uinput_write+0x10/0x10 [ 753.305277][T17351] ? bpf_lsm_file_permission+0x9/0x10 [ 753.305288][T17351] ? security_file_permission+0x71/0x210 [ 753.305303][T17351] ? rw_verify_area+0xcf/0x6c0 [ 753.305315][T17351] ? __pfx_uinput_write+0x10/0x10 [ 753.305329][T17351] vfs_write+0x2a0/0x11d0 [ 753.305345][T17351] ? __pfx_vfs_write+0x10/0x10 [ 753.305357][T17351] ? find_held_lock+0x2b/0x80 [ 753.305374][T17351] ? __fget_files+0x204/0x3c0 [ 753.305391][T17351] ? __fget_files+0x20e/0x3c0 [ 753.305410][T17351] ksys_write+0x1f8/0x250 [ 753.305422][T17351] ? __pfx_ksys_write+0x10/0x10 [ 753.305439][T17351] do_syscall_64+0xcd/0xf80 [ 753.305454][T17351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.305465][T17351] RIP: 0033:0x7fb2b5d8f749 [ 753.305485][T17351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.305495][T17351] RSP: 002b:00007fb2b6d05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 753.305505][T17351] RAX: ffffffffffffffda RBX: 00007fb2b5fe5fa0 RCX: 00007fb2b5d8f749 [ 753.305512][T17351] RDX: 000000000000045c RSI: 0000200000000080 RDI: 0000000000000003 [ 753.305518][T17351] RBP: 00007fb2b6d05090 R08: 0000000000000000 R09: 0000000000000000 [ 753.305524][T17351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.305529][T17351] R13: 00007fb2b5fe6038 R14: 00007fb2b5fe5fa0 R15: 00007ffcd06a7048 [ 753.305543][T17351] [ 753.530591][ T976] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 753.556198][ T5931] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 753.577157][ T5897] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 753.583567][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 753.584737][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.601097][ T30] audit: type=1400 audit(2000000432.592:847): avc: denied { map } for pid=17352 comm="syz.1.2809" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 753.626658][ T5931] usb 4-1: Product: syz [ 753.631550][ T5897] usb 5-1: device descriptor read/8, error -71 [ 753.654758][ T5931] usb 4-1: Manufacturer: syz [ 753.656953][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 753.659464][ T5931] usb 4-1: SerialNumber: syz [ 753.691094][ T10] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 753.717754][ T5948] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 753.731788][ T5931] usb 4-1: config 0 descriptor?? [ 753.734823][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 753.744303][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 753.835125][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 753.848535][ T10] usb 10-1: config 0 has no interfaces? [ 753.856889][ T10] usb 10-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 753.873275][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.887703][ T10] usb 10-1: config 0 descriptor?? [ 753.893128][ T5897] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 753.916898][ T5948] usb 6-1: device descriptor read/64, error -32 [ 753.937829][ T5897] usb 5-1: device descriptor read/8, error -71 [ 753.965036][ T5931] usb 4-1: USB disconnect, device number 35 [ 754.012190][T17357] input: syz1 as /devices/virtual/input/input65 [ 754.037322][ T5948] raw-gadget.1 gadget.5: failed to queue suspend event [ 754.047248][ T5897] usb usb5-port1: unable to enumerate USB device [ 754.054119][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 754.126899][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 754.161439][ T10] usb 10-1: USB disconnect, device number 41 [ 754.168266][T17346] vhci_hcd: connection closed [ 754.168730][ T13] vhci_hcd vhci_hcd.9: stop threads [ 754.182069][ T13] vhci_hcd vhci_hcd.9: release socket [ 754.187687][ T13] vhci_hcd vhci_hcd.9: disconnect device [ 754.197147][ T5948] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 754.205747][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 754.213105][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 754.226885][ T976] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 754.286926][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 754.347521][ T5948] usb 6-1: device descriptor read/64, error -32 [ 754.457096][ T5948] raw-gadget.1 gadget.5: failed to queue suspend event [ 754.465889][ T5948] usb usb6-port1: attempt power cycle [ 754.471519][ T5948] raw-gadget.1 gadget.5: failed to queue disconnect event [ 754.479215][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 754.557883][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 754.567216][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 754.778626][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 754.817855][T17373] input: syz1 as /devices/virtual/input/input66 [ 754.836970][ T5948] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 754.857054][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 754.864147][ T5948] usb 6-1: device descriptor read/8, error -32 [ 754.917638][T17376] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 754.934943][T17377] syzkaller0: entered allmulticast mode [ 754.978011][ T5948] raw-gadget.1 gadget.5: failed to queue suspend event [ 755.013885][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 755.089270][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 755.308221][ T5948] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 755.338359][T17387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2819'. [ 755.347414][T17387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2819'. [ 755.357236][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 755.446040][T17390] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:128x16 (0x33424752, 8, 0, 0, 0) [ 755.829669][ T5948] usb 6-1: device descriptor read/8, error -32 [ 755.879313][T17393] input: syz1 as /devices/virtual/input/input67 [ 755.947079][ T5948] raw-gadget.1 gadget.5: failed to queue suspend event [ 755.956495][ T5948] usb usb6-port1: unable to enumerate USB device [ 756.206883][ T5931] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 756.368060][ T5931] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.378081][ T5931] usb 5-1: config 0 interface 0 has no altsetting 0 [ 756.384686][ T5931] usb 5-1: New USB device found, idVendor=056a, idProduct=00d2, bcdDevice= 0.00 [ 756.393789][ T5931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.405674][ T5931] usb 5-1: config 0 descriptor?? [ 756.476875][ T5948] usb 10-1: new full-speed USB device number 42 using dummy_hcd [ 756.630162][ T5948] usb 10-1: unable to get BOS descriptor or descriptor too short [ 756.638528][ T5948] usb 10-1: not running at top speed; connect to a high speed hub [ 756.647266][ T5948] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 756.657841][ T5948] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 756.666899][ T5948] usb 10-1: config 1 has no interface number 1 [ 756.673087][ T5948] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 756.686083][ T5948] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 756.699017][ T5948] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 756.708169][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.717149][ T5948] usb 10-1: Product: syz [ 756.721392][ T5948] usb 10-1: Manufacturer: syz [ 756.726050][ T5948] usb 10-1: SerialNumber: syz [ 756.948630][ T5948] hub 10-1:1.0: Invalid hub with more than one config or interface [ 756.975198][ T5948] hub 10-1:1.0: probe with driver hub failed with error -22 [ 756.998887][ T5948] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 757.054007][ T5948] usb 10-1: USB disconnect, device number 42 [ 757.061081][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2820'. [ 757.081420][T17394] openvswitch: netlink: Key 4 has unexpected len 4 expected 12 [ 758.241991][T17442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.254824][T17443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.279550][ T30] audit: type=1400 audit(2000000437.272:848): avc: denied { ioctl } for pid=17441 comm="syz.0.2834" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 758.280590][T17440] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.312011][T17440] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.325945][T17443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 758.342483][T17443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 758.396418][T17440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.409956][T17440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.557332][ T5890] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 758.593297][ T3502] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.604368][ T3502] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.616816][ T3502] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.625743][ T3502] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.768596][ T5890] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 758.779863][ T5890] usb 1-1: can't read configurations, error -22 [ 759.270234][ T5931] usb 5-1: USB disconnect, device number 27 [ 759.487443][ T5890] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 759.739006][ T5890] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 759.748855][ T5890] usb 1-1: can't read configurations, error -22 [ 759.755624][ T5890] usb usb1-port1: attempt power cycle [ 760.346911][ T5890] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 760.346911][ T976] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 760.382279][ T5890] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 760.391560][ T5890] usb 1-1: can't read configurations, error -22 [ 760.487008][ T976] usb 5-1: device descriptor read/64, error -71 [ 760.505512][T17478] input: syz1 as /devices/virtual/input/input68 [ 760.517939][ T5817] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 760.527210][ T5890] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 760.559250][ T5890] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 760.571141][ T5890] usb 1-1: can't read configurations, error -22 [ 760.579045][ T5890] usb usb1-port1: unable to enumerate USB device [ 760.686919][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 760.693324][ T5817] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 760.701622][ T5817] usb 2-1: config 0 has no interface number 0 [ 760.708439][ T5817] usb 2-1: config 0 interface 2 has no altsetting 0 [ 760.716704][ T5817] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 760.725889][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.792531][T17482] vivid-002: disconnect [ 761.170581][ T976] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 761.178224][ T5817] usb 2-1: Product: syz [ 761.190627][ T5817] usb 2-1: Manufacturer: syz [ 761.195975][ T5817] usb 2-1: SerialNumber: syz [ 761.203283][ T5817] usb 2-1: config 0 descriptor?? [ 761.316839][ T976] usb 5-1: device descriptor read/64, error -71 [ 761.388832][ T5931] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 761.451015][ T976] usb usb5-port1: attempt power cycle [ 761.543581][ T5817] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 761.562489][ T5931] usb 4-1: Using ep0 maxpacket: 8 [ 761.578469][ T5931] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 761.598477][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.616877][ T5817] usb 2-1: USB disconnect, device number 95 [ 761.645351][ T5931] pvrusb2: Hardware description: Terratec Grabster AV400 [ 761.655648][ T5931] pvrusb2: ********** [ 761.666033][ T5931] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 761.686619][ T5931] pvrusb2: Important functionality might not be entirely working. [ 761.703689][ T5931] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 761.729937][ T5931] pvrusb2: ********** [ 761.826837][ T976] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 761.872528][ T976] usb 5-1: device descriptor read/8, error -71 [ 761.882749][ T30] audit: type=1400 audit(2000000440.872:849): avc: denied { getopt } for pid=17494 comm="syz.9.2848" lport=58440 faddr=::ffff:10.1.1.3 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 762.166876][ T976] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 762.200454][ T976] usb 5-1: device descriptor read/8, error -71 [ 762.329111][ T976] usb usb5-port1: unable to enumerate USB device [ 762.677034][ T976] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 762.728019][T17503] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 762.836875][ T976] usb 2-1: Using ep0 maxpacket: 32 [ 762.851614][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.886407][ T976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.906709][ T976] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 762.915824][ T976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.948432][ T976] usb 2-1: config 0 descriptor?? [ 762.997250][ T5817] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 763.136925][ T5817] usb 1-1: device descriptor read/64, error -71 [ 763.176139][T17513] input: syz1 as /devices/virtual/input/input69 [ 763.230520][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2856'. [ 763.242548][T17515] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2856'. [ 763.265720][T17515] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2856'. [ 763.276903][T17515] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2856'. [ 763.362245][ T976] savu 0003:1E7D:2D5A.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 763.386891][ T5817] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 763.516971][ T5817] usb 1-1: device descriptor read/64, error -71 [ 763.536905][ T5890] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 763.589872][T17482] vivid-002: reconnect [ 763.627670][ T5817] usb usb1-port1: attempt power cycle [ 763.631213][ T5931] usb 4-1: USB disconnect, device number 36 [ 763.634155][ T2339] pvrusb2: Invalid write control endpoint [ 763.710788][ T2339] pvrusb2: Invalid write control endpoint [ 763.715154][ T5890] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 763.717312][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 763.732753][ T5890] usb 10-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 763.745316][ T5890] usb 10-1: Product: syz [ 763.755757][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 763.757766][ T5890] usb 10-1: Manufacturer: syz [ 763.772591][ T10] usb 2-1: USB disconnect, device number 96 [ 763.778284][ T5890] usb 10-1: SerialNumber: syz [ 763.786959][ T976] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 763.791624][ T5890] usb 10-1: config 0 descriptor?? [ 763.794580][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 763.805147][ T5890] ch341 10-1:0.0: ch341-uart converter detected [ 763.829007][ T2339] pvrusb2: Device being rendered inoperable [ 763.835008][ T2339] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 763.842340][ T2339] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 763.852090][ T2339] pvrusb2: Attached sub-driver cx25840 [ 763.857960][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 763.869545][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 763.969046][ T976] usb 5-1: config 0 has no interfaces? [ 763.976178][ T976] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.986117][ T976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.996116][ T976] usb 5-1: Product: syz [ 764.000405][ T5817] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 764.008283][ T976] usb 5-1: Manufacturer: syz [ 764.012857][ T976] usb 5-1: SerialNumber: syz [ 764.019193][ T976] usb 5-1: config 0 descriptor?? [ 764.037379][ T5817] usb 1-1: device descriptor read/8, error -71 [ 764.236885][ T5931] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 764.276873][ T5817] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 764.297505][ T5817] usb 1-1: device descriptor read/8, error -71 [ 764.410013][ T5817] usb usb1-port1: unable to enumerate USB device [ 764.412551][ T5931] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 764.426085][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.436463][ T5931] usb 4-1: Product: syz [ 764.440712][ T5931] usb 4-1: Manufacturer: syz [ 764.445305][ T5931] usb 4-1: SerialNumber: syz [ 764.451191][ T5931] usb 4-1: config 0 descriptor?? [ 764.566926][ T5830] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 764.636571][ T5890] usb 10-1: failed to send control message: -71 [ 764.643585][ T5890] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 764.654981][ T5890] usb 10-1: USB disconnect, device number 43 [ 764.662511][ T5890] ch341 10-1:0.0: device disconnected [ 764.729191][ T5830] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 764.737564][ T5830] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 764.746119][ T5830] usb 2-1: config 0 has no interface number 0 [ 764.752628][ T5830] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 764.762722][ T5830] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 764.772699][ T5830] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 764.781803][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.791010][ T5817] usb 5-1: USB disconnect, device number 32 [ 764.792487][ T5830] usb 2-1: config 0 descriptor?? [ 764.883182][ T5931] usb 4-1: Firmware version (0.0) predates our first public release. [ 764.891467][ T5931] usb 4-1: Please update to version 0.2 or newer [ 764.923713][T17541] input: syz1 as /devices/virtual/input/input71 [ 764.932215][ T5931] usb 4-1: USB disconnect, device number 37 [ 765.754840][ T5830] usb 2-1: USB disconnect, device number 97 [ 765.771954][T17552] input: syz1 as /devices/virtual/input/input72 [ 766.256859][ T5948] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 766.474193][ T5948] usb 5-1: device descriptor read/64, error -71 [ 766.811183][ T5948] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 766.997368][ T5948] usb 5-1: device descriptor read/64, error -71 [ 767.114921][ T5948] usb usb5-port1: attempt power cycle [ 767.506998][ T5948] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 767.547555][ T5948] usb 5-1: device descriptor read/8, error -71 [ 767.621206][T17602] input: syz1 as /devices/virtual/input/input73 [ 767.889731][T17608] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:128x16 (0x33424752, 8, 0, 0, 0) [ 767.904665][ T5948] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 767.942147][ T5948] usb 5-1: device descriptor read/8, error -71 [ 768.062237][ T5948] usb usb5-port1: unable to enumerate USB device [ 768.319406][T17614] input: syz1 as /devices/virtual/input/input74 [ 768.666706][T17625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2134 sclass=netlink_route_socket pid=17625 comm=syz.3.2882 [ 768.786848][ T5830] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 768.817166][ T5931] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 768.952468][ T5830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 768.970869][ T5931] usb 10-1: config 247 has an invalid interface number: 136 but max is 0 [ 768.987075][ T5931] usb 10-1: config 247 has no interface number 0 [ 768.994410][ T5830] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 769.010014][ T5931] usb 10-1: config 247 interface 136 has no altsetting 0 [ 769.022255][ T5830] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 769.034929][ T5830] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 769.151616][ T5931] usb 10-1: New USB device found, idVendor=1286, idProduct=8001, bcdDevice=cc.76 [ 769.181062][ T5830] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 769.197828][ T5931] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.464174][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.473574][ T5931] usb 10-1: Product: syz [ 769.478076][ T5931] usb 10-1: Manufacturer: syz [ 769.482851][ T5830] usb 1-1: Product: syz [ 769.487093][ T5931] usb 10-1: SerialNumber: syz [ 769.492463][ T5830] usb 1-1: Manufacturer: syz [ 769.499433][ T5830] usb 1-1: SerialNumber: syz [ 769.961436][ T5931] cdc_subset 10-1:247.136: probe with driver cdc_subset failed with error -22 [ 769.998680][ T5931] usb 10-1: USB disconnect, device number 44 [ 770.201905][T17636] netlink: 'syz.4.2887': attribute type 11 has an invalid length. [ 770.212581][T17636] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2887'. [ 770.965839][ T5830] usb 1-1: invalid UAC_HEADER (v1) [ 770.985878][T17647] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2886'. [ 771.010150][ T5830] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 771.028380][T17649] input: syz1 as /devices/virtual/input/input75 [ 771.068873][ T5830] usb 1-1: USB disconnect, device number 48 [ 771.102869][ T30] audit: type=1326 audit(2000000450.092:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17651 comm="syz.3.2891" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7fb8fa1865e7 code=0x0 [ 771.588168][ T30] audit: type=1400 audit(2000000450.322:851): avc: denied { lock } for pid=17655 comm="syz.9.2892" path="socket:[63745]" dev="sockfs" ino=63745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 771.649341][ T5821] Bluetooth: hci0: failed to read key size for handle 201 [ 771.822467][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 771.897174][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 771.967058][ T5948] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 771.980180][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 771.992459][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 772.007511][ T5890] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 772.055119][T17673] input: syz1 as /devices/virtual/input/input76 [ 772.079785][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 772.158456][ T5890] usb 1-1: device descriptor read/64, error -71 [ 772.302478][ T5948] usb 6-1: device descriptor read/64, error -32 [ 772.476782][ T5948] raw-gadget.1 gadget.5: failed to queue suspend event [ 772.487060][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 772.597292][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 772.636889][ T5890] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 772.666881][ T5948] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 772.674694][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 772.682280][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 772.756885][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 772.776807][ T5890] usb 1-1: device descriptor read/64, error -71 [ 772.828421][ T5948] usb 6-1: device descriptor read/64, error -32 [ 772.887262][ T5890] usb usb1-port1: attempt power cycle [ 772.906984][T14784] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 772.947486][ T5948] raw-gadget.1 gadget.5: failed to queue suspend event [ 772.954601][ T5948] usb usb6-port1: attempt power cycle [ 772.960221][ T5948] raw-gadget.1 gadget.5: failed to queue disconnect event [ 772.967956][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 773.047329][T14784] usb 2-1: device descriptor read/64, error -71 [ 773.053803][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 773.062095][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 773.226800][ T5890] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 773.237000][ T10] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 773.258094][ T5890] usb 1-1: device descriptor read/8, error -71 [ 773.277018][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 773.306846][T14784] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 773.336878][ T5948] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 773.357074][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 773.364208][ T5948] usb 6-1: device descriptor read/8, error -32 [ 773.388127][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 773.399280][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 773.408195][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 773.417398][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 773.425579][ T10] usb 4-1: Product: syz [ 773.429807][ T10] usb 4-1: Manufacturer: syz [ 773.434393][ T10] usb 4-1: SerialNumber: syz [ 773.439122][T14784] usb 2-1: device descriptor read/64, error -71 [ 773.448107][ T10] usb 4-1: config 0 descriptor?? [ 773.455952][ T10] usb 4-1: selecting invalid altsetting 0 [ 773.476939][ T5948] raw-gadget.1 gadget.5: failed to queue suspend event [ 773.484282][ T5948] raw-gadget.1 gadget.5: failed to queue reset event [ 773.506787][ T5890] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 773.527293][ T5890] usb 1-1: device descriptor read/8, error -71 [ 773.547030][T14784] usb usb2-port1: attempt power cycle [ 773.567099][ T5948] raw-gadget.1 gadget.5: failed to queue resume event [ 773.626885][ T5948] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 773.637145][ T5890] usb usb1-port1: unable to enumerate USB device [ 773.647013][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 773.654133][ T5948] usb 6-1: device descriptor read/8, error -32 [ 773.766835][ T5948] raw-gadget.1 gadget.5: failed to queue suspend event [ 773.773857][ T5948] usb usb6-port1: unable to enumerate USB device [ 773.976506][ T5948] usb 4-1: USB disconnect, device number 38 [ 774.036816][T14784] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 774.100523][T14784] usb 2-1: device descriptor read/8, error -71 [ 774.228789][T17701] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 774.397332][T14784] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 774.405933][T17702] fuse: Bad value for 'group_id' [ 774.435384][T17702] fuse: Bad value for 'group_id' [ 774.540232][T14784] usb 2-1: device descriptor read/8, error -71 [ 774.697543][T14784] usb usb2-port1: unable to enumerate USB device [ 774.964804][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2906'. [ 774.993906][T17711] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 775.005012][T17716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2908'. [ 775.009419][T17711] team0: Device ipvlan2 is already an upper device of the team interface [ 775.031773][ T30] audit: type=1400 audit(2000000454.022:852): avc: denied { write } for pid=17709 comm="syz.0.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 775.151483][T17722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 775.158719][T17722] IPv6: NLM_F_CREATE should be set when creating new route [ 775.165948][T17722] IPv6: NLM_F_CREATE should be set when creating new route [ 775.173165][T17722] IPv6: NLM_F_CREATE should be set when creating new route [ 775.388642][T17730] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 775.395148][T17730] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 775.408226][T17730] vhci_hcd vhci_hcd.0: Device attached [ 775.467032][ T5931] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 775.474966][T17732] vhci_hcd: connection closed [ 775.557459][ T3575] vhci_hcd vhci_hcd.3: stop threads [ 775.847227][ T3575] vhci_hcd vhci_hcd.3: release socket [ 775.855326][ T5931] usb 5-1: config 0 has an invalid interface number: 156 but max is 0 [ 775.872162][ T3575] vhci_hcd vhci_hcd.3: disconnect device [ 775.883248][ T5931] usb 5-1: config 0 has no interface number 0 [ 775.890218][ T5830] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 775.900441][ T5931] usb 5-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01 [ 775.911054][ T5931] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 775.921260][ T5931] usb 5-1: Product: syz [ 775.925590][T17744] fuse: Unknown parameter '0x00000000000000030000000000000000000000300000000000000000003' [ 775.940471][ T5931] usb 5-1: Manufacturer: syz [ 775.946831][ T5931] usb 5-1: SerialNumber: syz [ 775.955055][ T5931] usb 5-1: config 0 descriptor?? [ 776.132200][T17748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2916'. [ 776.142156][T17749] batman_adv: batadv0: Adding interface: macsec1 [ 776.171626][T17749] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.208835][T17749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 776.210007][ T5931] go7007 5-1:0.156: The Lifeview TV Walker Ultra is not supported. Sorry! [ 776.219885][T17749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 776.239495][T17748] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2916'. [ 776.250709][T17749] batman_adv: batadv0: Interface activated: macsec1 [ 776.255235][ T5931] usb 5-1: USB disconnect, device number 37 [ 776.310193][ T30] audit: type=1400 audit(2000000455.302:853): avc: denied { getopt } for pid=17750 comm="syz.9.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 776.330210][T17751] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2917'. [ 776.378271][ T30] audit: type=1400 audit(2000000455.372:854): avc: denied { read write } for pid=17757 comm="syz.0.2920" name="file0" dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 776.423160][ T30] audit: type=1400 audit(2000000455.372:855): avc: denied { open } for pid=17757 comm="syz.0.2920" path="/207/file0" dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 776.446483][ T30] audit: type=1400 audit(2000000455.372:856): avc: denied { ioctl } for pid=17757 comm="syz.0.2920" path="/207/file0" dev="tmpfs" ino=1111 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 776.476945][ T5890] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 776.817869][ T5890] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 776.828411][ T5890] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 776.841622][ T5890] usb 4-1: config 2 interface 0 has no altsetting 0 [ 777.699685][ T5890] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 777.709239][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 777.718675][ T5890] usb 4-1: SerialNumber: syz [ 778.200127][T17753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.227277][T17753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.279009][T17771] "syz.1.2924" (17771) uses obsolete ecb(arc4) skcipher [ 778.301366][ T5890] ims_pcu 4-1:2.0: Missing CDC union descriptor [ 778.324316][ T5890] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 778.359425][ T5890] usb 4-1: USB disconnect, device number 39 [ 778.527336][ T5883] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 778.687108][ T5883] usb 1-1: Invalid ep0 maxpacket: 64 [ 779.236968][ T5883] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 779.387210][T14784] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 779.596868][ T5883] usb 1-1: Invalid ep0 maxpacket: 64 [ 779.602476][ T5883] usb usb1-port1: attempt power cycle [ 779.649796][T17831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2936'. [ 779.669152][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2936'. [ 779.697263][T17831] netlink: 'syz.3.2936': attribute type 11 has an invalid length. [ 779.707233][T14784] usb 10-1: Using ep0 maxpacket: 32 [ 779.715772][T14784] usb 10-1: unable to get BOS descriptor or descriptor too short [ 779.724687][T17832] bridge0: entered allmulticast mode [ 779.724875][T14784] usb 10-1: config 5 has an invalid interface number: 52 but max is 0 [ 779.759339][T17831] netlink: 'syz.3.2936': attribute type 13 has an invalid length. [ 779.779758][T14784] usb 10-1: config 5 has no interface number 0 [ 779.831324][T14784] usb 10-1: config 5 interface 52 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 779.879402][T14784] usb 10-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 779.908230][T14784] usb 10-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 779.918666][T14784] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.928236][T14784] usb 10-1: Product: syz [ 779.933840][T14784] usb 10-1: Manufacturer: syz [ 779.938943][T14784] usb 10-1: SerialNumber: syz [ 780.078329][ T5948] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 780.237217][ T5948] usb 4-1: Using ep0 maxpacket: 32 [ 780.268779][ T5948] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 780.296481][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.308112][ T5948] usb 4-1: Product: syz [ 780.319919][ T5948] usb 4-1: Manufacturer: syz [ 780.338439][ T5948] usb 4-1: SerialNumber: syz [ 780.346959][ T5883] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 780.360019][ T5948] usb 4-1: config 0 descriptor?? [ 780.368806][ T5883] usb 1-1: Invalid ep0 maxpacket: 64 [ 780.381892][ T5948] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 780.444900][T17836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17836 comm=syz.4.2937 [ 780.481075][T17836] ÿÿÿÿÿÿ: renamed from tunl0 (while UP) [ 780.489651][T17836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=65535 sclass=netlink_tcpdiag_socket pid=17836 comm=syz.4.2937 [ 780.506966][ T5883] usb 1-1: new low-speed USB device number 56 using dummy_hcd [ 780.537358][ T5883] usb 1-1: Invalid ep0 maxpacket: 64 [ 780.548598][ T5883] usb usb1-port1: unable to enumerate USB device [ 780.965116][T17838] fuse: Unknown parameter 'user_€' [ 781.016901][ T5883] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 781.032633][ T5931] libceph: connect (1)[c::]:6789 error -97 [ 781.038910][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 781.044957][T17842] ceph: No mds server is up or the cluster is laggy [ 781.051949][ T5931] libceph: connect (1)[c::]:6789 error -97 [ 781.058206][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 781.177361][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 781.187419][ T5883] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.211954][ T5883] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 781.235483][ T5883] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 781.245005][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.256237][ T5883] usb 5-1: config 0 descriptor?? [ 781.496976][T14784] aircable 10-1:5.52: aircable converter detected [ 781.517230][T14784] usb 10-1: aircable converter now attached to ttyUSB0 [ 781.546997][T14784] usb 10-1: USB disconnect, device number 45 [ 781.567854][T14784] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 781.577733][T14784] aircable 10-1:5.52: device disconnected [ 781.672356][ T5883] usb 5-1: string descriptor 0 read error: -71 [ 781.681961][ T5883] usb 5-1: USB disconnect, device number 38 [ 781.706929][ T5931] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 781.775558][ T30] audit: type=1326 audit(2000000460.752:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17830 comm="syz.3.2936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8fa18f749 code=0x0 [ 781.898211][ T5931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.911674][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 782.025795][ T5931] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 782.046837][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 782.054855][ T5931] usb 1-1: SerialNumber: syz [ 782.067116][ T5948] gspca_ov534_9: reg_w failed -110 [ 782.125845][T17866] input: syz1 as /devices/virtual/input/input78 [ 782.146916][ T7689] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 782.466866][ T7689] usb 10-1: Using ep0 maxpacket: 16 [ 782.474317][ T7689] usb 10-1: config 0 has an invalid interface number: 49 but max is 0 [ 782.474656][ T5931] usb 1-1: 0:2 : does not exist [ 782.492512][ T7689] usb 10-1: config 0 has no interface number 0 [ 782.506833][ T5948] gspca_ov534_9: Unknown sensor 0000 [ 782.506906][ T5948] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 782.523223][ T7689] usb 10-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 782.525779][ T5931] usb 1-1: USB disconnect, device number 57 [ 782.547845][ T7689] usb 10-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 782.571819][ T7689] usb 10-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 782.617103][ T7689] usb 10-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 782.629668][ T7689] usb 10-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 782.639870][ T7689] usb 10-1: Product: syz [ 782.645746][ T7689] usb 10-1: Manufacturer: syz [ 782.658446][ T7689] usb 10-1: SerialNumber: syz [ 782.733735][ T7689] usb 10-1: config 0 descriptor?? [ 782.949428][T17854] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 783.217342][ T5830] usb 4-1: USB disconnect, device number 40 [ 783.235202][ T30] audit: type=1326 audit(2000000462.222:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 783.285828][ T30] audit: type=1326 audit(2000000462.252:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 783.319084][ T30] audit: type=1326 audit(2000000462.252:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 783.343242][ T30] audit: type=1326 audit(2000000462.252:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 783.367537][ T30] audit: type=1326 audit(2000000462.252:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 783.395029][ T30] audit: type=1326 audit(2000000462.252:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 783.441751][ T30] audit: type=1326 audit(2000000462.252:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 783.492260][ T30] audit: type=1326 audit(2000000462.262:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 783.527045][ T5931] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 783.541583][ T30] audit: type=1326 audit(2000000462.262:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17883 comm="syz.0.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd67098df90 code=0x7ffc0000 [ 783.696972][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 783.716094][ T5931] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 783.731465][ T5931] usb 1-1: config 0 has no interface number 0 [ 783.989727][ T5931] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 784.002526][T17897] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.2955'. [ 784.002771][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.020578][ T5931] usb 1-1: Product: syz [ 784.030722][T17897] openvswitch: netlink: nsh attr 1024 is out of range max 3 [ 784.039177][ T5931] usb 1-1: Manufacturer: syz [ 784.044188][ T5931] usb 1-1: SerialNumber: syz [ 784.055186][ T5931] usb 1-1: config 0 descriptor?? [ 784.064830][ T5931] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 784.073737][ T5931] usb 1-1: selecting invalid altsetting 1 [ 784.080435][ T5931] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 784.100608][ T5931] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 784.119158][ T5931] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 784.136334][ T5931] usb 1-1: media controller created [ 784.142682][T17902] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2956'. [ 784.170092][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 784.238495][T17906] netlink: 'syz.3.2958': attribute type 11 has an invalid length. [ 784.246470][T17906] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2958'. [ 784.306887][ T5890] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 784.454010][T17913] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2959'. [ 784.466425][ T5890] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 784.478645][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.493077][ T5890] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 784.505348][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 784.516563][ T5890] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 784.531496][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 784.552700][ T5830] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 784.560918][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 784.584703][ T5890] usb 5-1: SerialNumber: syz [ 784.612328][ T7689] usb 10-1: USB disconnect, device number 46 [ 784.612672][T17892] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 784.654064][ T5890] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 784.706667][T17923] comedi comedi2: comedi_config --init_data is deprecated [ 784.728827][ T5830] usb 2-1: Using ep0 maxpacket: 32 [ 784.747014][ T5830] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 784.755198][ T5830] usb 2-1: config 0 has no interface number 0 [ 784.762472][ T5830] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 784.774228][ T5830] usb 2-1: config 0 interface 196 has no altsetting 0 [ 784.792943][ T5830] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 784.805298][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.821458][ T5830] usb 2-1: Product: syz [ 784.825646][ T5830] usb 2-1: Manufacturer: syz [ 784.831207][ T5830] usb 2-1: SerialNumber: syz [ 784.839156][ T5830] usb 2-1: config 0 descriptor?? [ 784.844876][T17908] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 784.864157][T17928] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2964'. [ 784.971033][ T7689] usb 5-1: USB disconnect, device number 39 [ 785.159575][T17940] input: syz1 as /devices/virtual/input/input79 [ 785.211700][T17942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2968'. [ 785.288601][ T5931] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 785.295760][ T5931] zl10353_read_register: readreg error (reg=127, ret==-110) [ 785.316886][ T5948] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 785.461472][ T5830] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 785.485932][ T5830] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 785.497642][ T5830] usb 2-1: USB disconnect, device number 103 [ 785.498000][ T5948] usb 10-1: Using ep0 maxpacket: 32 [ 785.529753][ T5948] usb 10-1: config 0 has an invalid interface number: 196 but max is 0 [ 785.546806][ T5948] usb 10-1: config 0 has no interface number 0 [ 785.565624][ T5948] usb 10-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 785.578575][ T5830] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 785.587020][ T5931] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 785.594622][ T5948] usb 10-1: config 0 interface 196 has no altsetting 0 [ 785.621506][ T5948] usb 10-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 785.727284][ T5948] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.744484][ T5948] usb 10-1: Product: syz [ 785.753313][ T5948] usb 10-1: Manufacturer: syz [ 785.763118][ T5948] usb 10-1: SerialNumber: syz [ 786.172563][ T5948] usb 10-1: config 0 descriptor?? [ 786.174099][ T5931] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 786.190233][T17938] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 786.202139][ T5931] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 786.216874][ T5931] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 786.226068][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.236532][T17949] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 786.250220][ T5931] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 786.311842][ T976] usb 1-1: USB disconnect, device number 58 [ 786.404493][ T5948] ipheth 10-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 786.414802][ T5948] ipheth 10-1:0.196: probe with driver ipheth failed with error -71 [ 786.444845][ T5948] usb 10-1: USB disconnect, device number 47 [ 786.587359][T17960] dvmrp0: entered allmulticast mode [ 786.609823][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2974'. [ 786.630481][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2974'. [ 786.825500][T17972] netlink: 'syz.4.2975': attribute type 2 has an invalid length. [ 786.925677][T17977] input: syz1 as /devices/virtual/input/input80 [ 787.000227][T17983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2977'. [ 787.044130][T17983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2977'. [ 787.059685][T17986] trusted_key: encrypted_key: master key parameter is missing [ 787.079605][T17983] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 787.140174][T17989] netlink: 'syz.9.2981': attribute type 4 has an invalid length. [ 787.190089][T17990] usb usb1: check_ctrlrecip: process 17990 (syz.9.2981) requesting ep 01 but needs 81 [ 787.209880][T17990] usb usb1: usbfs: process 17990 (syz.9.2981) did not claim interface 0 before use [ 787.239846][T17990] usb usb1: check_ctrlrecip: process 17990 (syz.9.2981) requesting ep 01 but needs 81 [ 787.249932][T17990] usb usb1: usbfs: process 17990 (syz.9.2981) did not claim interface 0 before use [ 787.269200][T17990] usb usb1: check_ctrlrecip: process 17990 (syz.9.2981) requesting ep 01 but needs 81 [ 787.279905][T17990] usb usb1: usbfs: process 17990 (syz.9.2981) did not claim interface 0 before use [ 787.315257][T17990] usb usb1: check_ctrlrecip: process 17990 (syz.9.2981) requesting ep 01 but needs 81 [ 787.326843][T17990] usb usb1: usbfs: process 17990 (syz.9.2981) did not claim interface 0 before use [ 788.349554][ T976] usb 4-1: USB disconnect, device number 41 [ 788.488210][T17946] delete_channel: no stack [ 789.316879][ T5830] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 789.387073][ T976] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 789.483714][ T5830] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 789.511616][ T5830] usb 2-1: config 0 has no interface number 0 [ 789.519764][ T5830] usb 2-1: config 0 interface 41 has no altsetting 0 [ 789.538252][ T5830] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 789.547471][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.556866][ T5830] usb 2-1: Product: syz [ 789.558255][ T976] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 789.561772][ T5830] usb 2-1: Manufacturer: syz [ 789.582924][ T5830] usb 2-1: SerialNumber: syz [ 789.592533][ T976] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.603462][ T5830] usb 2-1: config 0 descriptor?? [ 789.612720][ T976] usb 10-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 789.646868][T14784] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 789.732830][ T976] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.748498][ T976] usb 10-1: config 0 descriptor?? [ 789.866841][T14784] usb 1-1: Using ep0 maxpacket: 32 [ 789.876426][T14784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.903540][T14784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.913542][T14784] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 789.925825][T14784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.940023][T14784] usb 1-1: config 0 descriptor?? [ 789.949227][T18039] __nla_validate_parse: 1 callbacks suppressed [ 789.949243][T18039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2998'. [ 790.000480][ T976] usbhid 10-1:0.0: can't add hid device: -71 [ 790.015469][ T976] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 790.028621][ T976] usb 10-1: USB disconnect, device number 48 [ 790.045197][T18046] input: syz1 as /devices/virtual/input/input83 [ 790.225653][ T5830] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22 [ 790.359940][T14784] ft260 0003:0403:6030.0024: item fetching failed at offset 0/2 [ 790.376146][T14784] ft260 0003:0403:6030.0024: failed to parse HID [ 790.382920][T14784] ft260 0003:0403:6030.0024: probe with driver ft260 failed with error -22 [ 790.505562][T18062] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3004'. [ 790.536888][ T976] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 790.560432][T14784] usb 1-1: USB disconnect, device number 59 [ 790.689746][ T976] usb 10-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 790.699299][ T976] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.711203][ T976] usb 10-1: config 0 descriptor?? [ 790.728503][ T5948] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 790.900982][ T5948] usb 5-1: Using ep0 maxpacket: 8 [ 790.928081][ T5948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.955587][ T976] usb 10-1: string descriptor 0 read error: -71 [ 790.965834][ T5948] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 790.985352][ T976] pegasus 10-1:0.0: probe with driver pegasus failed with error -71 [ 790.997389][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.022434][ T976] usb 10-1: USB disconnect, device number 49 [ 791.038693][ T5948] usb 5-1: config 0 descriptor?? [ 791.047720][ T7689] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 791.063710][ T5948] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 791.226992][ T7689] usb 4-1: Using ep0 maxpacket: 16 [ 791.239717][ T7689] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 791.269193][ T7689] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 791.296834][ T7689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.315281][ T7689] usb 4-1: Product: syz [ 791.323893][ T7689] usb 4-1: Manufacturer: syz [ 791.338601][ T7689] usb 4-1: SerialNumber: syz [ 791.354563][ T7689] usb 4-1: config 0 descriptor?? [ 791.369349][ T7689] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 791.388093][ T7689] usb 4-1: Detected FT232R [ 791.937020][ T5897] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 792.097080][ T5897] usb 1-1: device descriptor read/64, error -71 [ 792.346856][ T5897] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 792.368122][ T5830] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 792.487136][ T5897] usb 1-1: device descriptor read/64, error -71 [ 792.531069][ T5830] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 792.542211][ T5830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.559953][ T5830] usb 10-1: config 0 descriptor?? [ 792.603638][ T5897] usb usb1-port1: attempt power cycle [ 792.636624][ T5948] gspca_vc032x: reg_w err -110 [ 792.645921][ T5948] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 792.823638][ T5830] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 792.852223][ T5931] usb 2-1: USB disconnect, device number 104 [ 792.947303][ T5897] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 792.999423][ T5897] usb 1-1: device descriptor read/8, error -71 [ 793.044485][T18088] input: syz1 as /devices/virtual/input/input84 [ 793.082458][ T5830] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 793.100564][ T5830] [drm] Initialized udl on minor 2 [ 793.247874][ T5897] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 793.288016][ T5897] usb 1-1: device descriptor read/8, error -71 [ 793.398853][ T5897] usb usb1-port1: unable to enumerate USB device [ 793.436048][ T5830] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 793.656271][ T5830] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 793.664890][ T5883] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 793.674645][ T5830] usb 10-1: USB disconnect, device number 50 [ 793.680935][ T5883] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 794.161425][ T7689] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 794.197675][ T7689] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 794.217152][ T7689] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 794.235306][ T7689] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 794.256549][ T7689] usb 4-1: USB disconnect, device number 42 [ 794.273137][ T7689] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 794.293336][ T7689] ftdi_sio 4-1:0.0: device disconnected [ 794.763198][ T5830] usb 5-1: USB disconnect, device number 40 [ 794.964126][T18116] netlink: 'syz.0.3018': attribute type 4 has an invalid length. [ 794.985089][T18116] netlink: 'syz.0.3018': attribute type 4 has an invalid length. [ 795.181610][T18122] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3019'. [ 795.192453][T18123] netlink: 'syz.1.3012': attribute type 2 has an invalid length. [ 795.219665][T18123] : entered promiscuous mode [ 795.407567][T18130] input: syz1 as /devices/virtual/input/input85 [ 796.242306][T18148] input: syz1 as /devices/virtual/input/input86 [ 797.142822][T18167] input: syz1 as /devices/virtual/input/input87 [ 797.214585][T18169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3034'. [ 797.383361][T18172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.415036][T18172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.457549][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 797.457560][ T30] audit: type=1400 audit(2000000476.452:923): avc: denied { connect } for pid=18171 comm="syz.4.3035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 797.508398][T18172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.540396][T18172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.590970][T18180] 9p: Bad value for 'wfdno' [ 797.681848][ T5821] Bluetooth: hci8: hcon ffff888066b64000 sent 1 < count 6 [ 798.838050][ T5948] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 799.995201][ T5948] usb 1-1: unable to get BOS descriptor or descriptor too short [ 800.003526][ T5948] usb 1-1: not running at top speed; connect to a high speed hub [ 800.012567][ T5948] usb 1-1: config 5 has an invalid interface number: 246 but max is 0 [ 800.020796][ T5948] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 800.031640][ T5948] usb 1-1: config 5 has no interface number 0 [ 800.038584][ T5948] usb 1-1: config 5 interface 246 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 800.048554][ T5948] usb 1-1: config 5 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 800.073442][ T5948] usb 1-1: config 5 interface 246 has no altsetting 0 [ 800.104319][ T5948] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 800.132471][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.170065][ T5948] usb 1-1: Product: syz [ 800.207642][ T7689] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 800.216850][ T5948] usb 1-1: Manufacturer: syz [ 800.221428][ T5948] usb 1-1: SerialNumber: syz [ 800.379211][ T7689] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 800.567384][ T5883] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 800.741168][ T5883] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 800.750457][ T7689] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.776239][ T7689] usb 10-1: config 0 descriptor?? [ 801.138522][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 801.157023][ T5883] usb 2-1: Product: syz [ 801.161373][ T5883] usb 2-1: SerialNumber: syz [ 801.170215][ T5883] usb 2-1: config 0 descriptor?? [ 801.413649][ T5883] ldusb 2-1:0.0: Interrupt in endpoint not found [ 801.438888][ T5883] usb 2-1: USB disconnect, device number 105 [ 801.981153][ T7689] usb 10-1: Cannot set autoneg [ 801.991876][ T7689] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 802.098873][ T5948] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 802.104076][T12065] usb 1-1: Failed to submit usb control message: -71 [ 802.228330][T12065] usb 1-1: unable to send the bmi data to the device: -71 [ 802.235568][T12065] usb 1-1: unable to get target info from device [ 802.256922][ T5948] usb 1-1: USB disconnect, device number 64 [ 802.274920][T12065] usb 1-1: could not get target info (-71) [ 802.289271][T12065] usb 1-1: could not probe fw (-71) [ 802.312047][T18264] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 802.565646][ T30] audit: type=1326 audit(2000000481.552:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18271 comm="syz.1.3060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2b5d8f749 code=0x0 [ 802.766962][ T5883] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 802.974533][ T5883] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x5C, changing to 0xC [ 803.060521][ T5883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 803.077054][ T5931] usb 10-1: USB disconnect, device number 51 [ 803.088159][ T5883] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 803.108067][ T5883] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 803.126266][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 803.139601][ T5883] usb 4-1: SerialNumber: syz [ 803.149761][ T5883] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 803.158693][ T5883] usb-storage 4-1:1.0: USB Mass Storage device detected [ 803.169748][ T5883] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 803.447844][ T5883] usb 4-1: USB disconnect, device number 43 [ 803.507611][T18295] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3065'. [ 803.665273][T18295] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 803.812746][T18303] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3065'. [ 803.892270][T18300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3067'. [ 804.047890][T18303] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 804.092799][T18303] 0ªX¹¦D: entered allmulticast mode [ 804.110238][T18289] tmpfs: Bad value for 'mpol' [ 804.123591][T18303] veth0_macvtap: entered allmulticast mode [ 804.255979][T18303] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 804.397073][ T5817] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 804.629367][ T5817] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 804.691370][T18307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=18307 comm=syz.0.3065 [ 804.720841][ T5817] usb 5-1: config 0 has no interface number 0 [ 804.737860][ T5817] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 804.792184][ T5817] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 804.827344][ T5817] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 804.838851][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.853244][ T5817] usb 5-1: config 0 descriptor?? [ 804.863073][T18309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 804.896610][ T5817] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 805.136147][ T7689] usb 5-1: USB disconnect, device number 41 [ 806.738673][ T5883] usb 10-1: new full-speed USB device number 52 using dummy_hcd [ 806.958816][ T5883] usb 10-1: unable to get BOS descriptor or descriptor too short [ 807.179719][T18349] omfs: Invalid superblock (0) [ 807.306860][ T9] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 807.329800][ T5883] usb 10-1: not running at top speed; connect to a high speed hub [ 807.548393][ T5883] usb 10-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 807.570561][ T5883] usb 10-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 807.596854][ T5883] usb 10-1: config 1 interface 0 has no altsetting 0 [ 807.609826][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 807.610632][ T5883] usb 10-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.40 [ 807.623606][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.643986][ T5883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.644728][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 807.664113][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 807.685195][ T5883] usb 10-1: Product: 喌堫뉡堒救é…焲腞斲ï¨é²‚挶ᮭ튲窻㼚ꯛ谮镗뫣첉㾄꣮ꢕኵ蠙è…턢쪎웠˪኉쑕Ƭá˜í‰•éš“钯ﴨ꾢êŸä¬¹â©¨â§†é±‡æ¥·Â«ã´¿à«¯çº‹ã‚ಭㅄﻻꤌ嚞æã·îŒ›ä‘Ṏ踉󧒵 [ 807.687106][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.707384][ T5931] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 807.734609][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.736569][ T5883] usb 10-1: SerialNumber: syz [ 807.742852][ T9] usb 2-1: Product: syz [ 807.752615][ T9] usb 2-1: Manufacturer: syz [ 807.758479][ T9] usb 2-1: SerialNumber: syz [ 807.770458][T18342] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 807.833601][ T30] audit: type=1400 audit(2000000486.822:925): avc: denied { getattr } for pid=18360 comm="syz.0.3083" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 807.879629][ T5931] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.892903][ T5931] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 807.902362][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.968658][ T5931] usb 4-1: config 0 descriptor?? [ 807.998178][ T30] audit: type=1400 audit(2000000486.992:926): avc: denied { append } for pid=18360 comm="syz.0.3083" name="pfkey" dev="proc" ino=4026534303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 808.045353][ T5931] pwc: Askey VC010 type 2 USB webcam detected. [ 808.073970][ T5883] usbhid 10-1:1.0: can't add hid device: -71 [ 808.095509][ T5883] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 808.256365][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.264790][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.321223][ T5883] usb 10-1: USB disconnect, device number 52 [ 808.469785][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 808.488641][ T5931] pwc: recv_control_msg error -32 req 02 val 2b00 [ 809.362430][ T9] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 809.376787][ T9] usb 2-1: found format II with max.bitrate = 128, frame size=0 [ 809.384872][ T9] usb 2-1: 2:1: All rates were zero [ 809.430990][ T9] usb 2-1: USB disconnect, device number 106 [ 809.451205][ T5931] pwc: recv_control_msg error -32 req 02 val 2700 [ 809.581026][ T30] audit: type=1400 audit(2000000488.572:927): avc: denied { ioctl } for pid=18378 comm="syz.4.3087" path="socket:[66733]" dev="sockfs" ino=66733 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 809.655618][ T30] audit: type=1400 audit(2000000488.642:928): avc: denied { getopt } for pid=18380 comm="syz.9.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 809.693157][ T30] audit: type=1400 audit(2000000488.682:929): avc: denied { listen } for pid=18380 comm="syz.9.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 809.907355][ T5821] Bluetooth: hci0: unexpected event for opcode 0x041b [ 809.984052][T18393] xt_SECMARK: invalid mode: 2 [ 810.121607][T18397] netlink: 'syz.9.3094': attribute type 1 has an invalid length. [ 810.641920][ T5931] pwc: recv_control_msg error -71 req 02 val 2c00 [ 810.666424][ T5931] pwc: recv_control_msg error -71 req 04 val 1000 [ 810.690554][ T5931] pwc: recv_control_msg error -71 req 04 val 1300 [ 810.714217][ T5931] pwc: recv_control_msg error -71 req 04 val 1400 [ 810.730256][ T5931] pwc: recv_control_msg error -71 req 02 val 2000 [ 810.758697][ T5931] pwc: recv_control_msg error -71 req 02 val 2100 [ 810.769289][ T5931] pwc: recv_control_msg error -71 req 04 val 1500 [ 810.786537][ T5931] pwc: recv_control_msg error -71 req 02 val 2500 [ 810.799042][ T5931] pwc: recv_control_msg error -71 req 02 val 2400 [ 810.808047][ T5931] pwc: recv_control_msg error -71 req 02 val 2600 [ 810.818748][ T5931] pwc: recv_control_msg error -71 req 02 val 2900 [ 810.826085][ T5931] pwc: recv_control_msg error -71 req 02 val 2800 [ 810.833372][ T5931] pwc: recv_control_msg error -71 req 04 val 1100 [ 810.842279][ T5931] pwc: recv_control_msg error -71 req 04 val 1200 [ 810.851669][ T5931] pwc: Registered as video103. [ 810.857919][ T5931] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input88 [ 810.874498][ T5931] usb 4-1: USB disconnect, device number 44 [ 810.978278][T18423] netlink: 'syz.9.3102': attribute type 12 has an invalid length. [ 811.046945][ T9] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 811.077418][T18425] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3103'. [ 811.086506][T18425] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 811.252653][ T30] audit: type=1326 audit(2000000490.242:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18431 comm="syz.0.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 811.278586][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.296920][ T9] usb 5-1: config 0 has no interfaces? [ 811.296943][ T5931] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 811.310003][ T30] audit: type=1326 audit(2000000490.242:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18431 comm="syz.0.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 811.310140][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=d033, bcdDevice=13.dc [ 811.333954][ T30] audit: type=1326 audit(2000000490.242:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18431 comm="syz.0.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 811.398232][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.406228][ T9] usb 5-1: Product: syz [ 811.427319][T18434] fuse: Bad value for 'user_id' [ 811.440677][T18434] fuse: Bad value for 'user_id' [ 811.456022][ T30] audit: type=1326 audit(2000000490.242:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18431 comm="syz.0.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 811.478660][ T9] usb 5-1: Manufacturer: syz [ 811.483880][ T9] usb 5-1: SerialNumber: syz [ 811.511115][ T9] usb 5-1: config 0 descriptor?? [ 811.535713][ T5931] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 811.545403][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.556764][ T30] audit: type=1326 audit(2000000490.242:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18431 comm="syz.0.3106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67098f749 code=0x7ffc0000 [ 811.590550][ T5931] usb 4-1: Product: syz [ 811.594754][ T5931] usb 4-1: Manufacturer: syz [ 811.632817][ T5931] usb 4-1: SerialNumber: syz [ 811.669614][ T5931] usb 4-1: config 0 descriptor?? [ 811.927679][T18415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.047523][T18451] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 812.146678][T18415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.146914][T18453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.267496][T18415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.267752][T18453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.276223][T18415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.683298][ T9] usb 5-1: USB disconnect, device number 42 [ 813.038634][T18415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.097303][T18415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.172606][T18415] usb usb1: check_ctrlrecip: process 18415 (syz.3.3098) requesting ep 01 but needs 81 [ 813.319844][T18415] usb usb1: usbfs: process 18415 (syz.3.3098) did not claim interface 0 before use [ 813.535799][T18478] input: syz1 as /devices/virtual/input/input89 [ 814.046795][ T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 814.325988][T18492] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 814.335416][T18492] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 814.344473][ T5883] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 814.618423][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 814.626572][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 814.640705][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.665206][ T9] usb 2-1: config 0 descriptor?? [ 814.684501][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 814.786766][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 814.793720][ T5883] usb 5-1: config 0 has an invalid interface number: 94 but max is 0 [ 814.801924][ T5883] usb 5-1: config 0 has no interface number 0 [ 814.808353][ T5883] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 814.818001][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.828144][ T5883] usb 5-1: config 0 descriptor?? [ 814.836016][ T5883] bfusb 5-1:0.94: probe with driver bfusb failed with error -5 [ 815.012539][ T5931] usb-storage 4-1:0.0: USB Mass Storage device detected [ 815.031168][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 815.031184][ T30] audit: type=1400 audit(2000000494.022:937): avc: denied { connect } for pid=18495 comm="syz.0.3121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 815.067233][T18486] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3118'. [ 815.098055][ T30] audit: type=1400 audit(2000000494.082:938): avc: denied { read } for pid=18484 comm="syz.4.3118" name="file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 815.105209][ T5931] usb 4-1: USB disconnect, device number 45 [ 815.150189][ T30] audit: type=1400 audit(2000000494.082:939): avc: denied { open } for pid=18484 comm="syz.4.3118" path="/65/file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 815.155678][ T5883] usb 5-1: USB disconnect, device number 43 [ 815.236604][ T30] audit: type=1400 audit(2000000494.082:940): avc: denied { lock } for pid=18484 comm="syz.4.3118" path="/65/file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 816.027036][ T9] gspca_sunplus: reg_w_riv err -110 [ 816.032478][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 816.115731][T18527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3129'. [ 816.129355][T18525] bpf: Bad value for 'uid' [ 816.288740][T18531] input: syz1 as /devices/virtual/input/input91 [ 816.289713][T18529] QAT: failed to copy from user cfg_data. [ 816.435501][T18533] sp0: Synchronizing with TNC [ 816.966620][ T5830] usb 2-1: USB disconnect, device number 107 [ 817.190154][T18542] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3134'. [ 817.204274][T18543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.243288][T18543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.258529][T18543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 817.280285][T18543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.508008][ T5897] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 817.515912][ T5830] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 817.775020][ T30] audit: type=1326 audit(2000000496.762:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cd58f749 code=0x7ffc0000 [ 817.786801][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 817.804371][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 817.813711][ T5830] usb 2-1: config 0 has an invalid interface descriptor of length 2, skipping [ 817.822917][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 817.843659][ T5897] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 817.856679][ T5830] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 817.865871][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.071472][T18557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 818.115208][ T5830] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 818.194859][ T30] audit: type=1326 audit(2000000496.762:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cd58f749 code=0x7ffc0000 [ 818.196933][ T5897] usb 5-1: config 0 descriptor?? [ 818.218453][ T30] audit: type=1326 audit(2000000496.762:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cd58f749 code=0x7ffc0000 [ 818.226845][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.255698][ T5830] usb 2-1: Product: syz [ 818.258927][ T30] audit: type=1326 audit(2000000496.762:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cd58f749 code=0x7ffc0000 [ 818.261933][ T5897] gspca_main: sunplus-2.14.0 probing 041e:400b [ 818.284075][ T30] audit: type=1326 audit(2000000496.762:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f83cd58f749 code=0x7ffc0000 [ 818.315845][ T5830] usb 2-1: Manufacturer: syz [ 818.320778][ T5830] usb 2-1: SerialNumber: syz [ 818.327895][ T5830] usb 2-1: config 0 descriptor?? [ 818.332009][ T30] audit: type=1326 audit(2000000496.762:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18554 comm="syz.9.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83cd58f749 code=0x7ffc0000 [ 818.461695][ T5897] gspca_sunplus: reg_w_riv err -71 [ 818.537353][T18569] input: syz1 as /devices/virtual/input/input92 [ 818.548570][ T5897] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 818.589433][ T5897] usb 5-1: USB disconnect, device number 44 [ 818.638718][ T976] usb 2-1: USB disconnect, device number 108 [ 818.904942][T18577] netlink: 'syz.9.3144': attribute type 1 has an invalid length. [ 819.678015][ T5948] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 819.996759][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 820.008318][ T5948] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 820.016402][ T5948] usb 1-1: config 0 has no interface number 0 [ 820.175397][ T5948] usb 1-1: config 0 interface 74 has no altsetting 0 [ 820.198971][ T5948] usb 1-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36 [ 820.218975][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.250667][ T5948] usb 1-1: Product: syz [ 820.258085][ T5948] usb 1-1: Manufacturer: syz [ 820.272852][ T5948] usb 1-1: SerialNumber: syz [ 820.288916][ T5948] usb 1-1: config 0 descriptor?? [ 820.367326][T18595] : entered promiscuous mode [ 820.373000][T13526] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 820.390726][T13526] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 820.400910][T13526] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 820.410006][T13526] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 820.417966][T13526] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 820.498460][ T5948] belkin_sa 1-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 820.506795][ T5897] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 820.546636][ T5948] usb 1-1: bcdDevice: 6636, bfc: 0 [ 820.564731][ T5948] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 820.616805][ T5948] usb 1-1: USB disconnect, device number 65 [ 820.656877][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 820.665697][ T5897] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 820.667207][ T5948] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 820.679437][ T5897] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 820.695872][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 820.704182][ T5897] usb 5-1: Product: syz [ 820.708543][ T5897] usb 5-1: Manufacturer: syz [ 820.713164][ T5897] usb 5-1: SerialNumber: syz [ 820.720854][ T5897] usb 5-1: config 0 descriptor?? [ 820.726457][T18591] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 820.734802][ T5897] hub 5-1:0.0: bad descriptor, ignoring hub [ 820.740835][ T5897] hub 5-1:0.0: probe with driver hub failed with error -5 [ 820.767031][ T5948] belkin_sa 1-1:0.74: device disconnected [ 820.782857][T18609] input: syz1 as /devices/virtual/input/input94 [ 820.879610][T18594] chnl_net:caif_netlink_parms(): no params data found [ 821.034418][T18594] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.048218][T18594] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.062784][T18594] bridge_slave_0: entered allmulticast mode [ 821.077998][T18594] bridge_slave_0: entered promiscuous mode [ 821.089119][T18594] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.096505][T18594] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.105225][T18594] bridge_slave_1: entered allmulticast mode [ 821.113493][T18594] bridge_slave_1: entered promiscuous mode [ 821.416824][ T5830] usb 10-1: new low-speed USB device number 53 using dummy_hcd [ 821.557786][T18594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.615937][T18594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.676841][ T5830] usb 10-1: Invalid ep0 maxpacket: 64 [ 821.705543][T18594] team0: Port device team_slave_0 added [ 821.712959][T18594] team0: Port device team_slave_1 added [ 821.732177][T18594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.739737][T18594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.765935][T18594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.778875][T18594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.785833][T18594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.812513][T18594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.819841][ T5897] usb 5-1: USB disconnect, device number 45 [ 821.848005][ T5830] usb 10-1: new low-speed USB device number 54 using dummy_hcd [ 821.888381][T18594] hsr_slave_0: entered promiscuous mode [ 821.900018][T18594] hsr_slave_1: entered promiscuous mode [ 821.908991][T18594] debugfs: 'hsr0' already exists in 'hsr' [ 821.919838][T18594] Cannot create hsr debugfs directory [ 822.036891][ T5830] usb 10-1: Invalid ep0 maxpacket: 64 [ 822.044409][ T5830] usb usb10-port1: attempt power cycle [ 822.137247][T18594] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 822.146102][T18594] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 822.157782][T18594] bridge0: port 3(netdevsim0) entered disabled state [ 822.355191][T18633] loop6: detected capacity change from 0 to 2640 [ 822.364256][T18633] buffer_io_error: 6 callbacks suppressed [ 822.364283][T18633] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.378234][T18633] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.386238][T18633] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.394513][T18633] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.402636][T18633] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.410984][T18633] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.419302][T18633] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.428223][T18633] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.437642][T18633] ldm_validate_partition_table(): Disk read failed. [ 822.444798][T18633] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.453359][T18633] Buffer I/O error on dev loop6, logical block 0, async page read [ 822.461974][T18633] Dev loop6: unable to read RDB block 0 [ 822.468887][T18633] loop6: unable to read partition table [ 822.468971][ T5830] usb 10-1: new low-speed USB device number 55 using dummy_hcd [ 822.482267][T18633] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 822.711519][ T5821] Bluetooth: hci4: command tx timeout [ 822.797699][ T5830] usb 10-1: Invalid ep0 maxpacket: 64 [ 822.807842][T18594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 822.818461][T18594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 822.827334][T18594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 822.836384][T18594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 823.072032][ T5830] usb 10-1: new low-speed USB device number 56 using dummy_hcd [ 823.248115][ T5830] usb 10-1: Invalid ep0 maxpacket: 64 [ 823.257554][ T5830] usb usb10-port1: unable to enumerate USB device [ 823.340049][T18594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.360833][T18594] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.375096][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.382222][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.410243][ T1010] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.417431][ T1010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.337194][T18594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.436497][ T976] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 824.727007][ T5821] Bluetooth: hci4: command tx timeout [ 824.768350][ T976] usb 5-1: Using ep0 maxpacket: 8 [ 824.809574][ T976] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 824.830953][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.848002][T18594] veth0_vlan: entered promiscuous mode [ 824.851423][ T976] pvrusb2: Hardware description: Terratec Grabster AV400 [ 824.861618][ T976] pvrusb2: ********** [ 824.865657][ T976] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 824.876181][T18594] veth1_vlan: entered promiscuous mode [ 824.882761][ T976] pvrusb2: Important functionality might not be entirely working. [ 824.903953][ T976] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 824.931288][ T976] pvrusb2: ********** [ 824.933469][T18594] veth0_macvtap: entered promiscuous mode [ 824.962881][T18594] veth1_macvtap: entered promiscuous mode [ 824.995051][T18594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.021787][T18594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.053726][T18204] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.071097][T18204] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.087659][T18204] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.096576][T18204] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.252250][ T5817] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 825.832785][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.841211][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.869752][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.878579][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.948757][ T5817] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 825.957473][ T5817] usb 1-1: config 0 has no interface number 0 [ 825.963729][ T5817] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 825.977597][ T5817] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 43115, setting to 64 [ 825.989084][ T5817] usb 1-1: config 0 interface 113 has no altsetting 0 [ 825.998593][ T5817] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 826.012732][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.031670][ T5817] usb 1-1: Product: syz [ 826.042177][ T5817] usb 1-1: Manufacturer: syz [ 827.313230][ T5821] Bluetooth: hci4: command tx timeout [ 827.458185][ T2339] pvrusb2: Invalid write control endpoint [ 827.466569][ T976] usb 5-1: USB disconnect, device number 46 [ 827.476969][ T5817] usb 1-1: SerialNumber: syz [ 827.509635][ T5817] usb 1-1: config 0 descriptor?? [ 827.515381][T18687] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 827.527915][ C0] usb 1-1: NFC: Urb failure (status -71) [ 827.547285][ C0] usb 1-1: NFC: Urb failure (status -71) [ 827.566833][ T5817] usb 1-1: NFC: Unable to get FW version [ 827.582158][ T5817] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -71 [ 827.622716][ T2339] pvrusb2: Invalid write control endpoint [ 827.646913][T18702] tmpfs: Unknown parameter 'k_hardlimit' [ 827.654952][ T2339] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 828.189836][ T2339] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 828.197474][ T2339] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 828.207689][ T2339] pvrusb2: Device being rendered inoperable [ 828.455847][ T5890] usb 1-1: USB disconnect, device number 66 [ 828.533601][ T2339] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 828.555538][ T2339] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 828.575809][ T2339] pvrusb2: Attached sub-driver cx25840 [ 828.639103][ T2339] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 828.670596][ T2339] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 828.734077][T18715] : entered promiscuous mode [ 829.517052][ T5821] Bluetooth: hci4: command tx timeout [ 829.548847][T18698] hid_parser_main: 8 callbacks suppressed [ 829.548964][T18698] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 829.583293][T18698] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 831.379687][T18763] : entered promiscuous mode [ 832.452531][ T5897] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 832.728604][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.788364][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.890984][T18777] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 832.930283][T18777] bond3 (unregistering): Released all slaves [ 833.005958][ T5897] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 833.018643][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.032414][ T5897] usb 5-1: config 0 descriptor?? [ 833.131413][T18784] : entered promiscuous mode [ 833.445947][ T5897] arvo 0003:1E7D:30D4.0026: unknown main item tag 0x0 [ 833.456902][ T976] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 833.467221][ T5897] arvo 0003:1E7D:30D4.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 833.643704][ T976] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 833.677875][T18798] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3203'. [ 833.832548][ T976] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.865703][ T5897] usb 5-1: USB disconnect, device number 47 [ 833.913170][ T976] usb 1-1: config 0 has no interface number 0 [ 833.922218][ T976] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 833.931888][ T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.939986][ T976] usb 1-1: Product: syz [ 833.944148][ T976] usb 1-1: Manufacturer: syz [ 833.960856][ T976] usb 1-1: SerialNumber: syz [ 833.978752][ T976] usb 1-1: config 0 descriptor?? [ 833.985821][ T976] hub 1-1:0.31: bad descriptor, ignoring hub [ 833.991988][ T976] hub 1-1:0.31: probe with driver hub failed with error -5 [ 834.004196][ T976] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 834.013855][ T976] uvcvideo 1-1:0.31: No valid video chain found. [ 834.319785][ T5817] usb 1-1: USB disconnect, device number 67 [ 834.396997][ T5897] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 834.586798][ T5897] usb 10-1: device descriptor read/64, error -71 [ 834.762246][T18821] (syz.3.3207,18821,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 834.836850][ T5897] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 835.037305][ T5897] usb 10-1: device descriptor read/64, error -71 [ 835.190011][ T5897] usb usb10-port1: attempt power cycle [ 835.573158][T18832] xt_cgroup: path and classid specified [ 835.595042][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 835.595053][ T30] audit: type=1400 audit(2000000514.582:1120): avc: denied { setopt } for pid=18834 comm="syz.1.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 835.662952][ T6180] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 835.670588][ T5897] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 835.731257][ T5897] usb 10-1: device descriptor read/8, error -71 [ 835.838289][ T6180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 835.856872][ T6180] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.886805][ T5931] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 835.896550][ T6180] usb 5-1: New USB device found, idVendor=1e7d, idProduct=139c, bcdDevice= 0.00 [ 835.915625][ T6180] usb 5-1: New USB device strings: Mfr=4, Product=1, SerialNumber=0 [ 835.941268][ T6180] usb 5-1: Product: syz [ 835.955564][ T6180] usb 5-1: Manufacturer: syz [ 835.967210][ T6180] usb 5-1: config 0 descriptor?? [ 835.980730][ T6180] usbhid 5-1:0.0: can't add hid device: -22 [ 835.986859][ T5890] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 835.996990][ T5897] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 836.004703][ T6180] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 836.027353][ T5897] usb 10-1: device descriptor read/8, error -71 [ 836.068638][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short [ 836.077528][ T5931] usb 2-1: not running at top speed; connect to a high speed hub [ 836.097664][ T5931] usb 2-1: config 7 has an invalid interface number: 254 but max is 0 [ 836.121028][ T5931] usb 2-1: config 7 has no interface number 0 [ 836.136943][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 836.142504][ T5897] usb usb10-port1: unable to enumerate USB device [ 836.149562][ T5931] usb 2-1: config 7 interface 254 altsetting 6 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 836.168172][ T5931] usb 2-1: config 7 interface 254 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 836.180389][ T5890] usb 4-1: config 0 has an invalid interface number: 110 but max is 0 [ 836.195424][ T5890] usb 4-1: config 0 has no interface number 0 [ 836.206828][ T5931] usb 2-1: config 7 interface 254 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 836.218251][ T5890] usb 4-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 836.236402][ T5890] usb 4-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 836.248785][ T5931] usb 2-1: config 7 interface 254 altsetting 6 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 836.259996][ T5931] usb 2-1: config 7 interface 254 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 836.270816][ T5890] usb 4-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 836.282725][ T5931] usb 2-1: config 7 interface 254 has no altsetting 0 [ 836.289610][ T5890] usb 4-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 836.310582][ T5931] usb 2-1: string descriptor 0 read error: -22 [ 836.320538][ T5890] usb 4-1: config 0 interface 110 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 836.336889][ T5931] usb 2-1: New USB device found, idVendor=2357, idProduct=0116, bcdDevice=4a.1f [ 836.356425][ T5890] usb 4-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 836.369354][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.397787][ T5890] usb 4-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 836.420072][T18835] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 836.421576][ T5890] usb 4-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 836.436805][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=237, SerialNumber=2 [ 836.456846][ T5890] usb 4-1: Product: syz [ 836.467238][ T5890] usb 4-1: Manufacturer: syz [ 836.473924][ T5890] usb 4-1: SerialNumber: syz [ 836.493184][ T5890] usb 4-1: config 0 descriptor?? [ 836.507323][T18832] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 836.521674][ T5890] spcp8x5 4-1:0.110: SPCP8x5 converter detected [ 836.529568][ T5890] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 836.720488][T18698] usb 4-1: USB disconnect, device number 46 [ 836.732313][T18698] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 836.743071][T18698] spcp8x5 4-1:0.110: device disconnected [ 836.841941][T18844] netlink: 'syz.0.3215': attribute type 1 has an invalid length. [ 836.882323][T18844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 837.109011][T18854] netlink: 'syz.9.3217': attribute type 3 has an invalid length. [ 837.892735][ T7373] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 838.049087][ T7373] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 838.053437][T18865] input: syz1 as /devices/virtual/input/input96 [ 838.066682][ T7373] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.078128][ T7373] usb 10-1: config 0 has no interface number 0 [ 838.086452][ T7373] usb 10-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 838.098270][ T7373] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 838.106408][ T7373] usb 10-1: Product: syz [ 838.111002][ T7373] usb 10-1: Manufacturer: syz [ 838.115711][ T7373] usb 10-1: SerialNumber: syz [ 838.123262][ T7373] usb 10-1: config 0 descriptor?? [ 838.131144][ T7373] uvcvideo 10-1:0.64: probe with driver uvcvideo failed with error -22 [ 838.342618][ T5890] usb 10-1: USB disconnect, device number 61 [ 838.359071][ T7373] usb 5-1: USB disconnect, device number 48 [ 838.384710][T18875] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3224'. [ 838.563900][T18879] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3224'. [ 839.010887][ T5931] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 839.051639][ T7373] usb 2-1: USB disconnect, device number 109 [ 839.186842][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 839.204220][ T5931] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 839.225509][ T5931] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.334897][ T5931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 839.341692][ T5931] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 839.351493][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.574903][ T5931] usb 1-1: config 0 descriptor?? [ 839.596808][ T7373] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 840.096809][ T7373] usb 2-1: Using ep0 maxpacket: 8 [ 840.110294][ T7373] usb 2-1: config 0 has an invalid interface number: 220 but max is 0 [ 840.127281][ T7373] usb 2-1: config 0 has no interface number 0 [ 840.159659][ T7373] usb 2-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice=c5.ea [ 840.173861][ T7373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.191406][ T7373] usb 2-1: Product: syz [ 840.202906][ T7373] usb 2-1: Manufacturer: syz [ 840.209223][ T7373] usb 2-1: SerialNumber: syz [ 840.219001][ T7373] usb 2-1: config 0 descriptor?? [ 840.230626][ T7373] gspca_main: sunplus-2.14.0 probing 052b:1803 [ 840.282708][ T5931] asus 0003:0B05:1ABE.0027: item fetching failed at offset 0/5 [ 840.291853][ T5931] asus 0003:0B05:1ABE.0027: Asus hid parse failed: -22 [ 840.298956][ T5931] asus 0003:0B05:1ABE.0027: probe with driver asus failed with error -22 [ 840.453387][T18903] input: syz1 as /devices/virtual/input/input97 [ 840.528094][ T30] audit: type=1400 audit(2000000519.522:1121): avc: denied { bind } for pid=18868 comm="syz.0.3222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 840.563468][ T7373] usb 1-1: USB disconnect, device number 68 [ 841.018790][ T5931] usb 2-1: USB disconnect, device number 110 [ 841.505118][T18924] JFS: discard option not supported on device [ 841.516679][T18924] Mount JFS Failure: -22 [ 841.521092][T18924] jfs_mount failed w/return code = -22 [ 841.808877][ T5931] usb 10-1: new full-speed USB device number 62 using dummy_hcd [ 841.971341][ T5931] usb 10-1: config 8 interface 0 has no altsetting 0 [ 841.987940][ T5931] usb 10-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc [ 842.007553][ T5931] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.103700][T18932] FAULT_INJECTION: forcing a failure. [ 842.103700][T18932] name failslab, interval 1, probability 0, space 0, times 0 [ 842.132574][ T30] audit: type=1400 audit(2000000521.122:1122): avc: denied { mount } for pid=18934 comm="syz.1.3242" name="/" dev="hugetlbfs" ino=69507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 842.177218][T18932] CPU: 0 UID: 0 PID: 18932 Comm: syz.0.3243 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.177247][T18932] Tainted: [L]=SOFTLOCKUP [ 842.177253][T18932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 842.177264][T18932] Call Trace: [ 842.177270][T18932] [ 842.177277][T18932] dump_stack_lvl+0x16c/0x1f0 [ 842.177304][T18932] should_fail_ex+0x512/0x640 [ 842.177329][T18932] ? __kmalloc_cache_noprof+0x5f/0x800 [ 842.177358][T18932] should_failslab+0xc2/0x120 [ 842.177379][T18932] __kmalloc_cache_noprof+0x80/0x800 [ 842.177406][T18932] ? ovs_flow_tbl_init+0x1cc/0x600 [ 842.177427][T18932] ? ovs_flow_tbl_init+0x1cc/0x600 [ 842.177442][T18932] ovs_flow_tbl_init+0x1cc/0x600 [ 842.177461][T18932] ovs_dp_cmd_new+0x251/0xe60 [ 842.177484][T18932] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 842.177505][T18932] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 842.177530][T18932] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 842.177556][T18932] genl_family_rcv_msg_doit+0x209/0x2f0 [ 842.177579][T18932] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 842.177598][T18932] ? bpf_lsm_capable+0x9/0x10 [ 842.177610][T18932] ? security_capable+0x7e/0x260 [ 842.177622][T18932] ? ns_capable+0xd7/0x110 [ 842.177639][T18932] genl_rcv_msg+0x55c/0x800 [ 842.177663][T18932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 842.177684][T18932] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 842.177708][T18932] netlink_rcv_skb+0x158/0x420 [ 842.177724][T18932] ? __pfx_genl_rcv_msg+0x10/0x10 [ 842.177739][T18932] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 842.177757][T18932] ? netlink_deliver_tap+0x1ae/0xd30 [ 842.177771][T18932] genl_rcv+0x28/0x40 [ 842.177784][T18932] netlink_unicast+0x5aa/0x870 [ 842.177807][T18932] ? __pfx_netlink_unicast+0x10/0x10 [ 842.177834][T18932] netlink_sendmsg+0x8c8/0xdd0 [ 842.177857][T18932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 842.177876][T18932] ____sys_sendmsg+0xa5d/0xc30 [ 842.177891][T18932] ? copy_msghdr_from_user+0x10a/0x160 [ 842.177906][T18932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 842.177925][T18932] ___sys_sendmsg+0x134/0x1d0 [ 842.177943][T18932] ? __pfx____sys_sendmsg+0x10/0x10 [ 842.177989][T18932] __sys_sendmsg+0x16d/0x220 [ 842.178005][T18932] ? __pfx___sys_sendmsg+0x10/0x10 [ 842.178025][T18932] do_syscall_64+0xcd/0xf80 [ 842.178039][T18932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.178050][T18932] RIP: 0033:0x7fd67098f749 [ 842.178059][T18932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.178069][T18932] RSP: 002b:00007fd671870038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.178085][T18932] RAX: ffffffffffffffda RBX: 00007fd670be5fa0 RCX: 00007fd67098f749 [ 842.178096][T18932] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000008 [ 842.178105][T18932] RBP: 00007fd671870090 R08: 0000000000000000 R09: 0000000000000000 [ 842.178114][T18932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 842.178123][T18932] R13: 00007fd670be6038 R14: 00007fd670be5fa0 R15: 00007fff3a7d8ff8 [ 842.178146][T18932] [ 842.298022][ T5931] usb 10-1: string descriptor 0 read error: -71 [ 842.476992][ T30] audit: type=1400 audit(2000000521.322:1123): avc: denied { unmount } for pid=18594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 842.483635][ T5931] pwc: Logitech QuickCam detected (reserved ID). [ 842.557093][ T5931] pwc: Failed to set LED on/off time (-71) [ 842.568941][T18946] fuse: Bad value for 'group_id' [ 842.574004][T18946] fuse: Bad value for 'group_id' [ 842.742212][ T5931] pwc: send_video_command error -71 [ 842.753167][ T5931] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 842.763778][ T5931] Philips webcam 10-1:8.0: probe with driver Philips webcam failed with error -71 [ 842.868115][ T5931] usb 10-1: USB disconnect, device number 62 [ 842.878334][T18944] bridge4: entered allmulticast mode [ 842.919003][T18882] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 843.076093][T18956] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3249'. [ 843.089814][T18882] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 843.101695][T18882] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 64602, setting to 64 [ 843.112976][T18882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 843.122771][T18882] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 843.132869][T18882] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 843.142943][T18882] usb 5-1: Product: syz [ 843.153024][T18882] usb 5-1: Manufacturer: syz [ 843.162694][T18882] usb 5-1: SerialNumber: syz [ 843.177479][T18882] usb 5-1: config 0 descriptor?? [ 843.184394][T18946] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 843.196816][ T7689] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 843.199457][T18882] usb 5-1: selecting invalid altsetting 0 [ 843.272875][T18961] raw_sendmsg: syz.9.3251 forgot to set AF_INET. Fix it! [ 843.351544][ T7689] usb 2-1: unable to get BOS descriptor or descriptor too short [ 843.360819][ T7689] usb 2-1: config index 0 descriptor too short (expected 61211, got 27) [ 843.406558][ T7689] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 843.442474][ T7689] usb 2-1: config 118 has no interfaces? [ 843.458063][ T7689] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice= a.36 [ 843.467226][ T7689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.487062][ T7689] usb 2-1: Product: syz [ 843.496877][ T7689] usb 2-1: Manufacturer: syz [ 843.506074][ T7689] usb 2-1: SerialNumber: syz [ 843.534514][ T30] audit: type=1400 audit(2000000522.522:1124): avc: denied { setopt } for pid=18976 comm="syz.3.3259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 843.719444][T18983] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 843.914823][ T30] audit: type=1400 audit(2000000522.902:1125): avc: denied { setopt } for pid=18951 comm="syz.1.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 844.021981][T18990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 844.324486][T18990] fuse: Bad value for 'fd' [ 844.344712][ T7689] usb 2-1: USB disconnect, device number 111 [ 953.676679][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 953.683643][ C0] rcu: (detected by 0, t=10502 jiffies, g=85149, q=231 ncpus=2) [ 953.691340][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10500 (4295032527-4295022027), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 953.704687][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g85149 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 953.715862][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 953.725809][ C0] rcu: RCU grace-period kthread stack dump: [ 953.731675][ C0] task:rcu_preempt state:R running task stack:28224 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 953.745153][ C0] Call Trace: [ 953.748416][ C0] [ 953.751333][ C0] ? __schedule+0x10b9/0x6150 [ 953.756001][ C0] __schedule+0x1139/0x6150 [ 953.760490][ C0] ? __lock_acquire+0x436/0x2890 [ 953.765417][ C0] ? __mod_timer+0x8f2/0xd30 [ 953.770006][ C0] ? __pfx___schedule+0x10/0x10 [ 953.774843][ C0] ? find_held_lock+0x2b/0x80 [ 953.779511][ C0] ? schedule+0x2d7/0x3a0 [ 953.783831][ C0] schedule+0xe7/0x3a0 [ 953.787889][ C0] schedule_timeout+0x123/0x290 [ 953.792732][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 953.798091][ C0] ? __pfx_process_timeout+0x10/0x10 [ 953.803375][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 953.809169][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 953.814618][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 953.819374][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 953.824650][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 953.829838][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 953.834761][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 953.839606][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 953.845404][ C0] rcu_gp_kthread+0x26d/0x380 [ 953.850071][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 953.855258][ C0] ? rcu_is_watching+0x12/0xc0 [ 953.860006][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 953.865192][ C0] ? __kthread_parkme+0x19e/0x250 [ 953.870204][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 953.875391][ C0] kthread+0x3c5/0x780 [ 953.879447][ C0] ? __pfx_kthread+0x10/0x10 [ 953.884026][ C0] ? rcu_is_watching+0x12/0xc0 [ 953.888775][ C0] ? __pfx_kthread+0x10/0x10 [ 953.893353][ C0] ret_from_fork+0x983/0xb10 [ 953.897937][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 953.903043][ C0] ? __switch_to+0x7af/0x10d0 [ 953.907714][ C0] ? __pfx_kthread+0x10/0x10 [ 953.912294][ C0] ret_from_fork_asm+0x1a/0x30 [ 953.917062][ C0] [ 953.920063][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 953.926367][ C0] Sending NMI from CPU 0 to CPUs 1: [ 953.931554][ C1] NMI backtrace for cpu 1 [ 953.931567][ C1] CPU: 1 UID: 0 PID: 19003 Comm: syz.3.3268 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.931585][ C1] Tainted: [L]=SOFTLOCKUP [ 953.931590][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 953.931598][ C1] RIP: 0010:native_apic_msr_write+0x28/0x40 [ 953.931617][ C1] Code: 90 90 f3 0f 1e fa 8d 87 30 ff ff ff 83 e0 ef 74 20 89 f8 83 e0 ef 83 f8 20 74 16 c1 ef 04 31 d2 89 f0 8d 8f 00 08 00 00 0f 30 <66> 90 e9 91 f6 0f 0a e9 8c f6 0f 0a 89 f6 31 d2 89 cf e9 61 ef 76 [ 953.931629][ C1] RSP: 0018:ffffc90000a08ec8 EFLAGS: 00000046 [ 953.931641][ C1] RAX: 0000000000022a87 RBX: ffff8880b8523f40 RCX: 0000000000000838 [ 953.931650][ C1] RDX: 0000000000000000 RSI: 0000000000022a87 RDI: 0000000000000038 [ 953.931657][ C1] RBP: 0000000000022a87 R08: 0000000000000005 R09: 000000000000003f [ 953.931665][ C1] R10: 0000000000000020 R11: ffff88801eb754b0 R12: 0000000000000000 [ 953.931673][ C1] R13: 0000000000000000 R14: 0000000000000020 R15: ffff8880b8528440 [ 953.931681][ C1] FS: 00007fb8fb1086c0(0000) GS:ffff8881249f6000(0000) knlGS:0000000000000000 [ 953.931695][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 953.931704][ C1] CR2: 000020000006b000 CR3: 000000007ce51000 CR4: 00000000003526f0 [ 953.931712][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 953.931720][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 953.931728][ C1] Call Trace: [ 953.931733][ C1] [ 953.931737][ C1] lapic_next_event+0x10/0x20 [ 953.931751][ C1] clockevents_program_event+0x26e/0x370 [ 953.931771][ C1] tick_program_event+0xa9/0x140 [ 953.931786][ C1] hrtimer_interrupt+0x3e9/0x8e0 [ 953.931803][ C1] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 953.931819][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 953.931835][ C1] [ 953.931839][ C1] [ 953.931844][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 953.931859][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 953.931874][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 2a 1e 1f f6 48 89 df e8 e2 70 1f f6 e8 ad 32 4c f6 fb bf 01 00 00 00 f2 73 0f f6 65 8b 05 9b c9 37 08 85 c0 74 06 5b e9 01 4d 00 00 [ 953.931886][ C1] RSP: 0018:ffffc9000d71fca0 EFLAGS: 00000206 [ 953.931895][ C1] RAX: 00000000071540d7 RBX: ffff88802bdf40c0 RCX: ffffffff81c7083f [ 953.931903][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdbe3 RDI: 0000000000000001 [ 953.931911][ C1] RBP: ffff88802bdf44c0 R08: 0000000000000001 R09: 0000000000000001 [ 953.931919][ C1] R10: ffffffff9088afd7 R11: ffff88801eb754b0 R12: 0000000000000000 [ 953.931927][ C1] R13: 0000000000000021 R14: 0000000000000400 R15: ffff88802bdf40c0 [ 953.931938][ C1] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 953.931956][ C1] get_signal+0x1e6a/0x26d0 [ 953.931977][ C1] ? __pfx_get_signal+0x10/0x10 [ 953.931997][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 953.932014][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 953.932030][ C1] ? __pfx_restore_altstack+0x10/0x10 [ 953.932045][ C1] ? restore_signal_shadow_stack+0x63/0x460 [ 953.932067][ C1] exit_to_user_mode_loop+0x8c/0x540 [ 953.932087][ C1] do_syscall_64+0x4ee/0xf80 [ 953.932103][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.932116][ C1] RIP: 0033:0x7fb8fa18f749 [ 953.932126][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.932137][ C1] RSP: 002b:00007fb8fb1080e8 EFLAGS: 00000246 [ 953.932146][ C1] RAX: 0000000000000000 RBX: 00007fb8fa3e5fa8 RCX: 00007fb8fa18f749 [ 953.932154][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb8fa3e5fac [ 953.932162][ C1] RBP: 00007fb8fa3e5fa0 R08: 00007fb8fb109000 R09: 0000000000000000 [ 953.932170][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.932178][ C1] R13: 00007fb8fa3e6038 R14: 00007ffe0a756390 R15: 00007ffe0a756478 [ 953.932192][ C1]