last executing test programs: 14.784562813s ago: executing program 2 (id=1172): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x0, 0x0, 0x3}, 0x20) 14.391339084s ago: executing program 4 (id=1177): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) syz_open_dev$dvb_dvr(0x0, 0x0, 0x8257f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x121100, 0x0) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x200000c, 0x100030, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, &(0x7f0000004000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r3}, &(0x7f0000001780)=0x4, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x200, 0xf}, 0x4, [0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x5, 0x6c, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x67c4, 0x0, 0x0, 0x3fffffd, 0xfffffffd, 0x0, 0x3, 0x0, 0x400005, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0xab4, 0x0, 0xfffffffc, 0xfffffff0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x1], [0x5, 0x4, 0x1, 0x2, 0x0, 0x6, 0x0, 0x6, 0x0, 0x4, 0x1, 0x1f, 0x1, 0x4, 0x0, 0x0, 0x0, 0x42ac, 0x0, 0x3, 0x8000002, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0xe43, 0xbb, 0xfffffffd, 0x0, 0x24001, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x2, 0x4, 0x2], [0xfffffffe, 0xfffffffd, 0xfffffffd, 0x2, 0x6, 0x8, 0x322d, 0x8, 0x0, 0x0, 0x4, 0x2, 0xb, 0xcc5, 0x8, 0x0, 0x0, 0x2, 0xd38, 0x0, 0x0, 0x9fc7adae, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1, 0x5, 0x0, 0x0, 0x2000000, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffff, 0x7fff], [0x0, 0x0, 0x40000002, 0x0, 0xab47, 0x0, 0x400526b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7652fc9f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x400, 0xfffffffd, 0x0, 0x100, 0x81, 0x1, 0xfffffffd, 0xe1a, 0x10004, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8001, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r6, 0x5501) sync() syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) 13.027237547s ago: executing program 2 (id=1179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc", 0x29}], 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r0, @ANYRESOCT, @ANYRESDEC=r2, @ANYRESHEX=r2, @ANYRES16=r1], 0x14}}, 0x4040140) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x88800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, 0x10000000, {0x40, 0x0, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0xee01, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000000440)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r9, 0x932, 0x200000000005) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) 11.834550531s ago: executing program 3 (id=1184): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@rand_addr=0x64010102, @loopback}, 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) getsockopt$ax25_int(r6, 0x101, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe8c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe78, 0x1, [@m_pedit={0xe74, 0x1, 0x0, 0x0, {{0xa}, {0xe48, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x24, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x20}, {0x0, 0x1}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xa2}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {0x0, 0x2000}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe8c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) readv(r9, 0x0, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="240000002100df4c2abd70c627000022"], 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000100), 0xa7e, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r10, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x3, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) getdents64(r1, &(0x7f0000001f00)=""/4093, 0xffd) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000100)=""/183}, 0x20) 11.484338128s ago: executing program 1 (id=1188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vcsa(0x0, 0x1, 0x102) r3 = dup(0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) write$UHID_INPUT(r3, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44401010000000000004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff0342f655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9ef0000000000002f752c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c04075465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd93ab062605a3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) listen(0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000340)=[{0x9, 0x1800, 0x2000, &(0x7f0000000140)="f8ba"}], 0x1}) r4 = syz_io_uring_setup(0x42, &(0x7f0000000300)={0x0, 0xee75, 0x40, 0x2, 0x2fb}, &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x22, &(0x7f0000000200)={&(0x7f0000001000)={[{0x0, 0x0, 0xfffe}]}, 0x1}, 0x1) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x3, &(0x7f0000000040)=[{0x2a, 0x0, 0x480000}, {0x9, 0x0, 0x10000}, {0x3, 0x0, 0x6}]}, 0x8, 0x0, 0x7, 0x1, 0x0, 0x5, 0x6, 0x8000, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(0xffffffffffffffff, 0xc0086448, &(0x7f00000000c0)={r5}) 10.631833145s ago: executing program 4 (id=1189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x0, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @link_local}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0x304000, 0x0, 0x0, 0x3}, 0x20) 10.446370865s ago: executing program 3 (id=1191): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259a66ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95b457d2363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f0355808c6bd48d5590647a63a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444000", "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"}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f00000005c0)='u', 0x1, 0x8081, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001300)={@loopback, @private2, @loopback, 0x5983, 0x1ff, 0xfffc, 0x80, 0xff, 0x40001}) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x2, 0x7, 0x0, 0x4, 0x7, 0xe0a5, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x1300, @empty, 0x7}}, 0x8, 0x4, 0x4, 0x4e80}}, &(0x7f00000001c0)=0xb0) 10.154759231s ago: executing program 2 (id=1192): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) syz_open_dev$dvb_dvr(0x0, 0x0, 0x8257f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x121100, 0x0) mmap(&(0x7f0000a06000/0x2000)=nil, 0x2000, 0x200000c, 0x100030, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, &(0x7f0000004000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r3}, &(0x7f0000001780)=0x4, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x200, 0xf}, 0x4, [0xd, 0x2, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x5, 0x6c, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x67c4, 0x0, 0x0, 0x3fffffd, 0xfffffffd, 0x0, 0x3, 0x0, 0x400005, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0xab4, 0x0, 0xfffffffc, 0xfffffff0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x1], [0x5, 0x4, 0x1, 0x2, 0x0, 0x6, 0x0, 0x6, 0x0, 0x4, 0x1, 0x1f, 0x1, 0x4, 0x0, 0x0, 0x0, 0x42ac, 0x0, 0x3, 0x8000002, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0xe43, 0xbb, 0xfffffffd, 0x0, 0x24001, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x2, 0x4, 0x2], [0xfffffffe, 0xfffffffd, 0xfffffffd, 0x2, 0x6, 0x8, 0x322d, 0x8, 0x0, 0x0, 0x4, 0x2, 0xb, 0xcc5, 0x8, 0x0, 0x0, 0x2, 0xd38, 0x0, 0x0, 0x9fc7adae, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1, 0x5, 0x0, 0x0, 0x2000000, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffff, 0x7fff], [0x0, 0x0, 0x40000002, 0x0, 0xab47, 0x0, 0x400526b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7652fc9f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x400, 0xfffffffd, 0x0, 0x100, 0x81, 0x1, 0xfffffffd, 0xe1a, 0x10004, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8001, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r6, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r6, 0x5501) sync() r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 9.321784334s ago: executing program 3 (id=1193): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000100)='binder\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv0\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r3, 0xaeb, 0x1) getdents64(r3, 0x0, 0x4f) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r4) r5 = socket$igmp(0x2, 0x3, 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000180), 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="100029bd7000fcdbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000e00000006001600090000000500120001000000060011000080000008000b0001000000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000000008006001600060000000500120001000000060011000900000008000b00070000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000100000006001600080000000500120001000000060011000500000008000b00080000000e0001006e657464657673696d2b"], 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x4084) 7.333758906s ago: executing program 1 (id=1194): syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e96, 0x3000, 0x3, 0x19a}, 0x0, &(0x7f0000000200), 0x0) io_destroy(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup/../file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000480)='fdinfo/3\x00') r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast1}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="671723d7c6012cbf5d6c1fd6765fcaa30ac25684ee8efa5ac2830519557c1b8d1e03fed31abcd5392c", 0x29}, {&(0x7f0000000040)="6223ec", 0x3}], 0x2}, 0x20008b88) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x2}) read$eventfd(r3, &(0x7f00000001c0), 0x8) 7.291180036s ago: executing program 4 (id=1195): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10900, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r5) execve(&(0x7f0000000380)='./file1\x00', 0x0, 0xfffffffffffffffe) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 7.127411509s ago: executing program 3 (id=1197): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='personality\x00') lseek(r0, 0x1000000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') lseek(0xffffffffffffffff, 0x8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x10400, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x0, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xf}, {0xc, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xdd, 0x0, 0x20007, 0x4000}, 0x80, 0x200, 0x4, 0x0, 0x4, 0x2f, 0x2, 0x4, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0xfffffffd}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYRES64=r8, @ANYRES32=r9, @ANYRES32=r1, @ANYRESOCT=0x0, @ANYRES16=r8, @ANYRES16, @ANYRESOCT=r3, @ANYRESHEX], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r10, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r11}, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x25, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000feffffff0000000000000000b7080000000000007b8af8ff00000000b7080000010000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYRESOCT=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12, r11}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 6.996163612s ago: executing program 2 (id=1198): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4e24, 0x78a2, @mcast2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) kexec_load(0xd0ffbf, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0xbfffd000, 0x10000}, {0x0, 0x0, 0x8}], 0x0) 5.28405133s ago: executing program 0 (id=1201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4f, 0x94) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x90000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1ff, 0x5, 0x3acaa292, 0x2}, 0x20}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040054}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="634a8029adc0f79f1fc031351201000200000008c016e17540000102030109022400010102401fa7e3ad9201010609219fc1c9cb0000000000c62300040c02070000"], &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r9], 0x40}}, 0x0) preadv(r10, &(0x7f0000002840)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1, 0x1860, 0xffffffff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) 4.75481398s ago: executing program 3 (id=1202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4f, 0x94) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x90000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1ff, 0x5, 0x3acaa292, 0x2}, 0x20}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040054}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="634a8029adc0f79f1fc031351201000200000008c016e17540000102030109022400010102401fa7e3ad9201010609219fc1c9cb0000000000c62300040c02070000"], &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r9], 0x40}}, 0x0) preadv(r10, &(0x7f0000002840)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1, 0x1860, 0xffffffff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) 4.629789412s ago: executing program 1 (id=1203): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259a66ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95b457d2363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f0355808c6bd48d5590647a63a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444000", "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"}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001300)={@loopback, @private2, @loopback, 0x5983, 0x1ff, 0xfffc, 0x80, 0xff, 0x40001}) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x2, 0x7, 0x0, 0x4, 0x7, 0xe0a5, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x1300, @empty, 0x7}}, 0x8, 0x4, 0x4, 0x4e80}}, &(0x7f00000001c0)=0xb0) 4.522252463s ago: executing program 1 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vcsa(0x0, 0x1, 0x102) r3 = dup(0xffffffffffffffff) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) write$UHID_INPUT(r3, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) listen(0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000000c0)={&(0x7f0000000340)=[{0x9, 0x1800, 0x2000, &(0x7f0000000140)="f8ba"}], 0x1}) r4 = syz_io_uring_setup(0x42, &(0x7f0000000300)={0x0, 0xee75, 0x40, 0x2, 0x2fb}, &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x22, &(0x7f0000000200)={&(0x7f0000001000)={[{0x0, 0x0, 0xfffe}]}, 0x1}, 0x1) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x3, &(0x7f0000000040)=[{0x2a, 0x0, 0x480000}, {0x9, 0x0, 0x10000}, {0x3, 0x0, 0x6}]}, 0x8, 0x0, 0x7, 0x1, 0x0, 0x5, 0x6, 0x8000, 0x0, 0x0}) ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(0xffffffffffffffff, 0xc0086448, &(0x7f00000000c0)={r5}) 4.366364911s ago: executing program 2 (id=1205): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000094c0)=[{{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000400)="2bd4f198f26acdc47dc68a4160252e25a78733eeb3fc5a1fa36b3126a3ab21b5bd9953d289e9e4234198696477ef8d7b7718480854b5f8ec3645e4e0b9859b8c5f9acc6f89b273ffab2f8c25b78377743a58444b9a7fb74b648b8d7a9f895dd60d218caa9147af690658a1ea58d9751c5a78309df2162b6c115fe8d91b48824455290f5eea20bcf51304f03211e28bd7bb278ab97fd19af470d00c3313ecb69ee4ec8cb4e57b56502712ba4e4339654cda72db729b52cea1d4deabd98da3ddcb53ba351a4910f03087da1aa267d527cbec354e0dd89986d3", 0xd8}, {&(0x7f0000000580)="498d575428326926dd4eb3ef9008ff5c3c95dde540e216d3d9bcefcf163c455cdcab2222eabd6f479470ad02af39ded785922421ff3c0ed9743ff2a2d2a33f9a7a40968b419110252b3be8360e3d73b444e3cb164208928dfc9da45ba297c65d25faf571fd8dee9ea6fb45f20478a091ec64ed65b86fb1e5bf479c90dce5e8abc2c3edb16230541d2e1bd5c6f36952d113ba389c7e177252ab52281d0578ad17af4baa257886158d461fb0cc54882d12fa4e72b52725ff235ea962cc5ab6e1e6", 0xc0}, {&(0x7f0000000640)="62bdfc8eb3f2dfc0c3f344433e64a3613bf5e5d1a0459347eee3e58dd2af0fe833ef770dcee4453f76952b88a0a8640a91f11da8a74535303430a0b6735387b41874923462910df1410e51156f6040b2c813", 0x52}], 0x3, 0x0, 0x0, 0x4000}}, {{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000780)="cd59220653c3b2d774482085ed78e679c39cb5d36830024923d490b32b40c0c0aff0687437e0960aca0baa2db5e9a310d21578f113b9735cf23775", 0x3b}], 0x1, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x814}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="90ce1de1fc189d039a6c0dcc80eaff15c1f16fad101d62788942079ee0a0c79d1541d94d71960b287ed2bdddee01384816727b318c43b1f43b86772b8884058e68a8abc0fa70ac87f41461bcf1e64ee61a2d069166f225483590e98535138cd39b1dede263a8e6b2de5e48834df650acff594204cfc9f15f82b3bf99b61546acccaebf9356745af535e7a7e7c5e41f176c0d8f9130761d00c09466038a", 0x9d}, {&(0x7f0000000ac0)="379830ad2a3aff5e6f81f97dbfc86013ff31a8595e1c46f2a26d0fab55", 0x1d}, {&(0x7f0000000b00)="8930cbf36403c72dc15e2549998eb8ee92257474525d3661dad8fd15116d61029f66d588cacce7044d3dea69a27334a4690f8f7eb9618432dd12df5c40d51ff6eca568e281f0dae325fa070c8410d6b38b2f741927ee1c15a42b5971bae6a26fc6a7b1b649a0f948603404ca8b9103f7f13370f522388a747a50e578168a7f50ba681ece5aa94829a25336c2d5aefd8ba3f6eeca71c7c534b4070e", 0x9b}], 0x3, &(0x7f0000001b00)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES16, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="2359dbdff5592cae96817e6e55d5389725ad82d6648606eff3c8334f2f168b47dad3aafb8be4b73d66e9aeeb0228a5f8760c615eeb", @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000fda31588fa8e418145dcf1c8b6d105e86c87b9e20e1ce934d74223bd7861d8dc263fba357729930b2cd633b1922680a23afb0957aab5858121f63a4ab9e8f7", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRESDEC=r0], 0x128}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000e80)="e47e04c5112ea0bcd7082160df4bc446a8eaba772fa85ff821cf58a0d3d715f2c160c34141ab4c8f0ed13db14b9ecefcfbfe061a436c6a9a1508b4e61293f3ac8b", 0x41}, {&(0x7f0000000f00)="baf5", 0x2}, {&(0x7f0000000f40)="063e2b8a561bc4674ffed281564b66c4af703f42eb1e7ba81027de7415bae902399df05e1e1d66d149c73ef26c39bc68bec01df17ecc283f60111f7ef764d70ad17892831175177dae4f875e69b999771c35576bb5bac817d6b8a237a5bb19021b6ecabdf9f86dc72d2c0bfbde42f34b6e33b4c3cd50d02d87cd", 0x7a}, {&(0x7f0000000fc0)="4523d42ae7352e1fc9f684f43a0024cebe5b8cf142be59cc53203dc4579b4b096f39ce010b0ed05be635f0d4e12fc536f38a71b02fd1719da82150a34e37c86cbfac5c2b2ad4420891e097fdf29e8c4a2d301f107591cee0228498d91670955bf5cf133667bb296345709116a9e29a13c1ee60d76f321d5d02d697c8fc4df73b3a592cced0f92b9144905279d0799a349ec525579ef8eb478f6ea995ae", 0x9d}, {&(0x7f0000001080)="055b994126a8cbf4a49c3f32ac52328483dc705d89b0953fefb85be7417683cf830676cff6bc57bdbcfa1dfe0024efac57b0c5c99875b6a2b257c3d6b904881c706ea2861572899a28439170ba581c8b4eb7f896cde05b867507cfd1b45e75f4874974759b49fc53f13583f042eb3eea904f5ced3a4f3201b6aff4a4621801d53b87f0b4db3c72055db8c6a28740ceef98ed18810f4e2f87c9b2fb66c3100965e980393f310788d0a68c4f2abbca9403e6b88a809bcbefc6fbb511b6ee7004635d5256e9b97c3aa11727b4e1f4da194f8ee21914321b868fb14e5e", 0xdb}, {&(0x7f0000001180)="4a2354eaf978169995465fe7c12a58491e307b40bd2acdaee41fd2290f573fe1a83af076ce46b87d43b08e3858630cdd6200d4262bf1e2fa80e0e765fd0274eefd7f1491adad0fd44e633beab6610284e3ee69", 0x53}, {&(0x7f0000001200)="b5094f4a694887cb01bb1ae20bd2b604f523cbd26619a7c2a93a5bd383341e13c5585da715d053b94f2f", 0x2a}, {&(0x7f0000001240)="51f195872cfe78ed47509710a6caafb1f00735938dc8c97c3196950fc1e2a2c29b21d57fbe60a718335e442bc081bb6eb3a3250b46f22cce748e7f44bee689299b09874bcd472ff591df2772beee4b5934ef6cf4f5d4d8a1d4131d1d0a68d927bbe272b5c9ebb8bc7faa4bb7133fc3bfe94398a7", 0x74}, {&(0x7f00000012c0)="c254eb0b7c40e388895de4252202776cc4a2233f44448a3eaec59b284a87363d67b08a0f6120b5deddd86be7ff10b676006a2701f6cc2cd56b108644d8865d663526116ed3a23858cfe75c93ad0c5ec551787ba6e50e01be6d74691de02c32503ad3b3b3aff9c01d489567df23e19a94dbbbc257459befb9a7302a54fce06a5b400fae557c4915602f1c7645bc", 0x8d}], 0x9, &(0x7f0000001480)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}], 0xf0, 0x20000000}}, {{&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001600)="aa01c54277bc1bd20c1bfc0573f79613fa1036b99834d094cf8eae0d4c37bad609acb99b488121fe8c58afee95c9fddbc3622e0005a5", 0x36}, {&(0x7f0000001640)="83e6c5b9f0ca5f95c6850da8186543fe8b5fdbaacc3cb5eb58d2a75be5533b4bed00e655c04e9b41999445f1b8bbc4a2481d3efbd850c072f3", 0x39}], 0x2, &(0x7f0000001780)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x130, 0x8840}}, {{&(0x7f0000001900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008800)=[{&(0x7f0000001980)="ad1ca3c7c0295707ea65a51e5170e01eef5673d9ff2b3d4cfdf00a0573fcae035fec723c885852c01a54f3bb96814bd8b380440d1b4bfa4742e1f5028789e6669ceecba1a022e55560ea234e700fc74d4bbc", 0x52}, {&(0x7f0000006380)="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", 0x1000}, {&(0x7f0000007380)="3c758b4bada9c9902fa6946a52aabba8", 0x10}, {&(0x7f00000073c0)="436258a12867ce3f85d0c08f8c7a9f5eca6ae567f475be61ce584908a582b941ee7af8a6909db20db1d7fd42e198b871aa2b9f54238ad968d60e704ed645d966225b4453443ed79bdf9c36ae9e66f46634e7cee1f326d3a5a7a48d2045", 0x5d}, {&(0x7f0000007440)="1a1cfc819fef0894782e975caeceafddfc1ed2ba1676b196024d889225c79790a5eeb60ce6a5bc6bc7388349bc3465252ab456ea0d148b6c889ac964e65d3391f8193026d3a1d0c95616ed10f5cad3deefe4dd7bfa148c04c054d701204c9d79a54ca3cf38755762fb11a4d5e655f4ec78c4b02476e1203547e1a31f844a72386b69863c928fa06023afbe0e7c8d383ab93523717f8cfd89d90938", 0x9b}, {&(0x7f0000007500)="e52c323ade88fddabbf87f532d7fb01f94c032907b6231c98e62d708913c8dc2cddc3c9bf8f3458b16ea77cc6a54e337e760a3cf677cf46e29f33dd2831bc169cc1c23d0cdff43ea63b5", 0x4a}, {&(0x7f0000007580)="b5fa4f15d6962518e63c90cf77281cea551f7e533d5f7748297646e9ebad8a545f4060add06ee5cb90398927b5f7d99af9bbcc8cb71ef2a785e6c6b08f7298f3f68cc0f1188472d30c42b31931b2bde946965f14e9328fd0352ee44393a04e500daf48c309cdb3c496af1e21ee5a802c1efec934fe2f3aecbd2973003af23b7d49a902dde5bef240d34ba314758cd28e60", 0x91}, {&(0x7f0000007640)="59764f317392f7f7db0423d02296bc75c4fbdefc340c4a97333a6658464dcec1a651ff2b84053cd208c9f6303dccf46ec903fdccc958ebac39d1240fbb8c8fc3fceb87ffe58cba3f1d69d4387c412bc3e26b8a3931307f2bf9b9a5202d8ade05ddf8c6f6b61278f172e816b7935736f417cacd995e2fe97ecd0887143944a4ad5839efc7414e0acf5547e9ab76cfbfdc1ea845df3d9f34a8b744f692f9e1f9a19b4b668c5c2deb97d98df51c7c92733d36e3", 0xb2}, {&(0x7f0000001a00)="10c02e879ee2e7ca3b65261374c9c6174a1a4ef8cde86c87ad8bc549d10170c45b028aeb382e6f96b933e4de25c9346385b7b2991cf1dddaecada7311c02f50233da0903887acea311419383d474fe2778080fdcad0f1c4b945c63dc0ecc3a3f871e637f75cd87b77fca4d6edd2c04cfd6dc14ee4a28774d1020acb08a2e7a26989240935ca1f750896a6e1416a7cc053eaf4ea84b75faf511817c3cc19bac75c7acf086fe0cf3bdc7b4642f4bf1c6ccc0d1df4fa877b39dbac319be131c3775430f02cb7b21da6add3d", 0xca}, {&(0x7f0000007800)="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", 0x1000}], 0xa, &(0x7f00000088c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100004302000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x20048040}}, {{&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000008c80)=[{&(0x7f0000008a40)="abb2afe38eacfcd228ac5ab80aab4413c7d301cdfb5056ef2afc875d204da0b0acbaddd0272a13c0ddfa451b1dfcffcdace7ae28f6079ccdb1096c02328b9364074e2f9b240a66b516ff0a5387a9402b92977660913861dcf65e95d74481c0004a7b8d7fb03ad7881b21d168f7afb5fd1fbb50faeea2214889ea400b640c6e7826a87b81388ea3099998ba504a7cb34d55e462e113256f925b0d899f503a2ccc773a9d095dcfa789387a0aa9c703165690f8387ab81929ab53444015c33f4fc9fc26d58fed03ce8ee7f6ae478c4eaefe291a582ef3bd09ea8bb85294064b92c29c27fe38404dc0cc109da144507cc0bb1967", 0xf2}, {&(0x7f0000008b40)="3005c5a17bae115b9155737cb9382cee2a086a16635973720f335ea2cc06efed6775a13c98a2285da0045594e387c7932dd7ba09aa732b768fc89b293fb4286791669961aa56ec3a90a7349f4012c6d57d7ad56101e0fdc1461759fea61d9890c5dcbec730cd2e0c98910fed7e9d3a6a90b4876529d1cf482fc4ebf7973c", 0x7e}, {&(0x7f0000008bc0)="0f05d31308bccfe6f34d3ae0af15d76d223717baa4a81debd69e6581c6efebe09f105d7875dc612e4ca9769ca86d2dbe52ae833d57e36b3d273fe58850fbdf11b702f40c293df799b8ce456ab58acae8aa174bbdbbe9378726d73ae7c5a964b8eded40a4a51adcdc20edd1994d3318792b075ab8bb71b9417efe39da6c8504205823", 0x82}], 0x3, &(0x7f0000008d00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4808}}, {{&(0x7f0000008d40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000009180)=[{&(0x7f0000008dc0)="3d83aba62935d39da210c706780f868c181e4942a25161301fe1e767e63d7eb9d4d9d8d0e4c8c434bfe4df7175f3cfedc7286e932daa357fe0f2c335a6b6e1012cd835298c8956761f32a0da90129d7714b92ed49d0d494578dea6403c6ab6dec6627b8a89f717fc80e58409b059fdcff5be78a497570569b6600353e047b0de23974a9dd521817e1c4b0a4e840a2daeb0d6105de6dd95d89517b1475cde2766cb59160072dee85dcb2a163508f7a0d58346bc6de62b824507e1fad1b83aaa3c104f2348efa633e60acc", 0xca}, {&(0x7f0000008ec0)="47a555ded6181efffbd6561ee33aa0127aa1a720ab368fc46cc7c34ad325f37e89d2c2dc0cad9f9ec7fa385f389786fce1172e8b9fe33aac74a18e0b16450561e709c4822a71eb4bcf50b079c3fd999fc6429e064425a3fa5ec31b719ee0204153c383da2cfc8a68e344761ec018345a60cf7231629de5d4ee5b53805eed4d0583f0961feb0bbdb59cddb83ffc9057322a6db3d7cba42da1c7e1996a439de586b5f0cfea87a8a20a6d3a3b20d7f35b331ff02079e77074c8bba6a2b9704d8108f34880aa36c0797fd93280c1550e", 0xce}, {&(0x7f0000008fc0)="b7713b48dc7b7eceb5702941709435", 0xf}, {&(0x7f0000009000)="274c389aedf8cf0546ac9abb0a705bf7b4c633bc8614513c14bb802fbbc2dfc7b14b2365ccac7d66985aaa32faec319fa7748c2886ccf85cf877c17b8d0eb54736bbf443a8da082dee8844e066878a097976dfd06514e7e8e5f610211b6185451abcd4e6c6749497350b63c5bbcbe440cc44b0f7e63fbfe840a339d0cd1a289b2612cb3a87526b6f007f9318f7251d182e85be9a47a8a9c33f5f5345c1be04c43f2150579e2b734bc04cd710ad644d2d19cb91", 0xb3}, {&(0x7f0000000c00)="3980c906030967b9b786d2200d477f03f7017b52ab8322056fc5a8c2578d6acea1f920ff49694f030cb748e77a9d1efd3a86947da5f438eaf57558df5f4d02d55052b261309f299b87cb2b691c7988c8142e4ecf81acfeec863e15a3d6c29105f450eacab54b15074051b62d6bca148b7d079c180f60776ba1035ffbe8f8864e2b9ab1a3a92f3d27", 0x88}], 0x5, &(0x7f0000009200)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0xb8, 0x4000080}}, {{&(0x7f00000092c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000009380)=[{&(0x7f0000009340)}], 0x1, &(0x7f0000009440)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x40}}], 0x9, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x11) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x70bd26, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_simple={0x34, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "82af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x10000084) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) unshare(0x12000600) r6 = eventfd(0x205) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r6, 0x4}) sendmsg(0xffffffffffffffff, 0x0, 0x20004040) io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x1014e2, 0x4, 0x0, 0x2}) r7 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="865df3f13c0b8b6a4b088433e01de3514af3d712dd68e63c7b359e352debbb19c4e9d03a473c1eee4685409912214165311ea797d5550ea7be0d61524c0369ba141581beb6291b1bb31275576da5e1aafa4e4a78ab9dc0cee26cf7417f3124d28b672540f2584fd26e58704d4e3e46edb4b8de61738c", @ANYRES64=r2, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRES16=r7], 0x50) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x5415c2, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.533058988s ago: executing program 4 (id=1206): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1418b3, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, 0xbc, 0xffffdffb) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) sendto$packet(r3, &(0x7f0000000500)="330520000a0016000600c7e4cad397e21d055eaa81cf026309e203000000", 0x1e, 0x0, &(0x7f0000000000)={0x11, 0x8, r4, 0x1, 0x5f}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000540)={{{@in=@private, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f00000004c0)=0xc2fc0942) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@empty, @in=@rand_addr=0x64010100, 0x4e23, 0x7, 0x4ea4, 0x7, 0xa, 0x80, 0x80, 0x3b, r4, r5}, {0x2, 0x101, 0x348, 0x3, 0x8000, 0x7ff, 0x5d4a, 0x6}, {0xfffffffffffffbfc, 0x7, 0x42ea, 0x7fffffffffffffff}, 0x2, 0x6e6bb2, 0x2, 0x0, 0x3, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d4, 0x3c}, 0x2, @in=@broadcast, 0x3505, 0x2, 0x1, 0x3, 0x7, 0x5}}, 0xe8) mount$nfs4(&(0x7f0000000300)='\x00', &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0), 0x1210080, &(0x7f0000000880)=ANY=[@ANYBLOB='upperdir,[&-,uid=', @ANYBLOB="9cbd3c1bf09dcb208be52f6a7029682f6f9bec220e4eeab0beb43cd3f2729fee81176354cf71ce685d14aec8dab7c10fbb91b61ab96cb0d4779ffcb6f2a6f89810126ebbd3da3890b5192c886682ba462024ce14a7cc888922e13fdd63e62f7b4ed54970739eb8c36aed4e3ea1377cb20204090042444ebf07dfac79e18cfae9168f159b83b500823b3cbd7ead8925b8879cb522d94b69d83994268df836a9f9d30ea5dea28796326ac3028bd08d96bbc553f459711cefd86fba3a81de9b6f3e9a5560e09f5099ac8f3edf7a8e50fd13f7088978028a7012f657bf8edc549a", @ANYRESHEX=0x0]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$isdn(0x22, 0x2, 0x10) r7 = dup3(0xffffffffffffffff, r6, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f00000000c0)={0xfff, 0x9, 0x4, 0x3, 0x4, 0x1, 0xf8b}, 0xc) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, '\x00', 0xd}, {0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x3, 0x1}, {}, {}, {0x0, 0x6}, {}, {0x7f, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x1}, {0x40}, {0x1c, 0xfe}, {}, {0xb}, {0x3}, {}, {}, {}, {}, {0x0, 0xfe, 0x9}, {}, {0xfc, 0x0, 0x45}]}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 3.332646503s ago: executing program 4 (id=1207): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r1, &(0x7f0000000640)="3a9de8ec0cf13f954ba1e2c4446f638b1f7c75e2ae6017039da38b0f01db633d4c870f82be1ff7731de2d3b2827cf8d45070d7fdcd07d9aaddb9ba46d75c8651616ef936ef9ee4402da6e4101795b0894b85d9cfe81672661b29401774fb3403e604cff0627f2e3ce7af9b0e49cf1ca597440d8f6e8acd13877502b018febb3870e729cd839a31df04fd1e34257960515ad0c1561c5bf98e28e8d5efbc52a4d444549a0c38c37be5836521f616", &(0x7f0000000700)=""/53, 0x4}, 0x20) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={r9, @in={{0x2, 0x0, @empty}}, 0x6, 0x800, 0x400, 0x0, 0x34, 0x10, 0x4}, 0x9c) sendmmsg$inet(r3, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000580)='Z', 0x1}, {0x0}], 0x3}}, {{&(0x7f0000000cc0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000003500)=[{&(0x7f0000000d40)="30502673f47c529896cb65b9dc15c9", 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003680)="2d5609bd798200a7f7e4", 0xa}], 0x1}}, {{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000006ec0)='N', 0x1}], 0x1}}], 0x4, 0x4068884) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) r11 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r11, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x15, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24041}, 0x880) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045009, &(0x7f0000000040)) sched_setscheduler(r2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, r1, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r13 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) ioctl$PTP_SYS_OFFSET(r13, 0x43403d05, &(0x7f0000000100)={0xc}) 2.342640447s ago: executing program 4 (id=1208): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000380), 0x303303, 0x0) write$cgroup_int(r1, &(0x7f0000000480)=0x3, 0x12) syz_usb_control_io(r0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, [{0x2, 0x1, "9595f429ae08"}]}}}}}}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000b40)={0x14, &(0x7f0000000a00)={0x20, 0x6, 0xe8, {0xe8, 0x3, "9ee7fabb6c1ce78fb81948db6466a5a37a5d2e8baae9ed903608a6dd0ae1c4a5f2ffd5ad0beb6a6057f9120c0d4fdbcca0a8b0cea9fcf9f43dd1432c80134e94be0950131fe6d475edbff1a94650151693a42af5cde8fb454276954e8da9a7604a6794d8ea32f7522659269b7466a67e2300ee53f15b183421cd1a822aab0de889f9f798df39c1d8fdfdcd1df3c9aba788b3cc394357d1da784eacc0700db9bc02afc876fa905f44b686d30b6f3b11ec64eec87f82a3eb74067abe36b74deb3e1420722cc3472fe9ef816d93d106cb371c435c73a25222a31c94b44cad9dedb0aaa6ece565b8"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c63}}}, &(0x7f0000000d80)={0x44, &(0x7f0000000b80)={0x40, 0x3, 0xd, "50c58c44aea7756090413a30f5"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000c40)={0x20, 0x81, 0x1, "b5"}, &(0x7f0000000c80)={0x20, 0x82, 0x2, "9593"}, &(0x7f0000000cc0)={0x20, 0x83, 0x3, 'gYA'}, &(0x7f0000000d00)={0x20, 0x84, 0x4, "0654e4e6"}, &(0x7f0000000d40)={0x20, 0x85, 0x3, "3f90f1"}}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x40, 0x10, 0xcf, {0xcf, 0x1, "3008e4ef07e903486153edb9e956a3b70af895735c253719647e3343e17c52ec4ddc96b51b2d8bb71e224cc370bfb718a7850ba11cb2a7cc9195aa7dca4e792034ecf1919e6bc7873c8743e20a5c77474a7419f341893c40d80f3e2bc339e62e8d952d610b02b4652c191bc0ed82ca2355bb73425ab7656e2abe8d9e294a7071d1c3d1aa426581e9abb9ae4ea3f0eea94b884862b8bb38053b2ef120182939c1039ee5d4202b02575732011a2906bfeb2c8a67f2d471266521b69efa35956f176964f825c9c8c54c59a1c8edb1"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000001c0)={0x0, 0x16, 0xe6, "e4d121b965cf4c5f31d3a2f1f0b608c85115ff7eba642ac00a61f80f2c44c9f58801ed11120a047c016f3f57400c5829a4c4575d29c715ab6d8c732e7577f49f8d8b2c6cdb185fc3bacb1c4055243adec66cbe75b4fa17b635d4a91349a10c819d9d53773fcaaf8f8178161ab05911d1da1d3751572f8a8da2e8b78ccdb1e1ab575787ac6b1a9ffc3ce09241ee80be8d427dabc63882581be076c3e04a2090d81b70ce15d37fec47f7f39d9e2ef1348e921b896704b8dbc619112efa8a442d071378468c0220bd51f65c1eb23259b24682cc7514a3f2e9ceb8ed40e66a0a3f0cd531b4da0711"}, &(0x7f0000000540)={0xa1, 0x1, 0x400, "04be9208b2d3493a36568fb1cfa9b7fb81f17f7020d531a1d6b33b6898df696a79fd1fb990bead926fafca452c7da4cb666aecce7824788cf3bdd7b991c2a9446e7c8f2ab531c934e6446bb69eb560b88bd09b1fa353a8941fcd5a6068e21e42362fe1046aaa36ce519684df75e8a7b4df22c74792b820df7be51513048338af9ff3493c3cacdb36f88f511d57a2d8709c12e0c784bc7f0b261b405e198dd5033ca445b6088463624f1c1fc740d715a05fc584d0fd10798f59417c54b0e4d3ff980fa3bae047f1c2f5d9b6ef3194148989481cf83fadafc7077af8a224a34d569972dd94a0a44f5dec607f43a9fa92cf6c5cdef59299751062a375aff59d34e4065ba6588d092f2bec271c61c8daaf1eb4915cbc5323441bfe0800d217509263b42f4023610e7e7d2a1f16f423d1e5a4986b1d37e3ca80b1315584eb712fd5fbfd678416d53810a4175ab0ab2bb828cafa0d77c5c024483399de69357e6302b95954be4cee85ec6279ad5892b36678e2457e3875e94f7c5787b666d13ea7bc49a6cfd9d00fe4ce1f5d35493fd30ee531bfcc371331c5adc8480b9a5599581117c8dd1e38f12981d6694fe2550a871a4932b11b3a55961090ce2a347e8afaa232e0b5e9beaec47d38050e3c930be5b97c12e2b1b03c7ee5443934a3667eb20c2ba339a12eca19cbe6185eaa8330c78b05e26623be40f8fbd609587a1f40e5da24105add9c82d51620d79b25cecbd514f7c5517c3730a879fd40c0a709a9c0cd4cbde283904be53fcd8302c1dc983161c15d3e746d2a7487c5092c3fd4451a2e0357cbc4d07e6696f6c5d5476db92a1d15e16872c423aa69c47e1e6c25eb1fae2c888d162998095f7f89289038de365e83abd9c5de222027c316b416f1721cd0f2e06538c83497e1ec0752fc934ee37223b4939e52f48770c1dd35eedb027d5354ad4ef7ec44fbfa930db3c1380bfa119de863fcc18b99bea0a4c3af4a3828c9507914b586e48c6461275209aa6731af8155a8fc7c77cea3f81d1a224017449558705c1eee5c17b4ddd48b51fb095723a93d840126ea4925f10159bcc31106cbc7a9281c2c43a45a4bf2291fbbf656853aea952adaacfc64706253efd5b39fd5ad07690c5c7e226b6ed6f7afd89dbe495695dadbc33efaac46477ca5e67fe687fa333bd2141279d174258970e9ced7e99a6035c05769f377f9993b853d0bee0e247188c000cd53d556ec9b8034009b3e63bee549694ddc245d888afba789719913b2ebfc26eda09d52e32ca939c257c1695dfd9c1b93b54812418b3d6ec223df708a38aa738a052c881c8de11a942a484d622413b7118d2f937276e9409b0db46bf1a7b0eb4778fb374efc5562b1b10b0fceb18a9fd561e4eb188d244851247b56512f780b6045ee012d675af64ffd755425a76f50b309e0fde96ee1eb531a6fec"}, &(0x7f0000000980)={0x21, 0x0, 0x2, 'Ol'}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x3d}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x8}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.191533828s ago: executing program 0 (id=1209): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="6203b3fcd755af056510120800afbcf711e12b7f96e5521c8cf217300100000093c1cdf632dbb86770380e8ddd9aff775f8eff5b0b0bc283", 0x38}, {&(0x7f0000002300)="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", 0xb66}], 0x2}, 0x0) 2.094751544s ago: executing program 0 (id=1210): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, 0x1402, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r9, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) 1.856469935s ago: executing program 0 (id=1211): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x40, 0x1402, 0x1, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r9, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) 1.807608496s ago: executing program 0 (id=1212): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x110041, 0x9d) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x10a) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x10f4, 0x1a, 0x12, r3, 0x0) 1.018936934s ago: executing program 1 (id=1213): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa0, 0x100}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", ""]}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfffffff7, 0x50e, 0x2009}, 0x10) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000040)={0x3, 0x8}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001b80)={0x2f}) 822.604714ms ago: executing program 0 (id=1214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4f, 0x94) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x90000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1ff, 0x5, 0x3acaa292, 0x2}, 0x20}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040054}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="634a8029adc0f79f1fc031351201000200000008c016e17540000102030109022400010102401fa7e3ad9201010609219fc1c9cb0000000000c62300040c02070000"], &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r9], 0x40}}, 0x0) preadv(r10, &(0x7f0000002840)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1, 0x1860, 0xffffffff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) 162.55371ms ago: executing program 2 (id=1215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4f, 0x94) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x90000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x1ff, 0x5, 0x3acaa292, 0x2}, 0x20}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040054}, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='jfs\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="634a8029adc0f79f1fc031351201000200000008c016e17540000102030109022400010102401fa7e3ad9201010609219fc1c9cb0000000000c62300040c02070000"], &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newnexthop={0x18, 0x68, 0x1, 0x100003, 0x7ffffffd, {0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r9], 0x40}}, 0x0) preadv(r10, &(0x7f0000002840)=[{&(0x7f0000000240)=""/214, 0xd6}], 0x1, 0x1860, 0xffffffff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) 77.164596ms ago: executing program 1 (id=1216): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0xc0ed0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$alg(r2, &(0x7f0000002840)=[{0x0, 0x0, 0x0}, {0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)="cdba805975d01aad4a97fd3bab473a2a2058483c88d3a455d5823977f68a308315d14254cc73bf443a7acd97d8cd079ae9293ec03680a48e70d3875299cdf892db4dd823b56faab3f3682045d71d3f56723b283556f2aca420abb555c8de66dbf4bd4e32df8fbeeff1100f", 0x6b}, {&(0x7f0000000440)="9015a8b32b0ad5ddf89a44812eefe5cba38a1034ba5c60c6b29e175bc07f1327cd9d72bc0a5351e683518f38569ca827bad5e341f7c2d1a42ad7306b7843b91585a8a65cfae83cf8aa7643bc4f1757f94c3cbcfc3affe580a9349519408ffc348abd88c77dcfab2f164eff0692ee52d02da9258cdd822a5c1ae03ccc24043ba04dc7afe3baa9cd9164f14f04aafacb6c59bab51505a3633c505d0c73d87a727c1ccbe2b44c135f298ea4dab38a0a196273169d4b96355906f20d2c717f557b196190bbfe09b180ab4b9bff09aa92e74c0d263c168d4bcc377819546f774846408495ece6fcd846b93629645fffb1e075f3deb34f6dd43b32", 0xf8}, {&(0x7f0000000780)="e2e8b2bbfa91bc84a7e89130015ec4e1b234fc99ef26d89bf4a08924345aed3b84b441c150231eedea53d1a7f21a378e4add4fda64aa588fa325a46344b8e4de55d7f9", 0x43}, {&(0x7f00000006c0)="e173c237fff721e24e05320910875c21661defb01657a5bddaae0715a5b24ceb81f02cae43fdcf7e30faf2eb40fd60c1a47047551b57eaa8f4cadf2cb18bce831d20e18dd9ef00d9bd94d37b", 0xffffffffffffff4b}], 0x4, &(0x7f0000001600)=[@iv={0x1018, 0x117, 0x2, 0x1000, "33b29afc17b78332eef11c52ec23cba574cf3c39b3c7574a10996b37f2a7af7c4cf9a42a79a4c7e19e7f9395d1266014f40379e070e40dbfd10ac55a5f0e9699c26e7b9abf62fd43fab9dc9e747192eb909cc931d07801b59940c4a0c3ab52506c4072a8606681c1629aabf81aa01336fb8cf5a8df88e3fd7c59df3dec7da78ec6fbb505f045983fae4a0ccaa08a0f01dab4d609c9c2cac0c3d74d0fb9e2fe6bc60d084152a50ea0af90b56c19ba1d93b7d87b960fe9d98f93aaa0d8c175419fc1f5178eb511d35f1418aa091771c91948fa85f45040015bdcf6fa7056d6fbb6ab880f09b06d968cba71ff67cafe34607a9aa701da3c372d217bd5d945a4675e18a45e7d19d80a280d163415a8f081b8011bee92a78dfb3f820549169f28dfc7df73b5bce3e85d708b9f95a0c2b03077fa1ca5d440c7a3ce738dd164c27b4bedf1762ed6fa5021d9e3d64666a727be79546c3b0cffb1b102edf58549f72f26a7f0330005812d84748d13b340bc8e8d069c7f9f9b370440344c6cb40d6c303d5fcd31e5fb9bedb4547cd2d5f89f7c39a597787c60508c45a1e9413258d8c7c7258f25810e82e2163a380c1e8e934fcfe5689f53c2777b0a6da060702a5ff86e6c008c14aea48a2cbc7846669a697ef9e887522518ed7af2859311b19a2ff00cbdb9d21eba4e3d7c860f1eb84b9374c4e50a7c300124e8fce06a094c6312238ed7851efdebbabf1b8d041ad66f2627172996189b805f67dd3c321d9d90360f0d71681772944f813c025428b8950120190b762371843b14e2505ccb9cf662672077cc1673907d359283fb25189fe7df9c2c7acb662eb0b8e4f454e4f98e41032df12bee6952c482e3a0f30a48716cc3d49b772c6db4cdd878950ef94ba5e86c0bd90041aa183fffe5dfb3df018633cc443263471255e0a8ac855f422c34073516fc1312123bc34ecf3f5bc6dfa7ca6bb257c2585652878397b07afcace139e59f3b25da47b428f83d6c084b598aca732f6af8f634f3368787a81557835218100cc0e43c58155d86baa1d09fdc52253ef1e67290dbe77c18fe3f5d5d2d712d92e08af313bd82a73288ab701f75651e2fb746b001b50dd5944faf38a5f297e467c6d81eada7519232c6f254dc27b5020028566bee0bc2d551dd19f94f980e6cfdd7c494852d21f2d2a19cc15b3367f496c79a1174184ecdb562b4fed0fe5e444e3eb5d0d9487f06bae1f10b89f9a17ec2bc2e0c1a8111e0bfc166a53d21e79a4c8bb40f2ce9519d2b490335a4990d5618e406f5a616ebe0e3cd596d8443c4017fb936a9911d0da50282905ba6a8d45bc5ae6b694f1f11ec7550bd35e10fd7d6f013a28ac35ed87f0cf825c32e3c6970c6ec3cbbc4757fb9692c89d9bc59c6bb08d3fc9cddf2d0e1ebdc047beb4f22cf52b6a438609da8a2a228a3e303f8b51aec64810bf49f5dca9352364b7bebc1c1fd77492947d535feb2a0280ce14ad55e8c9bb8d2c4b059980150c7f59e405c16de504d2a43c594cb85b85904067756a50ebee2288aa8590051d7ed37b19a2c8230e3e141c4875109eeb30ba60dbf458b826d4db90f5fd30de84267ced44024855b78d4cd6c59a8e6e4f6130fa91930b18c3425457fafd0921cc2168e5dd32308b45801d780b025657f7ba5cfd29afb75768fb11c683694217366c97f86242ba49eac34010fbfcdc58af7d7755535e9d789b6da5ad2a2e494d01544c87d527c9bab8b8acff8772cb1f8a1061e0ed424d67ba0ed7d66ddb57e9f49e068da438d92ff3a3643ae33d2788e713c46a71f5657e54ecab74b9c60f771e2846ac3aac220cc4326da624626e16243cd33f85d25a760399c2371fcfd2d3b1ea873666b14498df694ae07b8e7e11faa661e78f1586c229e358a8259231b852689f9e1599c9597f5317304722572fe91354b6523c7bf63bbd6f4ff462f83929a242b1c73dd7442c81d4f6e1d35675c977b0cc16c248c4c33968274bdebdbacd74bef365e1b31d9e29f13514284217035bc65276c3f20df78ed8604a2a2f7071c3c00023a8f913d11a12535b703498427659a7de5687ae2537d0d498ec688a67b02606ef7b3ac94b7c3f5dbe482a45536bb82e965edc9265f9ab6b9491457fafcd6abb81c2a3dbb8295939452be994cf8b665ac9e450c4c35e4c761bbd9d5fa1ecde3ee7c7b1c0651b819d75c89d5472e17657a9a81b3346fceea383ac632da8707fc6f62cdeb939cf46199f0b5675ac4f865cd2c261d1c8a9272a0d799d2be2325516e9ac1ab22c7d695272bfbc543290a8cf1967388f918012513623cb8c535ddb13626e4c436ace51ec93444e124baa70575f2d16a10fa9be2ffc8b536b8248c194d1d8202dd995eda480989709405db52678d042af0bc0b2abcaa42d5f95d6d6dff53ee7004c1bab10e56ac91aa12c34ac048c511ff8acbb08508c4ec8cebf63adaa26ac3f2b721e967f274ab7eb98bac7a9fa83fe0b9fd43a4ac769f676cc419550c6da12127361b67deae94d2a0cba945b391a0cc6c9efeca2873320015773d89d842e3b98136f3872f8163ccd1932218d85304d2e1ab8bbcbbf159eb8cf794b8f6352c3ebe3ec66164ecbed4e1a615d09439498b81195b3f4e6f54b03a2dd2a85abf265853ce41a573502744fb6acd71c5f2a6f9ec7e213288226da7c794cd37b4b740cc20f3636b39449efc9368d50e5ccd44fdd2cf571ac7628000cc2e0e718a3b5f60a5a9a39ae6a9d4e11f43050ba58aa5a11224e1336b240f971dffbdab03239b1f212f109ce11d41672fa8d291c712512cdab6b9f83dd93e2bcf3edfbe9dbc08da1cda39cdba70218307f8b8a6fe2fb7f7893996a753cd2182caa9c20b96d1822280cd4e8529cee7d523d1eb85952d4d1a0eae3bbe0ad6b5b10fa1cee3d444ceb26e91d4b5cd71f75a65aff522f2532537368e80824eb728dfcf320219cc85e7bc96d6876f3f60478fa60ee0faa5c05b8bd975f71076bce6bbab8c5e32fad1f4cb2114aeadfde8bb4d67a0da71ed660c5c3c1a2ffd7f494b4511de5949ede1f8f8b206557ebb5e6a9cbf2c0e67b867ebaf9b0a2b9e316c1e26038fd838dc4761e0f2346948d02fbd44f832fb3b98a758e9f3174a7a33b967f80671b1a0cc51ad6c77a84c0d2f306838a1aaf0531e8c1cb420474272d99ae27644e0dff9758c49fe11f980ee3d1ffef9d3d4b3d18f07cd0276ffd90183f12845102045d529010d51556381a030c461275e1c10500fc0c13e2dab89f8c8ffc7444390d13f7406310fd4c0bc916a9b80c874596116a8e643597d1f17dc7ab9fde3509f89988db645dc5820f672f7f936e16b7baca2c20b66a1b9d97b33e6dec7b354bf64ed6746e183c2f5dcd6be0b8e878754d212c39b9e606a20ded62030e8d1c5a529b2b3d1208d9330a25f7ee2151dd933f7319df2b4d9a33dc3116f1449f79354e4059de5a6a9ee626c908af040ffcd195f6c7125d3e2fa4e73b8b724e0f871cbdb55fabeffabb735bdbdcb5afd6362d4e27792734b9aea99dbd4309dd82fcd6ee1a50a5e583da884b27cb6789675de1aef3bc7ba8a1ccd69144851bd20ca28e1453d0dee6873ac1999c0ab57d24788152ceb60cea220753797edc43f5b7e261bc71473abe0e26e3d476a150a66f7ec16229852c5320cc58eb9fa6ba9c74f065418fed3b0c16033b6edd14c9c3d05db094688c744adcf16efc74940187c008b2d874273442ee66e075fa401cdb4ea853f44f91ab560f031feb3e6ac74bc9d285537a656924d0cf23ed5ac48188a4d80bbc71c05d908571c14b2f117a6c1e54fdc4dc3b685af4bb02aac0271b6a4ef06744e8ac5f971801ee672e34d71aceb8b2b4b5a3e66f1f5f7a9fb71a0737247984c3cc9bc071b3cc6e7323c0616a00e41bb1dd0598b6bfda0401896329a39975cdbd69a0df50ef447d422e4e8d59e9a04b652cc83289b7d5037b1e4770e0218fd241cdee466d85c8af694cc7a1350d8b93ab5f83c0d3b1ac8c144c71d2d78fd29176fe5a090600029b1b02104f880aad8cb0f97259bc44406457cf61a69a29a24ba26a806a0b3375f0db870c275e14d2621de6f8ad4950332988ff80da13fdb1c9c7d960334825c92f70028a4c911f87b567eb8ff4cc434b1ee901e822d3d31f7896cdf8d9aecca2b0a1a506646fbdaed0a5355d24bb661771286a9ea4e882c61fb7e0fcf1c2668252c5e92e1396af8af6a61b6d0a77c3376fbbc31efdbf8333f5d3d0ff5dcc75b15d67f1ca1884537ecc2fef09add94ae6c6946b01f1c337a4238edbbc30e650f3a635288aa7c92cdec41e0747fb39ffc56b464acd529d46cb36423c4f2570b96cbc3ef6909570773e3d87a179ce4118f9148b45f277776b2ac9cb2486c87a726b4a3967464f65d456c0bbc7944f9cd0885dc2d67999b6d5fc4c807d652afb792ad1a8dceb43a34ca7b6af733966e145f51f9ce64c794bd6a63520c3f3e2df40b3bc9855437692066f6e4b0f142e317f19ad96216320ac0fe0e9defd17e325889c36ae9fbc7497d448510883f904efb208119db67eca44bd7e433931b99801acd503f5bc7c1674e145ae83ef253fd03957084d1605f9523ef37f4647c6b3198ae3229e269a6ab792089760494a243e9ba99eb82c8352bd6c6f2b4de04c9a334b1c21e5a5e57e102835690fba440725a153ae666c43f4f6b98413acca66ef034bee3c897b21d81146098febe612be34c023fc7348fdc7b9f9fbf20a1361eb720d876c385ba75c886b86eca6c0bd3d8844867cc3ac80f9d8eba2043a5c96f52ed15dca7c1163c3835721517948affed2c07c95efe04dcb65331ee9848dc996ecb9f56e5c64877176d76a5194b494c7948bdcc7f91a381b067497d65ca5181a2e441a24afa670eb2b598ca1d35146c43765ece3f61036569e4a1feabb88fe044865b2e3a899edccef271f8c2a21df02f844d65df38686801426bb0d87f4126d659958d70ad7529718d9f46b6ad64c82f66499cc2476496e3dc71aaf556922f8e0d15c4b43be90e3006c3d04609b1507f05acc349c845acdf0e637fd5a0cac167db7f42987947fda9471b03a2f09d4deb24aabaa0fa868d16b554bed50eb43ef23e62d8bfe4d51721b38c61be103b13b3668d41bd74a5d7a942c9f05b85301a38e7bfacb955e545a16a7afb01b8247d0f4f43c94153973f11a4e8d739dc86e10a83f7cbb8c7085ce42a360968afe4c1abfe5ce70a44eebfedca1a125861b7d0f3a0fc6162f3f599def5d4553adf0e4a4eab691dd0b294027c127961d1f487c324d523795c0d153e9934600bf5de4efdf4a4d754fc9e51339a3955c30402e14be43abf17eb346fd28868395061c9c1253ec7f36fef87df7fea6f9c3d35872c9621b929b486bd0fad142862813334e7e12aaf8f2e9f1c288d5907eaf66461a3316a4d55ec1f1089acfbf4684bbdc7f3c8c4fc4b0413f9d9dd21997f0f681e5bcee59956d49c09a03207363ecbc36ab0f728acd74d5b871901eee7a64140c3dadf486428ac9b1bcc86d92c9959ecffc6a2744e22a6127d9434b13aabb4c8a72615b2cd320c61f3711954723ce7959b07692e0cc3bfff47a483fc83ea57ab9fcd9ce18474206dc5bab646a538e57f643590553b07c99c2b039327981617fa034f6137648810dfe6eecc37ee2891f55cf375f02b9e827861eacb91cb23f853d278bdc993fabd1b441568a110de6e0f4e4e5a93a2063fa88fb51f39d2e59f1ab24b64097f693e6a56959234833ab97349f46f0d8088691589237892b6260d39c2142c6785ddc9b7"}, @iv={0x110, 0x117, 0x2, 0xf6, "7fca00ad998151d2b6b8b2352488788bef66a440cbffeeca215a8abcb188224b6ac0df35bdcce78b352f36191c01a0840f79e1332255993f053d708c8944954a07b1b8ec4af1135ae4f4287174e0c8ac943dab6ff9b7c12e7df390ba1f597a3e7bcc3d4ea565f511395d87d206e88187cea93012f649d9f9a790e582a3d55fc63788e5a867e7b381036fc53295129c64f90f96946baf7e6e7714e8c01e8170a4fda29417d01f815eb07b2dc9647626007020c5616d7c3efdf9e7f6564a80bdcef6c8d58ca7389324bc257b040209040333bb2337d0c71e42fb8f0469329d2894150d271f7e29fc9a0f739d3af0fe5911a4aee40baefa"}, @iv={0x58, 0x117, 0x2, 0x44, "31f9e4772bc7bcadf2c21bec88c009d03fdad9670872932fd58e04af7acc360c75cf9e69a25a01f328b6060a8c242d9175e56c0abca7f69eee04ba5215ca7a4390080dba"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x67, "0936c4ef946c10a8b1d2ee51f2a81c4ded237da73ae04782fd8dc3a0fd896937ed7f852ac8f8a3b3f9369cd7fadca66d0133dbaa903124dba61b89be0c74f37ca74101a67fde4009bcd74dadddca266b41c6fce52b1b604d61997691936983943151f3bc99bafa"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1230, 0x1}], 0x2, 0x40800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$inet_udp(0x2, 0x2, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000280)={0x0, 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10900, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r4) execve(&(0x7f0000000380)='./file1\x00', 0x0, 0xfffffffffffffffe) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) kernel console output (not intermixed with test programs): ns) > initial count (200000 ns). Using initial count to start timer. [ 222.430580][ T5851] usb usb4-port1: attempt power cycle [ 222.965029][ T58] bridge_slave_1: left allmulticast mode [ 223.000766][ T5851] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 223.014024][ T58] bridge_slave_1: left promiscuous mode [ 223.020247][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.067478][ T58] bridge_slave_0: left allmulticast mode [ 223.073656][ T58] bridge_slave_0: left promiscuous mode [ 223.079928][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.080105][ T5851] usb 4-1: device descriptor read/8, error -71 [ 223.088934][ T5130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 223.118935][ T5130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 223.133329][ T5130] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 223.145080][ T5130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 223.158781][ T5130] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.209913][ T7798] fuse: Bad value for 'rootmode' [ 223.971444][ T7812] binder_alloc: 7809: binder_alloc_buf, no vma [ 224.439246][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.454370][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.465043][ T58] bond0 (unregistering): Released all slaves [ 224.476592][ T7789] netlink: 168 bytes leftover after parsing attributes in process `syz.2.484'. [ 224.590696][ T7791] lo speed is unknown, defaulting to 1000 [ 224.735541][ T7829] futex_wake_op: syz.2.491 tries to shift op by 144; fix this program [ 225.250556][ T5130] Bluetooth: hci1: command tx timeout [ 225.964902][ T7843] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 226.143988][ T792] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 226.180097][ T29] audit: type=1400 audit(1775376408.886:484): avc: denied { create } for pid=7850 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.820227][ T29] audit: type=1400 audit(1775376409.136:485): avc: denied { ioctl } for pid=7850 comm="syz.2.496" path="socket:[17967]" dev="sockfs" ino=17967 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.854984][ T792] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.870210][ T792] usb 2-1: config 0 has no interfaces? [ 226.895944][ T792] usb 2-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 226.910259][ T29] audit: type=1400 audit(1775376409.286:486): avc: denied { bind } for pid=7850 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.946090][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.966509][ T792] usb 2-1: config 0 descriptor?? [ 226.971611][ T29] audit: type=1400 audit(1775376409.286:487): avc: denied { connect } for pid=7850 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 226.998616][ T29] audit: type=1400 audit(1775376409.286:488): avc: denied { getopt } for pid=7850 comm="syz.2.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 227.127528][ T29] audit: type=1400 audit(1775376409.836:489): avc: denied { module_request } for pid=7791 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 227.262921][ T7840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.322061][ T7840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.331304][ T5130] Bluetooth: hci1: command tx timeout [ 227.341706][ T58] hsr_slave_0: left promiscuous mode [ 227.348302][ T7868] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 227.370104][ T7868] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 227.402856][ T58] hsr_slave_1: left promiscuous mode [ 227.546850][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.190633][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.774261][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.802311][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.858873][ T58] veth1_macvtap: left promiscuous mode [ 228.864948][ T58] veth0_macvtap: left promiscuous mode [ 228.870665][ T58] veth1_vlan: left promiscuous mode [ 228.876842][ T58] veth0_vlan: left promiscuous mode [ 229.152839][ T7879] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 229.249597][ T7871] slcan: can't register candev [ 229.410445][ T5130] Bluetooth: hci1: command tx timeout [ 229.506665][ T29] audit: type=1400 audit(1775376412.216:490): avc: denied { ioctl } for pid=7880 comm="syz.0.501" path="socket:[18070]" dev="sockfs" ino=18070 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 229.598291][ T7883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.502'. [ 229.607196][ T792] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 229.628875][ T58] team0 (unregistering): Port device team_slave_1 removed [ 229.643594][ T58] team0 (unregistering): Port device team_slave_0 removed [ 229.767565][ T7791] chnl_net:caif_netlink_parms(): no params data found [ 229.822082][ T792] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 229.844964][ T792] usb 3-1: config 1 has no interface number 0 [ 229.859869][ T24] usb 2-1: USB disconnect, device number 19 [ 229.907046][ T792] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 229.933036][ T792] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 229.983420][ T792] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.012887][ T792] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 230.024300][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.033067][ T792] usb 3-1: Product: syz [ 230.038129][ T792] usb 3-1: Manufacturer: syz [ 230.042822][ T792] usb 3-1: SerialNumber: syz [ 230.065894][ T7878] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 230.131704][ T7791] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.138961][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.154760][ T7791] bridge_slave_0: entered allmulticast mode [ 230.176975][ T7791] bridge_slave_0: entered promiscuous mode [ 230.195883][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 230.205349][ T7791] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.223983][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.241930][ T7791] bridge_slave_1: entered allmulticast mode [ 230.249470][ T7791] bridge_slave_1: entered promiscuous mode [ 230.255744][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 230.304315][ T7878] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 230.316218][ T7791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.328850][ T29] audit: type=1400 audit(1775376413.046:491): avc: denied { getopt } for pid=7901 comm="syz.0.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 230.350065][ T7791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.372859][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 230.417658][ T7791] team0: Port device team_slave_0 added [ 230.442206][ T7791] team0: Port device team_slave_1 added [ 230.482766][ T7791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.489834][ T7791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.516315][ T7791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.533778][ T7878] kAFS: unable to lookup cell 'ÿ' [ 230.544089][ T792] usb 3-1: Incompatible driver and firmware versions [ 230.553536][ T7791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.560597][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 230.568180][ T792] usb 3-1: USB disconnect, device number 17 [ 230.573915][ T7791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.603931][ T7791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.615772][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.626413][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.637595][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 230.657893][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 230.669701][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.708522][ T7791] hsr_slave_0: entered promiscuous mode [ 230.715967][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 230.726077][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 230.734743][ T7791] hsr_slave_1: entered promiscuous mode [ 230.740537][ T24] usb 2-1: Manufacturer: syz [ 230.746898][ T7791] debugfs: 'hsr0' already exists in 'hsr' [ 230.753548][ T24] usb 2-1: config 0 descriptor?? [ 230.763579][ T7791] Cannot create hsr debugfs directory [ 230.856293][ T29] audit: type=1400 audit(1775376413.566:492): avc: denied { read write } for pid=7917 comm="syz.3.508" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 230.857999][ T7918] netlink: 80 bytes leftover after parsing attributes in process `syz.3.508'. [ 230.892857][ T29] audit: type=1400 audit(1775376413.566:493): avc: denied { ioctl open } for pid=7917 comm="syz.3.508" path="/94/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 230.973984][ T7894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.984334][ T7894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.150503][ T24] rc_core: IR keymap rc-hauppauge not found [ 231.156480][ T24] Registered IR keymap rc-empty [ 231.171795][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.280491][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 231.293170][ T29] audit: type=1400 audit(1775376413.996:494): avc: denied { read } for pid=7937 comm="syz.2.512" path="socket:[18159]" dev="sockfs" ino=18159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 232.266543][ T5130] Bluetooth: hci1: command tx timeout [ 232.281683][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 232.339309][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 232.539643][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.559685][ T7944] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 232.580490][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.632480][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.741744][ T5851] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 232.749677][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.780563][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.820630][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 232.911674][ T7961] Cannot find add_set index 65532 as target [ 233.181564][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 233.200667][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 233.221023][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 233.253115][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 233.260520][ T5851] usb 4-1: Using ep0 maxpacket: 8 [ 233.268400][ T5851] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 233.849136][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.920152][ T24] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 233.933650][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 233.951060][ T24] usb 2-1: USB disconnect, device number 20 [ 233.962745][ T5851] pvrusb2: Hardware description: Terratec Grabster AV400 [ 233.980880][ T5851] pvrusb2: ********** [ 233.984910][ T5851] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 234.108527][ T5851] pvrusb2: Important functionality might not be entirely working. [ 234.116721][ T5851] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 234.128110][ T5851] pvrusb2: ********** [ 234.132673][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 234.139861][ T2341] pvrusb2: Invalid write control endpoint [ 234.267440][ T7970] lo speed is unknown, defaulting to 1000 [ 234.273820][ T7970] lo speed is unknown, defaulting to 1000 [ 234.284777][ T7970] lo speed is unknown, defaulting to 1000 [ 234.309141][ T7970] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 234.356520][ T7970] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 234.723185][ T7970] lo speed is unknown, defaulting to 1000 [ 234.730637][ T7970] lo speed is unknown, defaulting to 1000 [ 234.737853][ T7970] lo speed is unknown, defaulting to 1000 [ 234.744996][ T7970] lo speed is unknown, defaulting to 1000 [ 234.753125][ T7970] lo speed is unknown, defaulting to 1000 [ 234.818794][ T5851] usb 4-1: USB disconnect, device number 20 [ 234.997144][ T2341] pvrusb2: Invalid write control endpoint [ 235.132212][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 235.157242][ T7955] Mount JFS Failure: -22 [ 235.161554][ T7955] jfs_mount failed w/return code = -22 [ 235.195933][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 235.687297][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 235.727264][ T29] audit: type=1400 audit(1775376418.436:495): avc: denied { connect } for pid=7990 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.748441][ T2341] pvrusb2: Device being rendered inoperable [ 235.767677][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 235.777962][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 235.790557][ T29] audit: type=1400 audit(1775376418.436:496): avc: denied { listen } for pid=7990 comm="syz.3.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 235.812522][ T2341] pvrusb2: Attached sub-driver cx25840 [ 235.821291][ T24] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 235.908164][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 235.945391][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 235.998033][ T29] audit: type=1400 audit(1775376418.696:497): avc: denied { write } for pid=7997 comm="syz.0.522" path="socket:[19223]" dev="sockfs" ino=19223 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 236.049112][ T7791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.090681][ T24] usb 2-1: device descriptor read/64, error -71 [ 236.114364][ T7791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.168508][ T7791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.207066][ T7791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.440464][ T792] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 236.451468][ T29] audit: type=1400 audit(1775376419.076:498): avc: denied { read } for pid=7997 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 236.568572][ T29] audit: type=1400 audit(1775376419.276:499): avc: denied { write } for pid=8023 comm="syz.1.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 236.615994][ T7791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.670935][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 236.681444][ T7791] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.698086][ T792] usb 3-1: config 10 has an invalid interface number: 251 but max is 0 [ 236.722862][ T792] usb 3-1: config 10 has no interface number 0 [ 236.756631][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.763785][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.774822][ T792] usb 3-1: config 10 interface 251 has no altsetting 0 [ 236.828103][ T8028] fuse: Unknown parameter 'fd00000000000000000004' [ 236.832711][ T792] usb 3-1: New USB device found, idVendor=052b, idProduct=a803, bcdDevice= 5.4b [ 236.851952][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.859050][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.870460][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.878449][ T792] usb 3-1: Product: syz [ 236.894339][ T792] usb 3-1: Manufacturer: syz [ 236.898940][ T792] usb 3-1: SerialNumber: syz [ 236.926005][ T8031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=8031 comm=syz.3.528 [ 237.190487][ T792] usb 3-1: USB disconnect, device number 18 [ 237.245129][ T8036] lo speed is unknown, defaulting to 1000 [ 237.543524][ T7791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.610514][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 237.750526][ T24] usb 2-1: device descriptor read/64, error -71 [ 237.860631][ T24] usb usb2-port1: attempt power cycle [ 238.130184][ T7791] veth0_vlan: entered promiscuous mode [ 238.155357][ T7791] veth1_vlan: entered promiscuous mode [ 238.390299][ T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 238.432129][ T24] usb 2-1: device descriptor read/8, error -71 [ 238.482473][ T7791] veth0_macvtap: entered promiscuous mode [ 238.518351][ T7791] veth1_macvtap: entered promiscuous mode [ 238.527390][ T8036] lo speed is unknown, defaulting to 1000 [ 238.592751][ T7791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.632829][ T7791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.691049][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.704231][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.710861][ T24] usb 2-1: device descriptor read/8, error -71 [ 238.715752][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.839523][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.849887][ T24] usb usb2-port1: unable to enumerate USB device [ 238.881423][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.111347][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.207074][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.241683][ T8111] fuse: Unknown parameter 'fd00000000000000000004' [ 239.306167][ T7457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.314532][ T7457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.363391][ T29] audit: type=1400 audit(1775376422.076:500): avc: denied { mounton } for pid=7791 comm="syz-executor" path="/root/syzkaller.MdMq95/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 239.455284][ T8118] siw: device registration error -23 [ 239.461126][ T29] audit: type=1400 audit(1775376422.106:501): avc: denied { mounton } for pid=7791 comm="syz-executor" path="/root/syzkaller.MdMq95/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 239.530668][ T8121] QAT: failed to copy from user cfg_data. [ 239.539737][ T29] audit: type=1400 audit(1775376422.116:502): avc: denied { mounton } for pid=7791 comm="syz-executor" path="/root/syzkaller.MdMq95/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=19915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 239.571742][ T29] audit: type=1400 audit(1775376422.136:503): avc: denied { mounton } for pid=7791 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 239.598333][ T29] audit: type=1400 audit(1775376422.276:504): avc: denied { bind } for pid=8119 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 239.632506][ T29] audit: type=1400 audit(1775376422.336:505): avc: denied { ioctl } for pid=8119 comm="syz.4.482" path="socket:[19931]" dev="sockfs" ino=19931 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 239.682907][ T29] audit: type=1400 audit(1775376422.336:506): avc: denied { getopt } for pid=8119 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 239.759293][ T29] audit: type=1400 audit(1775376422.336:507): avc: denied { write } for pid=8119 comm="syz.4.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 240.203708][ T8142] bond1: entered promiscuous mode [ 240.209006][ T8142] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.635152][ T8151] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 241.352871][ T8158] fuse: Unknown parameter 'fd00000000000000000004' [ 241.557104][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 241.557119][ T29] audit: type=1400 audit(1775376424.266:509): avc: denied { ioctl } for pid=8154 comm="syz.3.551" path="socket:[19987]" dev="sockfs" ino=19987 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 241.729876][ T8170] random: crng reseeded on system resumption [ 241.792333][ T8170] openvswitch: netlink: IP tunnel dst address not specified [ 242.180532][ T29] audit: type=1400 audit(1775376424.436:510): avc: denied { write } for pid=8152 comm="syz.4.548" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 242.273145][ T29] audit: type=1400 audit(1775376424.436:511): avc: denied { open } for pid=8152 comm="syz.4.548" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 242.496167][ T8189] 9p: Bad value for 'rfdno' [ 244.171477][ T8206] fuse: Unknown parameter 'fd00000000000000000005' [ 244.356211][ T8210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.792169][ T8217] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 246.003113][ T8225] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 246.010969][ T8225] audit: out of memory in audit_log_start [ 246.225717][ T29] audit: type=1400 audit(1775376428.926:512): avc: denied { write } for pid=8218 comm="syz.2.564" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 246.250233][ T29] audit: type=1400 audit(1775376428.926:513): avc: denied { open } for pid=8218 comm="syz.2.564" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 246.294775][ T29] audit: type=1400 audit(1775376428.936:514): avc: denied { ioctl } for pid=8218 comm="syz.2.564" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 247.121529][ T792] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 247.360457][ T792] usb 3-1: device descriptor read/64, error -71 [ 248.026932][ T792] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 248.494421][ T8246] fuse: Bad value for 'rootmode' [ 248.985766][ T5807] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 249.418039][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.582'. [ 249.817425][ T29] audit: type=1400 audit(1775376432.526:515): avc: denied { getopt } for pid=8286 comm="syz.2.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 249.838820][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 249.855975][ T8291] NILFS (nullb0): couldn't find nilfs on the device [ 250.052455][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.062092][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.110736][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 250.117919][ T24] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 250.129631][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.152482][ T24] usb 5-1: config 0 has no interface number 0 [ 250.716420][ T24] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.718923][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 250.718948][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.718965][ T24] usb 5-1: Product: syz [ 250.718979][ T24] usb 5-1: Manufacturer: syz [ 250.718993][ T24] usb 5-1: SerialNumber: syz [ 250.843372][ T24] usb 5-1: config 0 descriptor?? [ 250.868506][ T24] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 251.019743][ T29] audit: type=1400 audit(1775376433.606:516): avc: denied { checkpoint_restore } for pid=8289 comm="syz.0.585" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 251.054641][ T24] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 251.070485][ T5924] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 251.115103][ T24] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 251.751507][ T24] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 251.772405][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 251.795598][ T5924] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 251.813844][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.897867][ T5924] pvrusb2: Hardware description: Terratec Grabster AV400 [ 251.923757][ T5924] pvrusb2: ********** [ 251.938954][ T5924] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 251.963424][ T5924] pvrusb2: Important functionality might not be entirely working. [ 251.990677][ T5924] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 252.008280][ T5924] pvrusb2: ********** [ 252.092241][ T8311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.588'. [ 252.145784][ T2341] pvrusb2: Invalid write control endpoint [ 252.248568][ T2341] pvrusb2: Invalid write control endpoint [ 252.262218][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 252.280478][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 252.288196][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 252.300178][ T2341] pvrusb2: Device being rendered inoperable [ 252.306827][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 252.320254][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 252.338587][ T2341] pvrusb2: Attached sub-driver cx25840 [ 252.354774][ T8296] pvrusb2: Killing an I2C write to 9 that is too large (desired=8192 limit=61) [ 252.355213][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 252.375251][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 252.832444][ T792] usb 5-1: USB disconnect, device number 19 [ 253.497435][ T24] usb 2-1: USB disconnect, device number 25 [ 253.892880][ T8341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.180475][ T793] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 256.793354][ T793] usb 2-1: config 0 has an invalid interface number: 66 but max is 0 [ 256.806717][ T793] usb 2-1: config 0 has no interface number 0 [ 256.898687][ T793] usb 2-1: too many endpoints for config 0 interface 66 altsetting 71: 66, using maximum allowed: 30 [ 256.970447][ T793] usb 2-1: config 0 interface 66 altsetting 71 has 0 endpoint descriptors, different from the interface descriptor's value: 66 [ 256.985116][ T793] usb 2-1: config 0 interface 66 has no altsetting 0 [ 257.040563][ T793] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 257.080467][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.126551][ T793] usb 2-1: config 0 descriptor?? [ 257.197696][ T793] cp210x 2-1:0.66: cp210x converter detected [ 257.275385][ T8376] netlink: 52 bytes leftover after parsing attributes in process `syz.4.605'. [ 257.338850][ T8376] syz_tun: entered allmulticast mode [ 257.601590][ T793] cp210x 2-1:0.66: failed to get vendor val 0x000e size 3: -71 [ 257.625384][ T793] usb 2-1: cp210x converter now attached to ttyUSB0 [ 257.675119][ T793] usb 2-1: USB disconnect, device number 26 [ 257.738077][ T793] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 257.767961][ T8379] syz_tun: left allmulticast mode [ 257.770747][ T793] cp210x 2-1:0.66: device disconnected [ 257.983159][ T8382] input: syz0 as /devices/virtual/input/input12 [ 259.114865][ T8386] netlink: 24 bytes leftover after parsing attributes in process `syz.0.609'. [ 259.843310][ T29] audit: type=1400 audit(1775376442.556:517): avc: denied { setopt } for pid=8389 comm="syz.1.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.865328][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 260.120694][ T792] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 260.270494][ T792] usb 5-1: Using ep0 maxpacket: 32 [ 260.796778][ T792] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.846611][ T8402] fuse: Unknown parameter 'fd00000000000000000004' [ 260.853195][ T792] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.950474][ T792] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.990414][ T792] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 261.033344][ T792] usb 5-1: config 0 interface 0 has no altsetting 0 [ 261.117304][ T792] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 261.160414][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.628338][ T792] usb 5-1: config 0 descriptor?? [ 262.097630][ T8418] overlayfs: failed to clone upperpath [ 262.212205][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 262.217855][ T792] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 262.229659][ T792] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 262.250196][ T792] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 262.277849][ T29] audit: type=1400 audit(1775376444.986:518): avc: denied { connect } for pid=8421 comm="syz.3.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.308137][ T792] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 262.359629][ T792] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 262.390715][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 262.393071][ T792] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 262.413112][ T29] audit: type=1400 audit(1775376445.126:519): avc: denied { write } for pid=8424 comm="syz.3.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.441901][ T24] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 262.470466][ T24] usb 2-1: config 0 has no interface number 0 [ 263.076765][ T792] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 263.099462][ C0] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x0, unable to proceed further with wheel init [ 263.101593][ T24] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 263.160463][ T24] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 263.185194][ T24] usb 2-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 263.231408][ T24] usb 2-1: config 0 interface 196 has no altsetting 0 [ 263.291831][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 263.291983][ T8437] fuse: Unknown parameter 'fd00000000000000000004' [ 263.302821][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.327921][ T24] usb 2-1: Product: syz [ 263.336004][ T24] usb 2-1: Manufacturer: syz [ 263.341457][ T24] usb 2-1: SerialNumber: syz [ 263.393459][ T24] usb 2-1: config 0 descriptor?? [ 263.439984][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.625'. [ 263.701465][ T792] usb 5-1: USB disconnect, device number 20 [ 264.568764][ T8441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 264.736853][ T8456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.081179][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 265.484995][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.632'. [ 265.494720][ T8469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.632'. [ 266.658655][ T29] audit: type=1400 audit(1775376449.366:520): avc: denied { ioctl } for pid=8474 comm="syz.0.635" path="socket:[20983]" dev="sockfs" ino=20983 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 266.751419][ T24] ipheth 2-1:0.196: Unable to find endpoints [ 266.810429][ T24] usb 2-1: USB disconnect, device number 27 [ 266.867680][ T8481] fuse: Unknown parameter 'fd00000000000000000004' [ 266.874114][ T29] audit: type=1400 audit(1775376449.576:521): avc: denied { setopt } for pid=8482 comm="syz.1.638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 268.420458][ T5924] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 268.583513][ T8507] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 268.618496][ T29] audit: type=1400 audit(1775376451.266:522): avc: denied { open } for pid=8502 comm="syz.1.645" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 268.646674][ T29] audit: type=1400 audit(1775376451.266:523): avc: denied { ioctl } for pid=8502 comm="syz.1.645" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 268.650475][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 268.770262][ T29] audit: type=1400 audit(1775376451.316:524): avc: denied { connect } for pid=8502 comm="syz.1.645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 268.794136][ T29] audit: type=1400 audit(1775376451.326:525): avc: denied { read } for pid=8502 comm="syz.1.645" path="socket:[21036]" dev="sockfs" ino=21036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 268.898153][ T8516] Cannot find add_set index 65532 as target [ 269.427056][ T29] audit: type=1400 audit(1775376451.536:526): avc: denied { write } for pid=8502 comm="syz.1.645" path="socket:[21037]" dev="sockfs" ino=21037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 269.466287][ T5924] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=1d.9c [ 269.475940][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.533546][ T5924] usb 3-1: Product: syz [ 269.537715][ T5924] usb 3-1: Manufacturer: syz [ 269.542356][ T5924] usb 3-1: SerialNumber: syz [ 269.581545][ T5924] usb 3-1: config 0 descriptor?? [ 269.604365][ T5924] pwc: Creative Labs Webcam 5 detected. [ 269.797253][ T5924] pwc: Failed to set LED on/off time (-71) [ 269.804269][ T5924] pwc: send_video_command error -71 [ 269.815839][ T5924] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 269.820593][ T24] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 269.849701][ T5924] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 269.882965][ T8526] fuse: Unknown parameter 'fd00000000000000000004' [ 269.893416][ T5924] usb 3-1: USB disconnect, device number 21 [ 270.000436][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 270.007790][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 270.021846][ C0] blk_print_req_error: 6 callbacks suppressed [ 270.021860][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 1 [ 270.023250][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 270.047145][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 270.047518][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.056719][ C0] buffer_io_error: 4 callbacks suppressed [ 270.056732][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 270.056924][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 270.065973][ T24] usb 5-1: Product: syz [ 270.070556][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 270.070622][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 270.078788][ T24] usb 5-1: Manufacturer: syz [ 270.087952][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 270.088009][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 270.093639][ T24] usb 5-1: SerialNumber: syz [ 270.099933][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 270.099989][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 270.153253][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 270.161084][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 270.170607][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 270.178405][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 1 [ 270.187931][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 270.211544][ T24] usb 5-1: config 0 descriptor?? [ 270.231634][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 271.024973][ T8542] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 272.121006][ T24] gspca_zc3xx: reg_w_i err -110 [ 272.711142][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 272.722030][ T24] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 273.021775][ T8569] fuse: Unknown parameter 'fd00000000000000000005' [ 273.087434][ T8571] binder: BINDER_SET_CONTEXT_MGR already set [ 273.094059][ T8571] binder: 8570:8571 ioctl 4018620d 200000004a80 returned -16 [ 274.607280][ T24] usb 5-1: USB disconnect, device number 21 [ 274.646484][ T8586] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 274.654859][ T8586] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 274.663428][ T8586] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 275.681333][ T8592] fuse: Bad value for 'fd' [ 276.245890][ T5807] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 276.346921][ T8599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1971 sclass=netlink_route_socket pid=8599 comm=syz.4.669 [ 276.432519][ T29] audit: type=1400 audit(1775376459.146:527): avc: denied { setopt } for pid=8598 comm="syz.4.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 277.209669][ T8619] Mount JFS Failure: -22 [ 277.214103][ T8619] jfs_mount failed w/return code = -22 [ 277.859431][ T24] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 278.102817][ T8634] overlayfs: failed to clone lowerpath [ 278.110908][ T29] audit: type=1400 audit(1775376460.816:528): avc: denied { mount } for pid=8626 comm="syz.0.677" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 278.136913][ T8634] netlink: 'syz.0.677': attribute type 4 has an invalid length. [ 278.250516][ T24] usb 2-1: device descriptor read/64, error -71 [ 278.329906][ T5851] lo speed is unknown, defaulting to 1000 [ 278.338544][ T5851] syz0: Port: 1 Link DOWN [ 278.487662][ T8638] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 278.505231][ T24] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 278.597693][ T8640] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 278.664120][ T24] usb 2-1: device descriptor read/64, error -71 [ 278.811247][ T24] usb usb2-port1: attempt power cycle [ 279.303777][ T8644] fuse: Bad value for 'fd' [ 279.359120][ T29] audit: type=1400 audit(1775376462.066:529): avc: denied { mount } for pid=8641 comm="syz.0.679" name="/" dev="hugetlbfs" ino=21363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 279.461109][ T24] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 279.478129][ T8645] netlink: 'syz.0.679': attribute type 1 has an invalid length. [ 279.526567][ T8652] netlink: 'syz.3.681': attribute type 39 has an invalid length. [ 279.603645][ T24] usb 2-1: device descriptor read/8, error -71 [ 279.897281][ T8666] siw: device registration error -23 [ 279.916341][ T29] audit: type=1400 audit(1775376462.616:530): avc: denied { lock } for pid=8665 comm="syz.4.687" path="socket:[21908]" dev="sockfs" ino=21908 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 280.141576][ T29] audit: type=1400 audit(1775376462.826:531): avc: denied { mount } for pid=8667 comm="syz.1.688" name="/" dev="rpc_pipefs" ino=21380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 280.295882][ T29] audit: type=1400 audit(1775376462.916:532): avc: denied { name_bind } for pid=8669 comm="syz.4.689" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 280.374467][ T8676] fuse: Unknown parameter '0x0000000000000006' [ 280.534606][ T792] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 280.575301][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.694'. [ 280.850429][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 280.910936][ T792] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 280.934201][ T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.954941][ T792] usb 3-1: config 0 has no interface number 0 [ 280.975729][ T792] usb 3-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 281.102138][ T792] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 281.122103][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.230929][ T29] audit: type=1400 audit(1775376463.886:533): avc: denied { create } for pid=8680 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 281.250337][ T792] usb 3-1: Product: syz [ 281.250360][ T792] usb 3-1: Manufacturer: syz [ 281.250499][ T792] usb 3-1: SerialNumber: syz [ 281.339597][ T792] usb 3-1: config 0 descriptor?? [ 281.512202][ T179] Bluetooth: hci5: Frame reassembly failed (-84) [ 281.519347][ T792] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 281.630763][ T792] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 281.671565][ T792] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 281.678862][ T792] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 282.541084][ T8699] /dev/nullb0: Can't lookup blockdev [ 282.602551][ T29] audit: type=1400 audit(1775376465.276:534): avc: denied { ioctl } for pid=8680 comm="syz.1.693" path="socket:[21969]" dev="sockfs" ino=21969 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 283.290472][ T29] audit: type=1400 audit(1775376465.986:535): avc: denied { ioctl } for pid=8708 comm="syz.4.700" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 283.610664][ T5807] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 283.655608][ T792] usb 3-1: USB disconnect, device number 22 [ 283.858149][ T29] audit: type=1400 audit(1775376466.146:536): avc: denied { create } for pid=8708 comm="syz.4.700" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 284.136538][ T29] audit: type=1400 audit(1775376466.186:537): avc: denied { create } for pid=8708 comm="syz.4.700" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 284.158590][ T29] audit: type=1400 audit(1775376466.216:538): avc: denied { mounton } for pid=8708 comm="syz.4.700" path="/26/file0" dev="tmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 284.366496][ T7791] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.427552][ T29] audit: type=1326 audit(1775376466.666:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8711 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc159c819 code=0x7ffc0000 [ 284.451788][ T29] audit: type=1326 audit(1775376466.666:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8711 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc159c819 code=0x7ffc0000 [ 284.490467][ T29] audit: type=1326 audit(1775376466.676:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8711 comm="syz.2.701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcc159c819 code=0x7ffc0000 [ 284.496999][ T7791] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 284.543632][ T8717] fuse: Unknown parameter 'fd0000000000000000000500000000000000000000' [ 286.670469][ T792] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 287.150771][ T24] libceph: connect (1)[c::]:6789 error -101 [ 287.158483][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 287.191290][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 287.203899][ T792] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 287.223886][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.246662][ T792] pvrusb2: Hardware description: Terratec Grabster AV400 [ 287.256478][ T792] pvrusb2: ********** [ 287.260498][ T792] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 287.274419][ T792] pvrusb2: Important functionality might not be entirely working. [ 287.287786][ T792] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 287.304916][ T792] pvrusb2: ********** [ 287.386171][ T8746] ceph: No mds server is up or the cluster is laggy [ 287.430551][ T5963] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 287.431710][ T24] libceph: connect (1)[c::]:6789 error -101 [ 287.438691][ T8753] netlink: 5 bytes leftover after parsing attributes in process `syz.2.711'. [ 287.482959][ T8753] 0ªX¹¦D: renamed from macvtap0 (while UP) [ 287.488873][ T2341] pvrusb2: Invalid write control endpoint [ 287.491545][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 287.512819][ T8754] x_tables: duplicate underflow at hook 2 [ 287.585415][ T2341] pvrusb2: Invalid write control endpoint [ 287.605525][ T8756] overlayfs: failed to resolve './file0/../file0': -20 [ 287.614079][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 287.663900][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 287.663900][ T5963] usb 5-1: Using ep0 maxpacket: 8 [ 287.665206][ T5963] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 287.671579][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 287.671731][ T2341] pvrusb2: Device being rendered inoperable [ 287.703130][ T8733] pvrusb2: Killing an I2C write to 9 that is too large (desired=8192 limit=61) [ 287.736286][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 287.743449][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 287.753163][ T8753] 0ªX¹¦D: entered allmulticast mode [ 287.763296][ T2341] pvrusb2: Attached sub-driver cx25840 [ 287.775296][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 287.787769][ T8753] veth0_macvtap: entered allmulticast mode [ 287.796756][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 287.798856][ T5963] usb 5-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 287.844334][ T8753] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 287.852441][ T5963] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=95.29 [ 287.878649][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.915937][ T5963] usb 5-1: Product: syz [ 287.925238][ T5963] usb 5-1: Manufacturer: syz [ 287.936692][ T5963] usb 5-1: SerialNumber: syz [ 287.974699][ T8760] IPv6: sit1: Disabled Multicast RS [ 287.990432][ T792] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 288.003437][ T8760] sit1: entered allmulticast mode [ 288.160531][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 288.235911][ T5963] usb 5-1: USB disconnect, device number 22 [ 288.264990][ T792] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 288.294258][ T792] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 288.333284][ T792] usb 3-1: config 0 has no interface number 0 [ 288.359015][ T792] usb 3-1: New USB device found, idVendor=045e, idProduct=0703, bcdDevice=6e.c0 [ 288.380968][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.416568][ T792] usb 3-1: Product: syz [ 288.452582][ T792] usb 3-1: Manufacturer: syz [ 288.506874][ T792] usb 3-1: SerialNumber: syz [ 288.611679][ T792] usb 3-1: config 0 descriptor?? [ 288.788338][ T793] usb 2-1: USB disconnect, device number 32 [ 288.838529][ T792] uvcvideo 3-1:0.68: Found Unit with invalid ID 0 [ 288.891534][ T792] uvcvideo 3-1:0.68: Found UVC 0.40 device syz (045e:0703) [ 288.898789][ T792] uvcvideo 3-1:0.68: No valid video chain found. [ 288.945973][ T792] usb 3-1: USB disconnect, device number 23 [ 289.063277][ T8776] fuse: Unknown parameter '0x0000000000000006' [ 289.280492][ T793] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 289.646928][ T793] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 289.672806][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.688233][ T793] usb 2-1: Product: syz [ 289.701163][ T793] usb 2-1: Manufacturer: syz [ 289.708894][ T793] usb 2-1: SerialNumber: syz [ 289.725203][ T793] usb 2-1: config 0 descriptor?? [ 290.692705][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 290.692722][ T29] audit: type=1400 audit(1775376473.406:668): avc: denied { accept } for pid=8771 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 290.828360][ T793] usb 2-1: Firmware version (0.0) predates our first public release. [ 290.840506][ T793] usb 2-1: Please update to version 0.2 or newer [ 290.922167][ T793] usb 2-1: Firmware: build [ 291.003216][ T29] audit: type=1400 audit(1775376473.496:669): avc: denied { getopt } for pid=8771 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 291.158594][ T29] audit: type=1400 audit(1775376473.846:670): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 291.291447][ T8807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.725'. [ 291.367212][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.376921][ T29] audit: type=1400 audit(1775376474.066:671): avc: denied { write } for pid=8802 comm="syz.2.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 291.479703][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.899481][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.159302][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 292.279116][ T793] usb 2-1: USB disconnect, device number 33 [ 293.486861][ T8822] fuse: Unknown parameter '0x0000000000000006' [ 293.524443][ T8825] FAULT_INJECTION: forcing a failure. [ 293.524443][ T8825] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 293.537658][ T8825] CPU: 0 UID: 0 PID: 8825 Comm: syz.4.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.537683][ T8825] Tainted: [L]=SOFTLOCKUP [ 293.537687][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 293.537694][ T8825] Call Trace: [ 293.537698][ T8825] [ 293.537702][ T8825] dump_stack_lvl+0x100/0x190 [ 293.537723][ T8825] should_fail_ex.cold+0x5/0xa [ 293.537738][ T8825] _copy_from_user+0x2e/0xd0 [ 293.537751][ T8825] copy_msghdr_from_user+0x9f/0x4f0 [ 293.537764][ T8825] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 293.537782][ T8825] ___sys_sendmsg+0x106/0x1e0 [ 293.537795][ T8825] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.537822][ T8825] __sys_sendmsg+0x170/0x220 [ 293.537838][ T8825] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.537861][ T8825] do_syscall_64+0x106/0xf80 [ 293.537878][ T8825] ? clear_bhb_loop+0x40/0x90 [ 293.537891][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.537902][ T8825] RIP: 0033:0x7fa4a4d9c819 [ 293.537911][ T8825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.537921][ T8825] RSP: 002b:00007fa4a5b7c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.537931][ T8825] RAX: ffffffffffffffda RBX: 00007fa4a5015fa0 RCX: 00007fa4a4d9c819 [ 293.537937][ T8825] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 293.537943][ T8825] RBP: 00007fa4a5b7c090 R08: 0000000000000000 R09: 0000000000000000 [ 293.537949][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.537955][ T8825] R13: 00007fa4a5016038 R14: 00007fa4a5015fa0 R15: 00007ffd24ec0b88 [ 293.537968][ T8825] [ 294.138754][ T8836] ip6erspan0: entered promiscuous mode [ 294.157937][ T793] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 294.631928][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.427458][ T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.437357][ T793] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 295.446517][ T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.464471][ T793] usb 2-1: config 0 descriptor?? [ 295.477955][ T793] hub 2-1:0.0: USB hub found [ 295.483934][ T8847] netlink: 'syz.3.737': attribute type 21 has an invalid length. [ 295.498395][ T8848] netlink: 'syz.3.737': attribute type 21 has an invalid length. [ 295.506550][ T8848] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.514402][ T8847] IPv6: NLM_F_CREATE should be specified when creating new route [ 295.525364][ T8848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.532604][ T8848] IPv6: NLM_F_CREATE should be set when creating new route [ 295.539851][ T8848] IPv6: NLM_F_CREATE should be set when creating new route [ 295.547121][ T8848] IPv6: NLM_F_CREATE should be set when creating new route [ 295.591316][ T792] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 295.618561][ T8847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.810589][ T792] usb 3-1: Using ep0 maxpacket: 8 [ 295.845863][ T792] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 295.943634][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.056516][ T793] hub 2-1:0.0: 1 port detected [ 296.077980][ T792] pvrusb2: Hardware description: Terratec Grabster AV400 [ 296.102635][ T792] pvrusb2: ********** [ 296.140660][ T29] audit: type=1400 audit(1775376478.856:672): avc: denied { write } for pid=8855 comm="syz.0.740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 296.163868][ T792] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 296.174012][ T792] pvrusb2: Important functionality might not be entirely working. [ 296.182049][ T792] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 296.193340][ T792] pvrusb2: ********** [ 296.217681][ T29] audit: type=1400 audit(1775376478.926:673): avc: denied { read } for pid=8832 comm="syz.1.734" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 296.310477][ T2341] pvrusb2: Invalid write control endpoint [ 296.333969][ T29] audit: type=1400 audit(1775376478.956:674): avc: denied { map } for pid=8832 comm="syz.1.734" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 296.383002][ T2341] pvrusb2: Invalid write control endpoint [ 296.508077][ T29] audit: type=1400 audit(1775376478.956:675): avc: denied { execute } for pid=8832 comm="syz.1.734" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 296.533062][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 296.534034][ T29] audit: type=1326 audit(1775376479.046:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8857 comm="syz.3.739" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f017059c819 code=0x0 [ 296.542527][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 296.542537][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 296.542546][ T2341] pvrusb2: Device being rendered inoperable [ 296.589896][ T8840] pvrusb2: Killing an I2C write to 9 that is too large (desired=8192 limit=61) [ 297.466931][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 297.485878][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 297.509289][ T2341] pvrusb2: Attached sub-driver cx25840 [ 297.522524][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 297.540904][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 297.899642][ T5924] usb 2-1: USB disconnect, device number 34 [ 298.213528][ T792] usb 3-1: USB disconnect, device number 24 [ 298.660756][ T792] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 298.949072][ T792] usb 3-1: Using ep0 maxpacket: 32 [ 298.955443][ T29] audit: type=1400 audit(1775376481.466:677): avc: denied { getopt } for pid=8895 comm="syz.1.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 298.961647][ T792] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 299.014271][ T792] usb 3-1: config 0 has no interface number 0 [ 299.030928][ T792] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.054733][ T792] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 299.081759][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.104424][ T792] usb 3-1: Product: syz [ 299.124917][ T792] usb 3-1: Manufacturer: syz [ 299.154561][ T792] usb 3-1: SerialNumber: syz [ 299.161294][ T792] usb 3-1: config 0 descriptor?? [ 299.183358][ T792] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 299.203258][ T792] em28xx 3-1:0.132: Video interface 132 found: [ 299.588286][ T8885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.606100][ T8885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.623140][ T792] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 299.817261][ T8915] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 299.975972][ T8909] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.149608][ T8909] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.325762][ T8909] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.432316][ T792] em28xx 3-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 301.442288][ T792] em28xx 3-1:0.132: board has no eeprom [ 301.486337][ T8931] fuse: Unknown parameter 'fd00000000000000000005' [ 301.500430][ T792] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 301.512930][ T792] em28xx 3-1:0.132: analog set to bulk mode. [ 301.520574][ T10] em28xx 3-1:0.132: Registering V4L2 extension [ 301.580796][ T8932] warning: `syz.1.758' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 301.662840][ T5130] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 301.663033][ T5130] Bluetooth: hci3: unknown advertising packet type: 0x6c [ 301.670428][ T5130] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 301.677741][ T5130] Bluetooth: hci3: Malformed LE Event: 0x02 [ 301.698043][ T29] audit: type=1400 audit(1775376484.286:678): avc: denied { ioctl } for pid=8927 comm="syz.1.758" path="socket:[22440]" dev="sockfs" ino=22440 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 301.782403][ T792] usb 3-1: USB disconnect, device number 25 [ 301.869402][ T792] em28xx 3-1:0.132: Disconnecting em28xx [ 301.905564][ T8909] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.938325][ T3565] Bluetooth: hci5: Frame reassembly failed (-84) [ 302.013121][ T10] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 302.026659][ T10] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 302.041952][ T10] em28xx 3-1:0.132: No AC97 audio processor [ 302.052854][ T10] usb 3-1: Decoder not found [ 302.061062][ T10] em28xx 3-1:0.132: failed to create media graph [ 302.068473][ T35] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.086133][ T10] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 302.093265][ T35] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.119473][ T10] em28xx 3-1:0.132: Remote control support is not available for this card. [ 302.122650][ T35] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.152331][ T792] em28xx 3-1:0.132: Closing input extension [ 302.173657][ T35] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.290065][ T792] em28xx 3-1:0.132: Freeing device [ 303.035153][ T8949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.044332][ T8949] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 303.232826][ T8957] binder: BINDER_SET_CONTEXT_MGR already set [ 303.241701][ T8957] binder: 8956:8957 ioctl 4018620d 200000004a80 returned -16 [ 303.267646][ T29] audit: type=1400 audit(1775376485.966:679): avc: denied { bind } for pid=8958 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 304.277136][ T5807] Bluetooth: hci5: command 0x1003 tx timeout [ 304.280555][ T5130] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 304.526066][ T8966] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 305.425515][ T8971] fuse: Unknown parameter 'fd00000000000000000005' [ 305.477251][ T29] audit: type=1400 audit(1775376488.166:680): avc: denied { write } for pid=8958 comm="syz.0.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 305.830466][ T792] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 305.991132][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 305.997543][ T792] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 306.021968][ T792] usb 2-1: config 0 has no interface number 0 [ 306.093640][ T8990] overlayfs: failed to clone upperpath [ 306.147426][ T792] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 306.192708][ T792] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 306.232277][ T792] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.316848][ T792] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 306.334684][ T792] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 306.354110][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.470346][ T792] usb 2-1: config 0 descriptor?? [ 306.496625][ T792] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 306.590638][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 306.837136][ T29] audit: type=1400 audit(1775376489.546:681): avc: denied { lock } for pid=8973 comm="syz.1.772" path="/dev/ldusb0" dev="devtmpfs" ino=3042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.904623][ T792] usb 2-1: USB disconnect, device number 35 [ 306.910593][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 306.916769][ T8998] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 306.923447][ T8998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.961604][ T8998] vhci_hcd vhci_hcd.0: Device attached [ 307.007900][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 307.028832][ T24] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 307.040424][ T24] usb 5-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 307.059095][ T29] audit: type=1400 audit(1775376489.766:682): avc: denied { append } for pid=8997 comm="syz.2.778" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 307.090827][ T24] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=95.29 [ 307.100456][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.110595][ T24] usb 5-1: Product: syz [ 307.119255][ T24] usb 5-1: Manufacturer: syz [ 307.130123][ T24] usb 5-1: SerialNumber: syz [ 307.230489][ T5851] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 307.399268][ T24] usb 5-1: USB disconnect, device number 23 [ 307.659247][ T8999] vhci_hcd: connection reset by peer [ 307.666436][ T35] vhci_hcd vhci_hcd.2: stop threads [ 307.676406][ T35] vhci_hcd vhci_hcd.2: release socket [ 307.683117][ T5130] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 307.683619][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 307.752292][ T9009] overlayfs: failed to clone upperpath [ 307.821545][ T9013] fuse: Unknown parameter 'fd00000000000000000004' [ 308.250533][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 308.302329][ T29] audit: type=1400 audit(1775376491.016:683): avc: denied { create } for pid=9024 comm="syz.2.789" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 308.500507][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 308.513721][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 308.523144][ T24] usb 5-1: config 9 has an invalid interface number: 8 but max is 1 [ 308.532301][ T24] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 308.542858][ T24] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 308.551890][ T24] usb 5-1: config 9 has no interface number 0 [ 308.558432][ T24] usb 5-1: config 9 interface 8 has no altsetting 0 [ 308.588673][ T9031] Cannot find add_set index 65532 as target [ 308.889668][ T792] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 308.920991][ T24] usb 5-1: New USB device found, idVendor=1199, idProduct=9061, bcdDevice=3d.91 [ 308.957243][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.974642][ T24] usb 5-1: Product: syz [ 308.979901][ T24] usb 5-1: Manufacturer: syz [ 308.986779][ T24] usb 5-1: SerialNumber: syz [ 309.094438][ T29] audit: type=1400 audit(1775376491.806:684): avc: denied { read write } for pid=9036 comm="syz.2.792" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 309.311278][ T29] audit: type=1400 audit(1775376491.836:685): avc: denied { open } for pid=9036 comm="syz.2.792" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 309.404590][ T9040] fuse: Unknown parameter 'fd00000000000000000005' [ 309.457931][ T9042] lo speed is unknown, defaulting to 1000 [ 309.956147][ T29] audit: type=1400 audit(1775376492.666:686): avc: denied { accept } for pid=9048 comm="syz.2.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 310.145238][ T29] audit: type=1400 audit(1775376492.856:687): avc: denied { map } for pid=9053 comm="syz.2.798" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 310.657354][ T29] audit: type=1400 audit(1775376493.366:688): avc: denied { listen } for pid=9053 comm="syz.2.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 311.723585][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.730031][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 312.085147][ T9071] xt_hashlimit: size too large, truncated to 1048576 [ 312.092886][ T24] usb 5-1: USB disconnect, device number 24 [ 312.135034][ T29] audit: type=1400 audit(1775376494.826:689): avc: denied { create } for pid=9068 comm="syz.3.801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 312.199349][ T29] audit: type=1400 audit(1775376494.836:690): avc: denied { sys_admin } for pid=9068 comm="syz.3.801" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 312.350623][ T9042] lo speed is unknown, defaulting to 1000 [ 312.370909][ T5851] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 313.436303][ T9090] fuse: Unknown parameter 'fd00000000000000000004' [ 313.639306][ T9092] netlink: 'syz.0.807': attribute type 13 has an invalid length. [ 313.669172][ T9092] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.685298][ T792] lo speed is unknown, defaulting to 1000 [ 313.692030][ T792] syz0: Port: 1 Link ACTIVE [ 314.019272][ T9099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.874409][ T9111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.812'. [ 317.271360][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 317.271720][ T29] audit: type=1400 audit(1775376499.546:691): avc: denied { write } for pid=9127 comm="syz.4.816" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 317.560550][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 317.567130][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 317.576219][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.594010][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 317.601187][ T10] pvrusb2: ********** [ 318.043708][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 318.070411][ T10] pvrusb2: Important functionality might not be entirely working. [ 318.078382][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 318.092132][ T10] pvrusb2: ********** [ 318.153094][ T9138] overlayfs: failed to clone upperpath [ 318.725041][ T2341] pvrusb2: Invalid write control endpoint [ 318.953453][ T2341] pvrusb2: Invalid write control endpoint [ 318.971559][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 318.989498][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 319.003382][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 319.151246][ T9148] /dev/nullb0: Can't lookup blockdev [ 319.162042][ T2341] pvrusb2: Device being rendered inoperable [ 319.171764][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 319.202531][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 319.284427][ T2341] pvrusb2: Attached sub-driver cx25840 [ 319.307524][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 319.326287][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 320.133673][ T5858] usb 3-1: USB disconnect, device number 26 [ 320.585107][ T9167] fuse: Unknown parameter 'fd00000000000000000005' [ 321.623020][ T29] audit: type=1400 audit(1775376504.336:692): avc: denied { write } for pid=9185 comm="syz.2.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 321.891769][ T5963] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 322.071662][ T5963] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 322.088140][ T5963] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.128594][ T5963] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 322.164816][ T5963] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 322.185247][ T5963] usb 3-1: Manufacturer: syz [ 322.202745][ T5963] usb 3-1: config 0 descriptor?? [ 322.510698][ T5963] rc_core: IR keymap rc-hauppauge not found [ 322.642315][ T5963] Registered IR keymap rc-empty [ 322.664104][ T5963] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 322.706282][ T5963] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input13 [ 323.082095][ T792] usb 3-1: USB disconnect, device number 27 [ 323.675851][ T9213] fuse: Unknown parameter 'fd00000000000000000004' [ 323.915601][ T9222] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 324.391579][ T5130] Bluetooth: hci2: command 0x0406 tx timeout [ 324.622610][ T29] audit: type=1400 audit(1775376507.336:693): avc: denied { ioctl } for pid=9236 comm="syz.2.847" path="/dev/sg0" dev="devtmpfs" ino=791 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 324.820058][ T29] audit: type=1400 audit(1775376507.526:694): avc: denied { create } for pid=9242 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 324.851019][ T9244] fuse: Unknown parameter 'fd00000000000000000005' [ 324.853630][ T29] audit: type=1400 audit(1775376507.526:695): avc: denied { connect } for pid=9242 comm="syz.2.850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 324.932381][ T9246] tmpfs: Unknown parameter 'grpq' [ 324.992767][ T9246] ISOFS: Unable to identify CD-ROM format. [ 325.164414][ T9250] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 325.236106][ T9252] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 326.164747][ T9256] netlink: 48 bytes leftover after parsing attributes in process `syz.0.853'. [ 326.436726][ T9260] bridge_slave_0: left allmulticast mode [ 326.451539][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 326.462248][ T9260] bridge_slave_0: left promiscuous mode [ 326.473907][ T9260] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.498282][ T9260] bridge_slave_1: left allmulticast mode [ 326.519384][ T9260] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.189343][ T9260] bond0: (slave bond_slave_0): Releasing backup interface [ 327.206468][ T9260] bond0: (slave bond_slave_1): Releasing backup interface [ 327.236947][ T9260] team0: Port device team_slave_0 removed [ 327.252553][ T9260] team0: Port device team_slave_1 removed [ 327.265281][ T9260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.282012][ T9260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.297821][ T9260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.315447][ T9260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.325731][ T9260] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 327.388224][ T792] syz1: Port: 1 Link DOWN [ 328.017046][ T9282] fuse: Unknown parameter 'fd00000000000000000005' [ 328.134771][ T9289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.863'. [ 328.311225][ T5963] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 328.502811][ T9296] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 328.577462][ T9298] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 328.783032][ T5963] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 329.281570][ T5963] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.295557][ T5963] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 329.296755][ T9300] fuse: Bad value for 'fd' [ 329.304587][ T5963] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.305875][ T5963] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 329.329066][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 329.338277][ T5963] usb 3-1: Product: syz [ 329.342705][ T5963] usb 3-1: Manufacturer: syz [ 329.352646][ T5963] cdc_wdm 3-1:1.0: skipping garbage [ 329.357851][ T5963] cdc_wdm 3-1:1.0: skipping garbage [ 329.364914][ T5963] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 329.370884][ T5963] cdc_wdm 3-1:1.0: Unknown control protocol [ 329.563229][ T29] audit: type=1400 audit(1775376512.276:696): avc: denied { read write } for pid=9284 comm="syz.2.862" name="cdc-wdm0" dev="devtmpfs" ino=3060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 329.567500][ T5851] usb 3-1: USB disconnect, device number 28 [ 329.635066][ T29] audit: type=1400 audit(1775376512.276:697): avc: denied { open } for pid=9284 comm="syz.2.862" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 329.664590][ T29] audit: type=1400 audit(1775376512.276:698): avc: denied { ioctl } for pid=9284 comm="syz.2.862" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3060 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 329.733759][ T9315] fuse: Unknown parameter 'fd00000000000000000004' [ 329.822589][ T29] audit: type=1400 audit(1775376512.516:699): avc: denied { mount } for pid=9312 comm="syz.1.871" name="/" dev="autofs" ino=25036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 329.845767][ T29] audit: type=1400 audit(1775376512.526:700): avc: denied { ioctl } for pid=9312 comm="syz.1.871" path="socket:[25029]" dev="sockfs" ino=25029 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 329.969367][ T9323] netlink: 'syz.0.875': attribute type 72 has an invalid length. [ 329.977792][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 331.364559][ T29] audit: type=1400 audit(1775376514.076:701): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 331.463972][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 331.546214][ T29] audit: type=1400 audit(1775376514.256:702): avc: denied { bind } for pid=9324 comm="syz.0.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 331.730506][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 331.738772][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.755902][ T24] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 331.766290][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.778818][ T24] usb 3-1: Product: syz [ 331.783249][ T24] usb 3-1: Manufacturer: syz [ 331.788667][ T24] usb 3-1: SerialNumber: syz [ 331.797146][ T24] usb 3-1: config 0 descriptor?? [ 331.806796][ T24] kobil_sct 3-1:0.0: required endpoints missing [ 332.011017][ T24] usb 3-1: USB disconnect, device number 29 [ 332.313966][ T9364] ip6t_srh: unknown srh match flags 4000 [ 332.488268][ T5130] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 332.488294][ T5807] Bluetooth: hci0: command 0x0406 tx timeout [ 332.652722][ T9368] syz.1.890 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 332.797541][ T29] audit: type=1400 audit(1775376515.506:703): avc: denied { read write } for pid=9371 comm="syz.4.892" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 332.803082][ T5851] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 332.858338][ T29] audit: type=1400 audit(1775376515.506:704): avc: denied { open } for pid=9371 comm="syz.4.892" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 332.922375][ T5851] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.129118][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 333.561303][ T24] usb 5-1: config 0 has no interfaces? [ 333.634032][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.647818][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 333.666107][ T24] usb 5-1: SerialNumber: syz [ 333.684628][ T24] usb 5-1: config 0 descriptor?? [ 333.937065][ T9387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=9387 comm=syz.3.896 [ 333.954200][ T5963] usb 5-1: USB disconnect, device number 25 [ 334.943699][ T9406] trusted_key: encrypted_key: master key parameter 'usQr:syzÉR000¬ì004093' is invalid [ 335.882456][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'. [ 336.423848][ T29] audit: type=1400 audit(1775376519.126:705): avc: denied { name_bind } for pid=9403 comm="syz.3.899" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 336.453468][ T9404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.899'. [ 336.772102][ T5130] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 336.780639][ T5130] Bluetooth: hci0: Injecting HCI hardware error event [ 336.788485][ T5130] Bluetooth: hci0: hardware error 0x00 [ 336.801309][ T9420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.090599][ T5130] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 340.412447][ T9446] geneve2: entered allmulticast mode [ 340.462540][ T9448] netlink: 'syz.4.913': attribute type 5 has an invalid length. [ 340.553380][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.913'. [ 340.890291][ T29] audit: type=1400 audit(1775376523.596:706): avc: denied { create } for pid=9449 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 341.429664][ T9468] Mount JFS Failure: -22 [ 341.433977][ T9468] jfs_mount failed w/return code = -22 [ 341.710429][ T792] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 341.726427][ T9466] gre1: entered promiscuous mode [ 341.839748][ T9473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.881579][ T792] usb 2-1: device descriptor read/64, error -71 [ 341.956667][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 342.208648][ T792] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 342.973187][ T792] usb 2-1: device descriptor read/64, error -71 [ 343.082595][ T792] usb usb2-port1: attempt power cycle [ 343.430513][ T792] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 343.450960][ T792] usb 2-1: device descriptor read/8, error -71 [ 343.691426][ T792] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 343.764278][ T792] usb 2-1: device descriptor read/8, error -71 [ 343.943214][ T792] usb usb2-port1: unable to enumerate USB device [ 343.973308][ T9516] Cannot find del_set index 2 as target [ 344.915890][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.932'. [ 344.927391][ T9531] capability: warning: `syz.3.931' uses deprecated v2 capabilities in a way that may be insecure [ 346.269085][ T792] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 346.300149][ T29] audit: type=1400 audit(1775376529.006:707): avc: denied { map } for pid=9548 comm="syz.3.937" path="socket:[24518]" dev="sockfs" ino=24518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 346.384585][ T9551] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 346.442479][ T792] usb 5-1: Using ep0 maxpacket: 16 [ 346.456592][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 138, changing to 11 [ 346.494826][ T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 41510, setting to 1024 [ 346.526930][ T792] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 346.565802][ T792] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 346.575266][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 346.594940][ T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.622401][ T792] usb 5-1: config 0 descriptor?? [ 346.632072][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 346.740876][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 346.916481][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 346.941365][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.982628][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 346.991142][ T10] pvrusb2: ********** [ 347.088138][ T792] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 347.097001][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 347.112451][ T792] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 347.119945][ T10] pvrusb2: Important functionality might not be entirely working. [ 347.141729][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 347.885211][ T10] pvrusb2: ********** [ 347.904305][ T2341] pvrusb2: Invalid write control endpoint [ 347.975500][ T9582] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 348.003179][ T792] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 348.162058][ T792] microsoft 0003:045E:07DA.0008: no inputs found [ 348.266099][ T792] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 348.625547][ T2341] pvrusb2: Invalid write control endpoint [ 348.639038][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 348.657150][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 348.671282][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 348.682561][ T2341] pvrusb2: Device being rendered inoperable [ 348.689237][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 348.699640][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 348.711240][ T2341] pvrusb2: Attached sub-driver cx25840 [ 348.718435][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 348.733474][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 348.758349][ T9591] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 348.787117][ T29] audit: type=1400 audit(1775376531.496:708): avc: denied { watch } for pid=9590 comm="syz.2.951" path="/159/file0" dev="tmpfs" ino=856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 348.815206][ T29] audit: type=1326 audit(1775376531.526:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9590 comm="syz.2.951" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efcc159c819 code=0x0 [ 348.920316][ T5858] usb 5-1: USB disconnect, device number 26 [ 349.079272][ T29] audit: type=1400 audit(1775376531.786:710): avc: denied { read } for pid=9594 comm="syz.4.952" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 349.158669][ T24] usb 2-1: USB disconnect, device number 40 [ 349.194517][ T29] audit: type=1400 audit(1775376531.786:711): avc: denied { open } for pid=9594 comm="syz.4.952" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 349.243175][ T29] audit: type=1400 audit(1775376531.786:712): avc: denied { ioctl } for pid=9594 comm="syz.4.952" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 349.444171][ T9605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.455880][ T9605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.954'. [ 349.824245][ T29] audit: type=1326 audit(1775376532.526:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e82b9c819 code=0x7ffc0000 [ 349.889920][ T29] audit: type=1326 audit(1775376532.526:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e82b9c819 code=0x7ffc0000 [ 349.922935][ T5130] Bluetooth: hci1: command 0x0406 tx timeout [ 349.942233][ T29] audit: type=1326 audit(1775376532.526:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8e82b9c819 code=0x7ffc0000 [ 350.013799][ T29] audit: type=1326 audit(1775376532.526:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9606 comm="syz.0.956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e82b9c819 code=0x7ffc0000 [ 350.720723][ T9637] IPv6: NLM_F_CREATE should be specified when creating new route [ 350.764696][ T9637] netlink: 'syz.3.964': attribute type 1 has an invalid length. [ 350.781826][ T9637] 9pnet_fd: Insufficient options for proto=fd [ 352.346429][ T9652] ip6t_srh: unknown srh match flags 4000 [ 353.211228][ T9667] syzkaller0: entered promiscuous mode [ 353.216707][ T9667] syzkaller0: entered allmulticast mode [ 353.530924][ T9672] ubi31: attaching mtd0 [ 353.545326][ T9672] ubi31: scanning is finished [ 353.550038][ T9672] ubi31: empty MTD device detected [ 353.927756][ T9672] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 353.935614][ T9672] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 353.942900][ T9672] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 353.949892][ T9672] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 353.957651][ T9672] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 353.964497][ T9672] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 353.972562][ T9672] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 929209759 [ 353.982537][ T9672] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 353.997868][ T9676] ubi31: background thread "ubi_bgt31d" started, PID 9676 [ 355.919992][ T9688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.751223][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 357.751235][ T29] audit: type=1400 audit(1775376540.366:754): avc: denied { name_bind } for pid=9697 comm="syz.1.978" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 358.568922][ T29] audit: type=1400 audit(1775376541.276:755): avc: denied { write } for pid=9708 comm="syz.4.983" name="file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 358.765807][ T29] audit: type=1400 audit(1775376541.306:756): avc: denied { open } for pid=9708 comm="syz.4.983" path="/71/file0" dev="tmpfs" ino=400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 358.839360][ T29] audit: type=1400 audit(1775376541.316:757): avc: denied { ioctl } for pid=9708 comm="syz.4.983" path="/71/file0" dev="tmpfs" ino=400 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 358.882139][ T5851] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 359.007863][ T9727] tipc: Started in network mode [ 359.012910][ T9727] tipc: Node identity c273cadaf49b, cluster identity 4711 [ 359.020162][ T9727] tipc: Enabled bearer , priority 0 [ 359.032593][ T9727] syzkaller0: entered promiscuous mode [ 359.038157][ T9727] syzkaller0: entered allmulticast mode [ 359.050407][ T9727] tipc: Resetting bearer [ 359.060537][ T9727] tipc: Resetting bearer [ 359.073087][ T5851] usb 5-1: Using ep0 maxpacket: 16 [ 359.080763][ T9727] tipc: Disabling bearer [ 359.082865][ T5851] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.110437][ T5851] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.111874][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 359.129890][ T5851] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 359.141990][ T29] audit: type=1400 audit(1775376541.846:758): avc: denied { bind } for pid=9724 comm="syz.0.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 359.162091][ T9729] netlink: 124 bytes leftover after parsing attributes in process `syz.1.985'. [ 359.162510][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.199802][ T5851] usb 5-1: Product: syz [ 359.204113][ T5851] usb 5-1: Manufacturer: syz [ 359.208766][ T5851] usb 5-1: SerialNumber: syz [ 359.214846][ T5851] usb 5-1: config 0 descriptor?? [ 359.449113][ T792] usb 5-1: USB disconnect, device number 27 [ 360.465006][ T9763] overlayfs: failed to clone upperpath [ 361.553075][ T9780] lo speed is unknown, defaulting to 1000 [ 361.559232][ T9780] lo speed is unknown, defaulting to 1000 [ 361.567769][ T9780] lo speed is unknown, defaulting to 1000 [ 361.616104][ T9780] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 361.704422][ T9781] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 361.756831][ T9779] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 361.766343][ T9779] block device autoloading is deprecated and will be removed. [ 361.914842][ T9780] lo speed is unknown, defaulting to 1000 [ 361.927696][ T9780] lo speed is unknown, defaulting to 1000 [ 361.939827][ T9780] lo speed is unknown, defaulting to 1000 [ 361.947761][ T9780] lo speed is unknown, defaulting to 1000 [ 361.954304][ T9780] lo speed is unknown, defaulting to 1000 [ 362.778391][ T9799] kvm: kvm [9798]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 362.793176][ T9799] kvm: kvm [9798]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 362.928665][ T9808] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 363.201711][ T29] audit: type=1400 audit(1775376545.916:759): avc: denied { read } for pid=9814 comm="syz.2.1008" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 363.370767][ T29] audit: type=1400 audit(1775376545.916:760): avc: denied { open } for pid=9814 comm="syz.2.1008" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 363.854203][ T29] audit: type=1400 audit(1775376546.556:761): avc: denied { connect } for pid=9835 comm="syz.3.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.883715][ T9838] fuse: Unknown parameter '00000000000000000005' [ 363.912474][ T29] audit: type=1400 audit(1775376546.586:762): avc: denied { shutdown } for pid=9835 comm="syz.3.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 364.610422][ T24] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 364.780464][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 364.787297][ T24] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 364.796590][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.811639][ T24] usb 5-1: config 0 has no interface number 0 [ 364.818022][ T24] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.833576][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 364.842950][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.852770][ T24] usb 5-1: Product: syz [ 364.863463][ T24] usb 5-1: Manufacturer: syz [ 364.871060][ T24] usb 5-1: SerialNumber: syz [ 364.881247][ T24] usb 5-1: config 0 descriptor?? [ 364.895166][ T24] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 364.909105][ T24] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5 [ 364.927287][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'. [ 365.091390][ T5807] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 365.178984][ T24] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 365.194228][ T24] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 365.850544][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 366.181670][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.191951][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df [ 366.201443][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.212385][ T24] usb 2-1: config 0 descriptor?? [ 366.221436][ T24] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 366.364854][ T9874] overlayfs: failed to clone upperpath [ 366.547604][ T29] audit: type=1400 audit(1775376549.256:763): avc: denied { create } for pid=9879 comm="syz.0.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.568458][ T29] audit: type=1400 audit(1775376549.276:764): avc: denied { bind } for pid=9879 comm="syz.0.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.588116][ T29] audit: type=1400 audit(1775376549.276:765): avc: denied { setopt } for pid=9879 comm="syz.0.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.608603][ T29] audit: type=1400 audit(1775376549.316:766): avc: denied { write } for pid=9879 comm="syz.0.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 366.812679][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 366.823053][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1032'. [ 366.943152][ T24] pwc: send_video_command error -71 [ 366.950802][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 366.958452][ T24] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 366.973406][ T24] usb 2-1: USB disconnect, device number 41 [ 367.291603][ T5858] usb 5-1: USB disconnect, device number 28 [ 367.585951][ T9900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 367.971612][ T9909] Mount JFS Failure: -22 [ 367.975929][ T9909] jfs_mount failed w/return code = -22 [ 369.220465][ T24] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 369.462320][ T24] usb 3-1: device descriptor read/64, error -71 [ 369.700557][ T24] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 369.841281][ T24] usb 3-1: device descriptor read/64, error -71 [ 369.950584][ T24] usb usb3-port1: attempt power cycle [ 370.310566][ T24] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 370.372310][ T24] usb 3-1: device descriptor read/8, error -71 [ 370.520429][ T5851] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 370.688360][ T24] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 370.718254][ T24] usb 3-1: device descriptor read/8, error -71 [ 370.724855][ T5851] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 370.733365][ T5851] usb 5-1: config 0 has no interfaces? [ 370.739971][ T5851] usb 5-1: config 0 has no interfaces? [ 371.226631][ T24] usb usb3-port1: unable to enumerate USB device [ 371.417230][ T5851] usb 5-1: config 0 has no interfaces? [ 371.425853][ T5851] usb 5-1: config 0 has no interfaces? [ 371.432271][ T5851] usb 5-1: config 0 has no interfaces? [ 371.439484][ T5851] usb 5-1: config 0 has no interfaces? [ 371.469053][ T5851] usb 5-1: config 0 has no interfaces? [ 371.921343][ T5851] usb 5-1: config 0 has no interfaces? [ 371.990451][ T792] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 372.001722][ T5851] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 372.011156][ T5851] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 372.019586][ T5851] usb 5-1: Product: syz [ 372.026249][ T5851] usb 5-1: Manufacturer: syz [ 372.030928][ T5851] usb 5-1: SerialNumber: syz [ 372.038471][ T5851] usb 5-1: config 0 descriptor?? [ 372.084477][ T9958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.134666][ T9958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.201823][ T792] usb 3-1: Using ep0 maxpacket: 8 [ 372.215356][ T792] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 372.230238][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.263589][ T24] usb 5-1: USB disconnect, device number 29 [ 372.276581][ T792] pvrusb2: Hardware description: Terratec Grabster AV400 [ 372.298255][ T792] pvrusb2: ********** [ 372.303716][ T792] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 372.318584][ T792] pvrusb2: Important functionality might not be entirely working. [ 372.326631][ T792] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 372.331304][ T5851] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 372.339083][ T792] pvrusb2: ********** [ 372.490615][ T5851] usb 2-1: device descriptor read/64, error -71 [ 372.933778][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 373.031071][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.080468][ T5851] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 373.220550][ T5851] usb 2-1: device descriptor read/64, error -71 [ 373.359697][ T5851] usb usb2-port1: attempt power cycle [ 373.437399][ T9980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1808 sclass=netlink_route_socket pid=9980 comm=syz.3.1060 [ 373.840443][ T5851] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 373.870811][ T5851] usb 2-1: device descriptor read/8, error -71 [ 374.130483][ T5851] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 374.150824][ T5851] usb 2-1: device descriptor read/8, error -71 [ 374.261197][ T5851] usb usb2-port1: unable to enumerate USB device [ 374.328145][ T2341] pvrusb2: Invalid write control endpoint [ 374.358117][ T792] usb 3-1: USB disconnect, device number 34 [ 374.954587][ T9990] input: syz1 as /devices/virtual/input/input14 [ 375.012727][ T2341] pvrusb2: Invalid write control endpoint [ 375.028634][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 375.040751][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 375.048279][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 375.063350][ T2341] pvrusb2: Device being rendered inoperable [ 375.069820][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 375.171228][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 375.181842][ T2341] pvrusb2: Attached sub-driver cx25840 [ 375.187373][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 375.205213][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 375.317444][ T9995] fuse: Unknown parameter '00000000000000000004' [ 376.161854][T10011] sch_fq: defrate 1915 ignored. [ 377.390462][ T5963] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 377.956619][ T29] audit: type=1400 audit(1775376560.666:767): avc: denied { sys_module } for pid=10026 comm="syz.2.1075" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 377.983197][ T5963] usb 2-1: unable to get BOS descriptor or descriptor too short [ 377.995337][ T5963] usb 2-1: New USB device found, idVendor=0582, idProduct=004d, bcdDevice= 0.40 [ 378.013329][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.024673][ T5963] usb 2-1: Product: syz [ 378.028973][ T5963] usb 2-1: Manufacturer: syz [ 378.033973][ T5963] usb 2-1: SerialNumber: syz [ 378.270507][T10011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.306771][T10011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.354494][T10038] SELinux: failed to load policy [ 378.392910][ T5963] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.446769][ T5963] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 378.581852][T10011] @0Ù: renamed from virt_wifi0 [ 378.746229][T10043] syzkaller0: entered promiscuous mode [ 378.771002][T10043] syzkaller0: entered allmulticast mode [ 379.634545][T10063] fuse: Unknown parameter 'f00000000000000000004' [ 379.973649][T10070] overlayfs: failed to clone upperpath [ 383.051343][ T5851] usb 2-1: USB disconnect, device number 46 [ 383.540483][ T5851] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 383.696522][ T5851] usb 2-1: string descriptor 0 read error: -22 [ 383.703331][ T5851] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 383.713875][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.734777][ T5851] usb 2-1: config 0 descriptor?? [ 383.748543][ T5851] usbtest 2-1:0.0: FX2 device [ 383.761774][ T5851] usbtest 2-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 383.880428][ T24] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 384.042254][ T5923] usb 2-1: USB disconnect, device number 47 [ 384.080092][ T24] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 384.093644][ T24] usb 5-1: config 0 has no interface number 0 [ 384.099825][ T24] usb 5-1: config 0 interface 41 has no altsetting 0 [ 384.108910][ T24] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 384.130361][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.173222][ T24] usb 5-1: Product: syz [ 384.183319][ T24] usb 5-1: Manufacturer: syz [ 384.204749][ T24] usb 5-1: SerialNumber: syz [ 384.215081][ T24] usb 5-1: config 0 descriptor?? [ 385.905382][ T24] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 386.185018][ T24] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 386.215936][ T24] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 386.228519][ T24] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 386.245946][ T24] usb 5-1: USB disconnect, device number 30 [ 386.474908][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 386.523784][T10146] fuse: Unknown parameter 'f00000000000000000005' [ 387.733763][T10160] x_tables: duplicate underflow at hook 4 [ 387.742308][T10160] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 389.438477][T10179] Cannot find add_set index 65532 as target [ 390.140448][ T5924] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 391.904378][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 391.915300][ T29] audit: type=1400 audit(1775376574.126:768): avc: denied { connect } for pid=10195 comm="syz.3.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 391.935447][T10200] vcan0: tx address claim with dlc 0 [ 392.933385][ T5924] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 393.918184][ T5924] usb 5-1: can't read configurations, error -71 [ 394.000076][T10205] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 395.094386][T10214] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 396.941590][T10233] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 397.568830][T10251] binder: 10250:10251 ioctl 4018620d 0 returned -22 [ 398.916275][T10261] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.955550][T10261] 9p: Bad value for 'rfdno' [ 398.967789][ T29] audit: type=1400 audit(1775376581.646:769): avc: denied { read append } for pid=10259 comm="syz.2.1132" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 399.114158][ T29] audit: type=1400 audit(1775376581.646:770): avc: denied { open } for pid=10259 comm="syz.2.1132" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 399.360757][T10269] overlayfs: failed to clone upperpath [ 401.238546][T10303] binder: 10302:10303 ioctl 4018620d 0 returned -22 [ 405.341366][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 405.357998][T10362] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1160'. [ 405.368603][T10362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65280 sclass=netlink_route_socket pid=10362 comm=syz.3.1160 [ 405.450587][T10367] binder: 10366:10367 ioctl 4018620d 0 returned -22 [ 405.459438][T10360] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1158'. [ 406.476821][ T29] audit: type=1326 audit(1775376589.176:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10361 comm="syz.3.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f017059c819 code=0x7fc00000 [ 407.152739][T10383] overlayfs: failed to resolve './file0': -2 [ 407.190209][T10383] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=84 sclass=netlink_tcpdiag_socket pid=10383 comm=syz.1.1167 [ 408.495562][ T29] audit: type=1400 audit(1775376591.186:772): avc: denied { watch_sb } for pid=10397 comm="syz.4.1170" path="/98/file0" dev="tmpfs" ino=545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 408.796453][ T29] audit: type=1400 audit(1775376591.206:773): avc: denied { ioctl } for pid=10397 comm="syz.4.1170" path="socket:[28093]" dev="sockfs" ino=28093 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 408.939211][T10406] syzkaller0: entered promiscuous mode [ 408.945561][T10406] syzkaller0: entered allmulticast mode [ 409.275070][T10411] binder: BINDER_SET_CONTEXT_MGR already set [ 409.296981][T10411] binder: 10410:10411 ioctl 4018620d 200000004a80 returned -16 [ 409.330457][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1174'. [ 409.513263][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059503000: rx timeout, send abort [ 409.521708][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888059503000: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 409.608189][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'. [ 410.062002][T10421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.759831][T10429] input: syz1 as /devices/virtual/input/input15 [ 411.126746][T10421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.230418][ T5858] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 411.534460][T10440] Cannot find add_set index 65532 as target [ 411.845255][ T5858] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 411.872697][ T5858] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 411.902777][ T5858] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 411.924867][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.943509][ T5858] usb 5-1: Product: syz [ 411.950288][T10442] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 411.978585][ T5858] usb 5-1: Manufacturer: syz [ 411.988593][ T5858] usb 5-1: SerialNumber: syz [ 412.010926][ T5858] usb 5-1: config 0 descriptor?? [ 412.019420][T10433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 412.033478][T10433] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 412.295699][ T5858] dm9601 5-1:0.0: probe with driver dm9601 failed with error -71 [ 412.325368][ T5858] usb 5-1: USB disconnect, device number 33 [ 412.444898][ T5963] kernel write not supported for file /comedi4 (pid: 5963 comm: kworker/0:6) [ 413.440590][ T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 413.556770][T10475] overlayfs: failed to clone upperpath [ 413.681329][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 413.702212][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 413.711400][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.737604][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 413.752552][ T24] pvrusb2: ********** [ 413.766471][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 413.791813][ T24] pvrusb2: Important functionality might not be entirely working. [ 413.808022][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 414.304819][ T24] pvrusb2: ********** [ 414.359789][T10483] input: syz1 as /devices/virtual/input/input16 [ 415.083072][ T5851] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 415.480861][T10491] binder: BINDER_SET_CONTEXT_MGR already set [ 415.490522][T10491] binder: 10490:10491 ioctl 4018620d 200000004a80 returned -16 [ 416.594642][ T24] usb 2-1: USB disconnect, device number 48 [ 416.633092][ T2341] pvrusb2: Invalid write control endpoint [ 416.648357][ T5851] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 416.698943][ T5851] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 416.725616][ T2341] pvrusb2: Invalid write control endpoint [ 416.739117][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 416.859713][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 416.872376][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 416.892138][ T5851] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 416.919943][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.927960][ T2341] pvrusb2: Device being rendered inoperable [ 416.927994][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 416.928050][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 416.928616][ T2341] pvrusb2: Attached sub-driver cx25840 [ 417.004825][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 417.010992][ T5851] usb 3-1: config 0 descriptor?? [ 417.020129][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 417.082770][ T5851] usb 3-1: can't set config #0, error -71 [ 417.218672][ T5851] usb 3-1: USB disconnect, device number 35 [ 419.382306][T10522] /dev/nullb0: Can't lookup blockdev [ 419.754838][T10532] Cannot find add_set index 65532 as target [ 420.508797][T10537] overlayfs: conflicting lowerdir path [ 420.542537][T10538] can0: slcan on ptm0. [ 420.548885][T10538] netlink: 'syz.2.1205': attribute type 7 has an invalid length. [ 420.556730][T10538] netlink: 'syz.2.1205': attribute type 8 has an invalid length. [ 420.580943][T10536] delete_channel: no stack [ 420.671213][T10541] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 420.700427][ T5858] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 420.820619][ T24] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 420.880401][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 420.886933][ T5858] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 420.897473][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.967825][ T5858] pvrusb2: Hardware description: Terratec Grabster AV400 [ 420.994381][ T5858] pvrusb2: ********** [ 421.014898][ T5858] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 421.032939][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 421.041252][ T24] usb 3-1: config 0 has no interface number 0 [ 421.051592][ T24] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 421.082131][ T5858] pvrusb2: Important functionality might not be entirely working. [ 421.096574][ T24] usb 3-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 421.123202][ T5858] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 421.144191][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 421.180129][ T5858] pvrusb2: ********** [ 421.186225][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 421.218006][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.233635][ T29] audit: type=1400 audit(1775376603.946:774): avc: denied { ioctl } for pid=10540 comm="syz.4.1207" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 421.259413][ T24] usb 3-1: Product: syz [ 421.265197][ T24] usb 3-1: Manufacturer: syz [ 421.286075][ T24] usb 3-1: SerialNumber: syz [ 421.311332][ T24] usb 3-1: config 0 descriptor?? [ 421.321959][T10538] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 421.341409][T10538] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 421.352386][ T24] f81534 3-1:0.12: unsupported endpoint max packet size [ 421.850544][ T5963] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 422.000395][ T5963] usb 5-1: Using ep0 maxpacket: 16 [ 422.054503][ T5963] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 422.063760][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.097702][ T5963] usb 5-1: config 0 descriptor?? [ 422.108965][ T5963] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 422.851195][ T5858] usb 2-1: USB disconnect, device number 49 [ 422.884011][ T5963] gspca_sonixj: reg_r err -110 [ 422.884275][ T2341] pvrusb2: Invalid write control endpoint [ 422.888824][ T5963] sonixj 5-1:0.0: probe with driver sonixj failed with error -110 [ 422.982349][ T24] usb 3-1: USB disconnect, device number 36 [ 423.146394][ T2341] pvrusb2: Invalid write control endpoint [ 423.164726][ T2341] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 423.180265][ T2341] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 423.188891][ T2341] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 423.200735][ T2341] pvrusb2: Device being rendered inoperable [ 423.207180][ T2341] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 423.214708][ T2341] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 423.228490][ T2341] pvrusb2: Attached sub-driver cx25840 [ 423.589258][ T2341] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 423.601020][ T2341] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 423.750670][T10538] can0 (unregistered): slcan off ptm0. [ 424.120831][T10599] Mount JFS Failure: -22 [ 424.125077][T10599] jfs_mount failed w/return code = -22 [ 424.140633][ C1] ------------[ cut here ]------------ [ 424.146454][ C1] ODEBUG: free active (active state 0) object: ffff888059bfb490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 424.159362][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.2.1215/10590 [ 424.169535][ C1] Modules linked in: [ 424.173583][ C1] CPU: 1 UID: 0 PID: 10590 Comm: syz.2.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.184531][ C1] Tainted: [L]=SOFTLOCKUP [ 424.188845][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 424.198920][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 424.204741][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 05 e5 0b 41 56 48 8b 14 dd e0 2f 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c c2 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 424.224390][ C1] RSP: 0000:ffffc90003327968 EFLAGS: 00010246 [ 424.230457][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 424.238452][ C1] RDX: ffffffff8c1b2f20 RSI: ffffffff8c1b2b40 RDI: ffffffff90e44950 [ 424.246440][ C1] RBP: 0000000000000001 R08: ffff888059bfb490 R09: ffffffff8bb2bba0 [ 424.254471][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2b40 [ 424.262476][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7ce7b0 R15: ffffc90003327a68 [ 424.270458][ C1] FS: 00005555830e6500(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 424.279415][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.286005][ C1] CR2: 0000001b2fa0aff8 CR3: 000000005abf7000 CR4: 00000000003526f0 [ 424.293997][ C1] Call Trace: [ 424.297269][ C1] [ 424.300191][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 424.305835][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 424.311656][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 424.317216][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 424.323299][ C1] ? mark_held_locks+0x40/0x70 [ 424.328057][ C1] ? kasan_quarantine_put+0x104/0x240 [ 424.333443][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 424.338655][ C1] ? rose_timer_expiry+0x53f/0x630 [ 424.343771][ C1] kfree+0x38f/0x6b0 [ 424.347676][ C1] rose_timer_expiry+0x53f/0x630 [ 424.352624][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 424.358082][ C1] call_timer_fn+0x19a/0x670 [ 424.362679][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 424.367794][ C1] ? debug_object_activate+0x331/0x490 [ 424.373265][ C1] ? debug_object_activate+0x331/0x490 [ 424.378725][ C1] ? __run_timers+0x747/0xb30 [ 424.383414][ C1] ? rcu_is_watching+0x12/0xc0 [ 424.388178][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 424.393660][ C1] __run_timers+0x757/0xb30 [ 424.398174][ C1] ? __pfx___run_timers+0x10/0x10 [ 424.403211][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 424.408249][ C1] run_timer_base+0x114/0x190 [ 424.412941][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 424.418144][ C1] run_timer_softirq+0x1a/0x50 [ 424.422923][ C1] handle_softirqs+0x1eb/0x9e0 [ 424.427689][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 424.432977][ C1] __irq_exit_rcu+0xef/0x150 [ 424.437576][ C1] irq_exit_rcu+0x9/0x30 [ 424.441820][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 424.447461][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.453445][ C1] RIP: 0033:0x7efcc146ccda [ 424.457855][ C1] Code: 65 66 0f c6 c0 01 0f 11 45 00 4c 89 e6 eb 09 90 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 39 f2 73 13 <66> 0f 1f 44 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 [ 424.477507][ C1] RSP: 002b:00007ffdd1bf80e0 EFLAGS: 00000293 [ 424.483578][ C1] RAX: 00007efcc0834860 RBX: 00007efcc0834858 RCX: ffffffff81b9e81a [ 424.491558][ C1] RDX: ffffffff81b9e771 RSI: ffffffff81b9e83a RDI: 00007efcc08349d8 [ 424.499533][ C1] RBP: 00007efcc08343a0 R08: 00007efcc1800000 R09: 00007efcc1816218 [ 424.507514][ C1] R10: 0000000000000003 R11: 000000000000000d R12: 00007efcc0835010 [ 424.515497][ C1] R13: 0000000000000019 R14: 000000000000018e R15: 0000000000000003 [ 424.523483][ C1] ? __virt_addr_valid+0x1a/0x620 [ 424.528511][ C1] ? __phys_addr+0x101/0x180 [ 424.533107][ C1] ? __virt_addr_valid+0x3a/0x620 [ 424.538134][ C1] [ 424.541151][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 424.548409][ C1] CPU: 1 UID: 0 PID: 10590 Comm: syz.2.1215 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.559312][ C1] Tainted: [L]=SOFTLOCKUP [ 424.564215][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 424.574241][ C1] Call Trace: [ 424.577495][ C1] [ 424.580399][ C1] dump_stack_lvl+0x100/0x190 [ 424.585057][ C1] vpanic+0x552/0x970 [ 424.589016][ C1] ? __pfx_vpanic+0x10/0x10 [ 424.593493][ C1] panic+0xd1/0xe0 [ 424.597196][ C1] ? __pfx_panic+0x10/0x10 [ 424.601586][ C1] ? check_panic_on_warn+0x1f/0x90 [ 424.606674][ C1] check_panic_on_warn.cold+0x19/0x34 [ 424.612018][ C1] ? debug_print_object+0x18e/0x2a0 [ 424.617196][ C1] __warn.cold+0x191/0x348 [ 424.621586][ C1] __report_bug+0x296/0x3d0 [ 424.626070][ C1] ? debug_print_object+0x18e/0x2a0 [ 424.631247][ C1] ? __pfx___report_bug+0x10/0x10 [ 424.636251][ C1] ? mark_held_locks+0x40/0x70 [ 424.640986][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 424.646772][ C1] report_bug_entry+0xe1/0x290 [ 424.651520][ C1] ? debug_print_object+0x19b/0x2a0 [ 424.656706][ C1] handle_bug+0x1cd/0x2a0 [ 424.661020][ C1] exc_invalid_op+0x17/0x50 [ 424.666114][ C1] asm_exc_invalid_op+0x1a/0x20 [ 424.670947][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 424.676730][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 05 e5 0b 41 56 48 8b 14 dd e0 2f 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 2c c2 da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 424.696310][ C1] RSP: 0000:ffffc90003327968 EFLAGS: 00010246 [ 424.702349][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 424.710290][ C1] RDX: ffffffff8c1b2f20 RSI: ffffffff8c1b2b40 RDI: ffffffff90e44950 [ 424.718242][ C1] RBP: 0000000000000001 R08: ffff888059bfb490 R09: ffffffff8bb2bba0 [ 424.726185][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2b40 [ 424.734128][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7ce7b0 R15: ffffc90003327a68 [ 424.742075][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 424.747689][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 424.753291][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 424.759078][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 424.764953][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 424.771010][ C1] ? mark_held_locks+0x40/0x70 [ 424.775761][ C1] ? kasan_quarantine_put+0x104/0x240 [ 424.781111][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 424.786295][ C1] ? rose_timer_expiry+0x53f/0x630 [ 424.791382][ C1] kfree+0x38f/0x6b0 [ 424.795256][ C1] rose_timer_expiry+0x53f/0x630 [ 424.800168][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 424.805601][ C1] call_timer_fn+0x19a/0x670 [ 424.810169][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 424.815255][ C1] ? debug_object_activate+0x331/0x490 [ 424.820694][ C1] ? debug_object_activate+0x331/0x490 [ 424.826135][ C1] ? __run_timers+0x747/0xb30 [ 424.830790][ C1] ? rcu_is_watching+0x12/0xc0 [ 424.835531][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 424.840973][ C1] __run_timers+0x757/0xb30 [ 424.845458][ C1] ? __pfx___run_timers+0x10/0x10 [ 424.850468][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 424.855483][ C1] run_timer_base+0x114/0x190 [ 424.860136][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 424.865312][ C1] run_timer_softirq+0x1a/0x50 [ 424.870066][ C1] handle_softirqs+0x1eb/0x9e0 [ 424.874807][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 424.880073][ C1] __irq_exit_rcu+0xef/0x150 [ 424.884638][ C1] irq_exit_rcu+0x9/0x30 [ 424.888856][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 424.894466][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 424.900423][ C1] RIP: 0033:0x7efcc146ccda [ 424.904812][ C1] Code: 65 66 0f c6 c0 01 0f 11 45 00 4c 89 e6 eb 09 90 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 39 f2 73 13 <66> 0f 1f 44 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 [ 424.924389][ C1] RSP: 002b:00007ffdd1bf80e0 EFLAGS: 00000293 [ 424.930431][ C1] RAX: 00007efcc0834860 RBX: 00007efcc0834858 RCX: ffffffff81b9e81a [ 424.938390][ C1] RDX: ffffffff81b9e771 RSI: ffffffff81b9e83a RDI: 00007efcc08349d8 [ 424.946332][ C1] RBP: 00007efcc08343a0 R08: 00007efcc1800000 R09: 00007efcc1816218 [ 424.954276][ C1] R10: 0000000000000003 R11: 000000000000000d R12: 00007efcc0835010 [ 424.962738][ C1] R13: 0000000000000019 R14: 000000000000018e R15: 0000000000000003 [ 424.970683][ C1] ? __virt_addr_valid+0x1a/0x620 [ 424.975685][ C1] ? __phys_addr+0x101/0x180 [ 424.980249][ C1] ? __virt_addr_valid+0x3a/0x620 [ 424.985253][ C1] [ 424.988510][ C1] Kernel Offset: disabled [ 424.992807][ C1] Rebooting in 86400 seconds..