last executing test programs: 4m33.986958522s ago: executing program 4 (id=659): mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000009000/0x4000)=nil) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x100000, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x2000f5000000, 0x0, 0x0, 0xfffffffc}) 4m33.858561001s ago: executing program 4 (id=660): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x40800) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0xe5c1, 0x3) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) fcntl$setstatus(r1, 0x4, 0x40800) (async) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0xe5c1, 0x3) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) (async) 4m33.668347811s ago: executing program 4 (id=661): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) syz_usb_connect$lan78xx(0x5, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000140)) r2 = dup2(r0, r0) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) 4m30.149240186s ago: executing program 4 (id=675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x60004040) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$XFS_IOC_READLINK_BY_HANDLE(r1, 0xc038586c, &(0x7f0000000740)={r1, &(0x7f00000003c0)='GPL\x00', 0x80, &(0x7f0000000400)={@align=0xe, {0xfffd, 0x9, 0x9, 0xd}}, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYBLOB="00000000000000000000000000000000000063cb7976daedb30000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000080"], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="329dc454428809b629e045f21921bc6253dead6c2aa8a69eceb75dbce5c9b5e1bd42e00f3dc1389a9428b056338855bbcc9512db0eb05f59a1d656a78c51d1e0f5e6e1f1c3ab8972603d1b075c97e50ceb27e40c28aa", 0x56}, {&(0x7f0000000580)}], 0x2}}], 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket(0x40000000015, 0x4, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b0c28bd7000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="0000000000620060000012800b00010065727370616e0000180002800400120006000f000200"/48], 0x48}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) r9 = getpid() sched_setscheduler(r9, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4m29.786580182s ago: executing program 4 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a1f0400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140ff"], 0xc0}, 0x1, 0x0, 0x0, 0x372fafa7d2db7f81}, 0x4040884) 4m29.64888161s ago: executing program 4 (id=678): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r4, &(0x7f0000000040), 0x0, 0x1a3, 0x0) unshare(0x22020600) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESDEC=r5]) sendmmsg$inet(r5, &(0x7f0000006640)=[{{&(0x7f0000000a40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000001fc0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000020) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 4m13.265790612s ago: executing program 32 (id=678): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg$unix(r4, &(0x7f0000000040), 0x0, 0x1a3, 0x0) unshare(0x22020600) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESDEC=r5]) sendmmsg$inet(r5, &(0x7f0000006640)=[{{&(0x7f0000000a40)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000001fc0)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000020) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 4m7.21314256s ago: executing program 3 (id=781): setreuid(0x0, 0xee00) r0 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil) r1 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000100)=0xe8) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x1, 0x0, 0xee00, r2, r1, 0x70, 0x8001}, 0x1, 0x2, 0x4, 0x5, 0x0, 0x0, 0x3}) shmctl$SHM_UNLOCK(r0, 0xc) 4m6.984451514s ago: executing program 3 (id=782): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0xe, 0x2, "36fd"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r2, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x51, 0x0, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, 0x0}}], 0x1, 0x4) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000005700)=@svm={0x103, 0x1, 0x1080, {0xdddd1000}, {"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"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m6.156635389s ago: executing program 3 (id=789): openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r0 = open$dir(0x0, 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r0, 0xc0ff0000200000) 4m5.962239985s ago: executing program 3 (id=790): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, 0x0, 0x0) 4m5.907979468s ago: executing program 3 (id=791): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000a80)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '-\x00', 0x19, 0x84, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4m5.824470265s ago: executing program 3 (id=792): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x7f, @private=0xa010101}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3m49.728523838s ago: executing program 33 (id=792): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x7f, @private=0xa010101}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 7.912383239s ago: executing program 5 (id=1808): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x64040) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6, 0x2000}}, 0x1c}}, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f}}, 0x20) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7.273844532s ago: executing program 5 (id=1813): arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x1f, 0x1, 0x0, "6906001022366ccee4ba5686b4f801fef4372f2c74f6024305f11fd3454ad23d", 0x32314d48}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffffffff}]}, 0x24}}, 0x40000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c800}, 0x4000000) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0xbb8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0205710, &(0x7f0000000000)={0x0, 0x80000000, 0x80}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) socket$packet(0x11, 0x3, 0x300) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) 7.167190146s ago: executing program 1 (id=1815): bind$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) socket$inet6(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d0109004d001280cf45600ee71d67ff39013408262cfeb1f3106733c096050600ee102b3f22ca6791cfc4a3ad25ae884a292d12ab267e995baf99e346bee0c691ceb5f49beb5f98dd56ac0f373958d73a0000001e0106"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000a00)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r4) r6 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3e, 0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private1}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000003c0)={0x14, r5, 0x70d, 0x70bd26, 0x2ddfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) r8 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x0) mmap(&(0x7f00007e4000/0x1000)=nil, 0x1000, 0x3000003, 0x2010, r3, 0x946ea000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 6.376702901s ago: executing program 6 (id=1820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f00000002c0)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0), 0x97ff}], 0x1}, 0x8000) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000340)=r2}, 0x20) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$char_usb(r7, &(0x7f0000000000)='-0', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e00048e0018030109021b0001000000000904080001030000000905", @ANYRES64], 0x0) fsopen(&(0x7f0000000180)='nilfs2\x00', 0x1) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x488, 0x0, 0x6}]}) 6.345685413s ago: executing program 1 (id=1821): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x2, 0x190) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10a600, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), 0x0, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000340)="af8e81fe7876a94dc546f45eae2e95dbe3b0d978db09ef1f7103a58b810006f28d62117a8daa5a002f85fef60df510ca88224913d93e8d3838f8527ddb47d3b6fe2f39fc676096d10317e90bad190121ab6ae719e164eca485beb2a721b9", 0x5e}, {&(0x7f0000000500)="c5fdb98cee3a9dbfd62da6b336ab895d40c7c93d084929bde7e0f428f8fcc7bdde695754bb7b50c23cef14853b173ebf9c54ee25c55f753731de21c31450d32c4110e02b378d16c8987962bbf78816e9f8a40ac2309f43823d870efe2070aabc72e119662d3eda5a736ecbec3f5da9c22c9fe6a1592fdd4064024661b40869bc5e38c6680e3a3284e89abbcc326b34c7b6608074", 0x94}, {&(0x7f0000000600)}, {&(0x7f0000000640)="a610d5d26d836c82ae1c5f2636da38101f08881873a2a0a519339c39015345ed22c0215c1a25fd1a4e06e0d16467ba68382cac418b7f0a0becc640e7408813155d0b85ca25972a8fd68fb6a76ee7a112ec1bcf415ce81508a8693d82a9866de7f6dcceac24293dd2fa65e7d992602a3a43e0de7090bf18b4ab4f9e9b5deadc12895eaa28da96d785c2adef52", 0x8c}, {0x0}], 0x5) 5.39237582s ago: executing program 0 (id=1823): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bind$netlink(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x48, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7cbb}, @device_a, @device_a, @from_mac=@broadcast, {0x3, 0xfe}}, 0x8f8c, 0x5, @device_a, {}, @val, @void}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r7 = socket$inet6(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x11b0c0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585", @ANYRES16], 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0xfe8d) 5.391699677s ago: executing program 1 (id=1824): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x31, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x418cca5d, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x1, 0x9, 0x1, 0xee6b8e10c2fb6bf3, 0xfffffffffffffff0, 0x17}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x831f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='GPL\x00', 0xfff, 0x0, &(0x7f0000000180), 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0xe840}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[{0x3, 0x3, 0x0, 0x8}, {0x2, 0x1, 0xe, 0x2}, {0x2, 0x5, 0x4, 0x7}, {0x4, 0x4, 0x8, 0x4}, {0x3, 0x1, 0x9, 0x1}, {0x1, 0x10000002, 0x14, 0x8}, {0x1, 0x3, 0xe, 0xb}, {0x4, 0x5, 0xa, 0x9}], 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x5) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="2f00000000000000000000006a3f7860d3ee6eb4b2c5f9c5d04b88356fa0a922c422cc23ac16635b1024517a42fc1dd3ece66beee92cf5132e4b382ddcd6244bcc7ba5f912ac24968ee3031f62673a49be5669c781fc1c8cd4a7ad3bed45bcfcc321b4d085566dfb44", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup=r4, r4, 0x2f, 0x0, r3, @void, @value=r4, @void, @void, r5}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x2a020400) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x88) r8 = openat$cgroup_int(r7, &(0x7f0000000040)='cpu.idle\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x7ffff000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r9 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x1b, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0xa4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @ldst={0x3, 0x2, 0x0, 0x3, 0x1, 0x20, 0xfffffffffffffff1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe31e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @alu={0x0, 0x0, 0x2, 0x8, 0xa, 0x20}]}, &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000840)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0x7, 0x7fffffff, 0x1000}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000008c0)=[{0x4, 0x2, 0xc, 0x7}, {0x2, 0x2, 0x10, 0x3}, {0x3, 0x1, 0xf, 0x3}, {0x4, 0x4, 0xe, 0x1}, {0x0, 0x3, 0xd, 0x9}, {0x3, 0x3, 0xc}, {0x1, 0x5, 0xd, 0x8}, {0x2, 0x4, 0x7, 0x5}], 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r4, r10, 0x25, 0xf, @val=@netkit={@void, @value=r11}}, 0x1c) r12 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x3e, 0x0, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@ifindex=r10, r2, 0x25, 0x2000, 0x0, @value=r12, @void, @void, @void, r5}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x5, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r13 = open$dir(&(0x7f0000000180)='./file0\x00', 0x2000, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r13}, 0x8) 5.293652848s ago: executing program 5 (id=1825): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') pread64(r0, &(0x7f0000000480)=""/154, 0x9a, 0xe4) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffd}, 0x50) (async) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000500)={0xe, {0x2, 0x4, 0x40}}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x2000000}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.256392958s ago: executing program 5 (id=1826): mkdirat(0xffffffffffffff9c, 0x0, 0x110) syz_open_dev$dri(0x0, 0x1, 0x48240) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5d, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x1, 0xe0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x2, 0xfff0}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0xdc, 0x9, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0xe, 0x8}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x4, 0x8, 0x3, 0x10, 0x7}, 0xf, &(0x7f0000000200)={0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0xb, 0xd}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x804}}, {0xb5, &(0x7f0000000300)=@string={0xb5, 0x3, "0ae364610a31bc174c27fa0826ffb9f56a32e6a0b78330af514bcb69db67c126baedee298a6cd851a73e5be47a01e1596c1568ab62b141d6ea6523b046384d979aaa4857dcc0e78ee9fa29f2b0751c39d4a7d8800b76c333c6cfa084f6efe269cbbd56abe86630da5ee0e22f4bda617ee66e928654d8d0f0a3bad145532a0fda9ffe785137e1acc4d47e7e942a2d1d4d5fb21e8d30a09796c77368d1035030d6de6294e27976978460e4ac3f3dcdba3f6a2e94"}}, {0x56, &(0x7f00000003c0)=@string={0x56, 0x3, "ac92b6718898ce1a5de9ad7fec323c69cbd72abd32dc08f35d8f397f50afa4352e0b02ed3829de42de33378d6eff8961f73298c4cb952f02e182503e523c8375bc2cb7dda7cda37d5babb0db996f3aca0706e6fe"}}, {0xf3, &(0x7f0000000440)=@string={0xf3, 0x3, "0fef204667e049d988e18ba25ce0d665882260ae0583cebb17233e8bfb39d84d381ecde811b22b4f110bd0b171892b6991df50af59c975705b346a846380a0a754b0bddf181448703fc577b0938950b0c99e6e51b0387654a0cb1c335455b5781d00d6a800278ae7b25ed565bc157eb5242d7970b96c87dce66027b3f935fe171e735b4eaf513ccfd82c8fbddc0a7ab37013ee07e72e85cc18046514e713a5093154d9fb5d9a9c5298fd1011b4802c5a8ac0d4628bebecda4411fc733d750726ff50939c117e9dad2f8d6b6f2cfffb7873089947ae58d17185559796bf34f83b811b28eb7b414510ae6a69e42625c06726"}}]}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_open_dev$MSR(&(0x7f0000000040), 0x5, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.544537648s ago: executing program 1 (id=1827): syz_usb_connect(0x3, 0x36, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905090aff03f70709090587"], 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x140) (async) syz_usb_connect$cdc_ecm(0x4, 0x109, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x1, 0x1, 0x4, 0x40, 0x2, "", [{{0x9, 0x4, 0x0, 0x3f, 0x3, 0x2, 0x6, 0x0, 0x7f, {{0x8, 0x24, 0x6, 0x0, 0x0, "0cf916"}, {0x5, 0x24, 0x0, 0x4606}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0xf108, 0xf9d, 0x6}, [@mdlm_detail={0x9d, 0x24, 0x13, 0xe, "74d747a959b57785c1d2d0b7b2412d806a7ad50a1f147b9847bab6757919f5364283a375c982e193d353ec1e58e81a04b81431de5bfc33e52345a9bb994481b8206deaa895751a1f0821afddfb251beae5d34321d3039e142910bfda4b7cacce311c2feb63e9c2574cf40d8bdc4ce23065f7adcb4a626363fac0dbf89a795461cc16d2b6effad3f704489e43908d43700456ff1762db398de3"}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x9, 0x8, 0xd9, 0x4, 0xfb}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x0, 0x0, 0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x6, 0xd}}], {{0x9, 0x5, 0x82, 0x2, 0x19f, 0x4, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x8, 0x4}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xf6, 0x5, 0xae, 0x10, 0x14}, 0x12d, &(0x7f0000000200)={0x5, 0xf, 0x12d, 0x5, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x7, 0x880f, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x4, 0x8, 0x712, 0xf}, @ss_container_id={0x14, 0x10, 0x4, 0xd0, "f05075874aaa2c4fa85f2290db9e7730"}, @generic={0xf6, 0x10, 0x2, "fa79d0d088ecce852e01192b6978b8e90f87a2dbf6d82668875c3ba5899d745a005ab5ff162d2782b2222e175cad2b9a1dba1a27d220bc30064b10d9832e0c41c5d14c9d427b0f779802876e9834d36318430eb4e6de5f8c8e2a881a41acaab6e7a662fcad15b1fbf54c55f6735392f3c511e5e51eb69b70dd1bb867032c2c5732c1bb87ed47890d2adc73b1e7ffe97293256f43e14ccce7951254b01695b4fc36fb69c17538c66930d7650e161212fe07a5df53ecd12e55d5fd44866beeb12a43c034ed84dc9a42319aa027759e12c796c7e7b7d4eff83b9a227b80d58b1ecf93b47f8aa00df874bb039444ba914ded49a23c"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0xc, 0x1}]}, 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0xc01}}]}) 4.22139076s ago: executing program 0 (id=1828): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="58000000020601010000000000000000000000000c000780050015000c0000000500010007000000050005000a00000005000400000004000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x58}}, 0x840) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000020000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r8 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r8, &(0x7f0000000100)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000140)="aa1d4880424b4a00f7fc08fcd111fbdf23ea8b21d5bc273fdaf49ab3a91ffa06f0e9", 0x22}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900840000000001000000940001000000fc13c40000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be3f9ffb4d1cea46baf6c1d0000007ea20864160208000200030001001400000007b556a737c160f9555b4755bb000000000000000f51e60a84c9f49df19b3a616cad37e786a6", 0x50}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x2000c004) 3.976425123s ago: executing program 1 (id=1830): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000000)) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe2, 0x0) ftruncate(r1, 0x2) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0x110a4000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000080)='|w') r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0xe, 0x5, 0x3, 0x7fffffff, 0x7ff, 0x9]}, &(0x7f0000000080)=0x78) 3.974956025s ago: executing program 2 (id=1831): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020200f00000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000010400008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x7fffffff, 0x800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = fcntl$dupfd(r3, 0x0, r3) socket$nl_generic(0x10, 0x3, 0x10) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @result={0x2, 0x2}}], 0x38) read$hidraw(r5, 0x0, 0x0) 3.292666296s ago: executing program 0 (id=1832): mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000040)=0xa, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x0, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000540)={0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000900)={@local, @broadcast, @val={@void, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local, {[@lsrr={0x83, 0x7, 0x67, [@multicast1]}, @ssrr={0x89, 0xf, 0x21, [@private=0xa010100, @rand_addr=0x64010102, @empty]}]}}, @timestamp={0xd, 0x0, 0x0, 0xc, 0x3, 0xb, 0x404, 0x8000}}}}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000fc0)="57cbb281440920950dea6c51531d8454d4f31beec2f0a57bb09090155576328f30ab3f82c547817268b7f6c43c46a1fd15effe57fa5f04ea6b4fb2356cdb09e6be7ca4b1dafafdae29491649ecc1b73bcaac9e464421304c75e447f04f290d749c46dd0d351eb8b23ea199ce3dc90736a1c4bc1a1a49745ff7cf999e5b7f6d320aa20bff330b1655c747bd5e65c5e6a277f582edc50c113c30ba92d6326223ff701d1cfabacf578c574a317c87265155860fe43cc03ff724ff488fabcb1acaba73b3f4e63e8b2c2e44063138d9e5f1c7cf71c51397ba6b83988d83b4f805cc2e7b50f2ca002fce9d2fcfda911d86c8763a6090690d696bec97401e4f2aaae468fd7c9ef183e5911f21bf63c77b8adbc192d4b97ea7e59983fde56d71242c4a7855fd1cccdfb2c05b3cde8a54636319ab8521c1191e638c68abcce2b19613f6705bc64d3eb881dd23d8c9a941467d96f8a5021a4ec559d4dd62dbaf4a70a0d2c84eb55af2dcee493acc8825facb5ce6f9bee3aba08112816423f7f30d1cf9831be19f067e797d3d6067f93eff0c420c91e9888f963d42f4df2f13050d2a0ac18703d05c77688f8202e69dd5850784e75128d9615ccbb15ceefaba42f087b0302f93c155de2e8b3738038c05bfa084d2955d47872c3d27dd4f7d2f7ed94e6686eb6ce35939e6b570e554fef65c0aa200e43362f88762cac51b85dbcae660e48ec2ede7b249e05607ccc357065fa2f6c57110edd8a758bd21bd2820b74e7aad5270ecaedc5524b2fe097ed8c3edf1f7928b86290fd1baf79a4d104cd9d287b62abbba96dd211e44791f3c4db96c288fe3994e9c488e0f33cfbba67bdb1a419c46edc457835f58e6eee2c7ce2d0367f4f4a6bc6aa41de28269facb5c9e7b70fdeb17a4fe6571e70385ea1c19bb3053bef6980adff700dd7e68a9af1a2fabdb1628ca0e8d3969903af11d28455cf1cfe2458b33a217a19899dcf8e72e8e24af14f9849805e7967b84649b8f938980ba8ee6d1f44fdc7028a3ea2f089d2a613f0eb6dc386847bb38547ca4963a8de39e3408fde1efd01e46f7f1a09fe7d429bf2ea27001505cb257b9571d66b657510cb23a15d2d2247289d87b06155302d17a6db1392504d3173284ec65c3595890346c7421e1b1c2730f8f369796028dbcf3be250edb78f410018995c91deaddf759502d651b4b00eb8b8a3010605a9ce4160cf7e115ec8dcb74a052f17a0a4257a51c5ed8c27ed62b44f26aebc735405130b26d4aa4d83783cfa3dda6d856b001de89a87138661884d4736b30b7fecb5243492e525e581daf82bba14072595b7528710ececd29dcffc3651753f9d790cd91a1ab94418e94f490e2d4a8810c285981950eb76743a568a9fce8879383a0a6793da9c871fbce56ed66035229469c37a34ca09f65c7fe84fe2d33acb89c47b8ee60bc0cce3d6639adc9f9d83e746cdbada67fca4a62ac2764b4a751d8a9a6de023ce2cdd727b053fdc0117f921b13a3554c020e81ad31113e0fd469944132a7f7bb57e1043aeba82880758b958d5e985ff3a25970d30056dac7a41aa5e7d03edbe7121a4dcd94e0419256f46766ba3fdbdc7e08ceee94e689955e7a113259bd04f78c4a869ed3fade43fbe8c48b233248c23df374b3aaf27b6af0edf2b22938b809456208168836c84e93a87e706bf3e227e27deea6e72de3517648bb4e749d126e5fd326508834e6b147df2226dbf8c1864867ffe5ab7776fadc9f041f8798576dacb2b6cdb48c6c2ee605a14eb4f46470d5b4a869fcabd4550fb36d58f2774dcc16ae2d9f308fbeef4a5bf2158d169a33ecefaee6dfffd289c2e006cd991bf0a72b17cf31f927acc85037e46129606de90ed61db398d9f6e8ef191cbd7c52b10c293a77c8686965bbb46aa32225d1dcffb838d1d559329f1a20147269b61dc60164a3a9cc86580f31e40bd1fd39ddf015fce5ec72401db9bd986c47693834ac8c15a40da205c66a75fa21d36ac38e2a79196efc4812e38a15da91ea514817f16dd0186c68c4ac7b10330dd7d0aa8288e56e60ad080113c0f95ef3031a548100da09f86a7c725cce3543f152fea519ba70462151fd7ccd26519d0e1562780baa2fd0ec3f36687b1a54a0b5f5b5206622ffdfe519ce518900d85f9d036ca0f83d93c3340dc5187e667696820cc9ce1ae85c9be4d7099ff3f4d642443382e21eb845c82d7e42da6fe2a63143ed2e261bb1fe5f925b759aa2249450e3bb8507a39d16b17fd1eb0a853ffa3b1960b9f4209e51ab8e01754d679698686c06ebda1331980c8776380e06fc99f35e88df4564c345ccae0655f4ea0cb783bcb477db3b1ad2e3d30c9dc53ddeca3c2b875a0c8e81af9b96513eb444d53edf8f630611ba49815b1da9e8f13b63ffa0701e48e9a70b93c741ec6dbe9e73202bd9f5a80e85699b00bb2e42e943a517edc65abd5a305d7fe2d8e7fe62fcf12cb05524abbcaa1147bbcdc025f85a11223a629a3995c0cde72245a0ea28e4e50a4192681eeed86f6762e7fba1051ad79480dd0e6e5f82202011b2dbf5f3fccfddbf51d08066e089472fc135603e85a53bb5646a0e7ba4a501acc71229ba5169be45366275c67e885db1155f0f0206d10b99f1316f796c1373cb59e8cd96dfdb4fada871523142edb500d92e32040b56e1f45a82940275461d88ba6d5638e090be79f92c22fa350bee5d9be0ff7da0b35cef681eddd8492528a90087a577bc25cde358e804adbe9aabe9125fbaa819008aa983b188d7edba01ba2df2031a9056841313dad566b0a97037700e73c5ced0582bfcd62e85fe9b6680ec2d6e5fa2003e83352f92f206bc7323f07aecc5cd72ec4d84c0e739e6242bb5b816d3088270ecb324b4e251862e9e008fad6496a4f41918196312a176bedec810f0fdb5c513368883f863f0605c29197b2f4d51c13213cf114f769a2051d06981bfb12e65d7434acbc7e21926d376edecfd7ba4d4a50a743bec83dbe97d6743cae4b19903de30a89d5ed268b7ffd7a7d81f014bfd5671d1ba713f6c199f8899d7e3cd26f8e1992527dd64b3bbba0f4a06fd48c61a87c2016727523dac346b81b8117aa2a135043faaed2680765fd7a87aeb922ab6b661e64412dd244c104639eb88ac213fb268f7b06e8c9b0986c6883165010a172a49e39cf21f392af5751f3ec6025ed2855315e074b26a9fd07f3a8d8af3ac3d6c3c690b8f3c2174b6570a752f2e319a0c517bb08bd1a2826880485fa0070f6c82115cd26d9e8a5c1af5e0edfc6b030ac420f20ec171980b12be99f652d9415add01fce24152934edf3f01007a924a42ede268f3bd0c21ac670c9d2aa6b70c3f8711a6e4045ca3e70df6bb8ed6265f8adfe79ddc5ada5c4b50e04f3e6ce9cb70975f0eb70cbd5588d7108982cd13fe1bdb15c3a23ad720f661ce4ace382153cc3497fe9035580858bc67d65d30b79930d9cdf864dceed1c609e580e0c7138073accff6711a679294e92a309148827106056409589643201101101f681e8cb87721a6c379457101e2270e81f6879ee19ad5a4430fbeed5545195211ff3e44a3112e75bb34be4dfb90c8797fc23201b0d20b5095520f3dfbbb1f9f6a6930d7483225b6d42d3862bf5c8423ad3b62bb9865f1962436a7d34e34cd5165ee60c23ad362f01dc83d4770337293abc765b17c419961362c7533594fc1032f7ced3f5fbc2f3b6729dbf7f346d71dc4b4feaf3a7c2b3b365ac755e3d1860e8568f26dca54a3f80000effb511a2918f03f3c21afdea61fe2061afd1eb1b1f08cb8d01fd4302faa271219d5f871c6cb50098066862a107e62c5724f7edbceaa54d4d8d58c3f3a4e08e4e7b8d74e2d4cb0659161165fa4556d5443831f926b91035093947fc777d71e7a98035dbf9a9be802354585991146cea0ddf82dbcf172147e3e4db8695cd70b6b62fc9989b09a0a2279e0e5d8166e1fa95a3fc35b6770f46a545db86733f295a73034890c01598bf2165117fb9a1c6743bad46c45230d54133c6cd2c2afd4331756e0fd44a9ec8f2cf1be94bf2778d1917ba8e741b2ac2035bb11efe97e036dc66996a70fa7cc785eab1ed96c0daaebf2fb7d7a5bc6207d65bb0d1bbc8d880da3f852b2fdc767fc82d4f6778f749506c272870763d8c30f42197d7c8de0a2022459ad4bfdf1b3f1064a1b62c213989ee51f3b81607e64f6f6c18ca60d3bb662662216378cd28a392afb375f6b27d72b63be4403282f7d8b1d4f5dd1aebeb20c7912980bf6a3f514d16391b05adc3a7a5952b8f9bf8ee46a20248811b9300fd704f9e551e923c8cf4436d87d9236543be75a33c2a36f317bd236fa5492a80ce03a11ecd3ad8698023dedc563becb3c4a2beb50468a1c21c1aa7fcec938a15d95acb4bbb69353a403dbb11e07a766f2e4f105ab261696bbeccd7094d0c234e3ac8fdf7638afbb326f53376be3fa3a14557c036451c7af1236a836f351ff23e2d82455badaff7e745ce02054730d53b2bfb47746867f4e2d555d440ecada7f915e4309e2bb79f7838b75f496bf15ee17cf7758b3fd0d00212fde45aad791fd7bc179dc1281587e4318f4a5fb09d149711029bc05e7be9b57f32c98c58b026427d81a5f105f2d401fbdc73efe3c78cea1b92776304abde72faee5f038c2e005044d932e4a2ac08adeeeea86aab3223793d44a5478c12094779da719c217b8e03f3923a03182f0f020960c334d5af8e8156023bd307f3f3f89e895d26d8dda96eab6e32f480fe0260524f6ef0468da7f6ffe72a5e178a806682341296a88637e715e46ee9e35d6b1a1de66ae566de631548c06cea2d19f20af9dc4b0f0d217eccfbc86b18d7153203b044cfa4eeeeb1b8a2592f8c200fd0cd287994df21623e186c91595758a306cde59471bd8cef1525023d9ebf0236e2517b94686e37f3e185bdd380d00c2a4d97980dafd1f17e53ce86dbcf7576d4878fba8d402c1b8975a5615097c6f02af2598dac7220f5500986ae94aa2667437f15062d745bb8c1c1bd0c512d4c22d3c70d835f80052fad578a3e96ccfafaaa82481d4af772cb8efd89afaf7608b0593aacda298df792e3e8f0ba2f867a35ab16d7b3de56a05fc18aaf58f72bcc9272235535a4c2682c86a151043089c28079ec49025487f01be99e95674f858f6cb9b70d5ad5a19a6fcbeb8ba59b87ab042a4072c74146002e816f2118f9ef3a250583722ed8a8a13ae9e5337faa7d6f7178d75e1e5831bc3869049b036da4eaf5554a210ae39b7549a7d16c577cec0bb8c21eb58acc9dcec9b03d4fee0035024a0dea1956af1b26addb9526ed8e19c5fc772b61022b7ce4e1e3ac7140dc377d157ecbcd4dcc82875ce0b49190b8d5002ee51dc7bf51ed6ece9d592f7aef32d5edf6bbb7cc5576d04d17a33ea481ec5d1d02e5d9fb77ba3d7e3f750391cc67f500829eb3c757aab80fe0160e9c4b6fd484aa1eb9df93a5e6b7b926668250208c6d19ad12b437be4a67ecbba641c05a207860e51e3384b84e862cd6e63a47153c6e8927cb37bacf23223f62cbea0c8711a1660130d7dc61c315fdcfdf2ddf9eafca032c49d39a862bbfbd12b52354dce73e28fe220b7bff717ee44880a1b29f0e6d73e9399d7d588839d05004822dcbcc6575cbcc652d8a33fb819ef740c666df6923ec3c9be5a1f4ad2cd576105aea522c3c08e3e591be28581ca880ff4896e0db3e7adbb5c1c05bc3a39c4eca7068577cf63bf446d29bb3f98b091132ea103db325b3035c211f7a5de3b26b6d09ae450cc058375c34c", 0x1000}, {&(0x7f0000001fc0)="ead61122551e8876aaa7de7ab49ababc20e0bef6131eed9880249410783c6318585876f2402500f76f39c5651c49b36b14fd50b3c8687dfec2eb3402883770c2999b", 0x42}, {&(0x7f0000002040)="c8d044f7e787dc389e7ebedb7157d07321fe6f0d135163f2d9ab21fc9026b5005376adc12eb5a65c3f4b70efe8a0ea459d44ae0eae0183a3ae5ed3a6c6bac5f216f59517e23d6cde42c0810455cc12b752f7849ccfb8e156d7471c875c74417bd28862c83169206b7f9ffe70d3492c8616af9b996a38de1f5d0860c5dee7fff951f67afbe37bc9e32f9023d50283b6cb80869b28c8933f78e08b4d83e9fbc7f6b5dbcb72746e7d257d55bcae7609e1ef5d90fd1eb3dcfe9ffd92a8b23a06b920be842f6e9aee6776b618a69558aff2bfb5e5fb2dbaca954803b9f48434ed826de575d95555005c38ed0b6e617263044242", 0xf1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94", 0xf3}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = socket(0x2c, 0x3, 0x0) setsockopt$bt_BT_POWER(r3, 0x11b, 0x9, 0x0, 0x0) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000640)=""/11, &(0x7f0000000680)=0xb) syz_open_procfs$userns(0x0, &(0x7f0000000580)) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', 0x0, &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) syz_emit_ethernet(0xb2, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa810025048847000a05000000000000000000000000000000000000000000000000000000000000000000000001000e489ef9fceb1f24f1b777e21fad84a10a8207800819ac742d5d8d69dd44effb5ba93f1593d3a1ecadb4d0bbc9e7b8237b5ee964bcdb65fb5e04bf8776c7b28549caeeba0b6df8c9c1be7f69b4397c3860b81e56eaeef1f35ca914684bcddc02880b653f973c6a1d40fd51d6ddd93ed419f961047ef297b6"], &(0x7f0000000740)={0x0, 0x2, [0x129, 0x3fa, 0xfed, 0x100]}) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) 3.06150838s ago: executing program 5 (id=1833): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_emit_ethernet(0x156, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1188a81a"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 3.000595656s ago: executing program 6 (id=1834): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x2, 0x190) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10a600, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), 0x0, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000340)="af8e81fe7876a94dc546f45eae2e95dbe3b0d978db09ef1f7103a58b810006f28d62117a8daa5a002f85fef60df510ca88224913d93e8d3838f8527ddb47d3b6fe2f39fc676096d10317e90bad190121ab6ae719e164eca485beb2a721b9", 0x5e}, {&(0x7f0000000500)="c5fdb98cee3a9dbfd62da6b336ab895d40c7c93d084929bde7e0f428f8fcc7bdde695754bb7b50c23cef14853b173ebf9c54ee25c55f753731de21c31450d32c4110e02b378d16c8987962bbf78816e9f8a40ac2309f43823d870efe2070aabc72e119662d3eda5a736ecbec3f5da9c22c9fe6a1592fdd4064024661b40869bc5e38c6680e3a3284e89abbcc326b34c7b6608074", 0x94}, {&(0x7f0000000600)}, {&(0x7f0000000640)="a610d5d26d836c82ae1c5f2636da38101f08881873a2a0a519339c39015345ed22c0215c1a25fd1a4e06e0d16467ba68382cac418b7f0a0becc640e7408813155d0b85ca25972a8fd68fb6a76ee7a112ec1bcf415ce81508a8693d82a9866de7f6dcceac24293dd2fa65e7d992602a3a43e0de7090bf18b4ab4f9e9b5deadc12895eaa28da96d785c2adef52", 0x8c}, {0x0}], 0x5) 2.775405232s ago: executing program 2 (id=1835): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x4100000000000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) r1 = syz_open_procfs(0x0, 0x0) getdents(r1, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 2.527462331s ago: executing program 2 (id=1836): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x6, 0x60009802, 0x40}}, 0x50) (async, rerun: 32) syz_open_procfs$namespace(0x0, 0x0) (async, rerun: 32) gettid() (async, rerun: 32) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 32) socket$netlink(0x10, 0x3, 0x4) (async, rerun: 32) socket(0x10, 0x803, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 32) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x1a0) fanotify_init(0x1, 0x101801) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24004041}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 2.508630092s ago: executing program 6 (id=1837): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001200)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000440)="b7f39c4208ee3b3192dc83e40c845877224d3d9a68fe151be9442dd511bb6f0c8c80163c65736573f4fb098f241a10e80dba7e3ee984ae1d76dd34525f6134aa0e079c9a8ab5e69f6b43c17cbcfa052809f9f46dddcb7885bbefad5541eb95c9c9cafe7af71986d98019287be75ea4f966c739bc39eab796746ac11dcfa3e9019057466d4bf6d033b2602e81e7009550e827e21518afaead2788c9ad0d683fd52e07a8d1a0c671b990462eaf38814ae58a61788ca002e843ef6d21d617f1b5bc486fd78cef08294b22bb41b8859e12ec4a884739f1d254dba249996d434be6f49007", 0xe2}, {&(0x7f0000000540)="0e7a7ef1589e6888f61519d91ca184f831d8d9acf6eac6e998678bba1faee3c31433525367340a16a5c0aa3090a4ec5ed67f14c52d9aa0c351ee31a95b8a97ce15dec984a2334d9bf42d52537dbb1a61e17dfa51ab26ed3205ff1bff2b4200272586b558d047a2075252d0f38814eba6e9203686c03e2bec25b61bb16f00767fcdd3609f30890729b14e3a20bbeae0947930d22b0d48d7527a20b1b5fdac6ff05e0c3e74f78c78b42ce8a72e9a6b0b9e061118890cd5fcc13a3e1a6cdd92ead7da9fb36b3160c77045a918162cafdff4ca2009c45babd46306d695fae3f094873cdce4e1866c6f00d29d8ea1bf", 0xed}, {&(0x7f0000000a80)="bf5506d03a4baa718db7dce129c6d2f6f436b904730f32efeda89ac979179644a76b4c69d6f6f4ecf4cc0f1508a8331a3322d45eeec2998742a9c2915ad0a8a218d6bae6e1e80cfb31fe13b8a7462103e40b0d25edc5c74db573f48a65560f30a03e2e9f0cc6f236fe2eae6127d12b415a8ec8ff763e72611973fc3c", 0x7c}, {&(0x7f00000006c0)="90ca1ddae21bb31309a44aaf459cd868ee09687494e8bda5cd069ac399bddbbb37f75054f9ed25ce349c6cf162632d6c333c95f49f7b821ca94aebdae9d6f7afcb35f6c184a57d5b4a8892f7c6634814614a6fb64f5f5ba21987a1b3060e73e214a7a7f85d80d6ca595b019ca30ec6a98db1030ac05ad0169680d57a7efc7347daf488d3b51539cd9d81ba9d24f2a7055a91d804b47e61d3741e9b201cb658cd7ac795fd2bbe0355609f2529e5af04780fd0486d34acc66316c30cbdc5d250170ba7232a", 0xc4}, {&(0x7f00000007c0)="7dda3fc847d57da458f0db09a80fc183", 0x10}, {&(0x7f0000000800)="744af9ac374e53c7de1988a3de1d65b53e6a09a33f72b1b499700778b8bddcfde8c715ede2f0da241da2fc52caa6a66c3019bde6669a687c29f459f6e0e0adaa689c9e764634f386d87d525e6c5fd81aa28ff1eb105876525831d1f43ed0f524cf72f17d6259ae3463", 0x69}, {&(0x7f0000000880)="d353634c513e2cbaca80c3b7dbdfe1bb2c3d997574b7ade114b714d7ca3d89b0ff8b2b21b05301402f2ecdf53b212830ace31231ad7cbc55c4c356fda16117fecfc7a20f350263262b0eb2e5938ee4cd9e45a39a", 0x54}, {&(0x7f0000000900)="3e5e84974469b2a468ea93333b8fe0c934cd847d5a9e3c53dcefe4709d9e3b88c803f84330d90cc8e0812969ed5806a0b566d854e78b05b16a19115078ce6906b2f6201845e1dae25a6cf5be5e455673c07f2e428a81e28c97d5ce0a0d5008e4213a841a1c010246fe6ca5b2a90cfed0bd21fc24fcf97c91bfec51e9502fc1738e8f08b33e3610d54103dc12acbe2044e5984a18fe94fd6a1825ba154c0e2cf447fa41f8b481f83d98e675cf24d2319ac3a9a3b33dfd6232bac7356cd7498e73367e5a4ae091bdfb95ce36e2e425ba54854a03c17c4c5e254755cc92", 0xdc}], 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fa0924912c000000000e00000101000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x4040000}}, {{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000cc0)="48bcd8640789199575576469f53d79d4579523bae793f92e2c20a879ffc3ff66b5d8c16348f7069c49c4fa086744080094fa3b9dd1a39cae1c4bd65bcae53f0a17", 0x41}, {&(0x7f0000000d40)="4f8df227b71ec0f9ad91588522db79a70a5dd0ad1745f116fa15b7873caedc87332c4be27bdc66045fdff4e5d6bb1648b7da937e6136f87e80a2d652f9331d4e17fcb79aaa", 0x45}, {&(0x7f0000000dc0)="4f65ce9ef5fd8fb744fb9292da3a3303c5da33ddbc5e554935dcf184e3b0ebed81803011a515a82a2a36cc09937c078ec8ff61e6478654eed61b01831273f3cdd9c7c573c2e2798a020b101be0e47f95dd2166fda3bead6b75a978dc528e8fe4d48ba7902588c995a2422b86cb90c56c15982dddaa7333fb10bd7d65bd0efe71b6c1e2b64e4bbc235abc56ca62cc8379ff5242de09a129246c23258d03f091f49d4af06c4ea35ca4a78be16e24f0b496b83e9bfbc23083ea10d1dc15db6c2892f592f5b981310b84fb628101dee6dd2fa47d42c7", 0xd4}, {&(0x7f0000000ec0)="b950ad6efb645810a4c12627614188cdb7675090cefb3d6ca9c189d7d79e3616e63561097a1b69066f4c75a441654e5eda4a79c159aa89444f1e5e8a4bc592349538d37d092d00d85129302834aeb87cf75357451ec8d34a012210607fb6c141f46db37841f5d4790443d603fe909dcf1a3515f1", 0x74}, {&(0x7f0000000f40)="b216f9cf604bd9e8878d2d34abf6b964f3dfce4667bfdf8968218c2910c8c8c95a37", 0x22}], 0x5, &(0x7f0000001140)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x80}}], 0x2, 0x200480c0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x2) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x1c, 0x14, 0x1, 0x800000, 0x0, "", [@typed={0xa, 0x15, 0x0, 0x0, @str='wlan1\x00'}]}, 0x1c}], 0x1}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xd) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setuid(r4) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0xff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x43) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) 2.196140632s ago: executing program 1 (id=1838): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r6, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r7}], 0x1, 0x0, 0x0, 0x0) close_range(r3, r7, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r8 = getgid() r9 = getgid() getgroups(0x4, &(0x7f0000000600)=[0x0, 0x0, 0xee00, 0xee01]) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xfffd, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r11, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x1, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xd, 0x3, 0x0, {0xfffffffffffffffd, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x2, 0x8, 0x6, 0x883, 0x0, 0x80000, 0x8000, 0x0, 0x0, r13, 0x5, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010000000000000002000400", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000300", @ANYRES32=0x0, @ANYBLOB="040001000000000008000400", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB="08000400", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=r10, @ANYBLOB="08000500", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB="1000040d81ca54a5810400000000"], 0x74, 0x1) lsetxattr$security_ima(&(0x7f0000000200)='.\x00', &(0x7f00000059c0), &(0x7f0000000440)=ANY=[@ANYBLOB="02aa3fe7d575ba55f21235a6a171803a79a5a55eede00e25"], 0x11, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) file_getattr(r2, &(0x7f0000000180)='./file0\x00', &(0x7f0000000400), 0x18, 0x800) 2.195836393s ago: executing program 2 (id=1839): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(r0, r0, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x6000000000000000, 0x2042) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(r6, 0xc008aeb0, &(0x7f0000000000)) writev(r3, &(0x7f0000000540)=[{&(0x7f00000005c0)="f300000014001923", 0xfff2}], 0x1) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@phonet={0x23, 0x6, 0xd, 0x4}, 0x80, 0x0}, 0x4008090) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x3, 0x1, 0x0, &(0x7f0000001600)=""/107, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r7 = dup(r1) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000014000008004500001c000000000033907800000000ffffff0000000000fd1590783292c3234033803bf1ad717c3676719df975fa9c1f8db2c08333118449f810dde4f694af95574d124cd394f6e1625df82419d524e39329e7aa28d0c9454a15fbea539f6770590156ac5e27ed555e078aa541"], 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r7}) close(0x3) 2.040873098s ago: executing program 2 (id=1840): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r10, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x20000014) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x24c1}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000f00"/28], 0x50) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x14e2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r11 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x182, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r11, 0x400c330d, &(0x7f0000000100)={0x9, 0x1}) 1.69103066s ago: executing program 0 (id=1841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0xc0201, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000500)=""/143) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000190a0101000000007575c25cebfe61a3"], 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xffffffff}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40000000bc94ee15822879ef96556adb1d31fe45482b704b28a6c0dfc886abfb0e7a1017ac22e9fc383c0211e11bd7613a751a0816c45c578bd641fd22f3c3936418adb1de64d3d1f3195d0740a5eb8ac9e7d6e4becf0ca333af18d976ddb2edbca6238a2c3c1648fd3f8aeef3bc56c447b2e491526a51f8c5dd1ff8330dd5724faf850721b6878607d47178520794d2a334136b9fbd6985544715c649c274b073896373d44858db145601fafca1fa507ae39eeec9036298a7e242444b1d28750963a4be307bd0eda7404a6b46045159973ad443efe2b296caf06e74769238dabcc9eb", @ANYRES16=r7, @ANYBLOB="000126bd7000fddbdf25070000001800028014000100ac141422000000000000000000000000040002800800060005000000080006000a000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000001) r8 = socket$kcm(0x11, 0x3, 0x0) epoll_create1(0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close_range(r8, r2, 0x0) close(r10) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 1.092316934s ago: executing program 0 (id=1842): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001900)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x81, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000090c0de44edf1b1b60000000000001406000011004100003cb9dbd8b2b08880000009000000000000000a"], 0x28}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/oops_count', 0x141000, 0x28) finit_module(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fdatasync(r3) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x10, 0x70bd23, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x1b}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000840}, 0x40010) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x29, r6}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x20008010) 697.366785ms ago: executing program 5 (id=1843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x44, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0xfff, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x945, 0x8001, 0x1005, 0xc, 0x5, 0x0, 0xfffffdfffffffffd], 0x5000, 0x80300}) r3 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r3, 0x0, 0x2, 0x40000b7) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000009, 0x12, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000005"], 0x0, 0x37}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="183000000100000000006d66c16d6f861e1c344363b9304a115c5283089735a8fbd23b8cd8c4df25e3bd1e896ecbe7327daab3411b9de6e1d9f9be04076fa466849631e064cbfcffffffffffffff007e3e0bdc2bd916ab00aab327e17b362fe9204f69f7075b8f58f5d66205b65d1dd4f280f5a0eeff996c06ed4d9d096e75c565934917cedd0b2375e88ea1922970ab8b330675185f"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000}, 0x94) fspick(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x1) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfffffffffffffe9c, 0x0}]}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000a80)=""/188, 0xba) syz_usb_disconnect(r5) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x9, 0xe, 0xb0, '\x00', 0x8000000000000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 569.524521ms ago: executing program 0 (id=1844): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x9, @mcast2={0xff, 0x3}, 0x80}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000001bc0)={{0x12, 0x1, 0x110, 0xa0, 0x79, 0xab, 0x40, 0x5a9, 0xa511, 0x496f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x7, 0xb, 0xa0, 0x0, "", [{{0x9, 0x4, 0x5c, 0x9, 0x0, 0xff, 0xae, 0x71, 0x2}}, {{0x9, 0x4, 0xbd, 0x81, 0x0, 0x65, 0x1b, 0x6c}}]}}]}}, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000002080)={0x5, 0x2, 0x211f8487ac97f510, {0x4, 0xc, 0x400, 0xfffffff8}}) sendto$inet6(r0, &(0x7f0000000040)="8fff0000", 0x49, 0x0, 0x0, 0xf) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x40, {{0xa, 0x4e20, 0x5a2, @loopback, 0x40}}, {{0xa, 0x4e20, 0x268d, @remote, 0xfffffff9}}}, 0x108) 555.575445ms ago: executing program 6 (id=1845): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000e13a988300d2eb98b1a603916059b7000085100000020040009500000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000007140d8c4000c00000009004305070000000000000800000000000000000000006100d5a657ffaa30bc94e77c0e48233475dc55556b41cb22e46cd7de90b3f654086620d5c7cfdf0a4b02608765123ed7450d33affd1c031922339c475de97d25abb1c0522b2f0e69b1bed663c9c895c67a597cbe60d89db826fa370574c2334e4f8b12add61de0687c88d50800fdd80bf12a694bc9c3085fea77888292d90e5fca247310dea4"], 0x0, 0x2d}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'gre0\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="306d09e66589865b4362888bc07d407a180800ec0c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000300)}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x4ffc, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x64010103}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) writev(r5, &(0x7f0000000980)=[{&(0x7f00000002c0)="0f", 0x1}], 0x1) sendmmsg$inet(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e", 0x20}, {&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e", 0x2b}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86", 0x6c}], 0x3}}], 0x1, 0x2890) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000300)=""/80, 0x50}], 0x2}, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) 217.025897ms ago: executing program 6 (id=1846): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x4100000000000000, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0xf439}) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141302) r1 = syz_open_procfs(0x0, 0x0) getdents(r1, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 94.420231ms ago: executing program 2 (id=1847): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x2, 0x190) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10a600, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), 0x0, &(0x7f0000000000)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000880)=[{&(0x7f0000000340)="af8e81fe7876a94dc546f45eae2e95dbe3b0d978db09ef1f7103a58b810006f28d62117a8daa5a002f85fef60df510ca88224913d93e8d3838f8527ddb47d3b6fe2f39fc676096d10317e90bad190121ab6ae719e164eca485beb2a721b9", 0x5e}, {&(0x7f0000000500)="c5fdb98cee3a9dbfd62da6b336ab895d40c7c93d084929bde7e0f428f8fcc7bdde695754bb7b50c23cef14853b173ebf9c54ee25c55f753731de21c31450d32c4110e02b378d16c8987962bbf78816e9f8a40ac2309f43823d870efe2070aabc72e119662d3eda5a736ecbec3f5da9c22c9fe6a1592fdd4064024661b40869bc5e38c6680e3a3284e89abbcc326b34c7b6608074", 0x94}, {&(0x7f0000000600)}, {&(0x7f0000000640)="a610d5d26d836c82ae1c5f2636da38101f08881873a2a0a519339c39015345ed22c0215c1a25fd1a4e06e0d16467ba68382cac418b7f0a0becc640e7408813155d0b85ca25972a8fd68fb6a76ee7a112ec1bcf415ce81508a8693d82a9866de7f6dcceac24293dd2fa65e7d992602a3a43e0de7090bf18b4ab4f9e9b5deadc12895eaa28da96d785c2adef52", 0x8c}, {0x0}], 0x5) 0s ago: executing program 6 (id=1848): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000000010000", 0xfffffffffffffeac) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a00001400028010000b80"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x1a, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000003a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa9aaaaaaa000002069078640101", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) syz_emit_ethernet(0xf5, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a80c0081002c00000403aa2828974826888edaae2b"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) socket$nl_rdma(0x10, 0x3, 0x14) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000003400), 0x42300, 0x0) ioctl$VHOST_SET_FEATURES(r10, 0x4008af00, &(0x7f0000003b40)=0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open_by_handle_at(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe"], 0x1) kernel console output (not intermixed with test programs): wframe+0x77/0x7f [ 335.420972][T10487] RIP: 0033:0x7ff87375d04e [ 335.420981][T10487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 335.420991][T10487] RSP: 002b:00007ff8746e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.421001][T10487] RAX: ffffffffffffffda RBX: 00007ff8746e76c0 RCX: 00007ff87375d04e [ 335.421008][T10487] RDX: 000000000000000f RSI: 00007ff8746e70a0 RDI: 0000000000000004 [ 335.421014][T10487] RBP: 00007ff8746e7090 R08: 0000000000000000 R09: 0000000000000000 [ 335.421020][T10487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.421026][T10487] R13: 00007ff873a16038 R14: 00007ff873a15fa0 R15: 00007ffc571630d8 [ 335.421039][T10487] [ 335.642797][ T5872] usb 6-1: USB disconnect, device number 19 [ 335.661958][ T5925] usb 7-1: USB disconnect, device number 21 [ 335.680210][ T29] usb 2-1: no configurations [ 335.684838][ T29] usb 2-1: can't read configurations, error -22 [ 335.835062][ T29] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 336.015531][ T29] usb 2-1: no configurations [ 336.016605][ T5925] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 336.027996][ T29] usb 2-1: can't read configurations, error -22 [ 336.035549][ T29] usb usb2-port1: attempt power cycle [ 336.102572][ T5872] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 336.162050][T10496] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1168'. [ 336.219739][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 336.226177][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 336.237856][ T5925] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 336.247060][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.255098][ T5925] usb 1-1: Product: syz [ 336.259326][ T5925] usb 1-1: Manufacturer: syz [ 336.263998][ T5925] usb 1-1: SerialNumber: syz [ 336.265522][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 336.278605][ T5925] usb 1-1: config 0 descriptor?? [ 336.283928][ T5872] usb 6-1: config 74 has an invalid interface number: 240 but max is 0 [ 336.286783][ T5925] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 336.301611][ T5872] usb 6-1: config 74 has no interface number 0 [ 336.305175][ T5925] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 336.314006][ T5872] usb 6-1: config 74 interface 240 has no altsetting 0 [ 336.323738][ T5872] usb 6-1: string descriptor 0 read error: -22 [ 336.331120][ T5872] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b4.d6 [ 336.343019][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.363108][ T5872] net1080 6-1:74.240: probe with driver net1080 failed with error -22 [ 336.412160][ T29] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 336.434339][ T29] usb 2-1: no configurations [ 336.438996][ T29] usb 2-1: can't read configurations, error -22 [ 336.455150][ T793] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 336.583873][ T29] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 336.592588][ T5924] usb 6-1: USB disconnect, device number 20 [ 336.606680][ T29] usb 2-1: no configurations [ 336.611305][ T29] usb 2-1: can't read configurations, error -22 [ 336.619145][ T29] usb usb2-port1: unable to enumerate USB device [ 336.627541][ T793] usb 7-1: config 0 has an invalid interface number: 69 but max is 0 [ 336.635854][ T793] usb 7-1: config 0 has no interface number 0 [ 336.642896][ T793] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 336.655680][ T793] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 336.664823][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.672905][ T793] usb 7-1: Product: syz [ 336.677084][ T793] usb 7-1: Manufacturer: syz [ 336.681782][ T793] usb 7-1: SerialNumber: syz [ 336.692118][ T793] usb 7-1: config 0 descriptor?? [ 336.697653][T10496] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 336.708795][ T793] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 336.720408][ T793] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 336.931489][ T30] audit: type=1326 audit(2000000059.787:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10495 comm="syz.6.1168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc98839c819 code=0x0 [ 337.186218][ T5925] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 337.440529][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 337.446520][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 337.462775][ T24] usb 3-1: USB disconnect, device number 30 [ 337.694808][ T5924] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 337.865990][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 337.879121][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 337.898343][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 337.922465][ T5924] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 337.935964][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.950803][ T5924] usb 6-1: Product: syz [ 337.957684][ T5924] usb 6-1: Manufacturer: syz [ 337.965611][ T5924] usb 6-1: SerialNumber: syz [ 337.975789][ T5924] usb 6-1: config 0 descriptor?? [ 337.994453][ T5924] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 338.086767][ T5925] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 338.111768][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 338.413665][ T5925] em28xx 1-1:0.0: board has no eeprom [ 338.496525][ T5925] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 338.601421][ T5925] em28xx 1-1:0.0: dvb set to bulk mode. [ 338.614313][ T793] em28xx 1-1:0.0: Binding DVB extension [ 338.636544][ T5925] usb 1-1: USB disconnect, device number 38 [ 339.179170][ T5925] em28xx 1-1:0.0: Disconnecting em28xx [ 339.202082][ T5924] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 339.215943][ T793] em28xx 1-1:0.0: Registering input extension [ 339.228532][ T5925] em28xx 1-1:0.0: Closing input extension [ 339.253049][ T5925] em28xx 1-1:0.0: Freeing device [ 339.358203][ T5872] usb 7-1: USB disconnect, device number 22 [ 339.362316][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 339.374597][ T5872] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 339.419211][ T5872] cyberjack 7-1:0.69: device disconnected [ 339.424720][ T5924] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 339.461157][ T5924] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 339.484863][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.600049][ T5924] usb 2-1: Product: syz [ 339.610800][ T5924] usb 2-1: Manufacturer: syz [ 339.623055][ T5924] usb 2-1: SerialNumber: syz [ 339.639278][ T5924] usb 2-1: config 0 descriptor?? [ 340.829089][ T5924] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 340.835748][ T793] usb 6-1: USB disconnect, device number 21 [ 341.195361][T10524] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 341.941060][T10546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1180'. [ 342.063582][ T30] audit: type=1400 audit(2000000064.540:699): avc: denied { getopt } for pid=10535 comm="syz.6.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 342.417880][T10555] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 342.448218][ T30] audit: type=1400 audit(2000000064.905:700): avc: denied { open } for pid=10550 comm="syz.5.1183" path="/dev/ptyqe" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 342.644404][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 342.872739][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 342.921630][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.932684][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 342.941785][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.028736][ T793] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 343.052155][ T24] usb 3-1: config 0 descriptor?? [ 343.091031][T10509] overlayfs: workdir and upperdir must be separate subtrees [ 343.199911][ T793] usb 7-1: Using ep0 maxpacket: 16 [ 343.207521][ T793] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 343.221841][ T793] usb 7-1: config 0 interface 0 has no altsetting 0 [ 343.230754][ T793] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 343.241985][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.298074][ T793] usb 7-1: Product: syz [ 343.298392][ T24] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 343.306921][ T793] usb 7-1: Manufacturer: syz [ 343.333212][ T793] usb 7-1: SerialNumber: syz [ 343.343468][ T24] usb 3-1: USB disconnect, device number 31 [ 343.375615][ T793] usb 7-1: config 0 descriptor?? [ 343.566222][ T5924] gspca_zc3xx: reg_w_i err -71 [ 343.661484][ T793] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input26 [ 344.261051][ T30] audit: type=1400 audit(2000000066.635:701): avc: denied { allowed } for pid=10570 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 344.289019][ T793] rc_core: IR keymap rc-imon-pad not found [ 344.300767][ T5924] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 344.307050][ T5924] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 344.339164][ T793] Registered IR keymap rc-empty [ 344.361167][ T793] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 344.373873][ T5924] usb 2-1: USB disconnect, device number 45 [ 344.386543][ T793] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 344.738426][ T30] audit: type=1400 audit(2000000067.084:702): avc: denied { write } for pid=10588 comm="syz.1.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 345.787558][ T30] audit: type=1400 audit(2000000067.084:703): avc: denied { ioctl } for pid=10588 comm="syz.1.1192" path="socket:[34331]" dev="sockfs" ino=34331 ioctlcmd=0x586d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 345.787634][ T30] audit: type=1400 audit(2000000067.084:704): avc: denied { lock } for pid=10588 comm="syz.1.1192" path="/dev/sg0" dev="devtmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 345.796547][T10599] PKCS8: Unsupported PKCS#8 version [ 345.797639][T10599] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1196'. [ 345.804401][T10597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1194'. [ 345.845672][ T5924] IPVS: starting estimator thread 0... [ 345.947077][T10602] IPVS: using max 51 ests per chain, 122400 per kthread [ 346.092162][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 346.100836][ T793] imon:send_packet: packet tx failed (-71) [ 346.128775][ T793] imon 7-1:0.0: remote input dev register failed [ 346.139367][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 346.146523][ T793] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 346.255561][T10610] binder: 10606:10610 ioctl 4018620d 0 returned -22 [ 346.329418][ T24] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 346.481475][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 46601, setting to 64 [ 346.570728][ T24] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 346.585240][ T24] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 346.597090][ T24] usb 1-1: Manufacturer: syz [ 346.609124][ T793] imon 7-1:0.0: unable to initialize intf0, err 0 [ 346.636674][ T793] imon:imon_probe: failed to initialize context! [ 346.776982][ T24] usb 1-1: config 0 descriptor?? [ 346.801841][ T793] imon 7-1:0.0: unable to register, err -19 [ 346.841665][ T793] usb 7-1: USB disconnect, device number 23 [ 346.854888][T10617] ipip0: entered promiscuous mode [ 346.859969][T10617] ipip0: entered allmulticast mode [ 346.866305][T10617] team0: Device ipip0 is of different type [ 346.954803][ T24] rc_core: IR keymap rc-hauppauge not found [ 346.966644][ T24] Registered IR keymap rc-empty [ 346.977693][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 346.991145][ T30] audit: type=1400 audit(2000000069.189:705): avc: denied { shutdown } for pid=10616 comm="syz.6.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 346.992342][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input28 [ 347.047939][T10620] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 347.054447][T10620] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 347.202067][ T30] audit: type=1400 audit(2000000069.386:706): avc: denied { sqpoll } for pid=10613 comm="syz.5.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 347.253129][T10620] vhci_hcd vhci_hcd.0: Device attached [ 347.305319][T10621] vhci_hcd: connection closed [ 347.305911][ T7457] vhci_hcd vhci_hcd.6: stop threads [ 347.323774][ T7457] vhci_hcd vhci_hcd.6: release socket [ 347.332222][ T7457] vhci_hcd vhci_hcd.6: disconnect device [ 347.567761][T10629] comedi comedi3: dt2817: I/O port conflict (0x3,5) [ 347.728783][T10633] 9p: Bad value for 'rfdno' [ 347.977795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 349.886555][ T29] usb 1-1: USB disconnect, device number 39 [ 350.307151][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 350.430412][T10648] xt_l2tp: missing protocol rule (udp|l2tpip) [ 351.710342][T10671] xt_hashlimit: max too large, truncated to 1048576 [ 351.901257][T10675] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.1211'. [ 351.960482][ T29] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 352.061421][T10675] netlink: Unknown conntrack attr (0) [ 352.221665][ T29] usb 2-1: device descriptor read/64, error -71 [ 352.405738][ T5931] kernel read not supported for file /752/schedstat (pid: 5931 comm: kworker/1:8) [ 352.561834][ T29] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 352.617388][T10692] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1220'. [ 352.627938][T10692] netlink: ct family unspecified [ 352.724052][ T29] usb 2-1: device descriptor read/64, error -71 [ 352.857765][ T29] usb usb2-port1: attempt power cycle [ 353.237379][T10696] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1219'. [ 353.258925][T10696] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1219'. [ 353.461504][ T5931] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 353.552479][ T29] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 353.592225][ T29] usb 2-1: device descriptor read/8, error -71 [ 353.653930][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 353.675053][ T5931] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.710324][ T5931] usb 6-1: config 0 interface 0 has no altsetting 0 [ 353.726249][ T5931] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 353.747289][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.755632][ T5931] usb 6-1: Product: syz [ 353.762315][ T5931] usb 6-1: Manufacturer: syz [ 353.767096][ T5931] usb 6-1: SerialNumber: syz [ 353.800675][ T5931] usb 6-1: config 0 descriptor?? [ 353.888983][ T29] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 353.934274][ T29] usb 2-1: device descriptor read/8, error -71 [ 354.125844][ T29] usb usb2-port1: unable to enumerate USB device [ 354.270550][ T5931] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input29 [ 355.788114][ T5931] rc_core: IR keymap rc-imon-pad not found [ 355.798776][ T5931] Registered IR keymap rc-empty [ 355.860371][ T5931] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 355.912126][ T5931] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 356.605069][ T5931] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 356.624812][ T5931] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input30 [ 356.671052][ T5931] imon 6-1:0.0: iMON device (15c2:0041, intf0) on usb<6:22> initialized [ 356.966505][T10726] netlink: zone id is out of range [ 356.982937][T10726] netlink: zone id is out of range [ 356.988873][T10726] netlink: zone id is out of range [ 357.004310][T10726] netlink: zone id is out of range [ 357.039258][T10726] netlink: zone id is out of range [ 357.065986][T10726] netlink: zone id is out of range [ 357.094418][T10726] netlink: zone id is out of range [ 357.121934][T10726] netlink: zone id is out of range [ 357.139561][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 357.146753][ T5931] usb 6-1: USB disconnect, device number 22 [ 357.382145][ T793] kernel read not supported for file /768/schedstat (pid: 793 comm: kworker/0:2) [ 357.491236][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 358.197165][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 358.216450][ T9] usb 2-1: config 10 has an invalid interface number: 29 but max is 0 [ 358.282098][ T9] usb 2-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 358.315860][ T9] usb 2-1: config 10 has no interface number 0 [ 358.322036][ T9] usb 2-1: too many endpoints for config 10 interface 29 altsetting 0: 234, using maximum allowed: 30 [ 358.340762][ T9] usb 2-1: config 10 interface 29 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 234 [ 358.372811][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=3f.7c [ 358.392241][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 358.409677][ T9] usb 2-1: Product: syz [ 358.420185][ T9] usb 2-1: Manufacturer: syz [ 358.685832][ T9] usb 2-1: SerialNumber: syz [ 358.897535][ T30] audit: type=1800 audit(2000000080.322:707): pid=10747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1233" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 359.057932][T10728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.069701][T10728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.215477][ T9] usb 2-1: unknown interface protocol 0xff, assuming v1 [ 359.228965][ T9] usb 2-1: 29:0 : does not exist [ 359.247998][ T30] audit: type=1400 audit(2000000080.668:708): avc: denied { getopt } for pid=10749 comm="syz.2.1236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 359.619140][ T9] usb 2-1: USB disconnect, device number 50 [ 360.126552][ T6778] udevd[6778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:10.29/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.417531][T10758] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1238'. [ 360.561924][T10768] binder: 10767:10768 ioctl c0306201 200000000640 returned -22 [ 360.652343][ T30] audit: type=1400 audit(2000000081.978:709): avc: denied { unmount } for pid=5805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 360.729118][T10772] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1244'. [ 360.752986][T10770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1244'. [ 360.837207][ T5872] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 361.072235][ T5924] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 361.093607][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 361.099948][ T5872] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 361.109225][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.122837][ T5872] pvrusb2: Hardware description: Terratec Grabster AV400 [ 361.129943][ T5872] pvrusb2: ********** [ 361.133967][ T5872] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 361.144100][ T5872] pvrusb2: Important functionality might not be entirely working. [ 361.151951][ T5872] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 361.163288][ T5872] pvrusb2: ********** [ 361.232464][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 361.238762][ T5924] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 361.247302][ T5924] usb 3-1: config 0 has no interface number 0 [ 361.253404][ T5924] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.264350][ T5924] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 361.274353][ T5924] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 361.286419][ T5924] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 361.298834][ T5924] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 361.314591][ T5924] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 361.323676][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.331871][ T5924] usb 3-1: Product: syz [ 361.336133][ T2335] pvrusb2: Invalid write control endpoint [ 361.343772][ T5924] usb 3-1: Manufacturer: syz [ 361.353561][ T5872] usb 2-1: USB disconnect, device number 51 [ 361.357100][ T5924] usb 3-1: SerialNumber: syz [ 361.378383][ T5924] usb 3-1: config 0 descriptor?? [ 361.392516][ T2335] pvrusb2: Invalid write control endpoint [ 361.398469][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 361.407984][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 361.417494][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 361.428957][ T2335] pvrusb2: Device being rendered inoperable [ 361.434887][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 361.442053][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 361.450177][ T2335] pvrusb2: Attached sub-driver cx25840 [ 361.455719][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 361.465925][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 361.624176][ T5924] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 361.978700][ T5924] usb 3-1: USB disconnect, device number 32 [ 362.049639][ T30] audit: type=1400 audit(2000000083.288:710): avc: denied { ioctl } for pid=10788 comm="syz.5.1249" path="socket:[34784]" dev="sockfs" ino=34784 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 362.281556][T10794] net_ratelimit: 742 callbacks suppressed [ 362.281570][T10794] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 363.329602][T10804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.361790][T10804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.594991][ T5872] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 363.629160][T10812] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 363.792813][ T30] audit: type=1400 audit(2000000084.916:711): avc: denied { connect } for pid=10810 comm="syz.0.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 363.816218][ T30] audit: type=1400 audit(2000000084.934:712): avc: denied { write } for pid=10810 comm="syz.0.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 363.908682][ T30] audit: type=1400 audit(2000000085.028:713): avc: denied { ioctl } for pid=10827 comm="syz.5.1261" path="socket:[35542]" dev="sockfs" ino=35542 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 363.949103][ T30] audit: type=1400 audit(2000000085.046:714): avc: denied { getopt } for pid=10827 comm="syz.5.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 364.352764][T10837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10837 comm=syz.6.1263 [ 364.367680][T10837] PKCS7: Unknown OID: [4] 0.0.0.0(bad) [ 364.373351][T10837] PKCS7: Only support pkcs7_signedData type [ 365.999912][T10817] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 365.999954][ T5818] Bluetooth: hci5: command 0x0c1a tx timeout [ 366.776922][T10817] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 366.782959][T10817] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 366.791191][T10817] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 366.935548][ T30] audit: type=1400 audit(2000000087.853:715): avc: denied { read } for pid=10840 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 367.481620][ T793] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 367.517819][T10850] wireguard0: entered promiscuous mode [ 367.523416][T10850] wireguard0: entered allmulticast mode [ 367.555956][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 367.573669][T10849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1267'. [ 367.682815][ T30] audit: type=1400 audit(2000000088.555:716): avc: denied { append } for pid=10855 comm="syz.5.1269" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.977551][ T5818] Bluetooth: hci6: command 0x0c1a tx timeout [ 369.260341][ T5872] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 369.538066][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 369.552050][ T5872] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 369.561676][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.646687][ T5872] pvrusb2: Hardware description: Terratec Grabster AV400 [ 369.659282][ T5872] pvrusb2: ********** [ 369.666905][ T5872] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 369.688983][ T5872] pvrusb2: Important functionality might not be entirely working. [ 369.703662][ T5872] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 369.726862][ T5872] pvrusb2: ********** [ 369.861475][ T2335] pvrusb2: Invalid write control endpoint [ 369.870079][ T29] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 369.923286][ T2335] pvrusb2: Invalid write control endpoint [ 369.937140][ T2335] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 369.957559][ T2335] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 369.976112][ T2335] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 369.994240][ T2335] pvrusb2: Device being rendered inoperable [ 370.006000][ T2335] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 370.020614][ T2335] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 370.045462][ T29] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 370.057125][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.072288][ T2335] pvrusb2: Attached sub-driver cx25840 [ 370.078359][ T2335] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 370.089451][ T2335] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 370.101371][ T29] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 370.112121][T10875] pvrusb2: Attempted to execute control transfer when device not ok [ 370.150359][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.236060][ T29] usb 1-1: config 0 descriptor?? [ 370.346116][ T29] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 370.364835][ T5924] usb 2-1: USB disconnect, device number 52 [ 371.491743][ T5818] Bluetooth: hci6: command 0x0c1a tx timeout [ 372.071181][ T30] audit: type=1400 audit(2000000092.652:717): avc: denied { append } for pid=10917 comm="syz.5.1285" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 373.685474][ T5818] Bluetooth: hci6: command 0x0c1a tx timeout [ 373.851658][ T9] usb 1-1: USB disconnect, device number 40 [ 374.672667][T10944] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1289'. [ 374.753521][ T5931] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 375.070428][T10938] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 375.364133][ T5931] usb 3-1: Using ep0 maxpacket: 16 [ 375.383306][T10956] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 375.386068][ T5931] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.909142][ T5931] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 375.931990][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.951064][ T5931] usb 3-1: Product: syz [ 376.016045][ T5931] usb 3-1: Manufacturer: syz [ 376.021384][ T5931] usb 3-1: SerialNumber: syz [ 376.044959][ T5931] usb 3-1: config 0 descriptor?? [ 376.845668][ T30] audit: type=1400 audit(2000000097.124:718): avc: denied { getopt } for pid=10967 comm="syz.6.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 377.313053][T10974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.322093][T10974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.533765][ T5129] Bluetooth: hci6: command 0x0c1a tx timeout [ 378.549225][ T5924] usb 3-1: USB disconnect, device number 34 [ 380.099872][T11003] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 380.109865][T11003] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 380.199928][T11016] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1305'. [ 380.869525][ T30] audit: type=1326 audit(2000000100.894:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.6.1307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc98839c819 code=0x0 [ 381.980635][ T5818] Bluetooth: hci5: command 0x0c1a tx timeout [ 382.322345][ T5818] Bluetooth: hci6: command 0x0c1a tx timeout [ 383.536578][ T30] audit: type=1400 audit(2000000103.383:720): avc: denied { mounton } for pid=11065 comm="syz.2.1315" path="/290/file1/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 383.934924][ T30] audit: type=1400 audit(2000000103.757:721): avc: denied { read append } for pid=11071 comm="syz.5.1317" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 383.997828][ T30] audit: type=1400 audit(2000000103.757:722): avc: denied { open } for pid=11071 comm="syz.5.1317" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 384.079247][ T30] audit: type=1400 audit(2000000103.757:723): avc: denied { ioctl } for pid=11071 comm="syz.5.1317" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 384.208686][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.215123][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.324869][T11083] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 384.351248][T11083] CIFS mount error: No usable UNC path provided in device string! [ 384.351248][T11083] [ 384.361469][T11083] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 384.926082][T11081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11081 comm=syz.1.1318 [ 384.953668][T11077] block nbd5: shutting down sockets [ 385.197702][ T30] audit: type=1400 audit(2000000104.926:724): avc: denied { bind } for pid=11075 comm="syz.1.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 385.519708][T11097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11097 comm=syz.5.1323 [ 385.574015][T11098] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11098 comm=syz.5.1323 [ 385.587420][T11097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=11097 comm=syz.5.1323 [ 385.600351][T11098] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11098 comm=syz.5.1323 [ 385.613087][T11097] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=11097 comm=syz.5.1323 [ 385.656828][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 385.805828][T11109] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1325'. [ 387.453356][ T30] audit: type=1400 audit(2000000107.041:725): avc: denied { audit_write } for pid=11118 comm="syz.1.1331" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 387.496074][ T5931] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 387.519442][ T30] audit: type=1400 audit(2000000107.106:726): avc: denied { ioctl } for pid=11120 comm="syz.2.1332" path="socket:[37262]" dev="sockfs" ino=37262 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 387.677699][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 387.689853][ T5931] usb 6-1: config 6 has an invalid interface number: 220 but max is 0 [ 387.703930][ T5931] usb 6-1: config 6 has no interface number 0 [ 387.714550][ T5931] usb 6-1: config 6 interface 220 has no altsetting 0 [ 387.723305][ T5931] usb 6-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10 [ 387.754987][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.764404][ T5931] usb 6-1: Product: syz [ 387.768602][ T5931] usb 6-1: Manufacturer: syz [ 387.773836][ T5872] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 387.781858][ T5931] usb 6-1: SerialNumber: syz [ 387.891416][ T5924] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 387.961081][ T5872] usb 3-1: config index 0 descriptor too short (expected 7768, got 18) [ 387.975107][ T5872] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 388.031589][ T5924] usb 1-1: device descriptor read/64, error -71 [ 388.036158][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.082188][ T5872] usb 3-1: config 0 descriptor?? [ 388.270385][ T5931] uvcvideo 6-1:6.220: Found multiple Units with ID 4 [ 388.279662][ T5931] uvcvideo 6-1:6.220: Found Unit with invalid ID 0 [ 388.299051][ T5931] uvcvideo 6-1:6.220: Found UVC 7.ff device syz (174f:5212) [ 388.317917][ T9] usb 3-1: USB disconnect, device number 35 [ 388.326433][ T5924] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 388.346552][ T5931] uvcvideo 6-1:6.220: Entity type for entity Output 4 was not initialized! [ 388.373707][ T5931] uvcvideo 6-1:6.220: Failed to create links for entity 4 [ 388.394476][ T5931] uvcvideo 6-1:6.220: Failed to register entities (-22). [ 388.418889][ T5931] usb 6-1: USB disconnect, device number 24 [ 388.469238][ T5924] usb 1-1: device descriptor read/64, error -71 [ 388.588678][ T5924] usb usb1-port1: attempt power cycle [ 388.982305][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1336'. [ 389.004143][ T5924] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 389.402343][ T5924] usb 1-1: device descriptor read/8, error -71 [ 389.705204][ T5924] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 389.847738][ T5924] usb 1-1: device descriptor read/8, error -71 [ 389.965314][ T5924] usb usb1-port1: unable to enumerate USB device [ 391.520038][T11184] netlink: 'syz.0.1346': attribute type 10 has an invalid length. [ 391.564100][T11184] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.594283][T11184] bond0: (slave team0): Enslaving as an active interface with an up link [ 391.878469][ T30] audit: type=1326 audit(2000000111.176:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87379c819 code=0x7ffc0000 [ 391.953316][ T30] audit: type=1326 audit(2000000111.176:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87379c819 code=0x7ffc0000 [ 392.018958][ T30] audit: type=1326 audit(2000000111.176:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff87379c819 code=0x7ffc0000 [ 392.124868][ T30] audit: type=1326 audit(2000000111.176:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87379c819 code=0x7ffc0000 [ 392.183669][ T30] audit: type=1326 audit(2000000111.176:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87379c819 code=0x7ffc0000 [ 392.261323][ T30] audit: type=1326 audit(2000000111.176:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff87379c819 code=0x7ffc0000 [ 392.486419][ T30] audit: type=1326 audit(2000000111.176:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87379c819 code=0x7ffc0000 [ 392.952633][ T5924] kernel read not supported for file /992/schedstat (pid: 5924 comm: kworker/0:4) [ 393.029107][ T30] audit: type=1326 audit(2000000111.176:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff87379c819 code=0x7ffc0000 [ 393.159897][ T30] audit: type=1326 audit(2000000111.176:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff87379c819 code=0x7ffc0000 [ 393.185179][ T30] audit: type=1326 audit(2000000111.176:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11190 comm="syz.0.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff87379c819 code=0x7ffc0000 [ 393.718483][ T5872] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 393.889106][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 393.899935][ T5872] usb 6-1: no configurations [ 393.904508][ T5872] usb 6-1: can't read configurations, error -22 [ 394.220671][ T5872] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 394.466471][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 394.489850][ T5872] usb 6-1: no configurations [ 394.494628][ T5872] usb 6-1: can't read configurations, error -22 [ 394.536167][ T5872] usb usb6-port1: attempt power cycle [ 395.470075][ T5872] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 395.504391][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 395.510015][ T5872] usb 6-1: no configurations [ 395.521534][ T5872] usb 6-1: can't read configurations, error -22 [ 395.716346][ T5872] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 395.737905][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 395.744655][ T5872] usb 6-1: no configurations [ 395.750793][ T5872] usb 6-1: can't read configurations, error -22 [ 395.764126][ T5872] usb usb6-port1: unable to enumerate USB device [ 396.570227][T11230] netlink: zone id is out of range [ 396.575882][T11230] netlink: zone id is out of range [ 396.605129][T11230] netlink: zone id is out of range [ 396.614198][T11230] netlink: zone id is out of range [ 396.636880][T11230] netlink: zone id is out of range [ 396.667167][T11230] netlink: zone id is out of range [ 396.672377][T11230] netlink: zone id is out of range [ 396.678199][T11230] netlink: zone id is out of range [ 396.687724][T11230] netlink: zone id is out of range [ 396.698346][T11230] netlink: zone id is out of range [ 397.377259][T11244] wg1 speed is unknown, defaulting to 1000 [ 397.415533][ T5924] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 397.554021][T11258] lo: Caught tx_queue_len zero misconfig [ 397.586679][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 397.593218][ T5924] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 397.602385][ T5924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.626381][ T5924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.663391][ T5924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.678274][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.687840][ T5924] usb 2-1: Product: syz [ 397.692051][ T5924] usb 2-1: Manufacturer: syz [ 397.698086][ T5924] usb 2-1: SerialNumber: syz [ 397.822277][ T29] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 398.141130][ T5924] usb 2-1: 0:2 : does not exist [ 398.243380][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 398.252185][ T29] usb 6-1: no configurations [ 398.259772][ T29] usb 6-1: can't read configurations, error -22 [ 399.149299][ T29] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 399.478554][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 399.501674][ T29] usb 6-1: no configurations [ 399.518752][ T29] usb 6-1: can't read configurations, error -22 [ 399.536537][ T29] usb usb6-port1: attempt power cycle [ 399.900811][ T5924] usb 2-1: USB disconnect, device number 53 [ 399.928750][ T29] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 399.929227][ T6778] udevd[6778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.973378][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 399.981620][ T29] usb 6-1: no configurations [ 399.986358][ T29] usb 6-1: can't read configurations, error -22 [ 400.130822][ T29] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 400.216594][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 400.224890][ T29] usb 6-1: no configurations [ 400.232183][ T29] usb 6-1: can't read configurations, error -22 [ 400.240598][ T29] usb usb6-port1: unable to enumerate USB device [ 400.868457][T11304] tmpfs: Unknown parameter 'grpquoê`£×loclimit' [ 401.320080][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 401.320110][ T30] audit: type=1400 audit(2000000120.016:772): avc: denied { write } for pid=11305 comm="syz.0.1386" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 402.610760][ T5872] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 402.781627][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 402.798867][ T5872] usb 1-1: no configurations [ 402.810141][ T5872] usb 1-1: can't read configurations, error -22 [ 402.963283][ T5872] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 403.103046][T11338] comedi comedi1: rti800: I/O port conflict (0x3,16) [ 403.134403][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 403.141144][ T5872] usb 1-1: no configurations [ 403.149361][ T5872] usb 1-1: can't read configurations, error -22 [ 403.184303][ T5872] usb usb1-port1: attempt power cycle [ 403.401340][T11341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1395'. [ 403.497319][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 403.551183][ T5872] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 403.572983][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 403.578651][ T5872] usb 1-1: no configurations [ 403.584047][ T5872] usb 1-1: can't read configurations, error -22 [ 403.722243][ T5872] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 403.734225][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 403.790240][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 403.797498][ T5872] usb 1-1: no configurations [ 403.802087][ T5872] usb 1-1: can't read configurations, error -22 [ 403.889077][ T5872] usb usb1-port1: unable to enumerate USB device [ 404.576992][T11359] wg1 speed is unknown, defaulting to 1000 [ 405.339262][ T30] audit: type=1400 audit(2000000123.786:773): avc: denied { append } for pid=11367 comm="syz.6.1402" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 407.009781][T11386] overlayfs: failed to resolve './file1': -2 [ 407.012824][T11388] net_ratelimit: 1479 callbacks suppressed [ 407.012837][T11388] netlink: zone id is out of range [ 407.038524][T11388] netlink: zone id is out of range [ 407.043684][T11388] netlink: zone id is out of range [ 407.054611][T11388] netlink: zone id is out of range [ 407.056139][ T5924] kernel read not supported for file /879/schedstat (pid: 5924 comm: kworker/0:4) [ 407.059819][T11388] netlink: zone id is out of range [ 407.077089][T11388] netlink: zone id is out of range [ 407.082314][T11388] netlink: zone id is out of range [ 407.083605][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1406'. [ 407.087512][ T30] audit: type=1400 audit(2000000125.414:774): avc: denied { getopt } for pid=11385 comm="syz.6.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 407.129699][T11388] netlink: zone id is out of range [ 407.134869][T11388] netlink: zone id is out of range [ 407.140019][T11388] netlink: zone id is out of range [ 407.916694][ T29] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 409.066835][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 409.073401][ T29] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.106040][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 409.135130][ T29] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 409.152275][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.181903][ T29] usb 2-1: Product: syz [ 409.187171][ T29] usb 2-1: Manufacturer: syz [ 409.190338][T11408] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 409.191763][ T29] usb 2-1: SerialNumber: syz [ 409.229479][ T29] usb 2-1: config 0 descriptor?? [ 409.244166][T11408] netlink: 'syz.6.1415': attribute type 9 has an invalid length. [ 409.271105][T11408] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1415'. [ 409.307851][T11408] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 409.338371][T11408] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 409.473763][ T29] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input33 [ 410.249513][ T29] rc_core: IR keymap rc-imon-pad not found [ 410.274938][ T29] Registered IR keymap rc-empty [ 410.290318][ T29] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 410.430108][ T29] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 410.594524][T11433] FAULT_INJECTION: forcing a failure. [ 410.594524][T11433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.611392][ T29] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 410.648737][T11433] CPU: 1 UID: 0 PID: 11433 Comm: syz.0.1419 Tainted: G L syzkaller #0 PREEMPT(full) [ 410.648763][T11433] Tainted: [L]=SOFTLOCKUP [ 410.648770][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 410.648779][T11433] Call Trace: [ 410.648785][T11433] [ 410.648791][T11433] dump_stack_lvl+0x100/0x190 [ 410.648828][T11433] should_fail_ex.cold+0x5/0xa [ 410.648852][T11433] _copy_from_user+0x2e/0xd0 [ 410.648872][T11433] sk_setsockopt+0x2ee/0x5230 [ 410.648904][T11433] ? __pfx_sk_setsockopt+0x10/0x10 [ 410.648930][T11433] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 410.648959][T11433] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 410.648992][T11433] ? find_held_lock+0x2b/0x80 [ 410.649014][T11433] ? __fget_files+0x215/0x3d0 [ 410.649037][T11433] ? selinux_socket_setsockopt+0x6a/0x80 [ 410.649065][T11433] do_sock_setsockopt+0x193/0x1d0 [ 410.649097][T11433] __sys_setsockopt+0x195/0x220 [ 410.649124][T11433] __x64_sys_setsockopt+0xbd/0x160 [ 410.649146][T11433] ? do_syscall_64+0x95/0xf80 [ 410.649170][T11433] ? lockdep_hardirqs_on+0x78/0x100 [ 410.649196][T11433] do_syscall_64+0x106/0xf80 [ 410.649220][T11433] ? clear_bhb_loop+0x40/0x90 [ 410.649241][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.649257][T11433] RIP: 0033:0x7ff87379c819 [ 410.649272][T11433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.649289][T11433] RSP: 002b:00007ff8746c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 410.649306][T11433] RAX: ffffffffffffffda RBX: 00007ff873a16090 RCX: 00007ff87379c819 [ 410.649317][T11433] RDX: 0000000000000024 RSI: 0000000000000001 RDI: 0000000000000008 [ 410.649328][T11433] RBP: 00007ff8746c6090 R08: 0000000000000004 R09: 0000000000000000 [ 410.649338][T11433] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.649349][T11433] R13: 00007ff873a16128 R14: 00007ff873a16090 R15: 00007ffc571630d8 [ 410.649373][T11433] [ 410.649511][ T29] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input34 [ 410.862659][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 410.873647][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 411.078523][ T29] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:54> initialized [ 411.115157][ T29] usb 2-1: USB disconnect, device number 54 [ 411.194060][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 411.206740][T11438] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 411.215092][ T30] audit: type=1400 audit(2000000129.278:775): avc: denied { setopt } for pid=11437 comm="syz.6.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 411.238744][ T9] usb 6-1: no configurations [ 411.270558][ T9] usb 6-1: can't read configurations, error -22 [ 411.318564][ T30] audit: type=1400 audit(2000000129.371:776): avc: denied { ioctl } for pid=11437 comm="syz.6.1420" path="/dev/ptyr1" dev="devtmpfs" ino=136 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 411.471866][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 411.687519][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 411.699795][ T9] usb 6-1: no configurations [ 411.706997][ T9] usb 6-1: can't read configurations, error -22 [ 411.991192][ T9] usb usb6-port1: attempt power cycle [ 412.100262][ T29] kernel read not supported for file /983/schedstat (pid: 29 comm: kworker/1:1) [ 412.749633][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 412.776473][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 412.784292][ T9] usb 6-1: no configurations [ 412.801469][ T9] usb 6-1: can't read configurations, error -22 [ 412.957970][ T9] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 412.995822][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 413.003430][ T9] usb 6-1: no configurations [ 413.008247][ T9] usb 6-1: can't read configurations, error -22 [ 413.075600][ T9] usb usb6-port1: unable to enumerate USB device [ 413.310396][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 413.537708][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 413.546068][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.557836][ T9] usb 3-1: config 0 has no interfaces? [ 413.570878][ T9] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 413.581623][ T9] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 413.595111][ T9] usb 3-1: Product: syz [ 413.601723][ T9] usb 3-1: Manufacturer: syz [ 413.612094][ T9] usb 3-1: SerialNumber: syz [ 413.630187][ T9] usb 3-1: config 0 descriptor?? [ 413.917760][T11488] overlayfs: failed to clone upperpath [ 414.454785][ T9] usb 3-1: USB disconnect, device number 36 [ 414.480182][T11496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1437'. [ 414.555604][T11498] overlayfs: failed to clone upperpath [ 414.624755][T11500] 9p: Bad value for 'rfdno' [ 415.482785][T11509] netlink: 'syz.5.1441': attribute type 1 has an invalid length. [ 415.510909][T11509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.522859][T11509] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1441'. [ 415.544066][T11509] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.586769][T11509] bond2: (slave ip6gretap1): making interface the new active one [ 415.656997][T11509] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 415.709153][T11512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11512 comm=syz.5.1441 [ 415.872376][T11521] netdevsim netdevsim5: Firmware load for './file0/file0/..' refused, path contains '..' component [ 417.213864][T11535] overlayfs: failed to clone upperpath [ 417.298679][T11540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11540 comm=syz.2.1448 [ 417.717992][T11543] 9p: Bad value for 'rfdno' [ 417.906842][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 418.209866][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.228586][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.258492][ T24] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 418.270832][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.292936][ T24] usb 1-1: config 0 descriptor?? [ 418.451891][ T793] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 418.868750][ T793] usb 3-1: Using ep0 maxpacket: 8 [ 418.893123][ T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.042289][ T793] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 419.126772][T11564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11564 comm=syz.0.1451 [ 419.198728][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.519640][ T793] usb 3-1: config 0 descriptor?? [ 419.601566][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1460'. [ 419.674020][T11569] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1460'. [ 419.746419][ T793] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 419.802899][ T793] usb 3-1: USB disconnect, device number 37 [ 420.298243][T11578] wg1 speed is unknown, defaulting to 1000 [ 420.675634][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 420.682426][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 421.164390][ T24] usb 1-1: USB disconnect, device number 49 [ 421.252453][T11595] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 421.368566][T11596] virtio-fs: tag not found [ 422.384425][T11607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 422.594294][T11609] net_ratelimit: 358 callbacks suppressed [ 422.594310][T11609] netlink: zone id is out of range [ 422.626179][T11609] netlink: zone id is out of range [ 422.663586][T11609] netlink: zone id is out of range [ 422.667230][ T30] audit: type=1400 audit(2000000139.980:777): avc: denied { listen } for pid=11612 comm="syz.2.1472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 422.694503][T11609] netlink: zone id is out of range [ 422.709259][T11609] netlink: zone id is out of range [ 422.740550][T11609] netlink: zone id is out of range [ 422.772407][T11609] netlink: zone id is out of range [ 422.790834][T11609] netlink: zone id is out of range [ 422.815480][T11609] netlink: zone id is out of range [ 422.843409][T11609] netlink: zone id is out of range [ 423.196439][T11633] input: syz0 as /devices/virtual/input/input35 [ 425.975242][ T30] audit: type=1400 audit(2000000143.086:778): avc: denied { write } for pid=11660 comm="syz.2.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 426.057116][ T30] audit: type=1400 audit(2000000143.114:779): avc: denied { read } for pid=11660 comm="syz.2.1487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 426.137465][ T30] audit: type=1400 audit(2000000143.152:780): avc: denied { shutdown } for pid=11662 comm="syz.1.1488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 426.240362][T11667] netlink: 'syz.5.1489': attribute type 3 has an invalid length. [ 427.626694][T11696] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 427.739107][T11688] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1494'. [ 427.832054][T11688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1494'. [ 427.926581][T11688] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1494'. [ 427.942695][T11709] input: syz0 as /devices/virtual/input/input36 [ 428.064979][T11688] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1494'. [ 428.108964][T11708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1501'. [ 428.121203][T11708] : entered promiscuous mode [ 428.959429][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 429.131732][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 429.159349][ T24] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 429.189926][ T24] usb 3-1: config 0 has no interface number 0 [ 429.220781][ T24] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 429.247002][ T30] audit: type=1400 audit(2000000146.145:781): avc: denied { setopt } for pid=11729 comm="syz.5.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 429.268188][ T24] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 429.304252][ T24] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 429.334417][ T24] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 429.547408][ T793] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 429.986183][ T793] usb 1-1: device descriptor read/64, error -71 [ 430.261483][ T24] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.276635][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 430.286470][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.294812][ T24] usb 3-1: Product: syz [ 430.299471][ T24] usb 3-1: Manufacturer: syz [ 430.304680][ T24] usb 3-1: SerialNumber: syz [ 430.316702][ T24] usb 3-1: config 0 descriptor?? [ 430.464554][ T793] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 430.637701][ T793] usb 1-1: device descriptor read/64, error -71 [ 430.755548][ T793] usb usb1-port1: attempt power cycle [ 431.414773][ T30] audit: type=1400 audit(2000000148.175:782): avc: denied { cmd } for pid=11747 comm="syz.5.1513" path="socket:[40460]" dev="sockfs" ino=40460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 431.470111][ T793] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 431.514826][ T793] usb 1-1: device descriptor read/8, error -71 [ 431.770691][ T793] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 431.792464][ T793] usb 1-1: device descriptor read/8, error -71 [ 431.930727][ T793] usb usb1-port1: unable to enumerate USB device [ 431.942016][ T24] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 432.008626][ T24] usb 3-1: USB disconnect, device number 38 [ 432.914685][T11774] overlayfs: failed to clone upperpath [ 433.295428][T11784] fuse: Bad value for 'fd' [ 433.449031][ T29] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 433.798164][ T29] usb 1-1: device descriptor read/64, error -71 [ 434.246553][ T29] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 434.443198][ T29] usb 1-1: device descriptor read/64, error -71 [ 434.574870][ T29] usb usb1-port1: attempt power cycle [ 434.902622][ T5925] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 435.001522][ T29] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 435.054627][ T29] usb 1-1: device descriptor read/8, error -71 [ 435.233988][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 435.251424][ T5925] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 435.259253][ T5925] usb 6-1: can't read configurations, error -61 [ 435.415889][T11814] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 435.622818][ T29] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 435.672901][ T29] usb 1-1: device descriptor read/8, error -71 [ 435.715073][ T5925] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 435.790056][ T29] usb usb1-port1: unable to enumerate USB device [ 435.886060][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 436.230738][ T5925] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 436.297323][ T5925] usb 6-1: can't read configurations, error -61 [ 436.330131][ T5925] usb usb6-port1: attempt power cycle [ 437.051947][ T5925] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 437.062523][ T29] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 437.233289][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 437.235047][ T5925] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 437.235078][ T5925] usb 6-1: can't read configurations, error -61 [ 437.266232][ T30] audit: type=1400 audit(2000000153.648:783): avc: denied { map } for pid=11824 comm="syz.1.1537" path="socket:[40549]" dev="sockfs" ino=40549 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 437.268176][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 437.365158][ T29] usb 3-1: not running at top speed; connect to a high speed hub [ 437.386322][ T29] usb 3-1: config 255 has an invalid interface number: 57 but max is 0 [ 437.397036][ T5925] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 437.397695][ T29] usb 3-1: config 255 has no interface number 0 [ 437.427748][ T29] usb 3-1: config 255 interface 57 has no altsetting 0 [ 437.427884][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 437.445336][ T5925] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 437.451988][ T29] usb 3-1: New USB device found, idVendor=0c45, idProduct=62bc, bcdDevice=fb.76 [ 437.462915][ T5925] usb 6-1: can't read configurations, error -61 [ 437.468031][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.469529][ T5925] usb usb6-port1: unable to enumerate USB device [ 437.492528][ T29] usb 3-1: Product: syz [ 437.496691][ T29] usb 3-1: Manufacturer: syz [ 437.510775][ T29] usb 3-1: SerialNumber: syz [ 437.782967][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.813056][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.853482][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.862039][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.238445][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.270082][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.294715][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.337232][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.625400][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.662686][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.704295][ T29] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62bc [ 438.727075][ T29] gspca_sn9c20x: Write register 1000 failed -71 [ 438.741485][ T29] gspca_sn9c20x: Device initialization failed [ 438.755371][ T29] gspca_sn9c20x 3-1:255.57: probe with driver gspca_sn9c20x failed with error -71 [ 438.772111][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 438.799300][ T29] usb 3-1: USB disconnect, device number 39 [ 439.362109][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.629671][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 439.638921][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.649070][ T9] usb 1-1: config 0 descriptor?? [ 439.718511][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 440.014224][ T29] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 440.278398][ T29] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 440.743374][ T29] usb 6-1: config 0 has no interface number 0 [ 440.757747][ T5818] Bluetooth: hci6: unexpected event for opcode 0x080f [ 440.789589][ T29] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 440.809659][ T29] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.842268][ T29] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 440.860229][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.893599][ T29] usb 6-1: Product: syz [ 440.905574][ T29] usb 6-1: Manufacturer: syz [ 440.919110][ T29] usb 6-1: SerialNumber: syz [ 440.940517][ T29] usb 6-1: config 0 descriptor?? [ 440.953371][T11862] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 440.973659][ T29] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 440.998008][T11877] netlink: 'syz.6.1554': attribute type 9 has an invalid length. [ 441.005858][T11877] netlink: 'syz.6.1554': attribute type 11 has an invalid length. [ 441.013782][T11877] netlink: 'syz.6.1554': attribute type 12 has an invalid length. [ 441.021667][T11877] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.1554'. [ 441.031144][T11877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1554'. [ 441.052153][ T29] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 441.338316][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 441.920359][ T9] pwc: send_video_command error -71 [ 441.944914][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 441.973484][ T9] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 442.021426][ T9] usb 1-1: USB disconnect, device number 58 [ 442.722646][ T5931] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 442.919715][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 442.946549][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 442.983706][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 443.017166][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 443.069219][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 443.117120][ T5931] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 443.128130][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.154748][ T5931] usb 1-1: Product: syz [ 443.167809][ T5931] usb 1-1: Manufacturer: syz [ 443.180953][ T5931] usb 1-1: SerialNumber: syz [ 443.209054][ T5931] usb 1-1: config 0 descriptor?? [ 443.231173][ T5931] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37 [ 444.062240][T11916] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 444.114842][T11909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.138784][T11909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.383540][ T29] usb 1-1: USB disconnect, device number 59 [ 445.096325][ T5818] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 445.106871][ T5818] Bluetooth: hci6: Injecting HCI hardware error event [ 445.118138][ T5818] Bluetooth: hci6: hardware error 0x00 [ 445.267799][ T5924] usb 6-1: USB disconnect, device number 41 [ 445.388036][ T5924] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 445.417012][ T5924] cyberjack 6-1:0.69: device disconnected [ 445.753323][ T5924] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 445.934560][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 445.972373][ T5924] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 446.007742][ T5924] usb 6-1: can't read configurations, error -61 [ 446.170948][ T5924] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 446.300067][T11942] fuse: Unknown parameter 'grou00000000000000000000' [ 446.341565][T11943] netlink: 'syz.1.1571': attribute type 10 has an invalid length. [ 446.371253][T11943] net_ratelimit: 359 callbacks suppressed [ 446.371262][T11943] wlan1: mtu less than device minimum [ 446.442252][T11943] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 446.453024][ T30] audit: type=1400 audit(2000000161.239:784): avc: denied { getopt } for pid=11947 comm="syz.2.1574" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 446.575775][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 446.615715][ T5924] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 446.626244][ T5924] usb 6-1: can't read configurations, error -61 [ 446.658364][ T5924] usb usb6-port1: attempt power cycle [ 446.812124][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 446.973622][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 446.980230][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.992071][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.002163][T11964] netlink: 'syz.0.1578': attribute type 1 has an invalid length. [ 447.002330][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 447.023314][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 447.030185][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 447.039513][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.047656][ T5924] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 447.059384][ T9] usb 3-1: config 0 descriptor?? [ 447.068024][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 447.077852][ T5924] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 447.079153][T11964] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.085766][ T5924] usb 6-1: can't read configurations, error -61 [ 447.182119][T11966] bond1: (slave geneve2): making interface the new active one [ 447.197678][T11966] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 447.238734][ T5924] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 447.344065][ T5818] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 447.362167][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 447.443386][ T5924] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 447.450970][ T5924] usb 6-1: can't read configurations, error -61 [ 447.468046][ T5924] usb usb6-port1: unable to enumerate USB device [ 447.642157][ T9] hid (null): unknown global tag 0xe [ 447.647484][ T9] hid (null): unknown global tag 0xd [ 447.652802][ T9] hid (null): unknown global tag 0xc [ 447.659026][ T9] hid (null): bogus close delimiter [ 447.665232][ T9] hid (null): nested delimiters [ 447.670099][ T9] hid (null): nested delimiters [ 447.674944][ T9] hid (null): nested delimiters [ 447.680461][ T9] hid (null): unknown global tag 0xd [ 447.685731][ T9] hid (null): global environment stack overflow [ 448.292931][ T30] audit: type=1400 audit(2000000162.464:785): avc: denied { bind } for pid=11969 comm="syz.1.1579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 448.414094][ T29] usb 3-1: USB disconnect, device number 40 [ 448.876542][T11980] comedi comedi3: pcl730: I/O port conflict (0x3,4) [ 449.211304][T11986] fuse: Unknown parameter 'group_i00000000000000000000' [ 449.882007][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.888799][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.702099][T12001] overlayfs: failed to clone upperpath [ 450.897164][T12016] fuse: Unknown parameter 'group_i00000000000000000000' [ 451.028333][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 451.397251][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 451.411921][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 451.419704][ T9] usb 3-1: can't read configurations, error -61 [ 451.611962][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 451.643524][ T5931] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 451.856871][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 451.864105][ T5931] usb 6-1: Using ep0 maxpacket: 8 [ 451.874341][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 451.885435][ T5931] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 451.894931][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.922455][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 451.945955][ T5931] usb 6-1: config 0 descriptor?? [ 451.973300][ T9] usb 3-1: can't read configurations, error -61 [ 451.988228][ T9] usb usb3-port1: attempt power cycle [ 452.176845][ T5931] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 452.211664][ T5931] usb 6-1: USB disconnect, device number 46 [ 452.273808][ T29] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 452.438358][ T29] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 452.445063][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 452.457930][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.473024][ T29] usb 1-1: Product: syz [ 452.478999][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 452.484167][ T29] usb 1-1: Manufacturer: syz [ 452.486099][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 452.497288][ T9] usb 3-1: can't read configurations, error -61 [ 452.503666][ T29] usb 1-1: SerialNumber: syz [ 452.515586][ T29] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 452.561894][ T5931] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 452.647928][ T9] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 452.670832][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 452.678018][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 452.685856][ T9] usb 3-1: can't read configurations, error -61 [ 452.693148][ T9] usb usb3-port1: unable to enumerate USB device [ 452.756225][T12045] netlink: 'syz.5.1605': attribute type 7 has an invalid length. [ 453.731735][ T5931] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 453.739229][ T5931] ath9k_htc: Failed to initialize the device [ 453.769503][ T5931] usb 1-1: ath9k_htc: USB layer deinitialized [ 453.799130][T12055] fuse: Unknown parameter 'group_i00000000000000000000' [ 453.891441][T12059] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1610'. [ 453.902261][ T30] audit: type=1326 audit(2000000168.217:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9799c819 code=0x7ffc0000 [ 453.991407][ T30] audit: type=1326 audit(2000000168.217:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9799c819 code=0x7ffc0000 [ 454.984944][ T30] audit: type=1326 audit(2000000168.283:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2b9799c819 code=0x7ffc0000 [ 455.051347][ T5872] usb 1-1: USB disconnect, device number 60 [ 455.170240][ T30] audit: type=1400 audit(2000000168.301:789): avc: denied { kexec_image_load } for pid=12056 comm="syz.5.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 455.293875][ T30] audit: type=1326 audit(2000000168.301:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9799c819 code=0x7ffc0000 [ 455.647180][ T30] audit: type=1326 audit(2000000168.301:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9799c819 code=0x7ffc0000 [ 456.029605][ T30] audit: type=1326 audit(2000000168.329:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f2b9799c819 code=0x7ffc0000 [ 456.138538][ T30] audit: type=1326 audit(2000000168.329:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9799c819 code=0x7ffc0000 [ 456.216099][ T30] audit: type=1326 audit(2000000168.329:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b9799c819 code=0x7ffc0000 [ 456.735739][ T30] audit: type=1326 audit(2000000168.329:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12056 comm="syz.5.1609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b9799c819 code=0x7ffc0000 [ 456.791647][T12095] fuse: Unknown parameter 'group_id00000000000000000000' [ 457.736224][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 457.960436][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 457.967610][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 457.984896][ T9] usb 3-1: can't read configurations, error -61 [ 458.142221][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 458.334553][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 458.346009][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 458.360163][ T9] usb 3-1: can't read configurations, error -61 [ 458.370967][ T9] usb usb3-port1: attempt power cycle [ 458.762262][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 458.788227][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 458.795475][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 458.803061][ T9] usb 3-1: can't read configurations, error -61 [ 458.954537][ T5931] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 458.954670][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 458.987208][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 458.994341][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 459.002158][ T9] usb 3-1: can't read configurations, error -61 [ 459.009067][ T9] usb usb3-port1: unable to enumerate USB device [ 459.031168][ T5872] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 459.128737][ T5931] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 459.139988][ T5931] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 459.151334][ T5931] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 459.162560][ T5931] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 459.174868][ T5931] usb 6-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40 [ 459.184219][ T5931] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.192534][ T5931] usb 6-1: Product: syz [ 459.196805][ T5931] usb 6-1: Manufacturer: syz [ 459.201550][ T5931] usb 6-1: SerialNumber: syz [ 459.210599][T12133] netlink: 'syz.1.1633': attribute type 2 has an invalid length. [ 459.211057][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 459.229827][T12133] hmaÓË224): entered promiscuous mode [ 459.230238][T12128] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 459.244508][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.256045][ T5872] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 459.267052][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.278082][ T5872] usb 1-1: config 0 descriptor?? [ 459.484044][T12128] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 459.491342][T12128] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 459.503339][ T5872] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 459.518624][ T5872] usb 1-1: USB disconnect, device number 61 [ 459.786845][T12134] tipc: Started in network mode [ 459.791906][T12134] tipc: Node identity 080211000001, cluster identity 4711 [ 459.799809][T12134] tipc: Enabled bearer , priority 10 [ 459.834583][T12134] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 459.855736][ T9] wg1 speed is unknown, defaulting to 1000 [ 460.155561][ T5931] cdc_ncm 6-1:1.0: bind() failure [ 460.169487][ T5931] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 460.180521][ T5931] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 460.193043][ T5931] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 460.211980][ T5931] usb 6-1: USB disconnect, device number 47 [ 460.294312][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1636'. [ 460.742866][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 460.742881][ T30] audit: type=1400 audit(2000000174.616:829): avc: denied { read } for pid=12149 comm="syz.0.1640" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 460.770983][ T30] audit: type=1400 audit(2000000174.616:830): avc: denied { open } for pid=12149 comm="syz.0.1640" path="net:[4026532806]" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 460.911298][ T793] tipc: Node number set to 134418688 [ 460.942975][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 461.327553][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 461.337858][ T9] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.366863][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 461.389173][ T9] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 461.415709][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.438917][ T9] usb 3-1: Product: syz [ 461.448550][ T9] usb 3-1: Manufacturer: syz [ 461.460822][ T9] usb 3-1: SerialNumber: syz [ 461.482970][ T9] usb 3-1: config 0 descriptor?? [ 461.724205][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 462.043740][ T9] rc_core: IR keymap rc-imon-pad not found [ 462.053733][ T9] Registered IR keymap rc-empty [ 462.059673][ T9] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 462.070404][ T9] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 462.141344][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 462.164510][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input39 [ 462.183789][ T9] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:49> initialized [ 462.410681][T12168] sctp: [Deprecated]: syz.0.1643 (pid 12168) Use of int in maxseg socket option. [ 462.410681][T12168] Use struct sctp_assoc_value instead [ 462.792416][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 462.844384][T12180] netlink: zone id is out of range [ 462.850777][T12180] netlink: zone id is out of range [ 462.855893][T12180] netlink: zone id is out of range [ 462.861057][T12180] netlink: zone id is out of range [ 462.866155][T12180] netlink: zone id is out of range [ 462.871270][T12180] netlink: zone id is out of range [ 462.876363][T12180] netlink: zone id is out of range [ 462.881959][T12180] netlink: zone id is out of range [ 462.887053][T12180] netlink: zone id is out of range [ 462.899611][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 462.902202][ T5931] usb 3-1: USB disconnect, device number 49 [ 462.995098][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 463.007349][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.027082][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.036798][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 463.053488][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.064164][ T9] usb 1-1: config 0 descriptor?? [ 463.348184][T12168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.356734][T12168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.370147][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 463.376978][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 463.386764][ T9] usb 1-1: USB disconnect, device number 62 [ 463.393529][ T793] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 463.564684][ T793] usb 6-1: too many configurations: 72, using maximum allowed: 8 [ 464.049096][T12195] ptrace attach of "./syz-executor exec"[5807] was attempted by ""[12195] [ 464.150382][ T793] usb 6-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 464.164297][ T793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.175067][ T793] usb 6-1: config 0 descriptor?? [ 464.216669][T12198] sp0: Synchronizing with TNC [ 464.224362][T12197] [U] è [ 464.384656][ T793] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 464.406700][ T24] usb 6-1: USB disconnect, device number 48 [ 464.545242][T12207] comedi comedi3: pcl730: I/O port conflict (0x3,4) [ 464.556152][ T793] usb 3-1: Using ep0 maxpacket: 32 [ 464.563891][ T793] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 464.572646][ T793] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 464.580984][ T793] usb 3-1: config 0 has no interface number 0 [ 464.589145][ T793] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 464.597201][ T793] usb 3-1: config 0 has no interface number 0 [ 464.604309][ T793] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 464.613969][ T793] usb 3-1: config 0 has no interface number 0 [ 464.620969][ T793] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 464.629659][ T793] usb 3-1: config 0 has no interface number 0 [ 464.637007][ T793] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 464.645197][ T793] usb 3-1: config 0 has no interface number 0 [ 464.652270][ T793] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 464.660367][ T793] usb 3-1: config 0 has no interface number 0 [ 464.668041][ T793] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 464.676276][ T793] usb 3-1: config 0 has no interface number 0 [ 464.683246][ T793] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 464.691514][ T793] usb 3-1: config 0 has no interface number 0 [ 464.699637][ T793] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 464.708865][ T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.717078][ T793] usb 3-1: Product: syz [ 464.721303][ T793] usb 3-1: Manufacturer: syz [ 464.725958][ T793] usb 3-1: SerialNumber: syz [ 464.733335][ T793] usb 3-1: config 0 descriptor?? [ 464.751162][ T793] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 465.015540][ T793] etas_es58x 3-1:0.2: could not parse product info: '424242424242' [ 465.585094][T12238] overlayfs: missing 'lowerdir' [ 465.897705][ T5474] etas_es58x 3-1:0.2 can0: bit-timing not yet defined [ 466.618784][ T24] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 466.710115][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 466.719290][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 466.728445][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 466.737616][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 466.746751][ C1] etas_es58x 3-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 466.755896][ C1] net_ratelimit: 188 callbacks suppressed [ 466.755907][ C1] etas_es58x 3-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 466.827882][ T5872] usb 3-1: USB disconnect, device number 50 [ 466.847978][ T5474] etas_es58x 3-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 466.858020][T12243] rose0: entered allmulticast mode [ 466.895651][ T5872] etas_es58x 3-1:0.2: Disconnecting syz syz [ 466.921333][ T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 466.938968][T12252] fuse: Bad value for 'user_id' [ 466.941922][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.946220][T12252] fuse: Bad value for 'user_id' [ 466.958457][ T24] usb 6-1: Product: syz [ 466.962811][ T24] usb 6-1: Manufacturer: syz [ 466.967670][ T24] usb 6-1: SerialNumber: syz [ 466.984151][ T24] usb 6-1: config 0 descriptor?? [ 467.028458][T12256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1668'. [ 467.037986][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'. [ 467.218836][ T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 467.377649][ T5872] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 467.546034][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 467.564029][ T5872] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 467.580985][ T5872] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 467.606053][ T5872] usb 3-1: config 63 has no interface number 0 [ 467.619288][ T5872] usb 3-1: config 63 interface 66 has no altsetting 0 [ 467.635869][ T5872] usb 3-1: New USB device found, idVendor=170f, idProduct=8acf, bcdDevice=39.f4 [ 467.656393][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.679393][ T5872] usb 3-1: Product: syz [ 467.686709][ T5872] usb 3-1: Manufacturer: syz [ 467.697005][ T5872] usb 3-1: SerialNumber: syz [ 468.247507][ T30] audit: type=1400 audit(2000000181.633:831): avc: denied { bind } for pid=12247 comm="syz.2.1665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 468.258004][T12250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.296898][ T30] audit: type=1400 audit(2000000181.633:832): avc: denied { name_bind } for pid=12247 comm="syz.2.1665" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 468.327249][T12250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.356724][ T30] audit: type=1400 audit(2000000181.633:833): avc: denied { node_bind } for pid=12247 comm="syz.2.1665" saddr=10.1.1.2 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 468.450822][ T5872] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (170f:8acf) [ 468.473530][ T5872] uvcvideo 3-1:63.66: No valid video chain found. [ 468.498901][ T5872] usb 3-1: USB disconnect, device number 51 [ 468.635290][T12305] wg1 speed is unknown, defaulting to 1000 [ 468.708856][T12309] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1672'. [ 469.238173][T12327] fuse: Bad value for 'user_id' [ 469.250666][T12327] fuse: Bad value for 'user_id' [ 469.334855][T12329] netlink: 'syz.1.1679': attribute type 10 has an invalid length. [ 469.348747][T12329] veth0_vlan: left promiscuous mode [ 469.354333][T12329] veth0_vlan: entered promiscuous mode [ 469.360660][T12329] team0: Device veth0_vlan failed to register rx_handler [ 469.459775][T12334] sctp: [Deprecated]: syz.1.1681 (pid 12334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.459775][T12334] Use struct sctp_sack_info instead [ 469.644349][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1682'. [ 469.686775][ T5872] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 469.695563][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1682'. [ 469.858612][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 469.866904][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 469.887400][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 469.906492][ T5872] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 469.915819][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.938510][ T5872] usb 3-1: Product: syz [ 469.949727][ T5872] usb 3-1: Manufacturer: syz [ 469.959959][ T5872] usb 3-1: SerialNumber: syz [ 469.984609][ T5872] usb 3-1: config 0 descriptor?? [ 470.098781][T12342] netlink: 'syz.6.1683': attribute type 3 has an invalid length. [ 470.109065][T12342] netlink: 'syz.6.1683': attribute type 3 has an invalid length. [ 470.119068][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1683'. [ 470.205180][T12342] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1683'. [ 470.226199][ T5872] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 470.308755][ T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 470.340527][ T24] usb 6-1: USB disconnect, device number 49 [ 470.444343][T12350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 470.575830][ T5872] rc_core: IR keymap rc-imon-pad not found [ 470.581888][ T5872] Registered IR keymap rc-empty [ 470.587121][ T5872] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 470.598117][ T5872] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 470.671264][ T5872] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 470.685597][ T5872] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input41 [ 470.705623][ T5872] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:52> initialized [ 471.163091][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 471.170255][ T5872] usb 3-1: USB disconnect, device number 52 [ 471.264646][T12372] netlink: 17279 bytes leftover after parsing attributes in process `syz.5.1690'. [ 472.391105][ T30] audit: type=1400 audit(2000000185.515:834): avc: denied { ioctl } for pid=12388 comm="syz.0.1695" path="socket:[44158]" dev="sockfs" ino=44158 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 473.398209][ T30] audit: type=1400 audit(2000000186.310:835): avc: denied { append } for pid=12394 comm="syz.2.1697" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 473.695953][T12407] wg1 speed is unknown, defaulting to 1000 [ 474.585856][T12417] wg1 speed is unknown, defaulting to 1000 [ 474.882494][ T30] audit: type=1400 audit(2000000187.798:836): avc: denied { setopt } for pid=12414 comm="syz.5.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 476.001139][T12424] overlayfs: failed to resolve './file1/file0': -2 [ 477.285315][ T30] audit: type=1400 audit(2000000190.090:837): avc: denied { connect } for pid=12442 comm="syz.6.1710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 477.306806][T12446] binder: 12442:12446 ioctl c0306201 2000000000c0 returned -14 [ 477.316401][T12446] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1710'. [ 478.818735][ T793] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 478.901776][T12461] overlayfs: failed to clone upperpath [ 478.926046][T12463] binder: 12462:12463 ioctl c0306201 2000000006c0 returned -22 [ 479.061517][ T793] usb 3-1: Using ep0 maxpacket: 16 [ 479.088794][ T793] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 479.107381][ T793] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 479.123521][ T793] usb 3-1: Product: syz [ 479.127967][ T793] usb 3-1: Manufacturer: syz [ 479.142586][ T793] usb 3-1: SerialNumber: syz [ 479.162222][ T793] usb 3-1: config 0 descriptor?? [ 479.200356][ T5924] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 479.308762][ T30] audit: type=1400 audit(2000000960.179:838): avc: denied { listen } for pid=12468 comm="syz.5.1719" path=2F3138372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 479.365701][ T5924] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 479.382946][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.396332][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.396883][ T5924] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 479.411432][T12448] vlan2: entered allmulticast mode [ 479.434332][T12448] bond0: entered allmulticast mode [ 479.446863][T12448] bond_slave_0: entered allmulticast mode [ 479.456449][ T5924] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 479.470640][ T5924] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 479.476794][T12448] bond_slave_1: entered allmulticast mode [ 479.483403][ T5924] usb 1-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40 [ 479.505047][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.513149][ T5924] usb 1-1: Product: syz [ 479.517426][ T5924] usb 1-1: Manufacturer: syz [ 479.522151][ T793] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 479.533361][ T5924] usb 1-1: SerialNumber: syz [ 479.553309][T12463] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 479.685730][ T5872] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 479.728558][ T793] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 479.738704][ T793] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 479.773142][ T793] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 479.785342][T12463] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 479.794846][ T793] usb 3-1: USB disconnect, device number 53 [ 479.809553][ T5872] usb 6-1: device descriptor read/64, error -71 [ 479.811804][T12463] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 480.037769][ T5872] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 480.190709][ T5872] usb 6-1: device descriptor read/64, error -71 [ 480.306152][ T5872] usb usb6-port1: attempt power cycle [ 480.407346][T12463] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 480.428737][T12463] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 480.468737][ T30] audit: type=1400 audit(2000000961.397:839): avc: denied { ioctl } for pid=12493 comm="syz.1.1726" path="socket:[43216]" dev="sockfs" ino=43216 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 480.635753][ T5924] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 480.670740][ T5924] cdc_ncm 1-1:1.0: setting rx_max = 16384 [ 480.672552][ T5872] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 480.704521][ T5872] usb 6-1: device descriptor read/8, error -71 [ 481.171492][ T5924] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 481.226372][ T5924] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 481.238904][ T5872] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 481.333685][ T5872] usb 6-1: device descriptor read/8, error -71 [ 481.440288][ T5872] usb usb6-port1: unable to enumerate USB device [ 481.465724][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1729'. [ 481.813248][ T5924] usb 1-1: USB disconnect, device number 63 [ 481.862124][ T5924] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 481.973021][ T793] IPVS: starting estimator thread 0... [ 481.979296][T12519] fuse: Bad value for 'user_id' [ 481.988570][T12519] fuse: Bad value for 'user_id' [ 482.057462][T12518] IPVS: using max 44 ests per chain, 105600 per kthread [ 483.854178][T12541] overlayfs: failed to clone upperpath [ 484.197650][T12548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 484.204888][T12548] IPv6: NLM_F_CREATE should be set when creating new route [ 484.212126][T12548] IPv6: NLM_F_CREATE should be set when creating new route [ 484.219331][T12548] IPv6: NLM_F_CREATE should be set when creating new route [ 484.429931][ T30] audit: type=1400 audit(2000000965.545:840): avc: denied { accept } for pid=12547 comm="syz.5.1741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 484.551598][T12554] syzkaller1: entered allmulticast mode [ 485.509777][T12568] overlayfs: missing 'lowerdir' [ 485.773048][T12570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 486.011842][T12579] overlayfs: missing 'lowerdir' [ 486.313879][T12583] overlayfs: missing 'lowerdir' [ 487.000702][T12601] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 487.050161][ T30] audit: type=1400 audit(2000000968.243:841): avc: denied { mount } for pid=12595 comm="syz.0.1755" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 487.457311][ T5931] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 487.619438][ T5931] usb 1-1: Using ep0 maxpacket: 8 [ 487.627657][ T5931] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.640172][ T5931] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 487.653720][ T5931] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 487.666862][ T5931] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 487.678458][ T5931] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 487.704841][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.830248][ T5931] hub 1-1:1.0: bad descriptor, ignoring hub [ 487.850562][T12594] binder: 12593:12594 ioctl 8983 200000000080 returned -22 [ 487.860249][ T5931] hub 1-1:1.0: probe with driver hub failed with error -5 [ 487.870642][ T5931] cdc_wdm 1-1:1.0: skipping garbage [ 487.876526][ T5931] cdc_wdm 1-1:1.0: skipping garbage [ 487.913305][ T5931] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 487.920031][ T5931] cdc_wdm 1-1:1.0: Unknown control protocol [ 487.974072][T12594] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 488.492766][ T30] audit: type=1400 audit(2000000969.818:842): avc: denied { mounton } for pid=12603 comm="syz.2.1756" path="/379/file0" dev="tmpfs" ino=2215 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 488.548945][T12611] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 488.556935][T12611] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 488.565431][T12611] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 488.573260][T12611] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 488.634798][ T30] audit: type=1400 audit(2000000969.965:843): avc: denied { watch_mount } for pid=12614 comm="syz.6.1758" path="/160/file1" dev="tmpfs" ino=898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 488.701875][ T30] audit: type=1400 audit(2000000969.996:844): avc: denied { read } for pid=12614 comm="syz.6.1758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 488.783773][T12599] usb 1-1: reset high-speed USB device number 64 using dummy_hcd [ 489.137651][T12599] overlayfs: failed to resolve '/ ': -2 [ 489.299944][ T5818] Bluetooth: hci5: unexpected event for opcode 0x0c56 [ 489.914521][ C0] hrtimer: interrupt took 22757 ns [ 490.098006][T12630] overlayfs: missing 'workdir' [ 490.254294][ T5872] usb 1-1: USB disconnect, device number 64 [ 490.271435][ T30] audit: type=1400 audit(2000000971.676:845): avc: denied { unmount } for pid=5804 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 490.885797][T12636] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 491.029609][ T5872] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 491.056280][T12656] tmpfs: Bad value for 'mpol' [ 491.274808][T12659] overlayfs: unescaped trailing colons in lowerdir mount option. [ 491.360366][T12660] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 491.675650][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.687493][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.698481][ T5872] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 491.708722][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.741986][ T5872] usb 6-1: config 0 descriptor?? [ 492.011226][ T30] audit: type=1400 audit(2000000973.492:846): avc: denied { create } for pid=12662 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 492.254839][ T5872] hid_parser_main: 215 callbacks suppressed [ 492.254852][ T5872] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 492.291950][ T5872] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 492.396630][ T5872] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 492.412111][ T5872] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 492.427782][ T5872] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 492.462389][ T5872] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 492.543805][ T5872] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 9: -71 [ 492.558896][ T5872] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -71 [ 492.586892][ T5872] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 492.615277][ T5872] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 492.645990][ T5872] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -71 [ 492.662845][ T5872] usb 6-1: USB disconnect, device number 54 [ 493.515146][T12688] 9p: Bad value for 'rfdno' [ 493.950878][T12694] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 494.638753][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 494.792454][ T9] usb 6-1: device descriptor read/64, error -71 [ 495.115259][ T9] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 495.297563][ T9] usb 6-1: device descriptor read/64, error -71 [ 495.401078][ T9] usb usb6-port1: attempt power cycle [ 495.541374][T12725] overlayfs: missing 'workdir' [ 495.759076][T12728] overlayfs: failed to clone upperpath [ 495.781893][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 495.801208][ T9] usb 6-1: device descriptor read/8, error -71 [ 496.030074][ T9] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 496.069377][ T9] usb 6-1: device descriptor read/8, error -71 [ 496.076692][T12742] binder: 12741:12742 unknown command 0 [ 496.082319][T12742] binder: 12741:12742 ioctl c0306201 200000000080 returned -22 [ 496.095022][ T30] audit: type=1326 audit(2000001745.800:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12741 comm="syz.0.1797" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff87379c819 code=0xffff0000 [ 496.177057][ T9] usb usb6-port1: unable to enumerate USB device [ 496.191724][ T5872] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 496.334663][ T5872] usb 3-1: device descriptor read/64, error -71 [ 496.563442][ T5872] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 496.716197][ T5872] usb 3-1: device descriptor read/64, error -71 [ 496.829997][ T5872] usb usb3-port1: attempt power cycle [ 497.065860][T12753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=12753 comm=syz.5.1801 [ 497.079390][T12753] netlink: 'syz.5.1801': attribute type 1 has an invalid length. [ 497.096473][T12753] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1801'. [ 497.116319][T12753] dummy0: entered promiscuous mode [ 497.124869][T12753] dummy0: left promiscuous mode [ 497.144824][ T5931] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 497.210614][ T5872] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 497.250436][ T5872] usb 3-1: device descriptor read/8, error -71 [ 497.390061][ T5931] usb 1-1: config 0 has an invalid interface number: 153 but max is 0 [ 497.398872][ T5931] usb 1-1: config 0 has no interface number 0 [ 497.412765][ T5931] usb 1-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 497.426935][ T5931] usb 1-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 497.444695][ T5931] usb 1-1: config 0 interface 153 has no altsetting 0 [ 497.479984][ T5931] usb 1-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 497.511476][ T5872] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 497.530236][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.542172][ T5931] usb 1-1: Product: syz [ 497.547554][ T5931] usb 1-1: Manufacturer: syz [ 497.552563][ T5931] usb 1-1: SerialNumber: syz [ 497.559643][ T5872] usb 3-1: device descriptor read/8, error -71 [ 497.606493][ T5931] usb 1-1: config 0 descriptor?? [ 497.654357][ T5931] hub 1-1:0.153: bad descriptor, ignoring hub [ 497.673800][ T5931] hub 1-1:0.153: probe with driver hub failed with error -5 [ 497.682198][ T5872] usb usb3-port1: unable to enumerate USB device [ 497.689669][ T5931] sierra 1-1:0.153: Sierra USB modem converter detected [ 497.740628][T12760] fuse: Unknown parameter 'use00000000000000000000' [ 497.847250][T12750] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1800'. [ 497.895852][ T5931] usb 1-1: USB disconnect, device number 65 [ 497.926659][ T5931] sierra 1-1:0.153: device disconnected [ 498.811422][T12794] fuse: Unknown parameter 'use00000000000000000000' [ 499.410737][ T30] audit: type=1400 audit(2000001748.834:848): avc: denied { setopt } for pid=12788 comm="syz.1.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 499.482547][ T30] audit: type=1400 audit(2000001748.845:849): avc: denied { read } for pid=12788 comm="syz.1.1815" path="socket:[43939]" dev="sockfs" ino=43939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 499.663080][T12807] netlink: 'syz.2.1819': attribute type 1 has an invalid length. [ 499.675525][ T30] audit: type=1400 audit(2000001748.929:850): avc: denied { map } for pid=12788 comm="syz.1.1815" path="socket:[43937]" dev="sockfs" ino=43937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 499.776504][T12816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=37648 sclass=netlink_route_socket pid=12816 comm=syz.2.1819 [ 500.152427][T12807] 8021q: adding VLAN 0 to HW filter on device bond4 [ 500.173482][T12807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=49444 sclass=netlink_route_socket pid=12807 comm=syz.2.1819 [ 500.610649][ T793] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 500.677497][ T5931] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 500.764569][ T793] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 500.772779][ T793] usb 3-1: config 0 has no interface number 0 [ 500.778848][ T793] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 500.793718][ T793] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 500.804522][ T793] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 500.813817][ T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.823311][ T793] usb 3-1: config 0 descriptor?? [ 500.828882][T12822] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 500.838934][ T793] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 500.859753][ T5931] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 500.867785][ T9] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 500.871519][ T5931] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 500.889488][ T5931] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 500.900925][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.915485][T12824] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 501.020176][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 501.026791][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.037813][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.047768][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 501.060905][ T9] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 501.069972][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.078589][T12822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.080343][ T9] usb 6-1: config 0 descriptor?? [ 501.091568][T12822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.113224][ T793] usb 3-1: USB disconnect, device number 58 [ 501.125899][ T5931] usb 1-1: string descriptor 0 read error: -71 [ 501.148120][ T5931] hub 1-1:32.0: USB hub found [ 501.155667][ T5931] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 501.222187][ T5931] usb 1-1: USB disconnect, device number 66 [ 501.484704][ T9] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 501.491731][ T9] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 501.498716][ T9] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 501.505702][ T9] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 501.512687][ T9] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 501.521402][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 501.558556][ T9] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 501.566659][ T9] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 501.759451][T12832] random: crng reseeded on system resumption [ 501.776401][T12839] fuse: Unknown parameter 'use00000000000000000000' [ 501.785434][T12832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.806475][T12832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.872905][ T9] usb 6-1: USB disconnect, device number 59 [ 501.879212][ T793] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 502.331497][ T793] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 502.342815][ T793] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 502.354223][ T793] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 502.611000][T12842] wg1 speed is unknown, defaulting to 1000 [ 503.250474][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 503.407359][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1837'. [ 503.426036][ T177] Bluetooth: (null): Invalid header checksum [ 503.536561][ T48] Bluetooth: (null): Too short H5 packet [ 503.542224][ T48] Bluetooth: (null): Invalid header checksum [ 503.567274][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 503.575264][ T9] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.586351][ T9] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.596281][ T9] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 503.618964][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 503.626124][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 503.642060][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.664568][ T7448] Bluetooth: (null): Invalid header checksum [ 503.675546][ T9] usb 6-1: config 0 descriptor?? [ 503.774001][ T48] Bluetooth: (null): Invalid header checksum [ 503.903852][ T177] Bluetooth: (null): Too short H5 packet [ 503.916494][ T177] Bluetooth: (null): Invalid header checksum [ 504.036606][ T177] Bluetooth: (null): Invalid header checksum [ 504.123368][ T177] Bluetooth: (null): Invalid header checksum [ 504.138794][ T9] hid (null): report_id 0 is invalid [ 504.149529][ T9] hid (null): nested delimiters [ 504.183666][ T9] hid (null): nested delimiters [ 504.192768][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1840'. [ 504.201865][T12882] veth1_macvtap: Caught tx_queue_len zero misconfig [ 504.240866][ T177] Bluetooth: (null): Invalid header checksum [ 504.253449][ T9] hid (null): nested delimiters [ 504.358476][ T177] Bluetooth: (null): Invalid header checksum [ 504.407868][ T5931] usb 6-1: USB disconnect, device number 60 [ 504.506892][T12885] netlink: 'syz.0.1841': attribute type 4 has an invalid length. [ 504.845074][ T30] audit: type=1400 audit(2000001754.788:851): avc: denied { module_load } for pid=12896 comm="syz.0.1842" path="/sys/kernel/oops_count" dev="sysfs" ino=57514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 505.244191][ T30] audit: type=1400 audit(2000001755.097:852): avc: denied { read write } for pid=8845 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 505.297626][ T30] audit: type=1400 audit(2000001755.097:853): avc: denied { open } for pid=8845 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 505.392608][ T30] audit: type=1400 audit(2000001755.097:854): avc: denied { ioctl } for pid=8845 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 505.429864][T12901] kvm: pic: non byte write [ 505.474642][ T30] audit: type=1400 audit(2000001755.200:855): avc: denied { read } for pid=12900 comm="syz.5.1843" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 505.558886][ T30] audit: type=1400 audit(2000001755.200:856): avc: denied { open } for pid=12900 comm="syz.5.1843" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 505.617101][ T30] audit: type=1400 audit(2000001755.256:857): avc: denied { ioctl } for pid=12900 comm="syz.5.1843" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 505.662447][ T5931] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 505.698775][ T30] audit: type=1400 audit(2000001755.303:858): avc: denied { create } for pid=12902 comm="syz.0.1844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 505.722855][ T30] audit: type=1400 audit(2000001755.303:859): avc: denied { prog_load } for pid=12903 comm="syz.6.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 505.830600][ T30] audit: type=1400 audit(2000001755.303:860): avc: denied { bpf } for pid=12903 comm="syz.6.1845" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 505.910707][T12916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 505.921777][T12916] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 505.932235][ C1] [ 505.932410][T12916] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 505.934547][ C1] ================================ [ 505.947927][ C1] WARNING: inconsistent lock state [ 505.953018][ C1] syzkaller #0 Tainted: G L [ 505.958964][ C1] -------------------------------- [ 505.964049][ C1] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 505.970861][ C1] syz.2.1847/12914 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 505.977245][ C1] ffff888032c07068 (&dev->spinlock){?...}-{3:3}, at: das16m1_interrupt+0x68/0x120 [ 505.986428][ C1] {HARDIRQ-ON-W} state was registered at: [ 505.992112][ C1] lock_acquire+0x1cf/0x380 [ 505.996677][ C1] _raw_spin_lock_bh+0x33/0x40 [ 506.001531][ C1] waveform_ao_cancel+0x96/0x150 [ 506.006551][ C1] do_cancel+0xf4/0x180 [ 506.010790][ C1] comedi_close+0x2f6/0x470 [ 506.015374][ C1] __fput+0x3ff/0xb40 [ 506.019438][ C1] task_work_run+0x150/0x240 [ 506.024106][ C1] exit_to_user_mode_loop+0x100/0x4a0 [ 506.029556][ C1] do_syscall_64+0x67c/0xf80 [ 506.034230][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.040199][ C1] irq event stamp: 2574 [ 506.044334][ C1] hardirqs last enabled at (2573): [] _raw_spin_unlock_irq+0x23/0x50 [ 506.054048][ C1] hardirqs last disabled at (2574): [] common_interrupt+0x19/0xe0 [ 506.063413][ C1] softirqs last enabled at (2566): [] __irq_exit_rcu+0xef/0x150 [ 506.072689][ C1] softirqs last disabled at (2557): [] __irq_exit_rcu+0xef/0x150 [ 506.081972][ C1] [ 506.081972][ C1] other info that might help us debug this: [ 506.090022][ C1] Possible unsafe locking scenario: [ 506.090022][ C1] [ 506.097457][ C1] CPU0 [ 506.100728][ C1] ---- [ 506.103999][ C1] lock(&dev->spinlock); [ 506.108327][ C1] [ 506.111771][ C1] lock(&dev->spinlock); [ 506.116270][ C1] [ 506.116270][ C1] *** DEADLOCK *** [ 506.116270][ C1] [ 506.124399][ C1] 3 locks held by syz.2.1847/12914: [ 506.129587][ C1] #0: ffff888037695900 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x229/0x3a0 [ 506.138984][ C1] #1: ffffffff8e7e7920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 506.148459][ C1] #2: ffff888078312138 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x10f/0x320 [ 506.158894][ C1] [ 506.158894][ C1] stack backtrace: [ 506.164772][ C1] CPU: 1 UID: 0 PID: 12914 Comm: syz.2.1847 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.164795][ C1] Tainted: [L]=SOFTLOCKUP [ 506.164801][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 506.164815][ C1] Call Trace: [ 506.164821][ C1] [ 506.164827][ C1] dump_stack_lvl+0x100/0x190 [ 506.164853][ C1] print_usage_bug.part.0+0x257/0x340 [ 506.164871][ C1] mark_lock+0x74a/0xa20 [ 506.164885][ C1] ? look_up_lock_class+0x55/0x120 [ 506.164910][ C1] ? register_lock_class+0x40/0x560 [ 506.164928][ C1] __lock_acquire+0x10ff/0x2630 [ 506.164944][ C1] ? lock_acquire+0x1cf/0x380 [ 506.164959][ C1] ? find_held_lock+0x2b/0x80 [ 506.164979][ C1] ? clockevents_program_event+0x151/0x360 [ 506.164997][ C1] ? clockevents_program_event+0x151/0x360 [ 506.165016][ C1] lock_acquire+0x1cf/0x380 [ 506.165030][ C1] ? das16m1_interrupt+0x68/0x120 [ 506.165048][ C1] ? sched_clock_cpu+0x6c/0x570 [ 506.165063][ C1] ? lapic_next_event+0x10/0x20 [ 506.165080][ C1] ? clockevents_program_event+0x2ae/0x360 [ 506.165099][ C1] _raw_spin_lock+0x2e/0x40 [ 506.165119][ C1] ? das16m1_interrupt+0x68/0x120 [ 506.165136][ C1] das16m1_interrupt+0x68/0x120 [ 506.165152][ C1] ? __pfx_das16m1_interrupt+0x10/0x10 [ 506.165169][ C1] __handle_irq_event_percpu+0x232/0x8e0 [ 506.165193][ C1] handle_irq_event+0xab/0x1e0 [ 506.165213][ C1] handle_edge_irq+0x375/0x970 [ 506.165235][ C1] __common_interrupt+0xd8/0x2f0 [ 506.165260][ C1] common_interrupt+0xb9/0xe0 [ 506.165279][ C1] [ 506.165284][ C1] [ 506.165290][ C1] asm_common_interrupt+0x26/0x40 [ 506.165307][ C1] RIP: 0010:lock_release+0x8d/0x320 [ 506.165323][ C1] Code: 00 00 65 4c 8b 25 2b 40 29 12 41 8b bc 24 54 0b 00 00 85 ff 0f 85 21 01 00 00 48 81 3b 40 27 15 94 0f 84 14 01 00 00 9c 41 5e 48 c7 c7 07 bc f6 8d e8 f6 04 ac 09 65 ff 05 67 87 29 12 8b 35 [ 506.165339][ C1] RSP: 0018:ffffc9000da0f958 EFLAGS: 00000287 [ 506.165352][ C1] RAX: 0000000000000000 RBX: ffff888078312138 RCX: ffffc9000ea11000 [ 506.165363][ C1] RDX: 0000000000000000 RSI: ffffffff8c1b19a0 RDI: 0000000000000000 [ 506.165373][ C1] RBP: ffffffff825695e5 R08: 0000000000000001 R09: 0000000000000000 [ 506.165383][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88804655c980 [ 506.165392][ C1] R13: 0000000000000000 R14: 0000000000000287 R15: 1ffff92001b41f3d [ 506.165403][ C1] ? follow_page_pte+0x8b5/0x1400 [ 506.165427][ C1] _raw_spin_unlock+0x16/0x50 [ 506.165447][ C1] follow_page_pte+0x8b5/0x1400 [ 506.165466][ C1] ? __pfx_follow_page_pte+0x10/0x10 [ 506.165483][ C1] ? __pfx___might_resched+0x10/0x10 [ 506.165503][ C1] __get_user_pages+0x745/0x34d0 [ 506.165523][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 506.165544][ C1] populate_vma_page_range+0x267/0x3f0 [ 506.165563][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 506.165581][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 506.165599][ C1] ? do_mmap+0x93f/0x12f0 [ 506.165616][ C1] __mm_populate+0x107/0x3a0 [ 506.165635][ C1] ? __pfx___mm_populate+0x10/0x10 [ 506.165654][ C1] ? up_write+0x290/0x4f0 [ 506.165673][ C1] vm_mmap_pgoff+0x37f/0x470 [ 506.165691][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 506.165709][ C1] ? do_futex+0x192/0x350 [ 506.165726][ C1] ? __pfx_do_futex+0x10/0x10 [ 506.165741][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 506.165763][ C1] ksys_mmap_pgoff+0xe1/0x650 [ 506.165780][ C1] ? __x64_sys_futex+0x34f/0x4d0 [ 506.165795][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 506.165817][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 506.165834][ C1] ? xfd_validate_state+0x129/0x190 [ 506.165851][ C1] __x64_sys_mmap+0x125/0x190 [ 506.165869][ C1] do_syscall_64+0x106/0xf80 [ 506.165892][ C1] ? clear_bhb_loop+0x40/0x90 [ 506.165911][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.165927][ C1] RIP: 0033:0x7fe1d3f9c819 [ 506.165940][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.165955][ C1] RSP: 002b:00007fe1d4e7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 506.165969][ C1] RAX: ffffffffffffffda RBX: 00007fe1d4215fa0 RCX: 00007fe1d3f9c819 [ 506.165980][ C1] RDX: 0000000002000001 RSI: 0000000000600000 RDI: 00002000009fd000 [ 506.165990][ C1] RBP: 00007fe1d4032c91 R08: ffffffffffffffff R09: 0000000000002000 [ 506.166000][ C1] R10: 0000000000006031 R11: 0000000000000246 R12: 0000000000000000 [ 506.166009][ C1] R13: 00007fe1d4216038 R14: 00007fe1d4215fa0 R15: 00007fff06dc2158 [ 506.166025][ C1] [ 506.166084][ C1] comedi comedi2: fifo overflow [ 506.618202][ T5931] usb 1-1: config 7 has an invalid interface number: 92 but max is 1 [ 506.626285][ T5931] usb 1-1: config 7 has an invalid interface number: 189 but max is 1 [ 506.634423][ T5931] usb 1-1: config 7 has no interface number 0 [ 506.640479][ T5931] usb 1-1: config 7 has no interface number 1 [ 506.646538][ T5931] usb 1-1: config 7 interface 92 has no altsetting 0 [ 506.653182][ T5931] usb 1-1: config 7 interface 189 has no altsetting 0 [ 506.676870][ T5931] usb 1-1: New USB device found, idVendor=05a9, idProduct=a511, bcdDevice=49.6f [ 506.686025][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.694471][ T5931] usb 1-1: Product: syz [ 506.698749][ T5931] usb 1-1: Manufacturer: syz [ 506.703937][ T5931] usb 1-1: SerialNumber: syz [ 506.958090][ T5931] usb 1-1: USB disconnect, device number 67 [ 512.440004][ T1295] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 512.448862][ T1295] ieee802154 phy1 wpan1: encryption failed: -22