last executing test programs: 15m4.412551334s ago: executing program 3 (id=1749): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002b40)={'ip_vti0\x00', &(0x7f0000002a40)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x401, 0x8001, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x66, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @empty}}}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_usb_connect(0x5, 0x2d, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00', @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x48881}, 0x40) mknod(&(0x7f0000000680)='./file0\x00', 0x8001420, 0x0) r2 = open$dir(&(0x7f0000000640)='./file0\x00', 0x1c9800, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) r4 = fsmount(0xffffffffffffffff, 0x0, 0x72) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r4, 0x4010ae74, &(0x7f0000000040)={0x9, 0x7, 0x2}) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x20000000000006) socket$l2tp(0x2, 0x2, 0x73) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0xfffffff7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000080000000e000000a9b9ce0e10800000", @ANYRES32=r8, @ANYBLOB="ff0300"/20, @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="0200000003000000050000000700000000000000", @ANYRES32=r6, @ANYBLOB="53dbb0c7a3101d00dcecc71a098166986df58680da2650328bd44450a17429edd9390a832b22391411d3b9106239ad4cc726395762770d9a96f3badcdb506e1319fd4a0119967f28ac076c4d6a332b7f02e80df5299b1f7149a84d2442ca12e86950fe68c80a0ca65aedf7b1591e1a094bea8988fe8421cf560f657d073e037298c2ebfd9519f19427712dcce5ff243f7489d05eae3f1482596949a0abecdb30f975463bdab2b87a8b72ed3c938043832f70c55831846e2522b0cfc78b5ecbf2c5c6a39bfb54e68e59e03524f19be7a190dea3a975e422a8871fb97829007c7a740f64329e144d3cf1565a2a98ec3721c49dd91c259b7b25338876abaf409862bf6fa60ed2d70dd49c9346e5a62e78df794288cf9bb7c4c4dc5e8f21d7fdb1c89aa1e5e448fbcc0eda35d3b18e97c58de511fc8d0e8d3e8b58dc00f7f9933023d76b45a1e26ce0dbec14e8b9d41d56ef3fcefbdd239db21743b24c1529d490916d9aa7f2ca4b59c3dc99f3f2d40f1c02b7c35c76ccb8b79ce1599245f69b3a3888594d352bf41ace8e49ac1e22ec1e747b5480ec8f8345e2606bc2a644f8b96078c0ddb2538efa7138943b96a706695de805cc63c6225321ad967a8244da95d3a61c31ddb358cba42ffcf359b80f3af3dd18023db6f7e2e3339c3bd7e16c507a567823755237"], 0x50) r9 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r9, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 15m3.028068703s ago: executing program 3 (id=1757): r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) getrlimit(0xf, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000eef76c20c80a01c3650d010203010902"], 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) acct(0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x3a, 0x0, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000080)=@attr_other={0x0, 0x0, 0x5, &(0x7f0000000040)=0xdc}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200007bfdffff0000000048568ccb08c3206bf10000000085000000a00000009500004000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) (async) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/171, 0xab) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) munlockall() 15m2.838758169s ago: executing program 3 (id=1760): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000001900000000000006000000850000004f000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000045}, 0x2000c800) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}], {0x14}}, 0xb0}}, 0x0) 15m2.683419981s ago: executing program 3 (id=1762): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x10c5408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="69f6404e36d00c2aab52283a209889d00dbe4f7038", 0x15}], 0x1, 0x0, 0x0, 0x4000}}], 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x2, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockname$unix(r1, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file0\x00', 0x22) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x8}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 15m1.08980362s ago: executing program 3 (id=1772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="24005ce2815f38734f00001e0001000000000000000000030000000100000000000000080001007f000001"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) 14m59.740422659s ago: executing program 3 (id=1776): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000001fb8c56b3d0dddb3cb62706", @ANYRES32], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700490009"], 0x50) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fcdbdf254f00000008000300", @ANYRES32, @ANYBLOB="50007a800c"], 0x6c}, 0x1, 0x0, 0x0, 0x20002804}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 14m59.220221135s ago: executing program 32 (id=1776): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000001fb8c56b3d0dddb3cb62706", @ANYRES32], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700490009"], 0x50) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01002abd7000fcdbdf254f00000008000300", @ANYRES32, @ANYBLOB="50007a800c"], 0x6c}, 0x1, 0x0, 0x0, 0x20002804}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 12m17.467615929s ago: executing program 0 (id=2506): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) (async) fremovexattr(0xffffffffffffffff, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000480)={'broute\x00', 0x0, 0xfffffffc, 0x30, [0x2, 0xfffffffffffffffc, 0x4e83, 0x8, 0x9, 0x4], 0xfffffdb4, 0x0, 0x0}, &(0x7f0000000c80)=0xa8) openat$mixer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) (async) unshare(0x22020600) (async) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_io_uring_setup(0x4ace, &(0x7f0000000140)={0x0, 0x5e99, 0x3400, 0x1, 0x19b}, &(0x7f0000000040), 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x20000000000, 0xfffffffffffffffd, 0x5, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0x10, 0x80000006, 0x400200}, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000180)=ANY=[@ANYBLOB="07e04004001444a1295c0f54d36d53c7f54616d037f13ed444a9ec3c1c0c6adea153f3ebb8c3de8d29b6024480db294c40150dfc228083c0b18f9d039848d230"], 0x40, 0x3) syz_fuse_handle_req(r0, &(0x7f000001a240)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0xfffffffffffffffe, 0x1, {0x4, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x2000, r4, r5, 0x501, 0x401}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x10248ca4, 0x40, 0x21, 0x0, 0x400000ec, 0x0, 0x0, 0x100, 0xfd}}, 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_names\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r7) (async) r8 = getpid() ioprio_set$pid(0x2, r8, 0x2007) openat(r6, &(0x7f0000000a80)='./file0/file0\x00', 0x2a8880, 0x12) 12m17.40576925s ago: executing program 0 (id=2507): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xf, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socket$inet_mptcp(0x2, 0x1, 0x106) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) timerfd_create(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x7, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300), 0x22000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_none}], [{@subj_user={'subj_user', 0x3d, '[\'*{'}}]}}) read$msr(r3, &(0x7f0000002240)=""/102397, 0x18ffd) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_open_dev$sndmidi(0x0, 0x8, 0x80800) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x10, &(0x7f0000000380)=0x1, 0x4) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) 12m16.528481866s ago: executing program 0 (id=2509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) memfd_create(0x0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000400)=0xe, 0x80000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) write$tcp_congestion(0xffffffffffffffff, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, &(0x7f0000000b40)="71ca08a64bf610cacd13bf0c0b10978a9859cc509917591228d23469d84488f12911058075f4c4676740f54fb20e0e662dff389ebbb1419eecd1a6e8fa28ffeb6a2c73ca0e88fca42a7ba06c108fadd75e838c1d06fe9470fa37522513a45f2d986ded680faf614807fd10aa109380e4369a5328f2705454177d4dbe63bf2c32523c2680b2731cda2ef9f6a26e9b511bea5c4fdf07e6d6259c66b022445c3d012c42263c74f5dcda06505c5b92b49b651a0ac7a1654474b2fd4cb8bb7cb581cbb60ba35823bc4c2b75c3d019545859067b1132e6d05b9b5d2efa464c28aa9451cc599bae6bc245975d04732863ab07cbc334a209b81437c291a88b132f0b926e83159ff844297d09be71853cea0d3768550f36fcc45745ac1faa522204d31c1d64824e75e45a3734d4d5b93e22e983565c0b182637bcca044377993a2f590ee6c93a1866cf0ee952ded08e8b8eaf6930def43f06bcd34c103d83b4cf9939362ad6edb524390c908184953262a0930cb2525efd7609e8f6f7ac994ce81f9993d69437c9243ec7781c5983a19a437fce8da6650ea5076ffd27e24634e619931a093507794e5d90556a069fa88cbf5bcff01733215a2e9e49e3f71a070e6783ada648559fdc2ae166394669f2825ecb4e0dab38d0e8b4100100e1c43828006b4ca883267e1e70af9b18f347f554dd40c5329ec969c714b3f5f8fab7f20f4e93e2431d29982bf16838f935d26feb972ce1afdca8d2c8532f32eb2afa1c26f2ff9ad85a746055b60a8346132a69653e0883ec1cba70e1b09c9800b9139073b158e8dad13e6a6c0415f41b193742fbc79a6d29933b04da253b6c54a33782dbe57bacdafae69a8afccd9d1a23fc90c0df30c4ce83a33e4e3c921fb954b9ff0aa7298435c358df726acd4f5d38a2e9fef62effc1d6ccd585d67f6565ee006c9cc3436b38ba19301c2e031328a383b24576c66a788dc2247f4df1014fa158c5bb311e89685e049c310990e750e108c417a2e767e3419b7e924c7f357eb6932855428afda04ad1b8835bd1ea30fad866a6c351873605d206860447d5377fa46a39b11b41f175c405debcf08efb49561384c3eaf9fd4ee5cafd6f651b3645ed8deca118f897bb8001f584a05ba8aefb13717e4b0615ea8d5b30b05268b2405a77920fd35a4f45b869dca3f534f5042c3cf41eb823ab0f734822813cd886c3a54b72065908f03e32334903a2452ac628746ce81ce301ea31e35fe24179bdc4751f9494fc4d2850d21922a974c6f38e0ef821f42a7fe141dc7e172e35d293d5d1dc18570514c9fcef33a494bfd244357d8cfb4b2c73492df91fecf07b1351ac58524c7eacf1416642e65d8cde7385e5d3bb654e3dd1dbc75b7ba519008894ea2df0e4b136befb1a0bc0bc5ac59b8f02582e6bd51018a3055877bff259f8cd762fbe803ade5bbc3e7e21631659b1dbd727302995800c5825961e347d06d4851650657a0871914252eec1f5ded69e61a03770ebb8ef26a3d08b68b50586a03c6ce72413dccbf4893c68abcbe04c6b5cfa36ae54d3d506f818af7f7d9099ee2eadf63c8b8801fc41d5a79f398bba350e583391e29fe709e59910fb8778368d6f24e24f676b83f53d754a869a6a66888de72eda5e9c17e869e3c1b4c9bf42747f071f81a97adc045020ac49832d2351ecca17cda4b2c52ea80401c958df0014757cb7587176f8076e30c8831cb98d95364e3c18327c427b75e5a49122f0ac98c73ee4de628fd3739433a6cde673695ec037d32ce713b0f794c8f091963cc02a8a8f6ef4f2af4049d2bd3575a6c306829c5128743447a556e87f63fe6f5518a953339ce361481fe96a5dc1c828c56556b58edb6808627054d3ddd1800e74145455f5c88db276b5907074880ec386f0b69a14d38ee8656402f95c43eeaf13b583ea00646f5f6f14c67bbd1e8d3b6e1e953785c17b007582fe4a26a0a40e9fa6f17bfbe62032fb977fc4659a068027d4de3c6b3854cdb27298dfcbd07b37edd218c9e75ec1ea31f7662e214c9e57bef33878ac43149f619d8813c468cfcabf05a91491168ad3febbb56ddb384accfa252ada9ef023418e59f9f29f1327665e334b5aac6dd1ac2eca6bcc48fec73b96b69f27d53606d28c0eb4b471b2befc1b46fc339214eb84ec277af484fb9425560e045f071c69401f238976cbdc226521d7572ef5a375f2e138e6bc2a65c08b4dc89e8f26ef02319f19fbb0c6d866e1294df941e27ec0193e216c6fde9d8ddbd410a356ae243463c38e5995c9ec48011d7fbe2cc9d353c8c6c02040787da60509c4905b12318e05e07c6deb12dc530b4142a4ab88eb3b847107c45138e89583e53e0891b36cd2d822213a4f50ce500b06c8104a238f4c3199a7fcd548779c5b83582e12ff96b394bf37ef7fdda1ca2ef1ac22e66fe8cf9ca15ddf5dba63a25a85f514024822f82aba07a14f7ed6bfc30388944fbded588fc483976f3d25ad92cce6c1328987cb6ec417344e8efcc7867d0a36a74657e080af915fd560ba35eb1f6c32c74b5fb89e491bd07ff54d5474266b838117608ee0382691b93e4ff9dbf3b70ea56b0dd6f1345caecb61bc88b137e590dd730551910512ae2f5794beda4b880d31140f65d3ca36b5345f7034ca9bfe9a33c4a216e3a30c6016cb3f920c079f1c0f553d089b6e1ca8a0a377ecfc1eb317c4f7f593d624c9e6cbadda05187098f73287f1f39ef4c6daa122b9f709973994fe5a411f488eb291afd75f91d7fcbc62251eb277b2959ba058183726af1007432e776ff623a986b2ad9e6bdc384c86e4a7a7ebe8451e9fa806fd5f72420176700fe86955f3c23acc07e98456e797e1c4008812bb0b025d626340b85d9a64e4afa9914a71fc652a45569b2c54857ab583e2eb5af6421e37a5233d2f85f4f1c881c3ddd633b75aff88abb7401a4e99514521723ba21c39321930cd66b5570f3e12ba133dba05bc9f28f6c928f71f67d70d66147ad8de9fb9c71fe11590da2047bca045009352fb452a3a30f4958ad8a05ea24f2ee235062d822cf3eea4b4e35fce11b3ca30e9d354d9d30564023ac4bc423eb3f92732f01f7aada414bc2e656ad9dab0470b31bf6035b93fb094cb193a8f42238ea4e2d7e8485b9c2060af57bae82cf8727a3e72b6db18d6bf3c3074a16256600574d79f1772c48af1761e7bf1326d92e36f5a4ce2f1e1ee93e257800a07247cba427715fd891cd5398f5cafa82ce890d54354b2fe33aadadd14e0f393f7ae4044df303455a922f7655b45329c9bf2cbbaf797a0fd946087e08a0ae905cbcae6d601eebefb4e078177031dd62ea0030fcacb679fd1a156567af8813dd0719b41deab7e1cf0eeb6f391af742a9e7f53bdf4fb876fff8f27da1601af46520f0700fd9edc6ecbc520878468bcf55b217603dd0e1b5c98e7c17becc9986cf1043a1f89bb644582203b8f8e153a205599b643048a2c459e4ed24162ee07b7739beee9161ad56875949529747a30c9b46e54e4397247ee37fe149a2e2c674f73ca3d69000de85a1b567f90c3bb5be38b65594bf3dc99a186e21f9f8f0ae6b77323b95e858163202684149be69c7991140961659b03d12aa6ad617b67118c1811cd4a9a0887d8ef52564be2018d25e736c26e1e366789b7e602488ed49ea8cc174443ddb4001537480492bff9228b805a15b3333bc9c3288b02378bd85f9bfe9b2e2915cad5cdc50234e20eb4155d66ed7902e6b3db10a9614689e34717292aad816aaeb43619be1522cc57600bf278c816ecde33b4f8dcf7777d60a1d3010d3b7d93b1a6f9484d75c9b4283044d9d77eac1777da8f78046e79ea6386ad7d122dbbae301be32ae60cbe30e8d13d0f4e7314e0ef7c69151b92afc589bfff52d02857bd83c76f79757163f2023fe310c61d847d0799e9e13d34ee5be392fd801725c918527325ccb91b3386335bbe7050914dd40069b741c356e0c4c430b1b6b420572cf00a7edab973024982dc166847013dc6bd1546f98ecb6b2c0a1e3101c64a8c2274930e06a029ab8c3904f31999fe84d7264c0f4cf82929f225a251a296887e916e76b3dec0b2a8d7711b340e432b84befe591f87ccf8ad0ec0239408f15d9cb946c6e30f6553843eee3e8d49c6c69f4d25a54cd6175375aaade16af5f84392fcc3df2173f42afef8f463beaa30ae3f8c5e7c0e9919efcb202f21b281a9481aedf62258ab69f2256c7b13fbd71b918178a22ba3532975339847e98183625d7b14dd8e59d7e1e0b2364af27bf4aef29e5a9b91e2cc115c33dedeccd74f02cb58a407c3fe2f635e6f7eeaf9cd1ed5b1db0d1ddd9f6a6a08ee74e9226275e3eb7f37ea1b3f1fb658ec09383f607b6b22753c6662526d12b7889c78ae4365db113ea7c6cafea115e44afbefc67a158d2ca3d815502caf8c82494a1c44ebaa8cbcb7e35da8af2f737d3dc4d8c21ce2b79feae42d7247de856d13243f82a74d2011761fc686310fda22448f0f4d487c3fb3ccbaf0ae4f9bf6689b12128ce659610a097d0125bb831f1be635a3cf6deb4f0df7c6378ca24afff66289d054ffbd465ed75557334ad39c4dd2dad4457e186f234a00a1d133020caf7c09b4923d25849dfc302cd94461684b428bf852dcf94c784a5947928635ce585d12d81ef488302c86500195da3041da115b0f22a5aecdaee3cf7e963c039edd48d3059776e04b905f0c29000786762838d6452632b1e8f7cb6fb454315ab2661d75c9379231a3c2e0f803d5dbc7de75aa8adb5bbe0a83608e4641b0ab3cd503402e8eed46923b5645f64c3b1ce5cbc0087da5dab43c3bda90b84c14ea7386534202f48a78d1030fcbdaefac4c005188b6950055eaef4e5ed733350d80c0da464f4eae414e0fc6ccd6404dfeb5efc4a2f5d51705a67f57e6e130ca1072b4ad490e0bd8f5720373ce9f663cea6b63fca7ced4a4056242e8ca1dd6ae77bb16cb495c92fe694e6f750bdd91c685e1995591ee6a4742dc03eb24ea22d678b05cb5ddf6ef6c6347d43ddf740d3869067b60cc51527697c824366fb9e4cd0f2ff3200dfa417dc1a44ff6e79cdaf2d741a5f6c44ac3e6006e9271cd080237cc5430fcaac17fbfc6aa940f630ca9fd0d2b123a659d6868452c4123421d7b8ae6a2ec2412548857b3aac0d6db04950a3fe00f9a44822a275c0b1b43176463d3eca687eeb934f29f084f9828bb117bd38b34a0cb725d7b415505e3f3794b313d41195eb8da242e4444bbc6008c059dfe33ae95a525413f152856db3c69a5ec907aae42710eec111903b0323c0fc93ed97a40e531ea0ee7cef4d82aa25eb3cdd884c9f1d00fcb0d564c5283535fe9e45ce08696390fd96bdf47e58d2341c6ce401520d701f0a401f72e9b3d0ef5a2ec4891fccf779b139abfda4e97e235a5ac9adbb30571c25622a675540e830ec4101818e2cb41f2e8cf86fbda147341e83dab25d94e5572cdfe562426f32f6efd35db7c2ebc7c3f36b9d19cc0f60c59bd533c8443fa6b987875865cce5d6daa921e116417e4c7356e64abfd61786fbaab832c46437fede31887c29e3c57aca3238d64da721db0268f7918d1b93890f32ac5d005e6e607e9e827b2d386a9a6d4714f071808f8d462650089034e3f268fd3474eaa708399e653d02d5bba91328160f127ad6079027a8b92ebcd3feb0dcdc71553c3edc63973ec037146c6db396e38a27a25841a7a87a5cc63413ba0e12a921ef1dca060dc895e87ac2e56ab59f98213cdf505e57af7c5bb079daef324ef266cfcba45a91986a7eb", 0x1000, 0x8000, &(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r7 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r7) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x26, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x93, 0x2, 0x2, 0x6, 0x0, 0x8, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x6, 0x4}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0xf8}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x3, 0x3}}}}}]}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='-\x0f-\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 12m13.203793919s ago: executing program 0 (id=2523): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100037040000000b0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c0002800600120000000000"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 12m12.972536338s ago: executing program 0 (id=2525): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) setxattr$incfs_size(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=0x5, 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) syz_open_dev$usbfs(&(0x7f0000000280), 0x101, 0x100) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) creat(&(0x7f0000000180)='./file0\x00', 0x20) r1 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000080)={[{@uid={'uid', 0x3d, r2}}]}) r3 = socket$inet6(0xa, 0x2, 0x0) getpeername$inet6(r3, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) getpgrp(r4) setpgid(r0, r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) 12m12.76354132s ago: executing program 0 (id=2527): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') read$FUSE(r4, &(0x7f00000025c0)={0x2020}, 0x2020) (async) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0xfffffe4c, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x3, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaede, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) fsopen(&(0x7f00000002c0)='minix\x00', 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) 11m57.707295278s ago: executing program 33 (id=2527): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') read$FUSE(r4, &(0x7f00000025c0)={0x2020}, 0x2020) (async) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0xfffffe4c, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x1, 0x3, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) (async) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaede, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) (async) fsopen(&(0x7f00000002c0)='minix\x00', 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) shmget(0x3, 0x3000, 0x1000, &(0x7f0000ffa000/0x3000)=nil) 9m37.468159145s ago: executing program 1 (id=3086): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002100110829bd7000fcdbdf250a0010020c000004040000001400020020010000000000000000000200010002050016003a000000080017"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) fstat(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) pwritev(r8, &(0x7f0000002240)=[{&(0x7f00000001c0)="fd", 0x4}], 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2000, 0x0, 0xd4, 0x8}, 0x9c) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000040)=@nullb, r5, &(0x7f0000000100)={0x8, 0x1, 0xe, 0x240000000000, 0x56, 0x92, 0x3, 0x5, 0x82}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000000180)=0x2, 0x4) 9m35.900977118s ago: executing program 1 (id=3093): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0xd53e, {0x1, 0x4, 0x1, 0x8004, 0x53d6, 0x52}}) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84880) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000640), 0x4) syz_fuse_handle_req(r1, &(0x7f00000005c0)="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", 0x2000, &(0x7f0000007900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x2000000}, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x9) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz0\x00') r6 = gettid() clock_nanosleep(0x2, 0x0, &(0x7f0000000180)={0x77359400}, &(0x7f0000000040)) rt_sigqueueinfo(r6, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xfffffffe}) 9m34.815613096s ago: executing program 1 (id=3101): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/4084, 0xff4}], 0x1, 0x14a, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xfffffea6, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x40}}, 0x0) 9m34.56932918s ago: executing program 1 (id=3102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500), 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000014c0)="dc", 0x1}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) syz_init_net_socket$x25(0x9, 0x5, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000070000000000000400", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010040000500250001000000050029000000000008000a00", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 9m33.537604512s ago: executing program 1 (id=3105): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$kcm(0x29, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x8}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) 9m33.511475874s ago: executing program 1 (id=3106): msgctl$IPC_RMID(0xffffffffffffffff, 0x0) (async) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "1486027a94645e734a0000e11000", 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) syz_open_dev$sndpcmp(0x0, 0x0, 0x2) syz_io_uring_setup(0x888d, 0x0, &(0x7f0000000000), &(0x7f0000000280)) (async) syz_io_uring_setup(0x888d, 0x0, &(0x7f0000000000), &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x3, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}, 0xa}, 0x39) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x3, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}, 0xa}, 0x39) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xd7f, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, 0x0, 0x0) (async) syz_emit_ethernet(0x2e, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 9m18.464474078s ago: executing program 34 (id=3106): msgctl$IPC_RMID(0xffffffffffffffff, 0x0) (async) msgctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "1486027a94645e734a0000e11000", 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) syz_open_dev$sndpcmp(0x0, 0x0, 0x2) syz_io_uring_setup(0x888d, 0x0, &(0x7f0000000000), &(0x7f0000000280)) (async) syz_io_uring_setup(0x888d, 0x0, &(0x7f0000000000), &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x3, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}, 0xa}, 0x39) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x3, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}, 0xa}, 0x39) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xd7f, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, 0x0, 0x0) (async) syz_emit_ethernet(0x2e, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) (async) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) 16.234509793s ago: executing program 4 (id=5201): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$P9_RCLUNK(r2, &(0x7f0000000180)={0x7, 0x79, 0x1}, 0x7) socket(0x1d, 0x2, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 13.184748291s ago: executing program 4 (id=5212): preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ptrace$getsig(0x4202, r0, 0xffffffffffffff36, &(0x7f00000002c0)) 10.123503609s ago: executing program 4 (id=5224): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0), 0x0, 0x5) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xfb) close(r2) r3 = fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) close(r1) (async) socket$netlink(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) (async) close_range(r4, r5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0)=0x8, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) (async) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x80120, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000300)={'mangle\x00', 0x0, [0x5, 0x2ef1e411, 0x1, 0x9, 0x1]}, &(0x7f0000000380)=0x54) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x8448, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 9.786047061s ago: executing program 7 (id=5232): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x1004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1}) truncate(&(0x7f0000000040)='./file1\x00', 0x0) (async) truncate(&(0x7f0000000040)='./file1\x00', 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001240)=ANY=[]) 8.267868484s ago: executing program 2 (id=5237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast5)\x00'}, 0x58) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4005) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10d000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x2, 0x7, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) link(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x220, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffff23c8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "77baa40214fa89f260a634d77ccef68117c1b08ba724d9cd36ccb2a1156a27"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "e916703b6eb662be98d8358bfdbc36affbe3179a63ab54d9b0"}}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}]}, @TIPC_NLA_SOCK={0xa4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x187cb267}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8a5c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ee}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x4004}, 0x44800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000680)={0x0, 0x90, "4a06f28853e5a8ca6e74591db9b8ec30861a30469ce89731896bbaf69f2914700c25c8895ead6f96de2197e7f655299086b582616cce119c68417705f7c47b767fa223ffd84aac1a154a11e8f7b799fd885ac1815f48926e880e679f95e30b4489c1d6077fa8102896c473b141758be21c76cfe87534edcdae24fcad99bfbe03ce6c0f11f71b01648c0ea54ceb82ab04"}, &(0x7f0000000740)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000780)={r5, @in6={{0xa, 0x4e21, 0x3de1a6c1, @mcast1, 0x8}}, 0xe, 0xffff, 0x4, 0x2, 0x1, 0xecf, 0x9}, 0x9c) close(r4) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x10002, 0x106) r7 = openat2(r6, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0xce, 0x4}, 0x18) ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000900)={[{0x3e0f34d0, 0x1, 0xb8, 0x4, 0x81, 0xbe, 0x45, 0x7, 0x7, 0x9, 0xf1, 0x4b, 0xffffffffffffffe9}, {0x9, 0x9, 0x2, 0x35, 0xff, 0x4, 0xc7, 0x40, 0x0, 0x5, 0xa4, 0x2, 0x7fff}, {0x9, 0x401, 0x2, 0x7, 0x7, 0x7, 0x40, 0x2, 0x10, 0xfd, 0x2, 0x0, 0x7fffffffffffffff}], 0x8001}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r7, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x4c, r8, 0x4, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xffffffff, 0x1}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0xd) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000b40)={0x3, r2, 'id0\x00'}) recvfrom$ax25(r7, &(0x7f0000000bc0)=""/72, 0x48, 0x80, &(0x7f0000000c40)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r11, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, r8, 0x20, 0x70bd2c, 0x10001, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x46}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6c40}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000) syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r10, 0x80184132, &(0x7f0000000e00)) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000e80), r10) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000ec0)={0x0, @initdev, @dev}, &(0x7f0000000f00)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000fc0)={'ip6gre0\x00', &(0x7f0000000f40)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x2e, 0x4, 0x4, @private1, @local, 0x7800, 0x8, 0x401, 0x9}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r11, &(0x7f0000001e40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001780)={0x680, r12, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0x260, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x42800000}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbbe4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x1c0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x11c000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x38adf37f}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4, 0x5, 0x0, 0x1}, {0x5, 0x0, 0x81, 0xffff751e}, {0x3, 0x7f, 0x2, 0x5}, {0x6, 0xfd, 0x11, 0x6}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x680}, 0x1, 0x0, 0x0, 0xa4c57b2a01e47d0b}, 0x8010) 8.103134472s ago: executing program 2 (id=5238): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x21224200, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = dup(r3) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$vsock_stream(r4, &(0x7f00000001c0), 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_VENDOR(r5, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000426bd7020ffdbdf651d000000000300009bb6001d003ae1a5fcb3ff0b0d8b63c22310497715e3b59f2274a987936399cf588730ef31a009519e22d1379fc2fcff52eeebfa7b70cabeb75b27bbf77c8a93e1f2b85659ad22a099791cb620e7633c39a4ecfbe6ff5f92d3df7af89858f9ccfec5225be9059bc87faa23e7f10facc81b4edfc4a68b929bdfdb32d4e8659900a5ede7c113e7b3adc4e3b9d7a19f64281de8a02dccf5ae52b447e3986dc1af28ce7fe4431f53f9c61978abceda81f1aaea70a0be526644b46c2c50891916df0a873b1bafdd03e0745236785156d261ec"], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4) socket$unix(0x1, 0x2, 0x0) (async) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7.441288454s ago: executing program 6 (id=5242): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001d00)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0, 0xfffffffffffffd22}, 0x8b}], 0x2, 0x10001, 0x0) (async, rerun: 64) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224568b6e2225d0af6b82935cbc932a9a709d33d7e9706f0bb5d4a3b75851a7dd82b9a0c63d9b1f465bceac05c928cd762fdaab50308712d8780264c424306e957b77819223417b0e2d22eff812df0a01dd1e354009fdca11c74c0860db68358edbdf37c964bc84007060fd31f4f8493a83a8c3c9ff69e05b12c454e1cbd46446087ad842c908f1af6e94123cef427304cf744a3239d0340d9976bc1a72e7fc63e0ce8f12944629bfa7ce6567c6d5ea15feeeb99ed56e1badfe51d12bda00732d4cc0ce364fc2000abf60a7c4c70aa2a5e40f2bb05c53f4fb764fd765b2b4b7f22c2b693fb73cae6bb04f05bc980adf08b1ad0abe7810b6dcfad0e169336c0b8e36a96526c5b45d7ef0fce9"], 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x10000000, 0x1, 0x0, 0x200}, &(0x7f0000000000)={0x18, 0x7, 0x6, 0x0, 0x100000000, 0x400000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='contention_end\x00', r1}, 0x18) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x601a3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000400)={0x2, 0x89f, 0x0, 'queue0\x00', 0xe}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, {0x800, 0xb1}, 0xe}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20901, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) (async) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000011c0)={0x34, 0x33, 0x4, 0x6, 0x40000002, 0x1, 0x2, 0xf4}) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r4 = socket$inet(0xa, 0x5, 0x84) (rerun: 64) listen(r4, 0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3f, 0x2, 0x3, 0x3, 0x0, 0x8000000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r5], 0xa8}, 0x1, 0x0, 0x0, 0x48080}, 0x1) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000100), 0x3ff, 0x0) sendmsg$nl_route(r6, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=ANY=[@ANYBLOB="340000001100010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c000000000140600140035007767320000"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 7.410566107s ago: executing program 6 (id=5243): r0 = epoll_create1(0x0) (async, rerun: 64) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc000003c}) 7.395897885s ago: executing program 6 (id=5244): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x32}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x124, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x76}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x100}}]}, 0x124}, 0x1, 0x0, 0x0, 0x8004051}, 0x40) 7.372405655s ago: executing program 6 (id=5245): syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000306020d20c50f27124af40102030109021b0001810380030904"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r1 = gettid() shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0x1, 0x40}, 0x6, 0x3, 0x3, 0xd, r1, r1, 0x9}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000a40000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf259800000008000300", @ANYRES32=r8, @ANYBLOB="0a0006000802110000000000160033008400100008021100000108021100000007000000"], 0x40}, 0x1, 0x0, 0x0, 0x404c081}, 0x8800) write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc028020", 0x12) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000041b2400682000000000000000000", @ANYRES16=r9, @ANYBLOB="00042cbd7000fcdbdf25540000000c0099007f000000270000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a0006000802110000010000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x40c0) kcmp(r1, r3, 0x6, r0, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x7, &(0x7f0000000740)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.175372435s ago: executing program 2 (id=5246): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="640600000000000000000000001b00000000000046fe1b4e7ee00b93b1b0d1b02ff2c9c4f1b9c97ffe57ec0df674c6914fbe0b7d4b66d2a27f11f83323a785707df4c862cfc5bb7eda790bb22146a00e8e278f7d4a834fec72f76f7f97596c56fb045221f9bef64ad72c4d2900e2aba50ec0ede1518e237f82d41a7e8ccfbf981a06b83d0a69c77ac03747786dbdffa2964f2ad0e2c49c8ba58ba0935d6fcd3202007aaa76dffb5771188c88358ccff7dad33610cd76873bab49", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800b000100697036746e6c000034000280050004000600000014000300ff02000000000000000000000000000114000200fe880000000000000000000000000001"], 0x64}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r5, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r6 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) pipe2$watch_queue(&(0x7f0000000540), 0x80) openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[0xffffffffffffffff], 0x1}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) 7.016873601s ago: executing program 4 (id=5247): r0 = socket(0x10, 0x3, 0x4) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x800) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f92400905ad0aff"], 0x0) 6.622478031s ago: executing program 7 (id=5248): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_usb_connect(0x1, 0x2bf, &(0x7f0000000880)={{0x12, 0x1, 0x310, 0xee, 0x97, 0xc6, 0x10, 0x413c, 0x8129, 0x9d14, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2ad, 0x2, 0x0, 0x6, 0x1d0, 0x4, [{{0x9, 0x4, 0x11, 0xfd, 0x6, 0xb0, 0xbc, 0x0, 0x5, [], [{{0x9, 0x5, 0x5, 0x2, 0x210, 0x36, 0x3, 0x6}}, {{0x9, 0x5, 0x2, 0x1, 0x400, 0x8, 0xf9, 0x36, [@generic={0x29, 0x10, "513d9e7982f6a518f6b0b3e85c98528e19b41df5a2c4685495f9c2f395a48e531f911488b08e2f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x40}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0xa7, 0x0, 0x9}}, {{0x9, 0x5, 0xe, 0x1, 0x40, 0x4, 0xa, 0x1, [@generic={0x16, 0x21, "771496c018422e8a1d9e7b5315a61e108efaadea"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x7}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0xff, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xc76}, @generic={0x3, 0x4, "dd"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x9, 0x1, 0x5, [@generic={0x85, 0x57d603a143ea9766, "5dc3645223e96965108b0701060eab28af314ceebf9c4078849d6ec19a3fd05eb4f99e82c59446e93d351ec71c1e5e0b4a16df89e30423ab7c85e1712817c6ae00ff51129fec7caf7fed7d0eeed5a927355e55ef3782191be244f9ff08e0c8ee79b1f0486fa1da9245be4c0aabf6a915eb040409f064ea239b10cceb4d67068e31f2b4"}, @generic={0x93, 0x23, "98bcbf6fb725a3363f3dadf3b000e4df9a43448d4da6c178f7d802aeac920435c384f921d5a85a084012abc2c696f5de1f14d3c0f422be336a1a8297aac21ef6d6949bb44c375150ad0b92eb8337c2930f904dafa03c00511ca5bde1dc3aa3a50a22577944c215fd96d53221cf5056e13f0e14917e284cd4f983b8e23d8fbe51850c22b3d5a1a688152459143eaaf6bd12"}]}}]}}, {{0x9, 0x4, 0x40, 0xd, 0x1, 0xff, 0x6, 0x3b, 0x75, [], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0x5, 0x5, 0x6, [@generic={0x14, 0x7, "84cf6c1aca02e44357142da392d2297c0a17"}, @generic={0xd0, 0x23, "4560ad25e9338e15a17cf5c8182ec46152077ef2ea8498cfb53df3afa26e28e70072b7b367feb375f291464c88d71a4898b33a6b0da0c51e2de5c6fba55ea692467596106184ffa7f4cdd993514b83920d89056df2b6d4ec0322addbd1e56e973ec8d3acf1847e547a280b224986ad3eb24c2a75f95b6be4fce07eeca42f621695934bc505b7b0494ca8a2a9a1e5248a48844215fd48b06bf026507720749ea4dc9f3830af9483daf892ad379bb5edf7abb2ca4123c19c82da08b4b660c4ec0c35d3f22060e2aa79c6cbcbeaba2d"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x250, 0x7f, 0x5, 0x2, 0x10, 0x80}, 0x44, &(0x7f0000000340)={0x5, 0xf, 0x44, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x8d, 0x2, 0x7fff, 0x1e0f, 0x4, [0xff00c0, 0x3f00]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x5, 0xbe3e}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "36a72d1e55f0ba5abc631df5d7d824fb"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0x1, 0x9}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x441}}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3"]) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) 6.27247445s ago: executing program 2 (id=5249): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xaaaaaaaaaaaab99, 0x0, 0x0, 0x2, 0x0, 0x2}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000080)=0xfffffffd, 0x4) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$can_bcm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r7, @ANYRES64=r6, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925001900fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0) 5.654326284s ago: executing program 6 (id=5251): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc532, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1000, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x3, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xfa, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe8, 0x3, 0x1, 0xf7, 0xe0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8a}, [@mixer_unit={0x9, 0x24, 0x4, 0x1, 0x8, "863a5c8e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5256, 0x2, 0x5, "eff94f58fbf6c2af"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0x2, 0x2, "0449", '&'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x4, 0x10, 0x8, 'n'}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0xc42, 0x1, "e444df012658e85a"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x1f, 0x3, 0x1a, 0xc, 'q', 'LUK'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x6, 0x2, {0x7, 0x25, 0x1, 0x81, 0x5, 0x76}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x2, 0x4, 0x1006}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x200, 0x5, 0x8, "df770553"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0xe331, 0x55, "57ab60e821b6c2630d"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x3, "c3", "ef72"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x2, 0x5, 0x2, "fb1cbe8c4f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x40, 0x62, 0x5, {0x7, 0x25, 0x1, 0x0, 0x1, 0x1}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x238, 0x3, 0x9, 0xa, 0x10, 0xec}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0xa, 0x9, 0x9, 0x3, 0x6}]}, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x300a}}, {0xc8, &(0x7f0000000280)=@string={0xc8, 0x3, "e85a997ed16957ebf7d8087659c6d2019a7ffd544cff69f01835ef4c01f0a58c1ae54b725793d4645e62a69a2e13465e00eac82e996224e37fad4c80f451d3802da75ffbc63dd2c5ceb5b7db06a5defb0e83113722911c3870eb79f43cf31eb992036d1f3c82035de8f6dd0b01b3e8eb4e21b80d9d06ff11985e2823364d6b6444203c306943a0199248ba198832fbe0311fc88d51d59a78f6f8dbc714f0ee63c834ce5fbf5b22334e3948f9da04b3205866090d7cfcdc80a5a1af9495db2110f8380ec8c25f"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x422}}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x3, "91"}, @main=@item_4={0x3, 0x0, 0x8, "4a054e1e"}]}}, 0x0}, 0x0) 3.492730572s ago: executing program 7 (id=5253): r0 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000"], 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r0, &(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x1, &(0x7f0000000080)=[{0x5, 0xf, 0x7, 0x7f}]}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r8, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_FUNCS(r9, 0x705, &(0x7f0000000100)=0x100000000) 3.40547883s ago: executing program 4 (id=5255): pipe2$watch_queue(&(0x7f0000001180), 0x80) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) socket$nl_audit(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket(0x2000000000000021, 0x2, 0x2) r2 = syz_open_procfs(0x0, 0x0) writev(r2, 0x0, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x80401, 0x0) close(r3) (fail_nth: 1) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000001280)=""/60, 0x3c}], 0x2}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, 0x0}}], 0x3, 0x0, 0x0) shutdown(r1, 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) syz_io_uring_setup(0x205a, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) 3.040765411s ago: executing program 2 (id=5256): socket$inet6(0xa, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000019380)=ANY=[@ANYBLOB="0f00000004000000080000000400000000000000", @ANYRES32, @ANYBLOB="050040000000000000000000c30d000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000040)="e5", 0xffffffe4, 0x15, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) 3.006648831s ago: executing program 5 (id=5257): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0x8000b, &(0x7f00000002c0)={0x0, 0x79b, 0x800, 0x1001, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fdffffff0000000000000500180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000007a000000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) setsockopt$inet_int(r5, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x519943, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00') read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) recvfrom$rxrpc(r7, &(0x7f0000000080)=""/17, 0x11, 0x40002100, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x3, @remote}, 0x10) r9 = getpgrp(0x0) sched_setaffinity(r9, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) 1.913991203s ago: executing program 5 (id=5258): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$rose(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) 1.838241857s ago: executing program 2 (id=5259): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000003580)={'ip6tnl0\x00', &(0x7f0000003500)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0xff, 0x200, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x11, 0x8000, 0xa, 0x7f}}) sendmsg$nl_route(r0, &(0x7f0000003680)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003640)={&(0x7f0000003700)=ANY=[@ANYBLOB="6c006b59812b00012c00000000000008000000006c4be65f31e3cfe376d8e8652b6ece312b4129c919376b843ac46d0c70c18acd456aa89282107941740da85079973f0cfbe61a9490a800000000000000ffffffff", @ANYRES32=r1, @ANYBLOB="0c000180060002000f0000000c00018008000100100002000c00018005000600020000000c00018005000300020000000c00018008000100280002000c00018005000600060000000c0001800800010022000400"], 0x6c}, 0x1, 0x0, 0x0, 0x2004c081}, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x0, 0x0, 0x6}, 0x2}, [{}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0xfffffffd}, {}, {}, {}, {0x0, 0x0, 0x6}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x100000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc1}, {}, {}, {}, {0x0, 0x8}], [{0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) epoll_create(0x3ff) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = gettid() r9 = socket$netlink(0x10, 0x3, 0x15) r10 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) kcmp$KCMP_EPOLL_TFD(r8, r8, 0x7, r9, &(0x7f0000000080)={r10, 0xffffffffffffffff, 0x7}) writev(r9, &(0x7f0000003400)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000100)="2f7276e9721b702e41d3e8e628c16892e293a8d4819d795d2f945717355d49abb372c2f27c5f928b6bee70cc88d05b5f944898bfe0095eef0eff28e5e0e795fe8373573aaff972712fce8f3eaa84120efeee583eb3a1f601e2f09d2c4925c802432e2c638fe5fabfd6985248e876526a4d198cdff614f07e8ee453169678da19e669061ee9e832c0cba07e78b2144fc4fab9a89a76aa7b81b74c94", 0x9b}, {&(0x7f00000001c0)="8289b2c605c3ac441047c06db00f15d36c22b14502da1849d0bc78da2060b547f4c4a89ba37f97b24828cafd73c2d4b660e679cdd3ff7cc5e10cf7898ac892e62394e1676d019d44e38f68980f71f0e8c95e2247453fd622093dc347408482d05d7c1c33af901952a7cfa3ebf0a219972abbfdea0ec285b7375ac36c1010925078d929cce1c2a3c28f1eaa0045532e47cc9971fabcc37c0886e70f496abfc4c65823", 0xa2}, {&(0x7f0000002180)="065039de056cae5fd91bc9ce83154d118d97865a7dc34ec77ee2e49a7448b7fbde3bbad7d1aa1adda9c7128d4e8ff83a5b8a26dfb7ae467575148805b7f431b9bdfb70bdc6964376203687a8afda2add0c5d067f12b13438d21856cb9918773f720ff351597dbec740519e5e9e73883a6e45715dcb3e6858283b0375d4922794c8fcea31f48c692677c8b5f3edcda71934b820c4945eaf22177744e60418256d8854ce409ae12652a669abdde0d194521f7a4cb4151f3dfadfcddb5b1ad7e341", 0xc0}, {&(0x7f0000000040)="79d51711e67fc5f6cd75cfe31bfea0dc41b52283e4ea38255c509efca57bc222cf5c", 0x22}, {&(0x7f0000002240)="a8be707e3e355d3e828d17c1285ff66314fc982373bd09b79b0a6ec1d8ee31b0f7", 0x21}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000003280)="4286f3e79b22970f10989c0f4288a2e2f3d62179e78c877e62493844e5a9e9c31bedb588c58cd917c0d52b0583b1c20e95e4e3ddc3b46c1edb8907909aff42e51228a68c85cb", 0x46}, {&(0x7f0000003300)="d3566531deb1419815de63e6ea5bc254c58ce6dc86ad64443b2fadc6c18d0871b6ee36949110a99532bdc234c08a9b44a56689320acd78124eed3619b2e479b9353a79537b7ada8b76737434e3939af96373c713ef8e2c62799187da78c4574974311d63453e208da89dd7a01f7b3c146ebeedc1623c03af20af17e9ef989b902b976d74bd1fe202c612a894f9f8361e83231c01a4dc1f6f721f633ca1be311eb77ae901ce5ab0de06cc06bb2438bbc21c570f6ec065bfe3aceb7f6edc021d9c7716246a2cf700d3af66a64783432c00371f140b125d7113f762aca239a8024db94dc8d463a5c52e", 0xe8}], 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x10000, 0x2, 0x0, 0xe, 0x0, 0x1000}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r11, 0x84, 0x65, &(0x7f00000036c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x8}], 0x2c) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r12, @ANYBLOB="05"], 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 1.357256214s ago: executing program 7 (id=5260): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, {0x10, 0x8}, {0x8, 0x8, 0x1}, {0x3e00, 0x8, 0xfffffffd}, {0x4, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x400009, 0x6, 0x0, 0x17, 0x2, 0x1, 0x8}) 1.280744259s ago: executing program 6 (id=5261): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)=0x80) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000500)=@delsa={0x34, 0x11, 0x1, 0x70bd25, 0x25dfdbfb, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xa, 0x32}, [@mark={0xc, 0x15, {0x350759, 0xe2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) rseq(0x0, 0x0, 0x0, 0x0) mlockall(0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{0x0}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000001b40)=[{}], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) 1.280182121s ago: executing program 7 (id=5262): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_emit_vhci(0x0, 0x7) r2 = socket(0x1, 0x2, 0x100) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRESOCT=r3, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x10) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='400:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r4 = syz_usbip_server_init(0x3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000011c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000019480)={{}, 0x0, 0x8, @inherit={0x58, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000ea4f600014addba10b843f642a0000000840000000000000000000000000000000c18a000000000000080000000000000045feffffffffffff0200000000000000f9ffffffffffffff4c0b00000000eaffffff0100000000000700000000000000"]}, @devid=r5}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f00000001c0)={r5, "6c01ebd2f545a97dcfaa04025b70aaa3"}) syz_usb_connect(0x4, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000d, 0x12, r6, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) write$usbip_server(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="000000030000000100000000000000010000000800000fff000000"], 0x60) 826.375889ms ago: executing program 5 (id=5263): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000013c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{&(0x7f0000003b80)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4004000}}], 0x2, 0x0) 723.740259ms ago: executing program 5 (id=5264): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x40000) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) close_range(r1, 0xffffffffffffffff, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}}]}, 0x40}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x402) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000370429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fffffffffffff001240012800b00010062726964676500001400028008000100040000000800050001000000e69f699d85db3cdfded28e8a2acdc0408cb6fcbbc85706bb72a6d70b6940e215155ee7cbfd7f1b879c86ffbed1139466a9b487b39235d1083b43288d5ff89cfad1128d6a8ba09b83"], 0x44}, 0x1, 0x0, 0x0, 0x8941}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f94924fc60040011", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r9 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r10, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r11, r11, 0x0, 0xfffffffffffffffa, 0x3fff}) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000100)={r8, 0x1, 0x55c4, 0x0, &(0x7f0000000080)}) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r12, 0x8004af81, &(0x7f0000000040)) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a2) r14 = syz_open_dev$loop(&(0x7f0000000440), 0x8000000000000000, 0x18b681) ioctl$LOOP_CONFIGURE(r14, 0x4c0a, &(0x7f0000001600)={r13, 0x801, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe151168935875397bab22d0000b4f05f8100000000000000003b00000000000000000200", "90be8b1c5512406c7f0000000000000000000000000000000000000000000400", [0x6, 0x40000000000000]}}) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000580)={0xb, @sdr={0x34325258, 0xc}}) 509.161855ms ago: executing program 5 (id=5265): memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) (async) r0 = memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af7, 0x80, 0x1, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x68c42) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) socket$kcm(0x2, 0x3, 0x2) syz_io_uring_setup(0x10d, &(0x7f0000000780)={0x0, 0x25b9, 0x100, 0x400, 0x2be}, 0x0, 0x0) (async) syz_io_uring_setup(0x10d, &(0x7f0000000780)={0x0, 0x25b9, 0x100, 0x400, 0x2be}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="090000000000000002004e22ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad00000000000000000000000000000000000000000000000000000000000000000000000038000000"], 0x90) getpid() (async) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x5010, &(0x7f00000006c0)={[{@metacopy_off}, {@verity_on}, {@nfs_export_off}, {@metacopy_on}, {@metacopy_off}, {@redirect_dir_off}, {@verity_require}], [{@fsmagic={'fsmagic', 0x3d, 0x1}}, {@uid_eq={'uid', 0x3d, r8}}]}) dup(0xffffffffffffffff) (async) dup(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5cf1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYRES16=r4, @ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 368.387524ms ago: executing program 4 (id=5266): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b18, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x70a, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000041) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcmmio\x00', [0x4f27, 0x6, 0x3, 0x4, 0x5, 0x20000cc5, 0x5, 0x4, 0xa, 0xfffffffc, 0x2, 0x3, 0x3, 0x1, 0x4000007, 0x101, 0x0, 0x1a449, 0x9, 0x7, 0xd, 0xcaa7, 0x0, 0x20001e58, 0x200007, 0x63e, 0x39, 0x8, 0x3, 0x0, 0x6]}) 133.766963ms ago: executing program 5 (id=5267): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000100)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800100b, r4, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r6, 0x0, 0x4) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r6, 0x111, 0x2, 0x1, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) r8 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f0000000280)={0x9, {0xf8001004, 0x9, 0x8, 0x80b}}) 0s ago: executing program 7 (id=5268): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_io_uring_setup(0x49c, &(0x7f0000000400)={0x0, 0x7078, 0x1, 0x0, 0x284}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x114, &(0x7f0000000080)=0x43fd, 0x0, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = memfd_secret(0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x8d79, 0x100, 0x0, 0x20e, 0x0, r5}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800", @ANYRES16=r6], 0x44}}, 0x28081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x240048dd) syz_usb_connect(0x3, 0x24, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f00000002c0)=0x3, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r9, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x9, 0x0) read$msr(r10, &(0x7f0000002000)=""/102400, 0x19000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000004c0), 0x980, 0x0) kernel console output (not intermixed with test programs): 8][ T5882] usb 6-1: Using ep0 maxpacket: 8 [ 1241.610212][ T5882] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1241.616066][T23429] usbhid 8-1:1.0: can't add hid device: -71 [ 1241.619244][ T5882] usb 6-1: config 179 has no interface number 0 [ 1241.626675][T23429] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 1241.630765][ T5882] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1241.642922][T23429] usb 8-1: USB disconnect, device number 74 [ 1241.651835][ T5882] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1241.668344][ T10] usb 7-1: new low-speed USB device number 107 using dummy_hcd [ 1241.676351][ T5882] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1241.688038][ T5882] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1241.700178][ T5882] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1241.713984][ T5882] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1241.723043][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.732979][T24529] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1241.833110][ T10] usb 7-1: device descriptor read/64, error -71 [ 1241.943653][ T10] usb usb7-port1: attempt power cycle [ 1241.959346][ T5882] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input60 [ 1242.032789][ T6027] usb 3-1: reset high-speed USB device number 81 using dummy_hcd [ 1242.159101][T24529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.162884][ T6027] usb 3-1: device descriptor read/64, error -71 [ 1242.168746][T24529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.199684][T24529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1242.209711][T24529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1242.220709][T24529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4710'. [ 1242.293036][ T10] usb 7-1: new low-speed USB device number 108 using dummy_hcd [ 1242.323482][ T49] usb 6-1: USB disconnect, device number 85 [ 1242.323486][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1242.323618][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1242.536116][ T6027] usb 3-1: reset high-speed USB device number 81 using dummy_hcd [ 1242.542819][ T10] usb 7-1: device descriptor read/8, error -71 [ 1242.702956][ T6027] usb 3-1: device descriptor read/64, error -71 [ 1242.792416][ T10] usb 7-1: new low-speed USB device number 109 using dummy_hcd [ 1242.806945][T24545] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4714'. [ 1242.844823][ T10] usb 7-1: device descriptor read/8, error -71 [ 1242.942978][ T6027] usb 3-1: reset high-speed USB device number 81 using dummy_hcd [ 1242.960841][ T10] usb usb7-port1: unable to enumerate USB device [ 1242.972932][ T6027] usb 3-1: device descriptor read/8, error -71 [ 1243.224569][ T6027] usb 3-1: reset high-speed USB device number 81 using dummy_hcd [ 1243.253746][ T6027] usb 3-1: device descriptor read/8, error -71 [ 1243.370363][ T6027] usb 3-1: USB disconnect, device number 81 [ 1243.502905][ T6027] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1243.633736][ T6027] usb 3-1: device descriptor read/64, error -71 [ 1244.502984][ T5882] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1244.566252][T24565] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 1244.741682][ T5882] usb 8-1: config 8 has an invalid descriptor of length 51, skipping remainder of the config [ 1244.752690][ T5882] usb 8-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 1244.791078][ T5882] usb 8-1: New USB device found, idVendor=15c2, idProduct=0038, bcdDevice=69.a3 [ 1244.902949][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.913663][T24570] input: syz1 as /devices/virtual/input/input61 [ 1244.932720][ T5882] usb 8-1: Product: syz [ 1244.941638][ T5882] usb 8-1: Manufacturer: syz [ 1244.995931][T24570] sp0: Synchronizing with TNC [ 1245.007535][T24569] [U] [ 1245.017611][ T5882] usb 8-1: SerialNumber: syz [ 1247.302855][ T5882] usb 8-1: USB disconnect, device number 75 [ 1247.405159][T24596] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4729'. [ 1247.833333][T24606] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 1248.102348][ T6027] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1248.253091][ T5882] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1248.430040][ T5882] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1248.461382][ T5882] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1248.505919][ T5882] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.538227][ T5882] usb 3-1: config 220 has no interface number 2 [ 1248.558502][ T5882] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1248.592913][ T5882] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1248.599918][ T5882] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1248.628965][ T5882] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1248.645075][ T5882] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1248.663058][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.680196][ T5882] usb 3-1: Product: syz [ 1248.692890][ T5882] usb 3-1: Manufacturer: syz [ 1248.703609][ T5882] usb 3-1: SerialNumber: syz [ 1248.758448][ T6027] usb 8-1: device descriptor read/64, error -71 [ 1249.032428][T24622] JFS: discard option not supported on device [ 1249.038696][T24622] Mount JFS Failure: -22 [ 1249.043288][T24622] jfs_mount failed w/return code = -22 [ 1249.090713][ T5882] usb 3-1: selecting invalid altsetting 0 [ 1249.104876][ T5882] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1249.115794][ T5882] uvcvideo 3-1:220.0: No valid video chain found. [ 1249.126490][ T5882] usb 3-1: selecting invalid altsetting 0 [ 1249.133844][ T5882] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1249.144683][ T5882] usb 3-1: USB disconnect, device number 84 [ 1249.193260][ T6027] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1249.322958][ T6027] usb 8-1: device descriptor read/64, error -71 [ 1249.433617][ T6027] usb usb8-port1: attempt power cycle [ 1249.802283][T24633] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4739'. [ 1249.895012][ T6027] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1249.953310][ T49] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1249.996736][ T6027] usb 8-1: device descriptor read/8, error -71 [ 1250.251240][ T49] usb 7-1: Using ep0 maxpacket: 8 [ 1250.448010][ T6027] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1250.464502][ T49] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1250.474209][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.492169][ T6027] usb 8-1: device descriptor read/8, error -71 [ 1250.567110][ T49] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1250.574896][ T49] pvrusb2: ********** [ 1250.578877][ T49] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1250.592028][ T49] pvrusb2: Important functionality might not be entirely working. [ 1250.600459][ T49] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1250.612687][ T6027] usb usb8-port1: unable to enumerate USB device [ 1250.619368][ T49] pvrusb2: ********** [ 1250.707938][ T2337] pvrusb2: Invalid write control endpoint [ 1250.757480][ T2337] pvrusb2: Invalid write control endpoint [ 1250.768533][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1250.779586][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1250.796217][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1250.812730][ T2337] pvrusb2: Device being rendered inoperable [ 1250.818776][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1250.827105][ T6027] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1250.843749][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1250.931408][T24631] pvrusb2: Killing an I2C write to 1 that is too large (desired=8192 limit=61) [ 1250.944335][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1250.954804][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1250.997948][T24631] netlink: 'syz.6.4740': attribute type 9 has an invalid length. [ 1251.008914][T24631] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4740'. [ 1251.018206][T24631] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4740'. [ 1251.039834][ T49] usb 7-1: USB disconnect, device number 110 [ 1251.052302][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1251.084528][ T6027] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.096737][ T6027] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1251.105869][ T6027] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1251.115812][ T6027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.124502][ T6027] usb 3-1: Product: syz [ 1251.128776][ T6027] usb 3-1: Manufacturer: syz [ 1251.134012][ T6027] usb 3-1: SerialNumber: syz [ 1251.234341][ T6027] usb 3-1: config 0 descriptor?? [ 1251.241895][ T6027] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1251.733937][ T6027] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1251.741650][ T6027] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1251.752587][ T6027] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1251.757584][T24659] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1251.964131][T16954] usb 3-1: USB disconnect, device number 85 [ 1252.103719][T24666] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4751'. [ 1252.123507][T24666] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.4751'. [ 1252.600512][ T30] audit: type=1400 audit(2000000827.624:2099): avc: denied { remount } for pid=24667 comm="syz.6.4752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1252.600962][T24671] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 1252.600962][T24671] [ 1253.809933][ T30] audit: type=1400 audit(2000000828.384:2100): avc: denied { setattr } for pid=24677 comm="syz.2.4755" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1254.512911][ T6027] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1254.737139][ T6027] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 1254.750889][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.763292][ T6027] usb 6-1: Product: syz [ 1254.767824][ T6027] usb 6-1: Manufacturer: syz [ 1254.768664][ T30] audit: type=1400 audit(2000000829.794:2101): avc: denied { unmount } for pid=16055 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1254.798013][ T6027] usb 6-1: SerialNumber: syz [ 1254.805549][ T6027] usb 6-1: config 0 descriptor?? [ 1254.815504][ T6027] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 1255.014939][T24682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.024017][T16954] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1255.033341][T24682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.043347][T24682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.051922][T24682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.062741][T23429] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1255.071722][T24682] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4756'. [ 1255.083271][ T6027] sonixb 6-1:0.0: Error reading register 00: -71 [ 1255.090841][ T6027] usb 6-1: USB disconnect, device number 86 [ 1255.183057][T16954] usb 3-1: Using ep0 maxpacket: 16 [ 1255.189919][T16954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.201388][T16954] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1255.210834][T16954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.220431][T16954] usb 3-1: config 0 descriptor?? [ 1255.234359][T23429] usb 7-1: Using ep0 maxpacket: 16 [ 1255.240858][T23429] usb 7-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 1255.251732][T23429] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1255.263394][T23429] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1255.273724][T23429] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.281757][T23429] usb 7-1: Product: syz [ 1255.345305][T23429] usb 7-1: Manufacturer: syz [ 1255.349934][T23429] usb 7-1: SerialNumber: syz [ 1255.571726][T24700] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4762'. [ 1255.587816][T24700] openvswitch: netlink: Multiple metadata blocks provided [ 1255.605192][T24700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.614718][T24700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1255.632544][ T9735] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1255.641643][T16954] hkems 0003:2006:0118.003B: item fetching failed at offset 4/5 [ 1255.656804][T23429] usb 7-1: 0:2 : does not exist [ 1255.663715][T16954] hkems 0003:2006:0118.003B: parse failed [ 1255.667598][T23429] usb 7-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1255.670646][T16954] hkems 0003:2006:0118.003B: probe with driver hkems failed with error -22 [ 1255.683445][T23429] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1255.700505][T23429] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1255.711480][T23429] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 1255.727468][T23429] usb 7-1: 5:0: cannot get min/max values for control 5 (id 5) [ 1255.737927][T23429] usb 7-1: USB disconnect, device number 111 [ 1255.804894][ T9735] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1255.816337][ T9735] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1255.827264][ T9735] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1255.838970][ T9735] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.842128][ T6027] usb 3-1: USB disconnect, device number 86 [ 1255.848823][ T9735] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.864812][ T9735] usb 8-1: Product: syz [ 1255.869133][ T9735] usb 8-1: Manufacturer: syz [ 1255.874500][ T9735] usb 8-1: SerialNumber: syz [ 1255.932924][T16954] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1256.082970][T16954] usb 6-1: Using ep0 maxpacket: 32 [ 1256.089218][ T30] audit: type=1400 audit(2000000831.114:2102): avc: denied { bind } for pid=24702 comm="syz.7.4763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1256.110391][T16954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1256.121694][T16954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1256.131861][T16954] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1256.143254][T16954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.153189][T16954] usb 6-1: config 0 descriptor?? [ 1256.234107][T24708] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4766'. [ 1256.561521][T16954] ft260 0003:0403:6030.003C: unknown main item tag 0x7 [ 1257.494376][T24721] vivid-007: disconnect [ 1257.547551][T16954] ft260 0003:0403:6030.003C: chip code: 6424 8183 [ 1257.627615][T24713] vivid-007: reconnect [ 1257.654796][T24727] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4770'. [ 1257.675306][T24725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1257.691230][T24725] bond0: (slave bond2): Enslaving as an active interface with an up link [ 1257.748172][T16954] ft260 0003:0403:6030.003C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 1257.769587][ T9735] cdc_ncm 8-1:1.0: bind() failure [ 1257.783535][ T9735] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1257.792925][ T9735] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1257.802117][ T9735] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 1257.816771][ T9735] usb 8-1: USB disconnect, device number 80 [ 1257.949541][T24737] batman_adv: batadv0: Adding interface: gretap1 [ 1257.957705][T24737] batman_adv: batadv0: Interface activated: gretap1 [ 1257.970684][T24728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1257.977026][T24737] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT' [ 1257.982372][T24728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.987102][T24737] ALSA: mixer_oss: invalid index 1374389 [ 1258.193482][ T5882] usb 6-1: reset high-speed USB device number 87 using dummy_hcd [ 1258.512910][ T30] audit: type=1400 audit(2000000833.464:2103): avc: denied { recv } for pid=24739 comm="syz.6.4774" saddr=10.128.0.169 src=37078 daddr=10.128.0.194 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1258.694098][T24747] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 1259.033820][T16954] usb 6-1: USB disconnect, device number 87 [ 1260.092924][T16954] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1261.172886][T16954] usb 7-1: device descriptor read/64, error -71 [ 1261.872896][T16954] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1262.012927][T16954] usb 7-1: device descriptor read/64, error -71 [ 1262.133608][T16954] usb usb7-port1: attempt power cycle [ 1262.513643][T16954] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 1262.534179][T16954] usb 7-1: device descriptor read/8, error -71 [ 1262.712869][T23429] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1262.884034][ T49] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1262.916300][T23429] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1262.961746][T23429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.984184][T23429] usb 3-1: Product: syz [ 1262.998483][T23429] usb 3-1: Manufacturer: syz [ 1263.104806][ T49] usb 8-1: Using ep0 maxpacket: 16 [ 1263.635703][T23429] usb 3-1: SerialNumber: syz [ 1263.901526][T24817] can0: slcan on ttyS3. [ 1263.939132][ T49] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.950916][ T49] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1263.964691][T23429] usb 3-1: config 0 descriptor?? [ 1263.983038][ T49] usb 8-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 1263.992172][ T49] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.021769][ T49] usb 8-1: config 0 descriptor?? [ 1264.045738][T24818] can0 (unregistered): slcan off ttyS3. [ 1264.459016][T24830] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1264.477714][T24830] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1264.816002][T23429] airspy 3-1:0.0: Board ID: 00 [ 1264.823867][T23429] airspy 3-1:0.0: Firmware version: [ 1264.830809][ T49] logitech 0003:046D:C623.003D: item fetching failed at offset 8/69 [ 1264.926391][ T49] logitech 0003:046D:C623.003D: parse failed [ 1265.015877][ T49] logitech 0003:046D:C623.003D: probe with driver logitech failed with error -22 [ 1265.167791][ T9735] usb 8-1: USB disconnect, device number 81 [ 1265.809889][ T30] audit: type=1400 audit(2000000840.834:2104): avc: denied { map } for pid=24844 comm="syz.5.4802" path="socket:[90636]" dev="sockfs" ino=90636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1266.906811][T23429] airspy 3-1:0.0: usb_control_msg() failed -110 request 0f [ 1266.929562][T23429] airspy 3-1:0.0: Registered as swradio24 [ 1266.943101][T23429] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1266.991877][ T10] usb 3-1: USB disconnect, device number 87 [ 1267.926488][T24866] netlink: 'syz.5.4807': attribute type 1 has an invalid length. [ 1267.960377][T24866] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1268.243543][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1268.547699][ T30] audit: type=1400 audit(2000000843.574:2105): avc: denied { map } for pid=24880 comm="syz.5.4813" path="/dev/sg0" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1268.685991][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.703707][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.714569][ T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1268.724675][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.750406][ T10] usb 3-1: config 0 descriptor?? [ 1268.856742][T24894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4816'. [ 1268.926712][ T30] audit: type=1326 audit(2000000843.954:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24893 comm="syz.5.4816" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7e7d8f749 code=0x0 [ 1269.104832][T24900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4817'. [ 1269.115621][T24900] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4817'. [ 1269.125217][T24900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4817'. [ 1269.135334][T24900] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4817'. [ 1269.145737][T24900] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4817'. [ 1269.243844][ T30] audit: type=1400 audit(2000000844.274:2107): avc: denied { watch watch_reads } for pid=24867 comm="syz.2.4809" path="/proc/1015/fdinfo" dev="proc" ino=90084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1269.247384][ T10] cp2112 0003:10C4:EA90.003E: unknown main item tag 0x0 [ 1269.277962][ T10] cp2112 0003:10C4:EA90.003E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1269.448674][ T10] cp2112 0003:10C4:EA90.003E: error requesting version [ 1269.467529][ T10] cp2112 0003:10C4:EA90.003E: probe with driver cp2112 failed with error -71 [ 1269.480414][ T10] usb 3-1: USB disconnect, device number 88 [ 1269.714131][ T30] audit: type=1400 audit(2000000844.744:2108): avc: denied { mounton } for pid=24916 comm="syz.7.4822" path="/323/file0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1269.745658][ T30] audit: type=1400 audit(2000000844.764:2109): avc: denied { unmount } for pid=18433 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1269.802944][ T6020] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 1269.933088][ T6020] usb 7-1: device descriptor read/64, error -71 [ 1270.193018][ T6020] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 1270.244588][T24931] binder: 24930:24931 ioctl c0306201 2000000003c0 returned -14 [ 1270.343115][ T6020] usb 7-1: device descriptor read/64, error -71 [ 1270.384950][T23429] usb 8-1: new high-speed USB device number 82 using dummy_hcd [ 1270.454203][ T6020] usb usb7-port1: attempt power cycle [ 1270.623039][T23429] usb 8-1: Using ep0 maxpacket: 32 [ 1270.651298][T23429] usb 8-1: no configurations [ 1270.683505][T23429] usb 8-1: can't read configurations, error -22 [ 1270.812939][ T6020] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 1270.855226][ T6020] usb 7-1: device descriptor read/8, error -71 [ 1270.875231][T23429] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 1271.042951][T23429] usb 8-1: Using ep0 maxpacket: 32 [ 1271.049042][T23429] usb 8-1: no configurations [ 1271.054097][T23429] usb 8-1: can't read configurations, error -22 [ 1271.060752][T23429] usb usb8-port1: attempt power cycle [ 1271.093673][T24946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4830'. [ 1271.133079][ T6020] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 1271.240453][ T6020] usb 7-1: device descriptor read/8, error -71 [ 1271.441474][T23429] usb 8-1: new high-speed USB device number 84 using dummy_hcd [ 1271.453248][ T6020] usb usb7-port1: unable to enumerate USB device [ 1271.645615][T24961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5146 sclass=netlink_tcpdiag_socket pid=24961 comm=syz.2.4832 [ 1271.924280][T23429] usb 8-1: Using ep0 maxpacket: 32 [ 1271.930047][T23429] usb 8-1: no configurations [ 1271.935375][T23429] usb 8-1: can't read configurations, error -22 [ 1271.960274][T24964] loop6: detected capacity change from 0 to 2640 [ 1271.969397][T24964] buffer_io_error: 6 callbacks suppressed [ 1271.969408][T24964] Buffer I/O error on dev loop6, logical block 0, async page read [ 1271.984086][T24964] Buffer I/O error on dev loop6, logical block 0, async page read [ 1271.995381][T24964] Buffer I/O error on dev loop6, logical block 0, async page read [ 1272.003970][T24964] Buffer I/O error on dev loop6, logical block 0, async page read [ 1272.013235][T24964] Buffer I/O error on dev loop6, logical block 0, async page read [ 1272.021260][T24964] Buffer I/O error on dev loop6, logical block 0, async page read [ 1272.029678][T24964] Buffer I/O error on dev loop6, logical block 0, async page read [ 1272.038958][T24964] Buffer I/O error on dev loop6, logical block 0, async page read [ 1272.047027][T24964] ldm_validate_partition_table(): Disk read failed. [ 1272.054602][T24964] Buffer I/O error on dev loop6, logical block 0, async page read [ 1272.064320][T24964] Buffer I/O error on dev loop6, logical block 0, async page read [ 1272.072488][T24964] Dev loop6: unable to read RDB block 0 [ 1272.078900][T24964] loop6: unable to read partition table [ 1272.085092][T23429] usb 8-1: new high-speed USB device number 85 using dummy_hcd [ 1272.093772][T24964] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1272.113506][T23429] usb 8-1: Using ep0 maxpacket: 32 [ 1272.119194][T23429] usb 8-1: no configurations [ 1272.141820][T23429] usb 8-1: can't read configurations, error -22 [ 1272.149869][T23429] usb usb8-port1: unable to enumerate USB device [ 1272.227006][ T30] audit: type=1400 audit(2000000847.254:2110): avc: denied { map } for pid=24963 comm="syz.5.4836" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1272.749518][T24983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1273.183040][T24981] xt_CT: No such helper "snmp_trap" [ 1273.197861][ T30] audit: type=1400 audit(2000000848.224:2111): avc: denied { unmount } for pid=22391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1273.229050][T24984] netlink: 'syz.6.4842': attribute type 12 has an invalid length. [ 1273.237697][T24982] xt_CT: No such helper "snmp_trap" [ 1273.243560][T24984] netlink: 'syz.6.4842': attribute type 29 has an invalid length. [ 1273.251344][T24984] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4842'. [ 1273.261335][T24984] netlink: 'syz.6.4842': attribute type 1 has an invalid length. [ 1273.269862][T24984] netlink: 47 bytes leftover after parsing attributes in process `syz.6.4842'. [ 1273.284070][T24981] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4842'. [ 1273.296486][T24989] xt_bpf: check failed: parse error [ 1274.373102][T23429] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1274.762904][T23429] usb 3-1: Using ep0 maxpacket: 8 [ 1274.807368][T23429] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1274.819529][T23429] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1275.337076][T23429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.347741][T23429] usb 3-1: config 0 descriptor?? [ 1276.083581][T23429] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1276.483873][T25041] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1276.491065][T23429] usb 7-1: new full-speed USB device number 120 using dummy_hcd [ 1276.861130][T25043] Invalid option length (1048180) for dns_resolver key [ 1276.993072][T23429] usb 7-1: device descriptor read/64, error -71 [ 1277.302338][T23429] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 1277.443055][T23429] usb 7-1: device descriptor read/64, error -71 [ 1277.755827][T23429] usb usb7-port1: attempt power cycle [ 1278.023577][T16742] usb 3-1: USB disconnect, device number 89 [ 1278.592955][T16742] usb 8-1: new high-speed USB device number 86 using dummy_hcd [ 1278.748277][T23429] usb 7-1: new full-speed USB device number 122 using dummy_hcd [ 1278.773536][T23429] usb 7-1: device descriptor read/8, error -71 [ 1278.783036][T16742] usb 8-1: Using ep0 maxpacket: 8 [ 1278.795324][T16742] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.864751][T16742] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1278.882290][T16742] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.905716][T16742] usb 8-1: config 0 descriptor?? [ 1278.923807][T16742] uvcvideo 8-1:0.0: Found UVC 0.00 device (2833:0201) [ 1278.931493][T16742] uvcvideo 8-1:0.0: No valid video chain found. [ 1279.013075][T23429] usb 7-1: new full-speed USB device number 123 using dummy_hcd [ 1279.054230][T23429] usb 7-1: device descriptor read/8, error -71 [ 1279.125321][ T90] usb 8-1: USB disconnect, device number 86 [ 1279.167806][T25065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1279.184696][T23429] usb usb7-port1: unable to enumerate USB device [ 1279.864848][T25087] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1280.336235][T25090] bond4: entered promiscuous mode [ 1280.413990][T25090] bond4: entered allmulticast mode [ 1280.436030][T25090] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1280.559036][T25096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4870'. [ 1280.742929][T16742] usb 8-1: new high-speed USB device number 87 using dummy_hcd [ 1280.952975][T16742] usb 8-1: Using ep0 maxpacket: 8 [ 1280.966616][T25103] xt_hashlimit: max too large, truncated to 1048576 [ 1281.267793][T16742] usb 8-1: config 0 has an invalid interface number: 26 but max is 0 [ 1281.360394][T16742] usb 8-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1281.481311][T16742] usb 8-1: config 0 has no interface number 0 [ 1281.524996][T16742] usb 8-1: config 0 interface 26 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1281.541139][T16742] usb 8-1: config 0 interface 26 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 1281.553055][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4871'. [ 1281.578166][T25099] macvlan2: entered promiscuous mode [ 1281.584052][T25099] macvlan2: entered allmulticast mode [ 1281.589415][T25099] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 1281.609798][T16742] usb 8-1: New USB device found, idVendor=1066, idProduct=0300, bcdDevice=e6.d2 [ 1281.630668][T16742] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.700621][T16742] usb 8-1: Product: syz [ 1281.705475][T16742] usb 8-1: Manufacturer: syz [ 1281.710070][T16742] usb 8-1: SerialNumber: syz [ 1281.754030][T16742] usb 8-1: config 0 descriptor?? [ 1281.957451][ T30] audit: type=1400 audit(2000000856.984:2112): avc: denied { map } for pid=25108 comm="syz.6.4875" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1282.012893][ T90] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1282.055183][ T30] audit: type=1400 audit(2000000856.984:2113): avc: denied { execute } for pid=25108 comm="syz.6.4875" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1282.072559][T16742] usb 8-1: USB disconnect, device number 87 [ 1282.242906][ T90] usb 3-1: Using ep0 maxpacket: 16 [ 1282.254932][ T90] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1282.266866][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.282491][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.295032][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.778684][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.816397][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.836424][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.857312][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.887104][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.918817][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.935574][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1282.947426][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1282.973242][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.050692][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.063729][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.078356][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1283.090283][ T90] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1283.107340][ T90] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1283.118262][ T90] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.307683][ T90] usb 3-1: config 0 descriptor?? [ 1283.474525][ T30] audit: type=1400 audit(2000000858.504:2114): avc: denied { setopt } for pid=25125 comm="syz.7.4879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1283.507970][T25127] netlink: 220 bytes leftover after parsing attributes in process `syz.7.4879'. [ 1283.789450][ T30] audit: type=1400 audit(2000000858.814:2115): avc: denied { read } for pid=25140 comm="syz.6.4883" dev="sockfs" ino=91812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1283.813309][T25141] 9p: Bad value for 'rfdno' [ 1283.833090][ T6020] usb 8-1: new full-speed USB device number 88 using dummy_hcd [ 1283.922920][T16742] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1283.992812][ T6020] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1284.023513][ T6020] usb 8-1: not running at top speed; connect to a high speed hub [ 1284.054074][ T90] usbhid 3-1:0.0: can't add hid device: -71 [ 1284.061880][ T6020] usb 8-1: config 129 has an invalid interface number: 28 but max is 0 [ 1284.070620][ T90] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1284.079966][ T6020] usb 8-1: config 129 has no interface number 0 [ 1284.090584][ T90] usb 3-1: USB disconnect, device number 90 [ 1284.096949][ T6020] usb 8-1: config 129 interface 28 has no altsetting 0 [ 1284.105698][T16742] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.108635][ T6020] usb 8-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1284.128903][ T6020] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.137657][ T6020] usb 8-1: Product: syz [ 1284.141937][ T6020] usb 8-1: Manufacturer: syz [ 1284.147964][ T6020] usb 8-1: SerialNumber: syz [ 1284.157889][T16742] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.185584][T16742] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1284.218639][T16742] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1284.242266][T16742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.263364][T16742] usb 6-1: config 0 descriptor?? [ 1284.310331][ T30] audit: type=1400 audit(2000000859.334:2116): avc: denied { write } for pid=25148 comm="syz.6.4886" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1284.353509][ T30] audit: type=1400 audit(2000000859.374:2117): avc: denied { ioctl } for pid=25148 comm="syz.6.4886" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x64b8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1284.997327][ T49] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1285.042011][T16742] usbhid 6-1:0.0: can't add hid device: -71 [ 1285.052151][T16742] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1285.068387][T16742] usb 6-1: USB disconnect, device number 88 [ 1285.242996][ T49] usb 7-1: Using ep0 maxpacket: 8 [ 1286.123873][ T49] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.145732][ T49] usb 7-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1286.155645][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.167117][ T49] usb 7-1: config 0 descriptor?? [ 1286.178416][ T49] uvcvideo 7-1:0.0: Found UVC 0.00 device (2833:0201) [ 1286.196480][ T49] uvcvideo 7-1:0.0: No valid video chain found. [ 1286.311735][ T30] audit: type=1400 audit(2000000861.334:2118): avc: denied { write } for pid=25174 comm="syz.2.4893" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1287.512290][ T30] audit: type=1400 audit(2000000861.344:2119): avc: denied { ioctl } for pid=25174 comm="syz.2.4893" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1287.543855][ T6020] etas_es58x 8-1:129.28: Starting syz syz (Serial Number syz) [ 1287.579615][ T6020] usb 8-1: USB disconnect, device number 88 [ 1287.661435][ T10] usb 7-1: USB disconnect, device number 124 [ 1288.230240][T25191] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4897'. [ 1289.111819][T25202] QAT: Invalid ioctl 1075883590 [ 1289.125105][T25202] QAT: Invalid ioctl 1075883590 [ 1289.140370][T25202] QAT: Invalid ioctl 1075883590 [ 1289.146045][T25202] QAT: Invalid ioctl 1075883590 [ 1289.154709][T25202] QAT: Invalid ioctl 1075883590 [ 1289.159645][T25202] QAT: Invalid ioctl 1075883590 [ 1289.166252][T25202] QAT: Invalid ioctl 1075883590 [ 1289.171177][T25202] QAT: Invalid ioctl 1075883590 [ 1289.176630][T25202] QAT: Invalid ioctl 1075883590 [ 1289.181543][T25202] QAT: Invalid ioctl 1075883590 [ 1289.787437][T25211] can0: slcan on ttyS3. [ 1289.820243][T25213] fuse: Bad value for 'user_id' [ 1289.826093][T25213] fuse: Bad value for 'user_id' [ 1289.895854][T25213] fuse: Unknown parameter 'rootmo000040000' [ 1290.074663][T25209] can0 (unregistered): slcan off ttyS3. [ 1291.274406][T25237] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 1291.651611][T25225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1291.666771][ T5883] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1291.878445][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 1291.936003][ T5883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1291.948264][ T5883] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1291.958361][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.978797][ T5883] usb 3-1: config 0 descriptor?? [ 1291.987517][ T5883] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1293.415481][T25275] random: crng reseeded on system resumption [ 1293.531977][T25279] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4917'. [ 1293.562927][ T6020] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1293.618089][ T5883] gspca_vc032x: reg_w err -71 [ 1293.623470][ T5883] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1293.635585][ T5883] usb 3-1: USB disconnect, device number 91 [ 1293.782890][ T6020] usb 7-1: Using ep0 maxpacket: 32 [ 1293.791897][ T6020] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1293.801331][ T6020] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 1293.833072][ T6020] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.862335][ T6020] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1293.927481][ T6020] usb 7-1: config 128 has no interface number 0 [ 1293.957844][ T6020] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 1293.989885][ T6020] usb 7-1: config 128 interface 127 has no altsetting 0 [ 1294.011665][ T6020] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1294.024836][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.049119][ T6020] usb 7-1: Product: syz [ 1294.060986][ T6020] usb 7-1: Manufacturer: syz [ 1294.078957][ T6020] usb 7-1: SerialNumber: syz [ 1294.095028][T25273] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1294.415152][ T6020] usb 7-1: USB disconnect, device number 125 [ 1294.623065][T16742] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1294.903159][T16742] usb 3-1: device descriptor read/64, error -71 [ 1295.452410][T16742] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1295.582932][T16742] usb 3-1: device descriptor read/64, error -71 [ 1295.592898][ T5883] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1295.703427][T16742] usb usb3-port1: attempt power cycle [ 1295.743203][ T5883] usb 7-1: device descriptor read/64, error -71 [ 1295.993116][ T5883] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1296.043140][ T6020] usb 8-1: new high-speed USB device number 89 using dummy_hcd [ 1296.052871][T16742] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1296.073671][T16742] usb 3-1: device descriptor read/8, error -71 [ 1296.132992][ T5883] usb 7-1: device descriptor read/64, error -71 [ 1296.201098][ T6020] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1296.232893][ T6020] usb 8-1: too many endpoints for config 0 interface 0 altsetting 5: 129, using maximum allowed: 30 [ 1296.252959][ T6020] usb 8-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 129 [ 1296.266341][ T5883] usb usb7-port1: attempt power cycle [ 1296.275279][ T6020] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1296.281937][ T6020] usb 8-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1296.292104][ T6020] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.303757][ T6020] usb 8-1: config 0 descriptor?? [ 1296.333756][T16742] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 1296.363318][T16742] usb 3-1: device descriptor read/8, error -71 [ 1296.458220][T25316] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4927'. [ 1296.467729][T25316] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4927'. [ 1296.492460][T16742] usb usb3-port1: unable to enumerate USB device [ 1296.535773][T25313] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4926'. [ 1296.579074][T25313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25313 comm=syz.7.4926 [ 1296.612911][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1296.644616][ T5883] usb 7-1: device descriptor read/8, error -71 [ 1296.796874][ T6020] usb 8-1: string descriptor 0 read error: -71 [ 1296.804551][ T6020] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1296.814219][ T6020] usb 8-1: USB disconnect, device number 89 [ 1297.332880][ T5883] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1297.379064][ T5883] usb 7-1: device descriptor read/8, error -71 [ 1297.502941][ T5883] usb usb7-port1: unable to enumerate USB device [ 1297.612982][T16742] usb 6-1: new low-speed USB device number 89 using dummy_hcd [ 1297.773004][ T6020] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1297.790439][T16742] usb 6-1: device descriptor read/64, error -71 [ 1298.052920][ T6020] usb 3-1: Using ep0 maxpacket: 8 [ 1298.059101][ T6020] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.070274][ T6020] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1298.079465][ T6020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.088169][ T30] audit: type=1400 audit(2000000873.114:2120): avc: denied { relabelfrom } for pid=25335 comm="syz.6.4934" name="NETLINK" dev="sockfs" ino=92968 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1298.088213][T25339] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 1298.133911][ T30] audit: type=1400 audit(2000000873.154:2121): avc: denied { relabelto } for pid=25335 comm="syz.6.4934" name="NETLINK" dev="sockfs" ino=92968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:var_auth_t:s0" [ 1298.368147][T16742] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 1298.369307][ T6020] usb 3-1: config 0 descriptor?? [ 1298.682838][T16742] usb 6-1: device descriptor read/64, error -71 [ 1298.690926][ T6020] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 1298.803001][ T6020] uvcvideo 3-1:0.0: No valid video chain found. [ 1298.831711][T16742] usb usb6-port1: attempt power cycle [ 1298.898805][ T6020] usb 3-1: USB disconnect, device number 96 [ 1299.116108][ T30] audit: type=1326 audit(2000000874.094:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25344 comm="syz.7.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829098f749 code=0x7ffc0000 [ 1299.423865][ T30] audit: type=1326 audit(2000000874.094:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25344 comm="syz.7.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829098f749 code=0x7ffc0000 [ 1299.470678][ T30] audit: type=1326 audit(2000000874.104:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25344 comm="syz.7.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f829098f749 code=0x7ffc0000 [ 1299.504103][ T30] audit: type=1326 audit(2000000874.104:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25344 comm="syz.7.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829098f749 code=0x7ffc0000 [ 1299.544292][ T30] audit: type=1326 audit(2000000874.104:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25344 comm="syz.7.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829098f749 code=0x7ffc0000 [ 1299.581788][ T30] audit: type=1326 audit(2000000874.104:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25344 comm="syz.7.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f829098f749 code=0x7ffc0000 [ 1299.613012][ T30] audit: type=1326 audit(2000000874.104:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25344 comm="syz.7.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829098f749 code=0x7ffc0000 [ 1299.640522][ T30] audit: type=1326 audit(2000000874.104:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25344 comm="syz.7.4937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829098f749 code=0x7ffc0000 [ 1299.673148][T16742] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 1299.706152][T16742] usb 6-1: device descriptor read/8, error -71 [ 1299.747540][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.973015][T16742] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 1300.005322][T16742] usb 6-1: device descriptor read/8, error -71 [ 1300.113358][T16742] usb usb6-port1: unable to enumerate USB device [ 1300.122942][ T6020] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1300.262611][ T49] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1300.274243][ T6020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1300.285311][ T6020] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1300.295976][ T6020] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1300.306058][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 1300.314743][ T6020] usb 3-1: Manufacturer: syz [ 1300.320532][ T6020] usb 3-1: config 0 descriptor?? [ 1300.327733][ T6020] uvcvideo 3-1:0.0: Found UVC 0.00 device (18ec:3288) [ 1300.336151][ T6020] uvcvideo 3-1:0.0: No valid video chain found. [ 1300.504756][ T49] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.515317][ T49] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1300.524784][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.536177][ T49] usb 7-1: config 0 descriptor?? [ 1300.551962][ T49] pwc: Askey VC010 type 2 USB webcam detected. [ 1301.041381][T25367] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1301.083803][ T90] usb 3-1: USB disconnect, device number 97 [ 1301.152875][ T6020] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1301.354257][ T49] pwc: recv_control_msg error -71 req 02 val 2700 [ 1301.361355][ T49] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1301.368994][ T49] pwc: recv_control_msg error -71 req 04 val 1000 [ 1301.377001][ T49] pwc: recv_control_msg error -71 req 04 val 1300 [ 1301.384994][ T49] pwc: recv_control_msg error -71 req 04 val 1400 [ 1301.391603][ T6020] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.402629][ T49] pwc: recv_control_msg error -71 req 02 val 2000 [ 1301.409608][ T6020] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1301.419651][ T49] pwc: recv_control_msg error -71 req 02 val 2100 [ 1301.426901][ T6020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.437803][ T49] pwc: recv_control_msg error -71 req 04 val 1500 [ 1301.449131][ T6020] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1301.460196][ T49] pwc: recv_control_msg error -71 req 02 val 2500 [ 1301.467841][ T49] pwc: recv_control_msg error -71 req 02 val 2400 [ 1301.476693][ T49] pwc: recv_control_msg error -71 req 02 val 2600 [ 1301.484116][ T49] pwc: recv_control_msg error -71 req 02 val 2900 [ 1301.490821][ T49] pwc: recv_control_msg error -71 req 02 val 2800 [ 1301.497953][ T49] pwc: recv_control_msg error -71 req 04 val 1100 [ 1301.505141][ T49] pwc: recv_control_msg error -71 req 04 val 1200 [ 1301.514301][ T49] pwc: Registered as video103. [ 1301.520569][ T49] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input65 [ 1301.538827][ T49] usb 7-1: USB disconnect, device number 4 [ 1301.539838][T25378] syzkaller0: entered promiscuous mode [ 1301.557292][T25378] syzkaller0: entered allmulticast mode [ 1301.748674][T25386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4951'. [ 1301.757939][T25386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4951'. [ 1301.768690][T25386] netlink: 'syz.2.4951': attribute type 12 has an invalid length. [ 1301.983842][ T10] usb 8-1: new high-speed USB device number 90 using dummy_hcd [ 1302.182829][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1302.189609][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.200750][ T10] usb 8-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1302.210609][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.221655][ T10] usb 8-1: config 0 descriptor?? [ 1302.300353][ T10] uvcvideo 8-1:0.0: Found UVC 0.00 device (2833:0201) [ 1302.321115][ T10] uvcvideo 8-1:0.0: No valid video chain found. [ 1302.513094][ T49] usb 8-1: USB disconnect, device number 90 [ 1303.078739][T25401] syz_tun: entered allmulticast mode [ 1303.089271][T25401] pimreg: entered allmulticast mode [ 1303.100300][T25401] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1303.109540][T25401] mroute: pending queue full, dropping entries [ 1303.123369][T25400] syz_tun: left allmulticast mode [ 1303.409566][ T49] usb 6-1: USB disconnect, device number 93 [ 1303.722220][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1303.784117][T25416] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4958'. [ 1304.363546][ T10] usb 7-1: device descriptor read/64, error -71 [ 1304.714448][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1304.803488][T25434] FAULT_INJECTION: forcing a failure. [ 1304.803488][T25434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.830790][T25434] CPU: 0 UID: 0 PID: 25434 Comm: syz.7.4967 Tainted: G L syzkaller #0 PREEMPT(full) [ 1304.830822][T25434] Tainted: [L]=SOFTLOCKUP [ 1304.830828][T25434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1304.830839][T25434] Call Trace: [ 1304.830846][T25434] [ 1304.830853][T25434] dump_stack_lvl+0x16c/0x1f0 [ 1304.830881][T25434] should_fail_ex+0x512/0x640 [ 1304.830905][T25434] _copy_from_user+0x2e/0xd0 [ 1304.830923][T25434] copy_msghdr_from_user+0x98/0x160 [ 1304.830937][T25434] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1304.830955][T25434] ___sys_sendmsg+0xfe/0x1d0 [ 1304.830967][T25434] ? __pfx____sys_sendmsg+0x10/0x10 [ 1304.830995][T25434] __sys_sendmsg+0x16d/0x220 [ 1304.831007][T25434] ? __pfx___sys_sendmsg+0x10/0x10 [ 1304.831027][T25434] do_syscall_64+0xcd/0xf80 [ 1304.831043][T25434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.831055][T25434] RIP: 0033:0x7f829098f749 [ 1304.831065][T25434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1304.831076][T25434] RSP: 002b:00007f829186e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.831087][T25434] RAX: ffffffffffffffda RBX: 00007f8290be5fa0 RCX: 00007f829098f749 [ 1304.831095][T25434] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1304.831101][T25434] RBP: 00007f829186e090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.831108][T25434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.831114][T25434] R13: 00007f8290be6038 R14: 00007f8290be5fa0 R15: 00007ffd6498ab38 [ 1304.831129][T25434] [ 1305.052809][ T10] usb 7-1: device descriptor read/64, error -71 [ 1305.163455][ T10] usb usb7-port1: attempt power cycle [ 1305.512424][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1305.633577][ T10] usb 7-1: device descriptor read/8, error -71 [ 1305.952812][T25453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4971'. [ 1305.962254][T25453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4971'. [ 1305.983405][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1305.991310][T25453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4971'. [ 1306.001633][T25453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4971'. [ 1306.012090][T25453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25453 comm=syz.2.4971 [ 1306.033306][ T10] usb 7-1: device descriptor read/8, error -71 [ 1306.039859][T25453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25453 comm=syz.2.4971 [ 1306.055280][T25453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25453 comm=syz.2.4971 [ 1306.070243][T25453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25453 comm=syz.2.4971 [ 1306.083851][T25453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25453 comm=syz.2.4971 [ 1306.097455][T25453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25453 comm=syz.2.4971 [ 1306.112881][T25453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25453 comm=syz.2.4971 [ 1306.127241][T25453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25453 comm=syz.2.4971 [ 1306.140720][T25453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25453 comm=syz.2.4971 [ 1306.154377][T25453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25453 comm=syz.2.4971 [ 1306.169371][ T10] usb usb7-port1: unable to enumerate USB device [ 1306.235498][T16742] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1306.416591][T16742] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.437012][T16742] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 1306.463426][T25470] (syz.5.4977,25470,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 1306.471192][T25470] (syz.5.4977,25470,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1306.480200][T25470] (syz.5.4977,25470,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1306.492264][T25470] (syz.5.4977,25470,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1306.611366][T16742] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1306.621328][T16742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.634237][T16742] usb 3-1: Product: syz [ 1306.638514][T16742] usb 3-1: Manufacturer: syz [ 1306.644407][T16742] usb 3-1: SerialNumber: syz [ 1306.890404][T25452] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1307.191581][T16742] cdc_ncm 3-1:1.0: bind() failure [ 1307.204954][T16742] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1307.212469][T16742] cdc_ncm 3-1:1.1: bind() failure [ 1307.229560][T16742] usb 3-1: USB disconnect, device number 98 [ 1307.260530][T25482] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1307.382928][ T49] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1307.485153][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 1307.485188][ T30] audit: type=1400 audit(2000000882.504:2156): avc: denied { getopt } for pid=25483 comm="syz.2.4983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1307.565945][ T49] usb 7-1: config 9 has an invalid interface number: 202 but max is 1 [ 1307.574624][ T49] usb 7-1: config 9 has an invalid interface number: 2 but max is 1 [ 1307.584581][ T49] usb 7-1: config 9 has an invalid descriptor of length 129, skipping remainder of the config [ 1307.595524][ T49] usb 7-1: config 9 has no interface number 0 [ 1307.601702][ T49] usb 7-1: config 9 has no interface number 1 [ 1307.613848][ T49] usb 7-1: config 9 interface 2 altsetting 16 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1307.626253][ T49] usb 7-1: config 9 interface 2 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1307.639652][ T49] usb 7-1: config 9 interface 202 has no altsetting 0 [ 1307.646962][ T49] usb 7-1: config 9 interface 2 has no altsetting 0 [ 1307.896263][ T49] usb 7-1: New USB device found, idVendor=1b3d, idProduct=01a3, bcdDevice=a3.b3 [ 1307.942853][ T9735] usb 8-1: new full-speed USB device number 91 using dummy_hcd [ 1307.950828][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.976759][ T49] usb 7-1: Product: С [ 1307.981270][ T49] usb 7-1: SerialNumber: 氡㟷겚抚⻵歏ᓚ뀌맼釮摈쵬몟㍈㫚먄㯵晪玱쫆췮큟驲皎 [ 1307.995428][T25488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4984'. [ 1308.095420][ T9735] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1308.112928][ T9735] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1308.130807][ T9735] usb 8-1: config 0 descriptor?? [ 1308.138891][ T9735] cp210x 8-1:0.0: cp210x converter detected [ 1308.184794][T25499] netlink: 'syz.2.4987': attribute type 21 has an invalid length. [ 1308.372932][ T6027] usb 6-1: new low-speed USB device number 94 using dummy_hcd [ 1308.441798][T25476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1308.451746][T25476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.470974][ T49] ftdi_sio 7-1:9.202: FTDI USB Serial Device converter detected [ 1308.480640][ T49] ftdi_sio ttyUSB0: unknown device type: 0xa3b3 [ 1308.524506][ T6027] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1308.533449][ T6027] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1308.545088][ T6027] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1308.561170][ T6027] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1308.572373][ T9735] usb 8-1: cp210x converter now attached to ttyUSB1 [ 1308.575698][ T6027] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1308.593791][ T6027] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1308.601495][ T6027] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1308.613424][ T6027] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1308.625991][ T6027] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1308.638334][ T6027] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1308.651649][ T6027] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1308.659985][ T6027] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1308.681555][ T6027] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1308.697687][ T49] ftdi_sio 7-1:9.2: FTDI USB Serial Device converter detected [ 1308.713393][ T49] ftdi_sio ttyUSB2: unknown device type: 0xa3b3 [ 1308.721302][ T6027] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1308.735577][ T49] usb 7-1: USB disconnect, device number 9 [ 1308.743398][ T6027] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1308.755917][ T49] ftdi_sio 7-1:9.202: device disconnected [ 1308.766085][ T6020] usb 8-1: USB disconnect, device number 91 [ 1308.775790][ T6020] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 1308.786334][ T49] ftdi_sio 7-1:9.2: device disconnected [ 1308.805270][ T6027] usb 6-1: string descriptor 0 read error: -22 [ 1308.811552][ T6027] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1308.825500][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.825752][ T6020] cp210x 8-1:0.0: device disconnected [ 1308.848459][ T6027] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1309.050412][ T5883] usb 6-1: USB disconnect, device number 94 [ 1309.104519][ T9735] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1309.249403][T25509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4990'. [ 1309.264682][ T9735] usb 3-1: Using ep0 maxpacket: 8 [ 1309.272873][ T9735] usb 3-1: config 0 has no interfaces? [ 1309.281255][ T9735] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1309.301335][ T9735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.312897][ T9735] usb 3-1: Product: syz [ 1309.317134][ T9735] usb 3-1: Manufacturer: syz [ 1309.321756][ T9735] usb 3-1: SerialNumber: syz [ 1309.336298][ T9735] usb 3-1: config 0 descriptor?? [ 1309.664666][T25523] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 1309.900161][T25525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1309.919387][T25525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.915678][T25555] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5004'. [ 1312.217521][T16742] usb 3-1: USB disconnect, device number 99 [ 1312.223932][ T6020] usb 8-1: new full-speed USB device number 92 using dummy_hcd [ 1312.380575][ T30] audit: type=1326 audit(2000000887.404:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1312.409737][ T30] audit: type=1326 audit(2000000887.404:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1312.434837][ T30] audit: type=1326 audit(2000000887.424:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1312.536409][ T30] audit: type=1326 audit(2000000887.424:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1312.811534][ T6020] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1312.823249][ T6020] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1312.831583][ T6020] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1312.841298][ T6020] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1312.854719][ T6020] usb 8-1: Product: syz [ 1312.859798][ T30] audit: type=1326 audit(2000000887.424:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1312.865742][ T6020] usb 8-1: Manufacturer: syz [ 1312.884195][ T30] audit: type=1326 audit(2000000887.424:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1312.923689][ T30] audit: type=1326 audit(2000000887.424:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1312.927527][ T6020] usb 8-1: SerialNumber: syz [ 1312.955657][ T30] audit: type=1326 audit(2000000887.424:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1312.999017][ T30] audit: type=1326 audit(2000000887.424:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1313.028974][ T30] audit: type=1326 audit(2000000887.424:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1313.053860][ T30] audit: type=1326 audit(2000000887.424:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1313.153925][ T30] audit: type=1326 audit(2000000887.424:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1313.154467][ T6020] usb 8-1: config 0 descriptor?? [ 1313.302643][ T30] audit: type=1326 audit(2000000887.424:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25565 comm="syz.2.5007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58e358f749 code=0x7ffc0000 [ 1313.633886][ T6020] usb 8-1: selecting invalid altsetting 0 [ 1313.743915][T25574] overlayfs: missing 'lowerdir' [ 1313.844547][T16742] usb 8-1: USB disconnect, device number 92 [ 1314.642855][ T6027] usb 8-1: new full-speed USB device number 93 using dummy_hcd [ 1314.794212][ T6027] usb 8-1: config 0 has an invalid interface number: 7 but max is 0 [ 1314.810641][ T6027] usb 8-1: config 0 has no interface number 0 [ 1314.823149][ T6027] usb 8-1: config 0 interface 7 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1314.842969][ T6027] usb 8-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00 [ 1314.852088][ T6027] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.873117][ T6027] usb 8-1: config 0 descriptor?? [ 1315.093065][T16742] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1315.318351][T16742] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.411218][T16742] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.464974][T16742] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1315.490877][T16742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.510109][T16742] usb 6-1: config 0 descriptor?? [ 1315.816074][T25631] tipc: Enabled bearer , priority 0 [ 1315.824430][T25631] syzkaller0: entered promiscuous mode [ 1315.829899][T25631] syzkaller0: entered allmulticast mode [ 1315.839074][T25631] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5026'. [ 1315.848460][ T10] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 1315.850586][T25631] tipc: Resetting bearer [ 1315.867008][T25630] tipc: Resetting bearer [ 1315.881423][T25630] tipc: Disabling bearer [ 1315.931424][T16742] hid-steam 0003:28DE:1142.003F: unknown main item tag 0x0 [ 1315.940811][T16742] hid-steam 0003:28DE:1142.003F: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1315.990987][T25639] selinux_netlink_send: 54 callbacks suppressed [ 1315.991001][T25639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=25639 comm=syz.6.5028 [ 1316.011654][T25639] netlink: 'syz.6.5028': attribute type 12 has an invalid length. [ 1316.014172][ T10] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 1316.021986][T25639] netlink: 'syz.6.5028': attribute type 29 has an invalid length. [ 1316.034479][T16742] hid-steam 0003:28DE:1142.003F: Steam wireless receiver connected [ 1316.044588][T25639] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5028'. [ 1316.044616][T25639] netlink: 'syz.6.5028': attribute type 2 has an invalid length. [ 1316.044629][T25639] netlink: 23 bytes leftover after parsing attributes in process `syz.6.5028'. [ 1316.075070][ T10] usb 3-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.086686][ T10] usb 3-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1316.096524][ T10] usb 3-1: config 150 has no interface number 0 [ 1316.103452][ T10] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1316.110832][T16742] hid-steam 0003:28DE:1142.003F: No HID_FEATURE_REPORT submitted - nothing to read [ 1316.128727][ T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1316.138814][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.147641][ T10] usb 3-1: Product: syz [ 1316.151802][ T10] usb 3-1: Manufacturer: syz [ 1316.161743][T16742] hid-steam 0003:28DE:1142.0040: unknown main item tag 0x0 [ 1316.170234][ T10] usb 3-1: SerialNumber: syz [ 1316.183961][T16742] hid-steam 0003:28DE:1142.0040: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 1316.546574][ T10] xr_serial 3-1:150.204: skipping garbage [ 1316.556441][ T10] usb 3-1: USB disconnect, device number 100 [ 1316.882895][T16742] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1317.034541][T16742] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 1317.043581][T16742] usb 7-1: config 0 has no interface number 0 [ 1317.049690][T16742] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 1317.061996][T16742] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1317.072705][T16742] usb 7-1: config 0 interface 113 has no altsetting 0 [ 1317.081613][T16742] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1317.091421][T16742] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.100119][ T10] usb 6-1: reset high-speed USB device number 95 using dummy_hcd [ 1317.130788][T16742] usb 7-1: Product: syz [ 1317.140228][T16742] usb 7-1: Manufacturer: syz [ 1317.151063][T16742] usb 7-1: SerialNumber: syz [ 1317.168804][T16742] usb 7-1: config 0 descriptor?? [ 1317.187667][T16742] pn533_usb 7-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1317.391515][T25676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5034'. [ 1317.524971][T16742] usb 7-1: USB disconnect, device number 10 [ 1317.543056][ T6027] IPVS: starting estimator thread 0... [ 1317.550659][T25679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5035'. [ 1317.580588][ T6027] usb 8-1: USB disconnect, device number 93 [ 1317.665040][T25680] IPVS: using max 51 ests per chain, 122400 per kthread [ 1318.694434][T25698] bond6: Removing last arp target with arp_interval on [ 1318.831210][T25698] bond6: entered allmulticast mode [ 1318.843172][T25698] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1318.870002][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1318.870021][ T30] audit: type=1400 audit(2000000893.894:2180): avc: denied { create } for pid=25704 comm="syz.5.5041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1319.854261][ T5883] usb 6-1: USB disconnect, device number 95 [ 1320.054735][ T5883] hid-steam 0003:28DE:1142.003F: Steam wireless receiver disconnected [ 1320.145773][T25715] FAULT_INJECTION: forcing a failure. [ 1320.145773][T25715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.153694][T25711] overlay: filesystem on ./bus is read-only [ 1320.182906][T25715] CPU: 0 UID: 0 PID: 25715 Comm: syz.5.5045 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.182938][T25715] Tainted: [L]=SOFTLOCKUP [ 1320.182945][T25715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1320.182956][T25715] Call Trace: [ 1320.182963][T25715] [ 1320.182970][T25715] dump_stack_lvl+0x16c/0x1f0 [ 1320.183005][T25715] should_fail_ex+0x512/0x640 [ 1320.183035][T25715] _copy_from_user+0x2e/0xd0 [ 1320.183063][T25715] kstrtouint_from_user+0xd6/0x1d0 [ 1320.183084][T25715] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1320.183103][T25715] ? __lock_acquire+0x436/0x2890 [ 1320.183128][T25715] ? lock_acquire+0x179/0x330 [ 1320.183154][T25715] proc_fail_nth_write+0x83/0x220 [ 1320.183174][T25715] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1320.183200][T25715] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1320.183218][T25715] vfs_write+0x2a0/0x11d0 [ 1320.183242][T25715] ? __pfx___mutex_lock+0x10/0x10 [ 1320.183268][T25715] ? __pfx_vfs_write+0x10/0x10 [ 1320.183299][T25715] ? __fget_files+0x20e/0x3c0 [ 1320.183332][T25715] ksys_write+0x12a/0x250 [ 1320.183355][T25715] ? __pfx_ksys_write+0x10/0x10 [ 1320.183384][T25715] do_syscall_64+0xcd/0xf80 [ 1320.183409][T25715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.183428][T25715] RIP: 0033:0x7ff7e7d8e1ff [ 1320.183444][T25715] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1320.183461][T25715] RSP: 002b:00007ff7e8b88030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1320.183480][T25715] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff7e7d8e1ff [ 1320.183492][T25715] RDX: 0000000000000001 RSI: 00007ff7e8b880a0 RDI: 0000000000000004 [ 1320.183503][T25715] RBP: 00007ff7e8b88090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.183514][T25715] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1320.183524][T25715] R13: 00007ff7e7fe6038 R14: 00007ff7e7fe5fa0 R15: 00007ffd604f5108 [ 1320.183550][T25715] [ 1320.760680][T25728] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5044'. [ 1321.545742][ T30] audit: type=1400 audit(2000000896.564:2181): avc: denied { write } for pid=25733 comm="syz.6.5050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1322.083079][T25726] netlink: 'syz.2.5049': attribute type 1 has an invalid length. [ 1322.124556][T25726] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5049'. [ 1323.682853][ T5883] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1324.965793][ T5883] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.994203][ T5883] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1325.015964][ T5883] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1325.062349][ T30] audit: type=1400 audit(2000000900.084:2182): avc: denied { ioctl } for pid=25769 comm="syz.2.5061" path="socket:[95137]" dev="sockfs" ino=95137 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1325.224186][T25775] netlink: 'syz.5.5060': attribute type 21 has an invalid length. [ 1325.232134][T25775] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5060'. [ 1325.442402][ T5883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.453876][ T5883] usb 7-1: config 0 descriptor?? [ 1325.502982][ T5883] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1325.593077][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 1325.727705][ T5883] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1325.792070][ T5883] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1325.802956][ T5883] usb 7-1: media controller created [ 1325.808941][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1325.822227][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 1325.829083][ T5883] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1325.837924][T25753] nbd: must specify a size in bytes for the device [ 1325.874654][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input66 [ 1325.917301][ T5883] dvb-usb: schedule remote query interval to 150 msecs. [ 1325.933888][ T5883] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1325.967918][ T5883] usb 7-1: USB disconnect, device number 11 [ 1326.003974][ T5883] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1326.163145][ T9735] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1326.179348][T25783] ceph: No mds server is up or the cluster is laggy [ 1326.248315][ T30] audit: type=1400 audit(2000000901.274:2183): avc: denied { map } for pid=25782 comm="syz.7.5065" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1326.323457][T25794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5067'. [ 1326.333485][T25796] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5067'. [ 1326.356680][ T30] audit: type=1400 audit(2000000901.274:2184): avc: denied { execute } for pid=25782 comm="syz.7.5065" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 1326.396711][T25798] fuse: Bad value for 'fd' [ 1326.414412][ T9735] usb 6-1: Using ep0 maxpacket: 8 [ 1326.421419][ T9735] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.435524][ T9735] usb 6-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1326.444993][ T9735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.455058][ T9735] usb 6-1: config 0 descriptor?? [ 1326.465233][ T9735] uvcvideo 6-1:0.0: Found UVC 0.00 device (2833:0201) [ 1326.483233][ T9735] uvcvideo 6-1:0.0: No valid video chain found. [ 1326.699702][ T9735] usb 6-1: USB disconnect, device number 96 [ 1327.292795][T25813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5072'. [ 1327.312076][ T30] audit: type=1400 audit(2000000902.314:2185): avc: denied { listen } for pid=25807 comm="syz.2.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1327.803031][ T6027] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1327.954362][T25818] (syz.5.5074,25818,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 1327.962055][T25818] (syz.5.5074,25818,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 1327.970055][T25818] (syz.5.5074,25818,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1327.970241][ T6027] usb 7-1: Using ep0 maxpacket: 16 [ 1327.979022][T25818] (syz.5.5074,25818,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1328.104207][ T6027] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1328.117287][ T6027] usb 7-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 1328.127288][ T6027] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.666402][ T6027] usb 7-1: config 0 descriptor?? [ 1328.876889][T25812] netlink: 'syz.6.5073': attribute type 11 has an invalid length. [ 1329.073243][T25837] IPVS: set_ctl: invalid protocol: 60 172.20.20.38:20003 [ 1329.087448][ T6027] betop 0003:8380:1850.0041: unknown main item tag 0x0 [ 1329.098173][ T6027] betop 0003:8380:1850.0041: unknown main item tag 0x0 [ 1329.106880][ T6027] betop 0003:8380:1850.0041: unknown main item tag 0x0 [ 1329.114477][ T6027] betop 0003:8380:1850.0041: unknown main item tag 0x0 [ 1329.125218][ T6027] betop 0003:8380:1850.0041: unknown main item tag 0x0 [ 1329.134887][ T6027] betop 0003:8380:1850.0041: hidraw0: USB HID v0.05 Device [HID 8380:1850] on usb-dummy_hcd.6-1/input0 [ 1329.147086][ T6027] betop 0003:8380:1850.0041: no inputs found [ 1330.139569][ T9735] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1330.155551][ T49] usb 7-1: USB disconnect, device number 12 [ 1330.292901][ T90] usb 8-1: new high-speed USB device number 94 using dummy_hcd [ 1330.312870][ T9735] usb 3-1: Using ep0 maxpacket: 8 [ 1330.319460][ T9735] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1330.331060][ T9735] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1330.340897][ T9735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.353527][ T9735] usb 3-1: config 0 descriptor?? [ 1330.361449][ T9735] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 1330.370654][ T9735] uvcvideo 3-1:0.0: No valid video chain found. [ 1330.443305][ T90] usb 8-1: device descriptor read/64, error -71 [ 1330.575297][ T9735] usb 3-1: USB disconnect, device number 101 [ 1330.664548][ T30] audit: type=1400 audit(2000000905.694:2186): avc: denied { mount } for pid=25845 comm="syz.5.5082" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1330.709888][ T90] usb 8-1: new high-speed USB device number 95 using dummy_hcd [ 1330.862889][ T90] usb 8-1: device descriptor read/64, error -71 [ 1330.952917][ T6027] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1330.983123][ T90] usb usb8-port1: attempt power cycle [ 1331.107076][ T6027] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1331.116281][ T6027] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1331.126922][ T6027] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1331.135919][ T6027] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1331.147055][ T6027] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1331.162106][ T6027] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1331.171727][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1331.180370][ T6027] usb 6-1: Product: syz [ 1331.186033][ T6027] usb 6-1: Manufacturer: syz [ 1331.199879][ T6027] cdc_wdm 6-1:1.0: skipping garbage [ 1331.205870][ T6027] cdc_wdm 6-1:1.0: skipping garbage [ 1331.212385][ T6027] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1331.218335][ T6027] cdc_wdm 6-1:1.0: Unknown control protocol [ 1331.289735][T25857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5087'. [ 1331.323135][ T90] usb 8-1: new high-speed USB device number 96 using dummy_hcd [ 1331.359464][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5087'. [ 1331.412887][ T90] usb 8-1: device descriptor read/8, error -71 [ 1331.421225][T25857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5087'. [ 1331.832868][ T90] usb 8-1: new high-speed USB device number 97 using dummy_hcd [ 1331.859049][ T30] audit: type=1400 audit(2000000906.884:2187): avc: denied { map } for pid=25862 comm="syz.2.5089" path="socket:[95389]" dev="sockfs" ino=95389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1331.884608][ T30] audit: type=1400 audit(2000000906.884:2188): avc: denied { read } for pid=25862 comm="syz.2.5089" path="socket:[95389]" dev="sockfs" ino=95389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1331.910994][ T90] usb 8-1: device descriptor read/8, error -71 [ 1331.928505][T25836] delete_channel: no stack [ 1331.948722][T25866] netlink: 'syz.2.5089': attribute type 10 has an invalid length. [ 1331.957119][T25866] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5089'. [ 1332.023034][ T90] usb usb8-port1: unable to enumerate USB device [ 1332.173043][T16954] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1332.312632][ T90] usb 8-1: new high-speed USB device number 98 using dummy_hcd [ 1332.322909][T16954] usb 7-1: Using ep0 maxpacket: 32 [ 1332.330155][T16954] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1332.340151][T16954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1332.350947][T16954] usb 7-1: config 0 descriptor?? [ 1332.358330][T16954] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1332.465874][ T90] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1332.474897][ T90] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1332.486205][ T90] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1332.495537][ T90] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1332.504096][ T90] usb 8-1: Manufacturer: syz [ 1332.510264][ T90] usb 8-1: config 0 descriptor?? [ 1332.517916][ T90] igorplugusb 8-1:0.0: incorrect number of endpoints [ 1332.739424][ T90] usb 8-1: USB disconnect, device number 98 [ 1332.825131][T25875] binder_alloc: 25874: binder_alloc_buf, no vma [ 1332.898341][T25883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.908327][T25883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.918701][T25884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.928306][T25883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1332.928459][T25884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1332.937457][T25883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1333.314774][ T9735] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1333.359257][T25892] overlayfs: failed to resolve './file0': -2 [ 1333.374717][T16954] gspca_vc032x: reg_r err -32 [ 1333.390440][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.400305][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.407686][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.416180][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.421546][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.428544][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.434413][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.439745][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.475425][ T5883] usb 6-1: USB disconnect, device number 97 [ 1333.483253][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.498233][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.505435][ T9735] usb 3-1: Using ep0 maxpacket: 8 [ 1333.511198][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.517751][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.523648][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.529272][ T9735] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.541128][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.546921][ T9735] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1333.556715][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.557690][T25898] netlink: 'syz.5.5101': attribute type 3 has an invalid length. [ 1333.562011][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.562024][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.562033][T16954] gspca_vc032x: I2c Bus Busy Wait 00 [ 1333.562042][T16954] gspca_vc032x: Unknown sensor... [ 1333.562108][T16954] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 1333.570863][T25898] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5101'. [ 1333.577045][ T9735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.624350][ T9735] usb 3-1: config 0 descriptor?? [ 1333.626401][T25898] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5101'. [ 1333.631763][ T9735] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 1333.644889][ T30] audit: type=1400 audit(2000000908.674:2189): avc: denied { map } for pid=25897 comm="syz.5.5101" path="/proc/806/net/unix" dev="proc" ino=4026533010 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1333.646741][ T9735] uvcvideo 3-1:0.0: No valid video chain found. [ 1333.673797][T25898] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5101'. [ 1333.724602][T25900] sctp: [Deprecated]: syz.5.5102 (pid 25900) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1333.724602][T25900] Use struct sctp_sack_info instead [ 1333.743591][ T6027] usb 8-1: new full-speed USB device number 99 using dummy_hcd [ 1333.886745][ T9735] usb 3-1: USB disconnect, device number 102 [ 1333.904105][ T6027] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 1333.912960][ T6027] usb 8-1: config 0 has no interface number 0 [ 1333.920844][ T6027] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1333.930620][ T6027] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.943358][ T6027] usb 8-1: Product: syz [ 1333.947673][ T6027] usb 8-1: Manufacturer: syz [ 1333.953054][ T6027] usb 8-1: SerialNumber: syz [ 1334.025596][ T6027] usb 8-1: config 0 descriptor?? [ 1334.785137][ T6027] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1334.796183][ T6027] asix 8-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1334.808653][ T6027] asix 8-1:0.251: probe with driver asix failed with error -71 [ 1334.820549][ T6027] usb 8-1: USB disconnect, device number 99 [ 1335.012925][ T9735] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1335.110680][ T5883] usb 7-1: USB disconnect, device number 13 [ 1335.164092][ T9735] usb 3-1: Using ep0 maxpacket: 32 [ 1335.170640][ T9735] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1335.179448][ T9735] usb 3-1: config 0 has no interface number 0 [ 1335.189309][ T9735] usb 3-1: config 0 interface 8 has no altsetting 0 [ 1335.196736][ T9735] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1335.206875][ T9735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.217641][ T9735] usb 3-1: config 0 descriptor?? [ 1335.472878][ T5883] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1335.625163][ T5883] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1335.640395][ T5883] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1335.659123][ T5883] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1335.685135][ T5883] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1335.706279][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.730282][ T5883] usb 7-1: Product: syz [ 1335.740358][ T5883] usb 7-1: Manufacturer: syz [ 1335.748780][ T5883] usb 7-1: SerialNumber: syz [ 1335.760262][ T5883] usb 7-1: config 0 descriptor?? [ 1335.771106][T25923] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1335.788787][T25923] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1335.808477][ T5883] usb 7-1: ucan: probing device on interface #0 [ 1336.260818][T25923] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5108'. [ 1336.424812][ T5883] usb 7-1: ucan: failed to retrieve device info [ 1336.431262][ T5883] usb 7-1: ucan: probe failed; try to update the device firmware [ 1336.449536][ T5883] usb 7-1: USB disconnect, device number 14 [ 1336.838043][T16954] usb 8-1: new high-speed USB device number 100 using dummy_hcd [ 1336.983843][ T30] audit: type=1400 audit(2000000912.014:2190): avc: denied { read } for pid=25935 comm="syz.5.5113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1337.004828][T16954] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.015568][T16954] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1337.025151][T16954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.035572][T16954] usb 8-1: config 0 descriptor?? [ 1337.045573][T16954] pwc: Askey VC010 type 2 USB webcam detected. [ 1337.154425][T25945] netlink: 'syz.5.5113': attribute type 10 has an invalid length. [ 1337.305311][T25934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1337.314621][T25934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.323844][T25934] random: crng reseeded on system resumption [ 1337.916307][ T9735] usb 3-1: string descriptor 0 read error: -71 [ 1337.958482][T25936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1337.972575][ T9735] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1338.106908][ T9735] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1338.117632][ T9735] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1338.467507][T25958] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5112'. [ 1338.523384][T25958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.532055][T25958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.381464][T16954] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1339.397848][T16954] pwc: recv_control_msg error -32 req 02 val 2700 [ 1339.417825][T16954] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1339.653044][ T30] audit: type=1400 audit(2000000914.674:2191): avc: denied { getopt } for pid=25973 comm="syz.6.5122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1339.661763][T25979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5122'. [ 1340.448463][T16954] pwc: recv_control_msg error -71 req 04 val 1000 [ 1340.457927][T16954] pwc: recv_control_msg error -71 req 04 val 1300 [ 1340.465561][T16954] pwc: recv_control_msg error -71 req 04 val 1400 [ 1340.474523][T16954] pwc: recv_control_msg error -71 req 02 val 2000 [ 1340.481372][T16954] pwc: recv_control_msg error -71 req 02 val 2100 [ 1340.490767][T16954] pwc: recv_control_msg error -71 req 04 val 1500 [ 1340.499306][T16954] pwc: recv_control_msg error -71 req 02 val 2500 [ 1340.506832][T16954] pwc: recv_control_msg error -71 req 02 val 2400 [ 1340.514724][T16954] pwc: recv_control_msg error -71 req 02 val 2600 [ 1340.521659][T16954] pwc: recv_control_msg error -71 req 02 val 2900 [ 1340.529158][T16954] pwc: recv_control_msg error -71 req 02 val 2800 [ 1340.536216][T16954] pwc: recv_control_msg error -71 req 04 val 1100 [ 1340.543247][T16954] pwc: recv_control_msg error -71 req 04 val 1200 [ 1340.551033][T16954] pwc: Registered as video103. [ 1340.558171][T16954] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input67 [ 1340.575263][T16954] usb 8-1: USB disconnect, device number 100 [ 1341.552932][ T49] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 1341.698791][T26002] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5129'. [ 1341.709567][ T49] usb 6-1: not running at top speed; connect to a high speed hub [ 1341.719366][ T49] usb 6-1: config 1 has an invalid descriptor of length 42, skipping remainder of the config [ 1341.731753][ T49] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1341.741439][ T49] usb 6-1: config 1 has no interface number 1 [ 1341.748852][ T49] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1341.764625][ T49] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1341.774158][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1341.782941][ T49] usb 6-1: Manufacturer: 蜯恏伱坬뼿鎂 [ 1341.788893][ T49] usb 6-1: SerialNumber: syz [ 1341.963037][ T10] usb 8-1: new full-speed USB device number 101 using dummy_hcd [ 1341.998935][ T49] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 1342.007194][ T49] usb 6-1: 2:1 : unsupported format bits 0x80 [ 1342.019453][ T49] usb 6-1: USB disconnect, device number 98 [ 1342.134184][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.144859][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1342.155119][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 1342.164612][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1342.173183][ T10] usb 8-1: SerialNumber: syz [ 1342.181022][ T10] usb 8-1: 0:2 : does not exist [ 1342.418332][ T10] usb 8-1: USB disconnect, device number 101 [ 1342.803889][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1342.964267][ T10] usb 7-1: device descriptor read/64, error -71 [ 1343.212965][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1343.342709][ T10] usb 7-1: device descriptor read/64, error -71 [ 1343.453162][ T10] usb usb7-port1: attempt power cycle [ 1343.833011][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1343.873397][ T10] usb 7-1: device descriptor read/8, error -71 [ 1343.934729][T26025] (syz.7.5135,26025,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 1343.944324][T26025] (syz.7.5135,26025,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1343.962054][T26025] (syz.7.5135,26025,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1343.979661][T26025] (syz.7.5135,26025,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1344.133050][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1344.163595][ T10] usb 7-1: device descriptor read/8, error -71 [ 1344.304040][ T10] usb usb7-port1: unable to enumerate USB device [ 1344.455923][T26040] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5140'. [ 1344.976839][T26046] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1344.985492][T26046] UDF-fs: Scanning with blocksize 512 failed [ 1344.991866][T26046] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1345.000185][T26046] UDF-fs: Scanning with blocksize 1024 failed [ 1345.007552][T26046] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1345.015886][T26046] UDF-fs: Scanning with blocksize 2048 failed [ 1345.026152][T26046] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1345.034147][T26046] UDF-fs: Scanning with blocksize 4096 failed [ 1345.362844][ T10] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1345.973106][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 1345.980504][ T10] usb 6-1: config index 0 descriptor too short (expected 65535, got 59) [ 1345.993399][ T10] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1346.003174][ T10] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.014271][ T10] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1346.026942][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1346.036704][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.063055][ T10] usb 6-1: Product: syz [ 1346.067340][ T10] usb 6-1: Manufacturer: syz [ 1346.071933][ T10] usb 6-1: SerialNumber: syz [ 1346.342941][T16954] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1346.552688][T16954] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1346.636319][T16954] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1346.719641][T16954] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1346.728930][T16954] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1346.738891][T16954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.747517][T16954] usb 7-1: Product: syz [ 1346.751742][T16954] usb 7-1: Manufacturer: syz [ 1346.845501][T16954] usb 7-1: SerialNumber: syz [ 1346.856740][T26058] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1346.868683][T26058] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1346.915930][ T90] usb 6-1: USB disconnect, device number 99 [ 1347.946637][T16954] (unnamed net_device) (uninitialized): Assigned a random MAC address: a6:e9:64:0c:c9:19 [ 1347.995842][T16954] rtl8150 7-1:1.0: eth9: rtl8150 is detected [ 1348.021391][T16954] usb 7-1: USB disconnect, device number 19 [ 1348.055859][T26088] hfsplus: unable to find HFS+ superblock [ 1348.313430][ T10] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1348.496107][ T10] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1348.505580][ T10] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1348.523986][ T10] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.536628][ T10] usb 6-1: config 220 has no interface number 2 [ 1348.545713][ T10] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1348.560472][ T10] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1348.575724][ T10] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1348.585824][ T10] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1348.598319][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1348.608334][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.616637][ T10] usb 6-1: Product: syz [ 1348.621143][ T10] usb 6-1: Manufacturer: syz [ 1348.627589][ T10] usb 6-1: SerialNumber: syz [ 1348.874965][ T10] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1348.886490][ T10] uvcvideo 6-1:220.0: No valid video chain found. [ 1348.893642][ T10] usb 6-1: selecting invalid altsetting 0 [ 1348.914744][ T10] usb 6-1: selecting invalid altsetting 0 [ 1348.920566][ T10] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1348.931597][ T10] usb 6-1: USB disconnect, device number 100 [ 1348.998254][T26104] syzkaller1: entered promiscuous mode [ 1349.006747][T26104] syzkaller1: entered allmulticast mode [ 1349.482644][ T90] usb 8-1: new full-speed USB device number 102 using dummy_hcd [ 1349.633881][ T90] usb 8-1: config 0 has an invalid interface number: 29 but max is 0 [ 1349.642132][ T90] usb 8-1: config 0 has no interface number 0 [ 1349.650490][ T90] usb 8-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1349.659972][ T90] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.668798][ T90] usb 8-1: Product: syz [ 1349.673673][ T90] usb 8-1: Manufacturer: syz [ 1349.678277][ T90] usb 8-1: SerialNumber: syz [ 1349.684558][ T90] usb 8-1: config 0 descriptor?? [ 1349.904542][ T90] peak_usb 8-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1349.909925][T26114] overlayfs: failed to resolve './file1': -2 [ 1350.106252][ T90] peak_usb 8-1:0.29 can0: sending command failure: -22 [ 1350.114389][ T90] peak_usb 8-1:0.29 can0: sending command failure: -22 [ 1350.188616][ T30] audit: type=1400 audit(2000000925.154:2192): avc: denied { read write } for pid=26117 comm="syz.6.5166" name="file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1350.225003][ T90] peak_usb 8-1:0.29 can0: sending command failure: -22 [ 1350.239902][ T30] audit: type=1400 audit(2000000925.154:2193): avc: denied { open } for pid=26117 comm="syz.6.5166" path="/543/file0/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1350.303984][ T90] peak_usb 8-1:0.29: probe with driver peak_usb failed with error -22 [ 1350.317505][ T90] usb 8-1: USB disconnect, device number 102 [ 1350.830202][ T30] audit: type=1400 audit(2000000925.854:2194): avc: denied { unmount } for pid=16055 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1351.027871][T26128] (syz.6.5167,26128,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1351.035788][T26128] (syz.6.5167,26128,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 1351.044339][T26128] (syz.6.5167,26128,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1351.053649][T26128] (syz.6.5167,26128,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 1351.160515][T26129] (syz.7.5168,26129,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 1351.169384][T26129] (syz.7.5168,26129,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 1351.180970][T26129] (syz.7.5168,26129,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1351.190320][T26129] (syz.7.5168,26129,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 1351.423017][ T5830] Bluetooth: hci2: command 0x1003 tx timeout [ 1351.463218][ T5824] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1352.559257][T26154] netlink: 'syz.6.5175': attribute type 2 has an invalid length. [ 1352.567739][T26154] netlink: 'syz.6.5175': attribute type 1 has an invalid length. [ 1352.576330][T26154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1353.144839][T26159] netlink: 'syz.6.5177': attribute type 9 has an invalid length. [ 1353.860598][T26167] vivid-000: disconnect [ 1353.933216][ T90] usb 8-1: new high-speed USB device number 103 using dummy_hcd [ 1354.132855][ T90] usb 8-1: Using ep0 maxpacket: 8 [ 1354.140287][ T90] usb 8-1: no configurations [ 1354.145823][ T90] usb 8-1: can't read configurations, error -22 [ 1354.379522][ T90] usb 8-1: new high-speed USB device number 104 using dummy_hcd [ 1354.642974][ T90] usb 8-1: Using ep0 maxpacket: 8 [ 1354.697662][ T90] usb 8-1: no configurations [ 1354.732891][ T90] usb 8-1: can't read configurations, error -22 [ 1354.739571][ T90] usb usb8-port1: attempt power cycle [ 1355.172974][ T5883] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1355.223315][T26190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5186'. [ 1355.262906][ T90] usb 8-1: new high-speed USB device number 105 using dummy_hcd [ 1355.303450][ T90] usb 8-1: Using ep0 maxpacket: 8 [ 1355.321231][ T90] usb 8-1: no configurations [ 1355.331228][ T90] usb 8-1: can't read configurations, error -22 [ 1355.344549][ T5883] usb 7-1: config 0 has an invalid interface number: 190 but max is 0 [ 1355.357882][ T5883] usb 7-1: config 0 has no interface number 0 [ 1355.374447][ T5883] usb 7-1: config 0 interface 190 has no altsetting 0 [ 1355.394428][ T5883] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice= 6.be [ 1355.410235][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.419091][ T5883] usb 7-1: Product: syz [ 1355.425993][ T5883] usb 7-1: Manufacturer: syz [ 1355.430712][ T5883] usb 7-1: SerialNumber: syz [ 1355.472890][ T90] usb 8-1: new high-speed USB device number 106 using dummy_hcd [ 1355.473447][ T5883] usb 7-1: config 0 descriptor?? [ 1355.549623][ T90] usb 8-1: Using ep0 maxpacket: 8 [ 1355.555811][ T90] usb 8-1: no configurations [ 1355.560471][ T90] usb 8-1: can't read configurations, error -22 [ 1355.569501][ T90] usb usb8-port1: unable to enumerate USB device [ 1355.690381][ T5883] hub 7-1:0.190: bad descriptor, ignoring hub [ 1355.697904][ T5883] hub 7-1:0.190: probe with driver hub failed with error -5 [ 1355.707417][ T5883] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1355.719363][ T5883] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1355.734077][ T5883] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 1355.766652][ T5883] usb 7-1: USB disconnect, device number 20 [ 1355.776012][ T30] audit: type=1400 audit(2000000930.804:2195): avc: denied { mount } for pid=26196 comm="syz.2.5189" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1356.761139][T26221] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5190'. [ 1356.770696][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5190'. [ 1356.780703][T26221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5190'. [ 1357.437883][T26233] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5197'. [ 1357.472827][T16954] usb 8-1: new high-speed USB device number 107 using dummy_hcd [ 1357.603327][T16954] usb 8-1: device descriptor read/64, error -71 [ 1357.843288][T16954] usb 8-1: new high-speed USB device number 108 using dummy_hcd [ 1357.993497][T16954] usb 8-1: device descriptor read/64, error -71 [ 1358.106914][T16954] usb usb8-port1: attempt power cycle [ 1358.452929][T16954] usb 8-1: new high-speed USB device number 109 using dummy_hcd [ 1358.472937][T16954] usb 8-1: device descriptor read/8, error -71 [ 1358.652870][ T10] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1358.722584][T16954] usb 8-1: new high-speed USB device number 110 using dummy_hcd [ 1358.753302][T16954] usb 8-1: device descriptor read/8, error -71 [ 1358.820103][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1358.838735][ T10] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1358.850592][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.889072][T26259] hfs: unable to load iocharset "io#harset" [ 1358.931342][T26259] hfs: unable to load iocharset "io#harset" [ 1358.970933][T26259] hfs: unable to load iocharset "io#harset" [ 1359.004129][T16954] usb usb8-port1: unable to enumerate USB device [ 1359.011461][ T10] usb 6-1: Product: syz [ 1359.014615][T26259] hfs: unable to load iocharset "io#harset" [ 1359.016207][ T10] usb 6-1: Manufacturer: syz [ 1359.026981][ T10] usb 6-1: SerialNumber: syz [ 1359.034132][ T10] usb 6-1: config 0 descriptor?? [ 1359.040729][ T10] usb 6-1: ucan: probing device on interface #0 [ 1359.048771][ T10] usb 6-1: ucan: invalid EP count (0) [ 1359.054781][ T10] usb 6-1: ucan: probe failed; try to update the device firmware [ 1359.538700][ T10] usb 6-1: USB disconnect, device number 101 [ 1359.541256][T26259] hfs: unable to load iocharset "io#harset" [ 1359.570692][T26259] hfs: unable to load iocharset "io#harset" [ 1359.597301][T26259] hfs: unable to load iocharset "io#harset" [ 1359.626577][T26259] hfs: unable to load iocharset "io#harset" [ 1359.650822][T26259] hfs: unable to load iocharset "io#harset" [ 1359.733682][T26259] hfs: unable to load iocharset "io#harset" [ 1359.777606][T26259] hfs: unable to load iocharset "io#harset" [ 1359.807686][T26259] hfs: unable to load iocharset "io#harset" [ 1359.854586][T26259] hfs: unable to load iocharset "io#harset" [ 1360.133022][T26259] hfs: unable to load iocharset "io#harset" [ 1360.320411][T26290] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1360.329193][T26290] overlayfs: failed to set xattr on upper [ 1360.337332][T26290] overlayfs: ...falling back to redirect_dir=nofollow. [ 1360.352312][T26290] overlayfs: ...falling back to uuid=null. [ 1360.511317][ T30] audit: type=1400 audit(2000000935.324:2196): avc: denied { mounton } for pid=26288 comm="syz.2.5207" path="/bus" dev="ramfs" ino=97757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1360.576824][T26259] hfs: unable to load iocharset "io#harset" [ 1360.604507][T26296] loop6: detected capacity change from 0 to 524287999 [ 1360.638915][T26259] hfs: unable to load iocharset "io#harset" [ 1360.831113][T26259] hfs: unable to load iocharset "io#harset" [ 1360.883610][T26259] hfs: unable to load iocharset "io#harset" [ 1360.926770][T26259] hfs: unable to load iocharset "io#harset" [ 1360.975999][T26259] hfs: unable to load iocharset "io#harset" [ 1361.040354][T26259] hfs: unable to load iocharset "io#harset" [ 1361.106087][T26259] hfs: unable to load iocharset "io#harset" [ 1361.166960][T26259] hfs: unable to load iocharset "io#harset" [ 1361.254763][T26259] hfs: unable to load iocharset "io#harset" [ 1361.306991][T26259] hfs: unable to load iocharset "io#harset" [ 1361.464209][T26259] hfs: unable to load iocharset "io#harset" [ 1361.600186][T26259] hfs: unable to load iocharset "io#harset" [ 1361.799520][T26259] hfs: unable to load iocharset "io#harset" [ 1364.982705][T16243] usb 8-1: new high-speed USB device number 111 using dummy_hcd [ 1365.112878][T16243] usb 8-1: device descriptor read/64, error -71 [ 1365.352659][T16243] usb 8-1: new high-speed USB device number 112 using dummy_hcd [ 1365.482828][T16243] usb 8-1: device descriptor read/64, error -71 [ 1365.583859][T26396] netlink: 'syz.5.5234': attribute type 5 has an invalid length. [ 1365.593168][T16243] usb usb8-port1: attempt power cycle [ 1365.832292][ T5883] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1365.932689][T16243] usb 8-1: new high-speed USB device number 113 using dummy_hcd [ 1365.953318][T16243] usb 8-1: device descriptor read/8, error -71 [ 1365.982692][ T5883] usb 6-1: Using ep0 maxpacket: 32 [ 1365.989180][ T5883] usb 6-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 1365.998557][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1366.014312][ T5883] usb 6-1: config 0 descriptor?? [ 1366.024121][ T5883] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 1366.035489][ T5883] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1366.046607][ T5883] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 1366.054726][ T5883] usb 6-1: media controller created [ 1366.066515][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1366.083342][ T5883] usb 6-1: selecting invalid altsetting 1 [ 1366.089062][ T5883] set interface failed [ 1366.089367][ T5883] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1366.100626][ T5883] error writing reg: 0xff, val: 0x00 [ 1366.240272][T16243] usb 8-1: new high-speed USB device number 114 using dummy_hcd [ 1366.264074][ T5883] dvb_usb_mxl111sf 6-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1366.294447][T16243] usb 8-1: device descriptor read/8, error -71 [ 1366.314947][ T5883] usb 6-1: USB disconnect, device number 102 [ 1366.402515][T16243] usb usb8-port1: unable to enumerate USB device [ 1366.469453][T26410] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5238'. [ 1366.635460][ T30] audit: type=1400 audit(2000000941.664:2197): avc: denied { getopt } for pid=26409 comm="syz.2.5238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1367.126884][T26430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26430 comm=syz.6.5244 [ 1367.222646][ T49] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1367.373010][ T49] usb 6-1: Using ep0 maxpacket: 8 [ 1367.379487][ T49] usb 6-1: config 0 has an invalid interface number: 165 but max is 0 [ 1367.388126][ T49] usb 6-1: config 0 has no interface number 0 [ 1367.394723][ T49] usb 6-1: config 0 interface 165 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1367.404979][ T49] usb 6-1: New USB device found, idVendor=06a3, idProduct=ff04, bcdDevice= 5.fa [ 1367.414762][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.426858][ T49] usb 6-1: config 0 descriptor?? [ 1367.584861][ T5883] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1367.638672][ T30] audit: type=1400 audit(2000000942.664:2198): avc: denied { name_bind } for pid=26419 comm="syz.5.5241" path="socket:[98755]" dev="sockfs" ino=98755 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1367.864102][T16954] usb 6-1: USB disconnect, device number 103 [ 1367.915276][ T5883] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1367.928353][ T5883] usb 7-1: not running at top speed; connect to a high speed hub [ 1367.948398][ T5883] usb 7-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 1367.975963][ T5883] usb 7-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=f4.4a [ 1367.993301][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.006578][ T5883] usb 7-1: Product: syz [ 1368.013194][ T5883] usb 7-1: Manufacturer: syz [ 1368.020148][ T5883] usb 7-1: SerialNumber: syz [ 1368.261138][T26432] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=45633 sclass=netlink_route_socket pid=26432 comm=syz.6.5245 [ 1368.280711][ T5883] usbsevseg 7-1:129.0: USB 7 Segment device now attached [ 1368.293200][T16243] usb 8-1: new low-speed USB device number 115 using dummy_hcd [ 1368.318326][ T5883] usb 7-1: USB disconnect, device number 21 [ 1368.337703][ T5883] usbsevseg 7-1:129.0: USB 7 Segment now disconnected [ 1368.443282][T16243] usb 8-1: Invalid ep0 maxpacket: 16 [ 1368.572869][T16243] usb 8-1: new low-speed USB device number 116 using dummy_hcd [ 1368.710520][T26448] netlink: 'syz.2.5249': attribute type 25 has an invalid length. [ 1368.722568][T16243] usb 8-1: Invalid ep0 maxpacket: 16 [ 1368.728192][T16243] usb usb8-port1: attempt power cycle [ 1369.123719][T16243] usb 8-1: new low-speed USB device number 117 using dummy_hcd [ 1369.143597][T16243] usb 8-1: Invalid ep0 maxpacket: 16 [ 1369.172653][T16954] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1369.282635][T16243] usb 8-1: new low-speed USB device number 118 using dummy_hcd [ 1369.332985][T16243] usb 8-1: Invalid ep0 maxpacket: 16 [ 1369.334312][T16954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.338582][T16243] usb usb8-port1: unable to enumerate USB device [ 1369.348620][T16954] usb 7-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 1369.396436][T16954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.414328][T16954] usb 7-1: config 0 descriptor?? [ 1370.932831][ T30] audit: type=1400 audit(2000000945.104:2199): avc: denied { setattr } for pid=26456 comm="syz.5.5252" name="NETLINK" dev="sockfs" ino=98813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1370.957336][ T30] audit: type=1400 audit(2000000945.134:2200): avc: denied { getopt } for pid=26456 comm="syz.5.5252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1371.422606][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1371.782768][T16243] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 1372.022817][T16243] usb 8-1: Using ep0 maxpacket: 8 [ 1372.119807][T16243] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1372.198637][T16243] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.221220][T16243] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1372.232757][T16243] pvrusb2: ********** [ 1372.236746][T16243] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1372.265636][T16243] pvrusb2: Important functionality might not be entirely working. [ 1372.282908][T16243] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1372.304135][T16243] pvrusb2: ********** [ 1372.439750][ T2337] pvrusb2: Invalid write control endpoint [ 1372.511842][ T2337] pvrusb2: Invalid write control endpoint [ 1372.520550][ T2337] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1372.581683][ T2337] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1372.611281][ T2337] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1372.641599][T16243] usb 8-1: USB disconnect, device number 119 [ 1372.651215][ T2337] pvrusb2: Device being rendered inoperable [ 1372.663044][ T49] usb 7-1: USB disconnect, device number 22 [ 1372.679904][ T2337] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1372.693734][ T2337] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1372.716607][ T2337] pvrusb2: Attached sub-driver cx25840 [ 1372.723821][ T2337] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1372.735746][ T2337] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1373.451003][T26495] libceph: resolve '400' (ret=-3): failed [ 1373.593120][T26497] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1373.599662][T26497] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1373.607674][T26497] vhci_hcd vhci_hcd.0: Device attached [ 1373.713215][T26499] usbip_core: unknown command [ 1373.718886][T26499] vhci_hcd: unknown pdu 0 [ 1373.724056][T26499] usbip_core: unknown command [ 1373.733360][T21234] vhci_hcd vhci_hcd.7: stop threads [ 1373.738589][T21234] vhci_hcd vhci_hcd.7: release socket [ 1373.747495][T21234] vhci_hcd vhci_hcd.7: disconnect device [ 1373.782897][ T90] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1373.846134][ T30] audit: type=1400 audit(2000000948.874:2201): avc: denied { append } for pid=26503 comm="syz.5.5264" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1373.877685][T26504] bridge1: entered promiscuous mode [ 1373.912213][T26504] bridge1: entered allmulticast mode [ 1373.935420][T26504] Invalid logical block size (2049) [ 1374.614365][T26516] [ 1374.616731][T26516] ====================================================== [ 1374.623735][T26516] WARNING: possible circular locking dependency detected [ 1374.630748][T26516] syzkaller #0 Tainted: G L [ 1374.636712][T26516] ------------------------------------------------------ [ 1374.643717][T26516] syz.5.5267/26516 is trying to acquire lock: [ 1374.649765][T26516] ffff8880767628b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12d0 [ 1374.658209][T26516] [ 1374.658209][T26516] but task is already holding lock: [ 1374.665561][T26516] ffff888073755868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1374.673833][T26516] [ 1374.673833][T26516] which lock already depends on the new lock. [ 1374.673833][T26516] [ 1374.684219][T26516] [ 1374.684219][T26516] the existing dependency chain (in reverse order) is: [ 1374.693219][T26516] [ 1374.693219][T26516] -> #3 (&pipe->mutex){+.+.}-{4:4}: [ 1374.700598][T26516] __mutex_lock+0x1aa/0x1ca0 [ 1374.705708][T26516] anon_pipe_write+0x15d/0x1bd0 [ 1374.711077][T26516] __kernel_write_iter+0x720/0xb10 [ 1374.716710][T26516] __kernel_write+0xf5/0x140 [ 1374.721828][T26516] autofs_notify_daemon+0x4db/0xd60 [ 1374.727560][T26516] autofs_wait+0x10f3/0x1ac0 [ 1374.732665][T26516] autofs_mount_wait+0x132/0x3c0 [ 1374.738098][T26516] autofs_d_automount+0x4b2/0x960 [ 1374.743615][T26516] __traverse_mounts+0x1b9/0x830 [ 1374.749050][T26516] step_into_slowpath+0x772/0xf50 [ 1374.754568][T26516] path_openat+0x10db/0x3140 [ 1374.759652][T26516] do_filp_open+0x20b/0x470 [ 1374.764652][T26516] do_sys_openat2+0x121/0x290 [ 1374.769835][T26516] __x64_sys_openat+0x174/0x210 [ 1374.775193][T26516] do_syscall_64+0xcd/0xf80 [ 1374.780191][T26516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.786575][T26516] [ 1374.786575][T26516] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1374.794274][T26516] __mutex_lock+0x1aa/0x1ca0 [ 1374.799359][T26516] autofs_notify_daemon+0x4a6/0xd60 [ 1374.805153][T26516] autofs_wait+0x10f3/0x1ac0 [ 1374.810235][T26516] autofs_mount_wait+0x132/0x3c0 [ 1374.815662][T26516] autofs_d_automount+0x4b2/0x960 [ 1374.821179][T26516] __traverse_mounts+0x1b9/0x830 [ 1374.826616][T26516] step_into_slowpath+0x772/0xf50 [ 1374.832134][T26516] path_lookupat+0x627/0xc40 [ 1374.837245][T26516] filename_lookup+0x224/0x5f0 [ 1374.842514][T26516] kern_path+0x35/0x50 [ 1374.847085][T26516] lookup_bdev+0xd8/0x280 [ 1374.851929][T26516] resume_store+0x1d6/0x490 [ 1374.856941][T26516] kobj_attr_store+0x58/0x80 [ 1374.862041][T26516] sysfs_kf_write+0xf2/0x150 [ 1374.867142][T26516] kernfs_fop_write_iter+0x3af/0x570 [ 1374.872933][T26516] vfs_write+0x7d3/0x11d0 [ 1374.877758][T26516] ksys_write+0x12a/0x250 [ 1374.882582][T26516] do_syscall_64+0xcd/0xf80 [ 1374.887579][T26516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.893969][T26516] [ 1374.893969][T26516] -> #1 (&of->mutex){+.+.}-{4:4}: [ 1374.901161][T26516] __mutex_lock+0x1aa/0x1ca0 [ 1374.906282][T26516] kernfs_seq_start+0x4f/0x2a0 [ 1374.911551][T26516] traverse.part.0.constprop.0+0xaf/0x650 [ 1374.917883][T26516] seq_read_iter+0x93c/0x12d0 [ 1374.923056][T26516] kernfs_fop_read_iter+0x46c/0x610 [ 1374.928755][T26516] vfs_read+0x8bf/0xcf0 [ 1374.933403][T26516] __x64_sys_pread64+0x1eb/0x250 [ 1374.938834][T26516] do_syscall_64+0xcd/0xf80 [ 1374.943831][T26516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.950216][T26516] [ 1374.950216][T26516] -> #0 (&p->lock){+.+.}-{4:4}: [ 1374.957216][T26516] __lock_acquire+0x1669/0x2890 [ 1374.962571][T26516] lock_acquire+0x179/0x330 [ 1374.967564][T26516] __mutex_lock+0x1aa/0x1ca0 [ 1374.972657][T26516] seq_read_iter+0xe1/0x12d0 [ 1374.977741][T26516] kernfs_fop_read_iter+0x46c/0x610 [ 1374.983437][T26516] copy_splice_read+0x618/0xc20 [ 1374.988781][T26516] do_splice_read+0x285/0x370 [ 1374.993952][T26516] splice_file_to_pipe+0x109/0x120 [ 1374.999558][T26516] do_sendfile+0x400/0xe50 [ 1375.004465][T26516] __x64_sys_sendfile64+0x1d8/0x220 [ 1375.010161][T26516] do_syscall_64+0xcd/0xf80 [ 1375.015155][T26516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.021550][T26516] [ 1375.021550][T26516] other info that might help us debug this: [ 1375.021550][T26516] [ 1375.031744][T26516] Chain exists of: [ 1375.031744][T26516] &p->lock --> &sbi->pipe_mutex --> &pipe->mutex [ 1375.031744][T26516] [ 1375.043960][T26516] Possible unsafe locking scenario: [ 1375.043960][T26516] [ 1375.051387][T26516] CPU0 CPU1 [ 1375.056719][T26516] ---- ---- [ 1375.062053][T26516] lock(&pipe->mutex); [ 1375.066176][T26516] lock(&sbi->pipe_mutex); [ 1375.073165][T26516] lock(&pipe->mutex); [ 1375.079807][T26516] lock(&p->lock); [ 1375.083583][T26516] [ 1375.083583][T26516] *** DEADLOCK *** [ 1375.083583][T26516] [ 1375.091690][T26516] 1 lock held by syz.5.5267/26516: [ 1375.096765][T26516] #0: ffff888073755868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x64/0x80 [ 1375.105431][T26516] [ 1375.105431][T26516] stack backtrace: [ 1375.111291][T26516] CPU: 1 UID: 0 PID: 26516 Comm: syz.5.5267 Tainted: G L syzkaller #0 PREEMPT(full) [ 1375.111309][T26516] Tainted: [L]=SOFTLOCKUP [ 1375.111313][T26516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1375.111320][T26516] Call Trace: [ 1375.111325][T26516] [ 1375.111330][T26516] dump_stack_lvl+0x116/0x1f0 [ 1375.111348][T26516] print_circular_bug+0x275/0x340 [ 1375.111362][T26516] check_noncircular+0x146/0x160 [ 1375.111376][T26516] __lock_acquire+0x1669/0x2890 [ 1375.111390][T26516] ? __schedule+0x10b9/0x6150 [ 1375.111404][T26516] lock_acquire+0x179/0x330 [ 1375.111417][T26516] ? seq_read_iter+0xe1/0x12d0 [ 1375.111431][T26516] ? __pfx___might_resched+0x10/0x10 [ 1375.111444][T26516] __mutex_lock+0x1aa/0x1ca0 [ 1375.111459][T26516] ? seq_read_iter+0xe1/0x12d0 [ 1375.111472][T26516] ? __pfx___schedule+0x10/0x10 [ 1375.111485][T26516] ? seq_read_iter+0xe1/0x12d0 [ 1375.111500][T26516] ? __pfx___mutex_lock+0x10/0x10 [ 1375.111515][T26516] ? irqentry_exit+0x1dd/0x8c0 [ 1375.111529][T26516] ? rcu_is_watching+0x12/0xc0 [ 1375.111544][T26516] ? seq_read_iter+0xe1/0x12d0 [ 1375.111558][T26516] seq_read_iter+0xe1/0x12d0 [ 1375.111573][T26516] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1375.111588][T26516] kernfs_fop_read_iter+0x46c/0x610 [ 1375.111608][T26516] copy_splice_read+0x618/0xc20 [ 1375.111626][T26516] ? __pfx_copy_splice_read+0x10/0x10 [ 1375.111643][T26516] ? lockdep_hardirqs_on+0x7c/0x110 [ 1375.111659][T26516] ? __pfx_copy_splice_read+0x10/0x10 [ 1375.111675][T26516] do_splice_read+0x285/0x370 [ 1375.111691][T26516] splice_file_to_pipe+0x109/0x120 [ 1375.111710][T26516] do_sendfile+0x400/0xe50 [ 1375.111724][T26516] ? __pfx_do_sendfile+0x10/0x10 [ 1375.111738][T26516] ? __pfx___seccomp_filter+0x10/0x10 [ 1375.111757][T26516] __x64_sys_sendfile64+0x1d8/0x220 [ 1375.111775][T26516] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1375.111792][T26516] ? __secure_computing+0x28e/0x3b0 [ 1375.111810][T26516] do_syscall_64+0xcd/0xf80 [ 1375.111825][T26516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1375.111837][T26516] RIP: 0033:0x7ff7e7d8f749 [ 1375.111848][T26516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1375.111859][T26516] RSP: 002b:00007ff7e8b46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1375.111877][T26516] RAX: ffffffffffffffda RBX: 00007ff7e7fe6180 RCX: 00007ff7e7d8f749 [ 1375.111885][T26516] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1375.111892][T26516] RBP: 00007ff7e7e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1375.111898][T26516] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1375.111905][T26516] R13: 00007ff7e7fe6218 R14: 00007ff7e7fe6180 R15: 00007ffd604f5108 [ 1375.111916][T26516] [ 1375.389419][ T30] audit: type=1400 audit(2000000949.634:2202): avc: denied { watch_reads } for pid=26512 comm="syz.5.5267" path="pipe:[77857]" dev="pipefs" ino=77857 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1375.440628][ T30] audit: type=1400 audit(2000000950.444:2203): avc: denied { write } for pid=26515 comm="syz.7.5268" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1375.682648][T16954] usb 8-1: new high-speed USB device number 120 using dummy_hcd [ 1375.822646][T16954] usb 8-1: device descriptor read/64, error -71 [ 1376.062497][T16954] usb 8-1: new high-speed USB device number 121 using dummy_hcd [ 1376.202337][T16954] usb 8-1: device descriptor read/64, error -71 [ 1376.312535][T16954] usb usb8-port1: attempt power cycle [ 1376.672682][T16954] usb 8-1: new high-speed USB device number 122 using dummy_hcd [ 1376.692963][T16954] usb 8-1: device descriptor read/8, error -71 [ 1376.942345][T16954] usb 8-1: new high-speed USB device number 123 using dummy_hcd [ 1376.973104][T16954] usb 8-1: device descriptor read/8, error -71 [ 1377.083010][T16954] usb usb8-port1: unable to enumerate USB device