last executing test programs: 3m8.016308678s ago: executing program 0 (id=3146): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) (fail_nth: 1) 3m7.535430064s ago: executing program 0 (id=3149): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000075c0)=[{{&(0x7f0000001a40)=@nfc_llcp, 0x80, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000001ac0)=""/4104, 0x1008}, {&(0x7f00000017c0)=""/87, 0x57}], 0x3}, 0x2}, {{&(0x7f0000000640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000700)=[{&(0x7f00000006c0)=""/25, 0x19}], 0x1, &(0x7f00000018c0)=""/214, 0xd6}, 0x7}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000440)=""/77, 0x4d}, {&(0x7f00000007c0)=""/219, 0xdb}], 0x2, &(0x7f0000002b00)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000003b00), 0x80, &(0x7f0000003d80)=[{&(0x7f0000003b80)=""/170, 0xaa}, {&(0x7f0000003c40)=""/171, 0xab}, {&(0x7f0000003d00)=""/66, 0x42}], 0x3, &(0x7f0000003dc0)=""/234, 0xea}, 0x9}, {{&(0x7f0000003ec0)=@phonet, 0x80, &(0x7f0000005040)=[{&(0x7f0000003f40)=""/224, 0xe0}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x2, &(0x7f0000005080)=""/4096, 0x1000}, 0x9fb}, {{&(0x7f0000006080)=@ethernet={0x0, @multicast}, 0xbf, &(0x7f0000006180)=[{&(0x7f0000006100)=""/100, 0x64}], 0x1}, 0x7}, {{&(0x7f00000061c0)=@nfc, 0x80, &(0x7f0000007540)=[{&(0x7f0000006240)=""/136, 0x88}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/82, 0x52}, {&(0x7f0000007380)=""/209, 0xd1}, {&(0x7f0000007480)=""/164, 0xa4}], 0x5}, 0x3}], 0x7, 0x2, 0x0) socket$inet6(0xa, 0x80001, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x700000000000000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r3, &(0x7f0000000240)=""/157, 0x9d) getdents(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r4, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) 3m6.391417515s ago: executing program 0 (id=3152): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = syz_usb_connect$cdc_ecm(0x4, 0x77, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x1, 0x130, 0x1, "", [{{0x9, 0x4, 0x0, 0x17, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x39c}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x9, 0x9, 0x5}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x200}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x4, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0xf7, 0x3e}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf, 0x9, 0x10}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x201, 0x80, 0xf7, 0x2, 0x40, 0x10}, 0xd4, &(0x7f0000000500)={0x5, 0xf, 0xd4, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x6, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x40, 0xa2, 0x8548}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "50c424b32dc5affb1c9bf9779bc2701f"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "aa9c54ca3a2490cbd50cce577147eaa7"}, @generic={0x82, 0x10, 0x1, "bbcfa26f13a647537b9cad6693cd6b77a3c3d526962553215e0d38d073b23eae5d9430a91ffe27648f9976b1b5564f30e53ed4889ef41799beb72eca60a4092c27c574988fe21ff390e2fc2759bd45803bb91b66fe618876e359977759416b20b4c09af3cb9a39006c3bf0b5879b2e754faa3cbfff726408d93c538c6d28e1"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "2b01ab41cea7c06e5c4262ab64da05a6"}]}, 0x5, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1c09}}, {0xab, &(0x7f0000000680)=@string={0xab, 0x3, "ae84145ab2839bd34acf11fa1097754d8557ef3e88c3d23d7d88f2cc4882b9a073d05075fb62bd0c4dbae64654c9539513b92bc98978defa84c9d4548bb40e955a3e6cbc354210adbb1bd901a792cd9cdf6da8c6e03384a8f3b2f8f38b25b430ad786b925306d4bde6d41650c1b88163e04526f23e101e46dcbaf08dfd93601d6972367644bee10189e50e3cdb6e5f1b7cc0ae70e74f6011dd7aabe03fd716300cdd5999cabf34f117"}}, {0xb6, &(0x7f0000000740)=@string={0xb6, 0x3, "6c31ea5af93a18df47ddc61a6d82754798edd54a52df92dff9a98129a30d63fe83b92030c09b0906652f178033a9c1025b1430344a542f07c040d567aec33d846ecfab854e2d045b44323eae3e5742ecb69702056a35dbebac6b06f345d7eac3378489071444a20d80b8a98daa8967bbdcacc042ebea3fddd4c93714c84e209e253015323bb487027632ea4886a7753ea568c35531f8278934b70005b3f79851075f7bc152144a3f70d371db9d1bbd5848f547ca"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000980)={0x14, &(0x7f00000008c0)={0x20, 0x4, 0x72, {0x72, 0x5, "509af8c971419168eef30db06f0a006e1e52ad8e7db863e9d139b5de04161880741e1aec09b8d18be995781a351dabd21d272a7fe9a99ff1fd3fa843efc1bad997b4a5c0ad870760cde64bbf808aef94199a9aba4be3822252451da80616594c2c6126e848baa77250605596145654bc"}}, &(0x7f0000000940)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b40)={0x1c, &(0x7f00000009c0)={0x0, 0xf, 0x4b, "db46521fa362608d827687c1a1c46df7caa555a3752c7a5b9ce28f1d57cd1fc68e38a284fd37f0c4f8c9cc3d3bf50853c96a88da1fe486fc95775767bf5c568101b1454e3a44ed4034e6f6"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0xb7}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x86}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xa, 0x0, 0x48}}}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x300, 0x65, 0xf6, 0xa1, 0x10, 0x7}, 0xf6, &(0x7f0000000b80)={0x5, 0xf, 0xf6, 0x4, [@generic={0xc7, 0x10, 0x2, "acfbb724be1af96711261e31ec2496289bc142640969175aa0c067738f0134fc20cc4b01b041fdde74080204d21eeaa4bf518ebc5ac79b55ce9f67dedb7a3feced914b76cd3b2fc188c6d8f7c2d3f137263d1d68b16002d0316c53753bfd8a6de4ee4f19d051c57f18a894c305443f36b41ee5c93c6e38413a87e8e4df9eccd509711baf7ab0cae26dca15ef46556bc1b8b86cdb224577bb478584d0c9ca545307018dd86689f936b9a35e340529597874fad459b32ee74f0b749874ec4803774082b2e4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x23, 0x9, 0xf, 0xffff, 0xa}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x0, 0x9, 0x1000, 0x95}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "496d99b44287cbfa359552add2baf684"}]}, 0x1, [{0xcc, &(0x7f0000000c80)=@string={0xcc, 0x3, "b5f4a0a13f3c87b8f8c3beacb59f4980fe15c4ba9581a08e20f1ce6f94da87a7dd2ef9ef8d75df31cdee510f00535d0e86d80f23b16226c781aacaf8463f87d9c1377de506999005112f9f4b975eda167e734cb2f5fae2fff5e0af85f3704a36ec774c5c40e7393beadc7e7ef7efbeefa931d3ec11b5f63c8ed79933532f72ec888a6edde161f515f9e036b76fa7b2b8e8158d99243cf94116e0ffd59bde90ea912dd205e4f3f2221d508ee6b1ac8ad440dddae9973c39d206fc2ccf67033f0577d33c3eb850136f1846"}}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x2, 0x4}}, 0x9) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) 3m4.170591727s ago: executing program 0 (id=3158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0xfc30) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000004000000000000000000000000f083f6d3fdd7809efe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000"], 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 3m2.911627918s ago: executing program 0 (id=3160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00feffffff00"/28], 0x50) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0xf80, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xf48, 0x2, [@TCA_CGROUP_ACT={0xf44, 0x1, [@m_connmark={0x88, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x50, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x20000006, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x0, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x3}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x82, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x81, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0xffffffff, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x2, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x6, 0x7, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x2, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0xffffffff, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x5}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x5707, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x84, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xf80}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r5, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}, {0x0, 0x30}], 0x2) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xf835, 0x1c080, 0xa, 0x20002f7, 0x0, r5}) setresuid(0x0, 0xee00, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r8, 0x0, 0x20000000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r9, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() 3m2.39095047s ago: executing program 0 (id=3162): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) syz_open_pts(0xffffffffffffffff, 0xc0540) capset(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x10400, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019c80)=""/102400, 0x19000) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) close(r7) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f00004d2000/0x1000)=nil, &(0x7f0000665000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00003f5000/0x3000)=nil, &(0x7f00005af000/0x3000)=nil, &(0x7f00003ad000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000657000/0x1000)=nil, &(0x7f0000232000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000037b000/0x13000)=nil, &(0x7f00000003c0)="cb8148b2a6fcd7b9213a225be9bda0bcba23e0f4e28459f170d0ab92a14af41e5d0d518a4dd982714b35b9cfce140761ee3dcedf1d10e9973fbab7aebcd193d3812db4946ae217803a2c103b5f88a8086fc8cebde24eaac6991e16f3a2413680d6f590bdff276df97a57d7286dd81e5a14ee692a6c783d0d1aab075e6e60dc06ccd7911c2dad33606fad303e39015059221a9132d01b66e465c7bc51b1c3c9dc2924a2943d38de5eb5761f7edf0d0d43d0541e1aafd0fd86d614204fd40215ba8ae019a5df0e1508bf88abe1", 0xcc, r6}, 0x68) 2m51.30355853s ago: executing program 4 (id=3217): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10000}) setpriority(0x1, 0x0, 0x80000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000340)={0x5, 0x8, 0x7}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0x0, 0x0}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180), 0xa00, 0x0) io_uring_setup(0x6091, &(0x7f0000000080)={0x0, 0x4e1b1, 0x4, 0x0, 0x2bb}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) getsockname(r4, 0x0, &(0x7f0000000140)) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000400), 0x4) r5 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)={0x20, 0x7, 0x3b, "dcfc14ff434c17650c158d873bd21952544a27443e75981a03b02829c7dfa1083b6153e892aa63272e66deec82e3e97d44c290be7e3d37b8078483"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m47.966310852s ago: executing program 4 (id=3232): io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd(0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x1, 0x7e, 0x1, 0xffffffffffffffff, 0x2}, 0x50) socket$packet(0x11, 0x2, 0x300) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x5}) 2m47.790083425s ago: executing program 4 (id=3233): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 2m46.795638768s ago: executing program 32 (id=3162): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r0]) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) syz_open_pts(0xffffffffffffffff, 0xc0540) capset(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = dup(r3) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x10400, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019c80)=""/102400, 0x19000) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) close(r7) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f00004d2000/0x1000)=nil, &(0x7f0000665000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00003f5000/0x3000)=nil, &(0x7f00005af000/0x3000)=nil, &(0x7f00003ad000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000657000/0x1000)=nil, &(0x7f0000232000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000037b000/0x13000)=nil, &(0x7f00000003c0)="cb8148b2a6fcd7b9213a225be9bda0bcba23e0f4e28459f170d0ab92a14af41e5d0d518a4dd982714b35b9cfce140761ee3dcedf1d10e9973fbab7aebcd193d3812db4946ae217803a2c103b5f88a8086fc8cebde24eaac6991e16f3a2413680d6f590bdff276df97a57d7286dd81e5a14ee692a6c783d0d1aab075e6e60dc06ccd7911c2dad33606fad303e39015059221a9132d01b66e465c7bc51b1c3c9dc2924a2943d38de5eb5761f7edf0d0d43d0541e1aafd0fd86d614204fd40215ba8ae019a5df0e1508bf88abe1", 0xcc, r6}, 0x68) 2m46.770766746s ago: executing program 4 (id=3237): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x294, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x40000, 0x8, 0x4008, 0x746f, 0x8, 0x5, 0x8, 0x7a2e6ff0, 0x4, 0x7ffd]}) 2m46.643530235s ago: executing program 4 (id=3238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r7, 0x2000000) fcntl$addseals(r7, 0x409, 0x7) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x1f, 0x0, 0x1000000}) 2m42.500902798s ago: executing program 4 (id=3244): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000240)=ANY=[@ANYBLOB="75737271756f74615f626c6f636b5f686100006c696d69743d352c75737271755274615f696e6f64655f686172646c696169743d362cd7408784874d1e7ffd2900"]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c00010028bd7000fedbdf2502000000", @ANYRES32=r3, @ANYBLOB="3f0022090800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2m26.559139019s ago: executing program 33 (id=3244): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000240)=ANY=[@ANYBLOB="75737271756f74615f626c6f636b5f686100006c696d69743d352c75737271755274615f696e6f64655f686172646c696169743d362cd7408784874d1e7ffd2900"]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001c00010028bd7000fedbdf2502000000", @ANYRES32=r3, @ANYBLOB="3f0022090800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 1m25.404849857s ago: executing program 5 (id=3480): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405668, &(0x7f0000000140)={0x6, 0x0, 0x1, "0000087ababc000000000000164d97526b15030000000000380700000004f9bf", 0xf6b487ba}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/80, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) syz_usb_connect$uac2(0x5, 0x99, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002000000404e150e5040000102030109028700030114b000080b010101ff20050904000060b506c664d62a8cfaf4000000000000000509240196ae001500090c2403020004020505ff7f7f09040100000102200009040101010102200006240201038009050109"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000800)={r1, 0x1, 0x3, 0x1}) write(r3, &(0x7f0000000900)="549d2e418c2daac4e63cae14743e4563c50c4c1556a49185f94257dcb1eb074ed8a9f03db3911b69e4fcae47fa8f2d1fc35420332429f79fc2e6df45aa79b4a370", 0x41) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000780)={0x1, r3}) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000000c0)) 1m21.767464158s ago: executing program 5 (id=3488): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000007c0)={{'\x00', 0x2}, {0x2}, 0x80, 0x0, 0x0, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000004c0)="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", 0x1b9, 0x0, &(0x7f0000000680)={0x2, 0x5e, {0x1, 0xc, 0x34, "fa319ed0dea157f936d96e29f5472a12a3497d133638a4a12ec0d4cbf97bb5e1d2ad4c7e8894d92a898f0549361f519483b3bf25", 0x1d, "c97e0825ff8bac46adacb9b1078cbefece7970f6f540b87a2a3698b156"}, 0xc4, "6a5384ef2aa670719124e72b27336b13b7b0356a4d52b87cd2ff94f816d00c777761b210b3f96b6d8f20ad2345e70ee98403fd91e844e3bb2d7256c078d13564c6850c9e6b14356c7172c9a6a57362509358cfa82ac68376672f359526e90cd8202a445369159fd66d325411ce8b274ea056269202d7898d7787d2d6a9cc0522693109574ad0692d7a0330bf8e6e3cadd1173199bfcbeeb5122e14a3d367098fb9fe989f0490ac5586f9f20bf0551a491db72393fe8e1fc6526ee9c779db89e729626e7a"}, 0x12e}) prlimit64(r2, 0x0, &(0x7f00000000c0)={0x5}, &(0x7f0000000100)) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 1m20.679750041s ago: executing program 5 (id=3493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000280)={0xf00, 0xd, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x978, 0x3, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_USERDATA={0x21, 0x6, 0x1, 0x0, "ef5d23f85caeb81b157e35c6586d7125a1cfe98a2a68db95fd5dbb34a2"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x300, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0x14, 0x6, 0x1, 0x0, "b6c93d347315feb30b1ca2fd83e0ba10"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x63, 0x6, 0x1, 0x0, "cf9875add80c47def2fc6e7212481109a10721d8397ac44afa3a1fadeac764bfded79946c20d50d1e19e32ee59bd30374722bb0d49728a9c62f4c4e0b1e0d43a59bae0e3d4e9622fbfe78ac6a279524105604134ea93094fb41eb726d4a3f8"}, @NFTA_SET_ELEM_KEY_END={0x1e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "2e996a703a2f76082cb9441efa9452334c1f4b786386f6dc74a970ab34997d3bdb45cd64923cd7203cbaaada2935ef2e0aba2ccd2e14fc314f8e0e80a6e0a4f71dd855bf0be841166964e44649081c97e3772860bc6f8839daa17c2eec5c7465a1bbd21b8f04d00919dde00923fab96793febe3a1ad10761e50c9649ea2de6642b040534dbd9cfcd"}, @NFTA_DATA_VALUE={0x5e, 0x1, "96f88d9d7cf4becc83be772c092982af8dee06c258593cdd6ad757bdc472534a957f1c35b8633cd4b76c7517a0fdf836f037e87ae9df26cdf0b8fd28675598ea504e96ab0fef0d2f01e5fa046b56f8ba34bc23c21e17fb810c0c"}, @NFTA_DATA_VALUE={0xba, 0x1, "78437847f54fa3c330d13b52324185272e4f1946d8441354810d774ca223298e206d4d7243927d07c70595857f523ad22de6788ac61f954a20ce47640793a491473556f0c4022beaaa4945dd899365539dcbc40817e701d18a5cce3087219c0c05f54113d4e4d5c0cf2b2acdb62934438994046973533dc2f57936cbcff12e2f79e8696e7e73c401387f534230a0eba67db8a7753670394e9700ad5db1bf542334edb34bfd1942a9b4afd54cfd56309023d32d01b27a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_USERDATA={0x1a, 0x6, 0x1, 0x0, "12d9d931cbef88fcb1819078bcf592f967a9037ff984"}, @NFTA_SET_ELEM_USERDATA={0x47, 0x6, 0x1, 0x0, "72628fb8973b16fa6aeec6a676c4f34bd54cf42aa88d7a54fa663ab68f557f0b04193665962a234c814e0984a604bb9d81f12910eed1c96c87dea455886ca1819b5642"}, @NFTA_SET_ELEM_USERDATA={0x23, 0x6, 0x1, 0x0, "12b87d717d86b06c4e30d631904302a6b79ac5b7405ec2148fa07596e123af"}]}, {0x468, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @connlimit={{0xe}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x80, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x60, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_ID={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_DATA={0x2f0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x68, 0x1, "eef0fc7558fc8118af4fd2ae3643a58ee613437d5864cce5b260dbb0be23c1f01b1c5b9a7a281a47d74cb34baeab950e859509d63341922f4ba1213413be139d7875e8dca82683ecfaf3af5afe27c4a6451ff8a063ca08e3edddd67353182244290afe94"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xc2, 0x1, "a99e31dfa93a8f972a57289996b40639021c392815bd316b3548e9c37621e20e613f58f104c0c44fcf5a04f4ce7f1f059e71091965eb2e00583adde0fade278b0e96f4a46f20e9fdc0af3ef281d4ebf8bd73971803443a3390816a3da5177e5064ad6fa45169d811ee94e1d21dc7d0d03e31f651be4147086b66ecd9ce45460b0ffbb934d891c44b35d1d2ce11674eee1594b5b61926502412d7c96032073a5e257cd7bf27ffc68cf0bed27b366be0b08fd0bc0b810edd49b0efcb9f655c"}, @NFTA_DATA_VALUE={0x99, 0x1, "4dcfe431d110575a1cfd3263212612e6b24244913ec9bb0b68c2e4f4472b71e913b2ba8f28c8d307557e81e3b84ea31a7149d7d8722d57fad87c08e9a9002c92cd945ad87ca14d02be977b539583d2d049cce0069bb40393eec4ebda4ab2b95a9d4fbb4dc50b22bd4be8f42573e774d8d8937ca1a76f531f4793872a0ea1f5c9387aa5c148b88805e6463388faf8c6f868375913f7"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xa4, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}]}}}, {0x44, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xff}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xc}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_SET_ELEM_DATA={0x2c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x93, 0x1, "32b35449f5e7ebf6e223535d5d548b240cd81e841a69cc504130128c5978533ce8d20eed93acc6a5aba2ffc222160004df7df64dbcbd6904a533a4bfd41e1f75b5d9aaa10e243064e05b2ebf7e0847e31f5569537390fb02ff062aad97a455294ed57fca2c565aaab823813511dd9c3017faa935e4db3cefa83a27fd504a2f21507c7e3b16a379d447d8bf2afd0dc3"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7f}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x574, 0x3, 0x0, 0x1, [{0x570, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_USERDATA={0x7e, 0x6, 0x1, 0x0, "c00812e7fab8103bb0bbe63f82e6ff878cf9e4d3d8f93709e746f58be6097c64eaccfafb63ec069759c1c19aaebb65b1e37ffc96c90252e09d3eb57a343442926f5d9e00413f01ccd0f04419f55277850a66601d3a87f2838c782316e56c0bcb819851b55b8e332bfcc1b892c67d15987650deceb239342f1e9b"}, @NFTA_SET_ELEM_KEY_END={0x11c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "25b7866381"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffa}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "f4cc3c9aadc159471b92bdbe92561eaaedb6a6b52e82f229013171c553d683ccc5f59642bb58ad5fdd0fe08d99e37794459c5a77a9320f7bcfb74cf6a219ae0d593198a6dc21a5395ce5e08509dfb118bc24511245cd161b09be621f36e335fbf32b0588664550ba27d3f97f017646f99f9c5ba7ba1f68d802668e7d13b51beaa3daf421a9f95180360312ad443d8ff145f61d742615ec97b96225ed7b03310efd58531b624aeaff4baa53ed0ee6ace26a13fad7aefc43c46b9e8f3447"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x354, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x64, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xa2}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x34}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xfffffff3}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x99}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HASH_TYPE={0x8}]}}}, {0x2cc, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2bc, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x2b0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf3, 0x1, "de432f551e34c0916c62fdc82451a887990a797578cbc6569a5ec133a390f8d80c30e8e5863e7598d88ceca85a2f925181865d2151670ac967bf19edc91eaf9be2caa7eab611388c80a8c9740ce33ed533c83d8f768709cfb2ad241250c188d28ba00846a6367f34cd87c317e02799e2af74efe9d8ce7af2148f091579d298b167bdcaa007127599ebc0134e9baf6021ed4bc4d93e5287c18c76261dcb14f475b8fecd532cb33a2ac7977a29e31a899d4794a80579d06717ec93384b4aeccebe78b097c8ea6cfb8a2f689e77ab2f530264dcfd211ab73ab637a58372f8c0c63503a88900aeb8dfb90d90ea49ef933f"}, @NFTA_DATA_VALUE={0x99, 0x1, "629a1d93321ffadbd066e9aed526b0cf19081f384455cdf67bcb07ffbfd1c83895c8062ec7daa6fa34cd773ee6011b8e26d91f8732059d5549ca55bdecb5f1c5385631bc299e3276704b9b0fe4a594048662fdf46c487f331ad8d76edc4aa961fd0ad829dc50839475bc403cc14650459171acaaa6cecd0ba142bfd69e4e4c833627c52beafbea2dcdbf5345d5626aed0adc774a67"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x77, 0x1, "ccc07c800be1413444a086d2942f18952e1de06a7ce1ddf349cac89235b6fa48653b7b11e84b40e835686f468dce63de3baa4a057008543921de29fab16a7dd89aa18794ec2813efcf438afbd556c35d1bbc1723c548bff2836666e26ecd64dec115543bd11787a450605e11c4f60d72bdc973"}, @NFTA_DATA_VALUE={0x96, 0x1, "147446469a71d4b48a885dd8dd7e7c351d5aeeaf18f95b854c4042f13c54672d7023603f95a61187b2e72cf9e1f614e29b88827c6f5dedaffc6cdd3bd05fc81110060a15ec5d0ab71b9e3168dd228e773b26a474d53cfc554bb537be1c0be70b0b6bda725d047a4eefbe84d58af8ce00521793561abf1e40d9a3f6b3d1f7d343376355748a0fffb4ae03a561ebbf40748876"}]}]}}}]}]}]}]}, 0xf00}}, 0x10) 1m20.642552821s ago: executing program 5 (id=3494): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64f42, 0x22) pwritev2(r1, 0x0, 0x0, 0x9c00, 0x0, 0xcccc) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) statx(r2, 0x0, 0x1000, 0x112, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000001400)={&(0x7f0000001380)=[{0x1, 0x8000, 0x0, 0x0}], 0x1}) 1m17.009293953s ago: executing program 5 (id=3500): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$loop(0x0, 0x8, 0x101002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x45}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000080}, 0x4042) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}]) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4010) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r8 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) getsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=0x40) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r9, r9, 0x0, 0x40008) 1m12.951267071s ago: executing program 5 (id=3504): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet6(0xa, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@ll={0x11, 0x17, r4, 0x1, 0x50, 0x6, @random="73011ec6dada"}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x4000054) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) socket$netlink(0x10, 0x3, 0x0) 57.298418632s ago: executing program 34 (id=3504): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) accept(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet6(0xa, 0x1, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@ll={0x11, 0x17, r4, 0x1, 0x50, 0x6, @random="73011ec6dada"}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x4000054) syz_clone3(&(0x7f0000000100)={0x801400, &(0x7f00000000c0)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r6) socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) socket$netlink(0x10, 0x3, 0x0) 31.216007069s ago: executing program 6 (id=3599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2}) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e22}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) fcntl$addseals(r7, 0x409, 0x7) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x98000, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0x4, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 29.95586767s ago: executing program 6 (id=3601): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000240)=ANY=[@ANYBLOB="75737271756f74615f626c6f636b5f686100006c696d69743d352c75737271755274615f696e6f64655f686172646c696169743d362cd7408784874d1e7ffd2900"]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00'}) socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 27.604094418s ago: executing program 6 (id=3612): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x9, 0x81fd, 0x2001, 0x1}, 0x1c) r1 = socket(0xa, 0x6, 0x3) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socket(0x10, 0x80002, 0x0) socket(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000540)=0x7, 0x4) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) r3 = fanotify_init(0xf00, 0x1000) readv(r3, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0xe) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) setsockopt$inet_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "0533c1935bc9feae", "29a63996d955a17bfbf538459c690ec0", "2dd47fed", "8c82a132885fd4b9"}, 0x28) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f00000000c0)) 26.489241377s ago: executing program 6 (id=3616): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x40c}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000440), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f00000007c0)={{'\x00', 0x2}, {0x2}, 0x80, 0x0, 0x0, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000004c0)="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", 0x1b9, 0x0, &(0x7f0000000680)={0x2, 0x5e, {0x1, 0xc, 0x34, "fa319ed0dea157f936d96e29f5472a12a3497d133638a4a12ec0d4cbf97bb5e1d2ad4c7e8894d92a898f0549361f519483b3bf25", 0x1d, "c97e0825ff8bac46adacb9b1078cbefece7970f6f540b87a2a3698b156"}, 0xc4, "6a5384ef2aa670719124e72b27336b13b7b0356a4d52b87cd2ff94f816d00c777761b210b3f96b6d8f20ad2345e70ee98403fd91e844e3bb2d7256c078d13564c6850c9e6b14356c7172c9a6a57362509358cfa82ac68376672f359526e90cd8202a445369159fd66d325411ce8b274ea056269202d7898d7787d2d6a9cc0522693109574ad0692d7a0330bf8e6e3cadd1173199bfcbeeb5122e14a3d367098fb9fe989f0490ac5586f9f20bf0551a491db72393fe8e1fc6526ee9c779db89e729626e7a"}, 0x12e}) prlimit64(0x0, 0x0, &(0x7f00000000c0)={0x5}, &(0x7f0000000100)) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 25.512312594s ago: executing program 6 (id=3619): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000140)={0x6, 0x0, 0x1, "0000087ababc000000000000164d97526b15030000000000380700000004f9bf", 0xf6b487ba}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/80, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) syz_usb_connect$uac2(0x5, 0x99, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002000000404e150e5040000102030109028700030114b000080b010101ff20050904000060b506c664d62a8cfaf4000000000000000509240196ae001500090c2403020004020505ff7f7f09040100000102200009040101010102200006240201038009050109"], 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000800)={r0, 0x1, 0x3, 0x1}) write(r2, &(0x7f0000000900)="549d2e418c2daac4e63cae14743e4563c50c4c1556a49185f94257dcb1eb074ed8a9f03db3911b69e4fcae47fa8f2d1fc35420332429f79fc2e6df45aa79b4a370", 0x41) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000100), 0xfffffffffffffe84) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000780)={0x1, r2}) socket(0xa, 0x801, 0x0) 20.889518426s ago: executing program 6 (id=3631): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_emit_ethernet(0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x8, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x2, 0x8, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000340)="662e9ff36c26650f35b800008ec8f30f1ec66480e22e0f20d86635200000000f22d8f30f1efb0f0051ed0f01c4", 0x2d}], 0x1, 0x54, 0x0, 0x0) fsopen(0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '=static', @void}}}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x94, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) 8.886107601s ago: executing program 7 (id=3666): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1a, 0x41c}}}, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 8.472901802s ago: executing program 7 (id=3667): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000680)}], 0x1) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 8.291937351s ago: executing program 7 (id=3668): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$loop(0x0, 0x8, 0x101002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x45}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000080}, 0x4042) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}]) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4010) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=0x40) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}, @RTA_OIF={0x8, 0x4, r9}]}, 0x38}, 0x1, 0x11}, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r10, r10, 0x0, 0x40008) 7.707585748s ago: executing program 7 (id=3669): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000240)=ANY=[@ANYBLOB="75737271756f74615f626c6f636b5f686100006c696d69743d352c75737271755274615f696e6f64655f686172646c696169743d362cd7408784874d1e7ffd2900"]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8000}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'lo\x00'}) socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6.467102024s ago: executing program 2 (id=3672): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r7 = fanotify_init(0xf00, 0x1000) fanotify_mark(r7, 0x105, 0x10000839, r6, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x20) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x800a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x28, 0xc0, 0x7, 0x6, 0xfb, 0x22, 0xf, 0x4, 0x9, 0x9, 0x0, 0x58, 0x7, 0x6, 0xa, 0x7f}}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 5.322823969s ago: executing program 35 (id=3631): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_emit_ethernet(0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x8, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x2, 0x8, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000340)="662e9ff36c26650f35b800008ec8f30f1ec66480e22e0f20d86635200000000f22d8f30f1efb0f0051ed0f01c4", 0x2d}], 0x1, 0x54, 0x0, 0x0) fsopen(0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '=static', @void}}}]}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r4, 0xae80, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x94, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) 5.313524429s ago: executing program 1 (id=3675): socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x5) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe(&(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x100) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x80000000000008}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.161019852s ago: executing program 3 (id=3676): syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x1, 0x84) syz_open_dev$usbmon(&(0x7f0000000000), 0x3, 0xae000) 5.04350284s ago: executing program 7 (id=3677): socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r4 = io_uring_setup(0x3a1b, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1) syz_create_resource$binfmt(0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000a42970d0a2ee3d8700"/103], 0x210) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f00000000c0)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xffffffff}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000958e7fc6950000004427c29a4bf2a5c558b1464318cd8346d114a0e1cff86c0473669f9e7715b565b075973c97250d16fb2bad65aa49d44914e324fa0c6fe3f6e7188c65efd992ce02d16c7fa267a98ce497ce6e"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x94) 4.662139507s ago: executing program 3 (id=3678): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000680)}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 4.627055524s ago: executing program 1 (id=3679): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$loop(0x0, 0x8, 0x101002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x45}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000080}, 0x4042) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}]) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4010) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=0x40) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}, @RTA_OIF={0x8, 0x4, r9}]}, 0x38}, 0x1, 0x11}, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r10, r10, 0x0, 0x40008) 4.019114171s ago: executing program 3 (id=3680): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1a, 0x41c}}}, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.999266134s ago: executing program 1 (id=3681): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1a, 0x41c}}}, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 3.316512623s ago: executing program 3 (id=3682): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x12, 0x82, 0xe0, 0x8, 0x2040, 0x9301, 0x30eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2d, 0x7, 0x30, 0x5, "", [{{0x9, 0x4, 0x2, 0x4, 0x0, 0xae, 0x63, 0xb0, 0x8}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x102, &(0x7f0000000640)=@string={0x102, 0x3, "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"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x64, &(0x7f00000003c0)=ANY=[@ANYBLOB="640370520954f24a7f1641f689acaadec32f0ab226790ac2f859f1666961ad8ccb447acc170fb5deb5646a5f518721772220ed6bd066b0ed94b597549a9ffb26db3edc8cd06445d54aa84985f67dad8a26936ab3c24d22130cd10f6978c62f2a9e952259af7acd3ec230547f570a849c6ebb138b13b2f8c0195ecbcd8ebc8f1c8ae51723065a0a2c27a9b395a6a901d3178047b644235245ba1283447462f5ef5b04d09a7f661c473b99a177847a536ec8bf60305061827457e050910477fafdfc78b43c4fd5e49c73bcb10d544341574887195e0239aa0bde71b2a09de1e5740b16fd7f61f461bca9654445c6f374bb3be686530e2afb59ff846b3e383ff3ddeff3b4cd3f5dfcca6edffc0d0275ad08c72ae0b255a8ca08d6ae708b7f1c3fb93ce0e6443ad60275dbde8b9091d06f2021f043b5a2565be60824610108b7d6b8d21cd4dd1fe9e5bd6b48f63bef21cbddd85c00fdca5fb28db241ac9302501c5e86dec6ff168a66170b5292e6638e0d4db9296c89e7a7729d51873618c19ec28c46f6d08754ba5a7933e2"]}, {0xc3, &(0x7f0000000000)=ANY=[@ANYBLOB="c303c49bbb32e92444750528591199f82354f218dca5cd07770308d435fac7211e8b00920d0fdcafc3d19e492575eebff4f1461b807646901fff52ccbf6e890e8056f2f39cbe5a8a74a051a15928e55c2d35506ba3008cf3f23df122320194b78863a8b0da6afe9773765facf85bff03070ef308b0f1ed170faa346e1ea6f58e4495d9fe05037ee8162824f0c43c3bee329f7947c4424b7b728e2d9345f0d1bb684bf2584843398aa3ea1e5fe3572028c682857ca644273c3dfed2b6bb9185ebf933a0"]}, {0x12, &(0x7f0000000200)=@string={0x12, 0x3, "5e4ff4bd61a05335cb51c48ae5b51d48"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41c}}]}) 3.099115521s ago: executing program 2 (id=3683): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$loop(0x0, 0x8, 0x101002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x45}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000080}, 0x4042) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}]) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4010) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r10 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r10, 0x402, 0x8000003d) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}, @RTA_OIF={0x8, 0x4, r9}]}, 0x38}, 0x1, 0x11}, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r11, r11, 0x0, 0x40008) 2.733231469s ago: executing program 1 (id=3684): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4009}, 0x8000) (fail_nth: 1) 2.367263855s ago: executing program 1 (id=3685): socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x5) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x100) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x80000000000008}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.072411972s ago: executing program 2 (id=3686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x8000}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf969}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe45e8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0135013610ff"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.321132289s ago: executing program 1 (id=3687): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x112) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f0000000780)=[@free_buffer], 0x0, 0x0, 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x5}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004805d}, 0x80) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmmsg(r0, &(0x7f0000004f40)=[{{&(0x7f00000003c0)=@xdp={0x2c, 0x6, r9, 0x3f}, 0x80, &(0x7f0000003480)=[{&(0x7f0000001300)="1d16e865f3d9787def9a7931973e83adadf5215b50a2b68c206e7f0f2661a5075b672e63ebaa1c9eab542ff8aa18a5b89285f62521aaf2547033d4466f60b9c68e0e54c77ea22980c06b33005c0808e03338136a2368aa3559c4a250d801415da62b4ae432300d6248d72f3965dd18a76a5feaf98882743ab3d8c2e12b6506770ae23c458743872722ebf60cfb390fdd5e62b3d1f98e8d90bf5e20a41f20d295d3bb8eb1fb688f4c731084cb22dad7766fdfb80c59c0e74e0e02a24f5ebab5d85d4f786d6cf1af191f65a46e5c0c07f96340e5237c7491200eb9d3ff652182f1220a19bad9c544c8efe073edc819227988c088aaad7e20954f7bb18304b9aafd30e8118fd15fcde3656c0bffab66a509bf0f30739649509650a8524b5bda937192321a18e076d219419d529d3385338ebdcb09c6d3d3d9617b3219910a143f08e980ab21b97204400ce410ac4e0488d7ed0eccee9bb307091451859dcc85f40a9efcb41b6c90e84ff73c4e3045681a7449b35c3b727b2a72ad8fd27b21120f890ead0542373753220baba250da68b4fe4940a751636d15f0edf804101deb53649f852d85fd47c1e1247f618b86fcd4417c9e4d9e598a8e3232959f44bf0139b84f4ed8c13a87572ad02bfe8c02ea5012f21ae89830b346d01b13508194ef33b77acc5b6dec95f77706f5e9dd690bb6cac3e54cc39ddcf5a3769845928a91c03db36442a14c4c314de1bd2958bf56f84af43840c110fecdf085e8569776a95092bf430260ff67c3dcb62b1f4bc0ab1f651b0341a4c578e0eda737db524ed0c74d49ef5fa6fdcc4a27bdd6e9b8465bd4d8fffce04c790d833d68cf246b9ca350a5edd673bfc71330f6a38e831ddc5033a2ffc05704be221d09be774b7591eb6f76db771647e58f1ad6c6dc887d93c6cba20f05d327ec2a8cc456e0f111b1932f420c9e0726f38ceed65b21f9611926cb879db2f051eda87d1ba5c6d0398dc7597a6dc78280cf66ecd60a61cf0522d7a9a3183a486143aec20b02920c2af108615af42e6070dbb7da69bc111f4bbba4cc921a2d9d55fc7926b7d6269909fe3ca08a855196472b2d2969b3fb63686c61072f1c6c719b62339b4050840d8812742f55996da5acb2c018ed562a56b3a37ea3b3d2a5667fd49188d1968a2b856c429d416f34bd1a6a0a40d0cd1b24a36b71494f0dd19a0d241e6299a26e59ed71f05905c1118cb2ab46f1e8a973cecfd142ad10b51e4a0a0818aa809ff6dadff76fc1c5d41ad8387a903c5fa710147ffac4792d41e53eea1bbff19509df6e9291d3cfb422ba268d9af06b98a8678c4015396b1d50d88ca3d9fa950328e0bfc6e70d306a8351ce5de2d6f87557f3f716a1a73ca32dc902f5fcfad99966ddddf0173161b7511e7c809897d1ceb6a4e3e693a507ab9b9c7fc3def0a7c862c1213d360e096b1848b29b9cbe5b4a3737b21f05d27e1d28d3f0efd1ba5f5bff533f226aa61a577ef52eab23b95d6b6b4e100f72638721708205d660f9913300a6aceba2d7361d802d125314cc098ec77f689590220c6027bbf85bf760adb66813adae342baefdb44f73e659566b4356ccc71944693a4e3d02d39cb1793676d1000b457821d46d53b87f4a71ccf461acbe419a8b16d4dcc815bf9eb05b7de3968262634fc112c21ca18b3cb665e7ae6cf398b4ee65abceb003069f9a1d2ed368cdd328e466df59f3c49854b709f13991abfe9b161aaf302adb568c80ffdfb6eca3688801111e181a4311e88416d19f76ee5a71b7e2d470bc254668aa245b27aea8b5947ac3e81349a3c27350ccc703e95b233b630296a61e09999f441ad9001107713fe75f4cebe5aa53c056be9069bdce5861f913493391c6567259e5c45ffe78790217d4be7c50d1f2e08d3a634d441ff167906f69514a1e820fcd3b84e0b5608866d231ad91b2bd02248820c961b2cb7b19103c5bca6925ead51af496bbc76454da8d73bfd4bbe3af865dc9678ca128b3afc41cd5a712ba3753dbf99d8bebd744addd28584311863029a8f12b4affba26cdd498111f94b7aeb05a18fe8a1dc5e109a5476a6de03cb5b2e68b06d747369ca56b917694783ecfa06c618a912f6c8af50bd7df844b0213d11dbc5f86c70122634d7b3e60fd592e2da775abdb7fe580eb448696f62be3b2e05915bd048f3ae8cacde6e039ecd5469c6ee6cfefe4a9210a48946c19f8ec667c753d8f31f4091e12e7240279b5e89f4fbb2f57f6469bbf70935bcb9b520e46ef092ab37b04e15e0da71e7f5918d095d0d13503c50f665d287699da829afcba1fcd2885bb1867808e38504fd564a3add3dee77cc9b4f1eee5bf2b94d9bf98d10d8f7860010ad873c73d15953056c1b90f7feefc67334d135687fb3955d5250d4c20e588640b546dd5d0e9887fff09e1278955a8935eac695af98296c56e089e0806c65c5556e5de2573e096a86fb3d9672c1d02d7d8537c15c63ffec94cf788406d60c2364f7006150be0b4a89a0aa0c42c9aa0f609296472245f3e5b018995e4928f2417ce17996e50f05547f931834cfd88e926d16262cc30ad3fd4fd8529fda5601f619ae2453824f8c597f44f79e67c55f37bd45d921f23053c1dbdc7d024658ccfcee5a00c775367cc88c09877f11364526123b976d9d08f32c9fddb43e59d9838ed2032a1c12b0c40f98b349cfe3aa62897c389a668ed853b3480b86303926f5139980d53e8f9095e26a0160a2af354d85f7984da8b9cfc91e50148a2464ae23c418724b4a3c5f14d84745834da87a4c63dc594ba3f067d7b3b3d012e694853b65a5fd9c57997544dffeb59deb8fd9c8124b9abc06c9932b4528b1e39373093aaa4008b0241319ce61084844b643a0aecae0e941ee33e6423c52eca3449b558e59fb12ff6380b357fd212b039effd911942ddb0213fb6bb5d3583afe46ad8045f315c6d07cd5da741b712cd25965f2ff14ecd25d75010047c1199072096a3dbdcba7df7c0df9b62653a76ebf4789911674eb3658c50fee95ef76c7278d107d169e29b0b8444bfb1c81f9f4377b2cb6c871d96423dea56982538e6f2b0123bc9d71da0e19b8e8cf0fff11c20081e33e96598d4577ee743c5a5b134e6051355a6cfdc41d89282aa1c56a9b59619737b4da84ca7e44c2a3da073e7802e7701020d60dea54622f38f5653e0deead50c51c41c6b4b4ebf85a42b2e0d98bc666e315d9e8cfc2c73fd812e630a13452db9252cfaddf113e2893c6bf2bb3591d06b49c26ff7027b69efcdc7e322cf0ff2be9e5dec434b1a8af0baa1fbeddbb0b840b55ae66f28bcd5951f4c64cce85d161087dbdb3884d983ce0d5c718eae9a0d92f7216641bfd33ae330c4ac161c3acc4d3144d2e5e4e169e43fd9be67c40cd08707bd2936664dd4dc4053315729efbf7659f0f73a44fed8b5f1ff86c6a4c9411d12ebcd22ffdc7a61e21b2f19885fd82c682f45ac7a3201bf93c90dbdb8ed446eab02b84a39e0cfd14f0f4d6649abd81978a807f396b7b26312dde55385f97cb60cb43bc97f48a578377d99ff1b1d2cb2a82ba423674caf1079cb8ad39941ed677ba3fdb5799f36b98f0351cf23a2e659c20abd1811d7b70ffa12146453b58c779c626e8201a6b7a77a89ef66136a6c58100f00358bbdbb706d48022024fd793a1155b74b1d1194214408a1e646ba69b5dd377ea01be8296fc8d39ef0ea229446a43180dcc4871ab46bf36cf513fafe489de3d074d5ddb77947548adae1508381a516e38315db19741abeacd117fefbce18200006e6888c8a989d89b5070d59987ab92254a84ccb365c33b79894ca5fa04c043a9a47d72c8a665e2dc921a9f57c0844eac2a33a129c22f90484a9ad65dd8013506cb0c531cdbbad07b9d9c27cdfebe28aa3ff1afb7114dbfc8497fcac482293d1d20bbc32fc105cb67ff1cb30687b8048450503da3c0078bca7f3a1602051e13bd20cf7877a7e35b586b628b63c0092e7fef1a359612b50bccafb6c2908c544af15664ed1f448ee7070948b6b6f6570eea57caeb04ac6c029e00afa0acbfe2ec1039add97384d731539a2ad289b137bc47bcd8ee5aa9e2bddb23518dbba739e0f71efa611571f5dafa286e365480b0ddad2f03fcd85402b7759ead30e22df915a2f9d9fcbd41616ac8781d03eb129ff9028c3bc1dabd7fc6a72121d1ee17456f1a72e2b1bd992cdc16633a25d56c2b345f96e82bb5d4f12754904eef626c0da2acea30c1f5275e061c8907a346c9ba949b7b985a27120ec0530a99938d5d0e21ccfa1d7cfed719ba2a14ed919bf33f0b5d0ae861e15173f763edecaf89898c02cc37806c36e050e35759538100b23092c75b3dbc8d68acc9bfe328e422fe508857db5a3076c3e11a341c4772235bc000d2e5e0cc70872e1ed8c8dc13d149a0a9456f22bbe29165194c222f861856efce33ba2d096273c9f4238db8907eba6d094d553859ee0bdb28f3067c190781de1211018a74e8ce10ec4c30cf23b75570b43668fabaf3ace424c9b57630e207896dd774131c110dcb7fcf241eb851be8a79fab10ec2be57e76ec5494a764c213f432b52f49df86cdffc2d46032eafb3992271bd726fb03b1d9ed569987709c3da45d3faabd813a1121b178c78c484c8d9caf2f3f46103a0faaa10c3d0331b28ff237c51c6d0d2b202833366cad7966c36d8bfda8da118473450998e7d44600dd8383cffe8ba3e5670a92de22fa15901e7376dd3ae4a88483918674c0af6d2d116fab8498b1151c473b963b3e70bf45c88dd219ea9108d7652860de57be2ab994e3509959cc67bea2d3f988648219b366aacff0322a4b155cf125f86192c6077d8dcf8579ace6ca307a7c8a9d90ca56bcccf7875fea9c967b517e594f7861a1e646b1bf1440f576faf7235795612f0d4e3a997754d96a0e83f2f09f9f6a879997ac236d3af697c9105c28226d7062d8612266225b40a0ffe47ca149b8c67af5081464175aa4ab3b2e2833d72aa8aa4f2e97d3fbdf75919751bda93348053d724c1dc472ec5cf1e737791cb4295ce4a508809a65f03746a0f9e28f67d8ca033b190967fa7f63376196e98e0d86defb06db075127dc1ddd18c6c9d323595767b139682a2f62dc55c97088c22f0df8843d102e3f4d5c679e86b7e9dde4145830f2367e5e80a008a62017dc673fa85056c37ac0a6c8a01d3a6dcdd8488ec0748e3cbd932082ccfb00d5e1f8f05886a3c1ab0f030b8429801925dcd4bc4101c0c68657cafa569426f30e7768de0c1b8d8cfcab7b9ca3ead26a0cc88eba4550f7e79e0a32753c48eb00a7aec62bcc29a6552d692c8276f2d9d6547ba08d90e4fde87fba82337ec9aacd810ea940ae3bf43cd2014b7bf4c20ade7a7e7bc48b3b39c823e50b0e152da1856e4e4db0eb1fce212519ecc9d45f1741705e23cdb15b8e1ef89a3a35c9aed0be139fbbb7ef99c2c53dce41243f217a66e93a84402795f67b39ab3847fce45d58ef3a77419aafa1a4f44de9976a7572176473129500333fab133047f35bba6a93bfafeb1f49918dbff460c17b075bb28c1a6520744f14ef503346fd90a4534303a27760b76b89d605adb033705a67757f8467686db107f4d1d31bbb87a3363e9c6061720ffab1c1068e142ae4e5e79dfe5837d84735ca454721e0fb14f67051910cdfc1161ec869aa4e49d923a86694005d99d4bf8c5ff0aed2ba38b2fc23d9a406cff82a2a21ae53a54cb10a9369664048d38d0290279d952218b20b9035b880d971a1d25aed6a46175d7f8363ee98b009603fed50", 0x1000}, {&(0x7f0000002300)="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", 0x1000}, {&(0x7f0000003300)="85ad39f7a8591cd2a21f05e75e496e7ee9d7fd46c44a9c8ca85a0689fe841fcb276d17f0d1b978472b50531427543ed4a87666bf639e78ab02d6a82bd7a21a3c18c2191de8114485ac00b9d94698ff845db54aaf9636cadd5fb8da274506599e7b9e5488f74f58f4eadd51f9e90650dcb8dc4960b5202824b6ab79cd0ebd7f311c3ded57350e76ffb85d05c2a5ec39fd6441e7201d947906881a07785d04201ddd1db236c0a16480b37a4675b4570694fc150256a5185ccad719ffccc9bbd598c641210dcd94895f57f7fb4079ea5b44aefd11b0fc63f0d032c366b2cb1ba027722ef925432ebb791a57b954d7920323175c2337017c", 0xf6}, {&(0x7f0000003400)="ec247a9ab92b0480604af27a860bd28fec89caa315fcfd894a4df741b06eadbfb9d79230f6e34d03889e5be4cc82f625db70a77fb19e5ba67d28927d24851745cba62453d19922ff086e33c03da06a0bdb4f9b1b732b2521db2accb0cc1745ca7738", 0x62}], 0x4, &(0x7f0000005000)=ANY=[@ANYBLOB="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"], 0x1490}}, {{&(0x7f0000004980)=@caif, 0x80, &(0x7f0000004d00)=[{&(0x7f0000004a00)="04caa08df13ba6b5c4d14218a5967e2dd2d721bba05cfcd280b267173e43ace85aac32f69d2602550ee89c78a00c0edb2f09d0533982808a7b219d8c37c73d6cf9658f2e0d3abc22787a58d52e6b7549d43291e25e76038d87ee93cef7d6", 0x5e}, {&(0x7f0000004a80)="8216b2c77cc96eb631b99079e4f909320166da4c8df174efbe7be5a5ac0d7c19becd3e028056ba673e9c47069ee5a6111c50be683174642324d509c730fdb599fb83c10bbd142be3b3301cd71f9505ff752815b8f049aab76d4520a4feb683033b7d52c032cc4b8efad86012dc7985c4c4746f8a9cf22761a4e2e40f4e58cf5eee2946864242d8e397fb6933ce751c148818dc3735d0b8710b0e4d6c2702012afbbbc78c2ee6fabc91e3e73bf39ce87f6b98b45a3de235097bce59601eb38e5ce42d9bb8ec30e17aeca89ca1fac3", 0xce}, {&(0x7f0000004b80)="c0fe3a5ab84484e0be91fc1fd5736cec9e6abb5789ce56001d5f8f897efc3efafd8745face348df58122537392c6efe41171825e69d925501971d0c54168fcb90bf068672bda47b74f04ae374082ea94db3c7d6d4ffeccae1c481beffbcf52b3be6ca194dbbf382f012102a1e919c69b5d122ca4a7226e168cacffa4ad9f1058530573f5ed57c97638fd8f1c74f620a1f417659c69160bf468d97756ceb617117b4e330023163176f3501829", 0xac}, {&(0x7f0000004c40)="db5ebb99d01ec9f478a7889be2a4cf6c96d551e27f99bda412be69c9d57ffc41a619ebd7a8ace9e505ea1bb3bab5e44c7d4fa5b6b72d9bc156d4c6863a351c923c1dbd1b624195a4621583d69cc99544749ad9d96e30e4839f757c20d6b6f200641553d1925bc3408a21a1cc37354ae13380e75b19d6209ea5b7938c9ce883c6de87efc2ebb09206cf0d27b9d2a1649e11a0b1ce7e31ea8b8c6858b47dae9c142eb0a8176bbd39c2e32fef11bc126f8bbae814", 0xb3}], 0x4}}, {{&(0x7f0000004d40)=@ax25={{0x3, @default, 0x7}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000004dc0)="587dbc882f322f1101e58383450f7c22260b1b823c63a4888207b1e18825a6f7877c41a5561059d587da0e8584d2e774e54f7ece8abb8b55cebefaeefed03e730399c6ec0e3442eec9816eb8", 0x4c}, {&(0x7f0000004e40)="caf057e10ef7ab7c71d52f96895fdb7f726abbd1db205364562a258f1a693eb91fc9cf10d78302bc969ab6e7a3ffc0f9e007aca75a0d89a33a874624d1", 0x3d}, {&(0x7f0000004e80)="846dbb211b1c46147b7e08a94b95f3cb7a19414c88a14acccf4fd88ec9ce395f469dfb0d15411492", 0x28}], 0x3, &(0x7f0000004f00)=ANY=[@ANYBLOB="40000000000000001901000009000000a521ba0ed4286d456d61fd48cbad599eff5fabd73428095277b28a48d40deb000000"], 0x40}}], 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) 1.265365725s ago: executing program 3 (id=3688): socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x5) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe(&(0x7f0000000000)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x42, 0x100) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x80000000000008}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 971.528992ms ago: executing program 2 (id=3689): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000680)}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 794.184318ms ago: executing program 2 (id=3690): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$loop(0x0, 0x8, 0x101002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x45}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000080}, 0x4042) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}]) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4010) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=0x40) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}, @RTA_OIF={0x8, 0x4, r9}]}, 0x38}, 0x1, 0x11}, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r10, r10, 0x0, 0x40008) 395.996119ms ago: executing program 3 (id=3691): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1a, 0x41c}}}, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 961.271µs ago: executing program 2 (id=3692): ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$loop(0x0, 0x8, 0x101002) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x2, 0x6, 0xb05, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x45}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x10000080}, 0x4042) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="fc", 0x7}]) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4010) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r9 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r9, 0x402, 0x8000003d) getsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@ipv6_newroute={0x38, 0x18, 0x1ef, 0x70bd2b, 0x0, {0xa, 0x20, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}, @RTA_OIF={0x8, 0x4, r8}]}, 0x38}, 0x1, 0x11}, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r10, r10, 0x0, 0x40008) 0s ago: executing program 7 (id=3693): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioperm(0x5, 0x6, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40008c0}, 0x8040) socket(0x2, 0x80805, 0x0) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) read$FUSE(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): /TASK> [ 1378.557884][T19737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1378.922380][T19737] comedi comedi3: pcl818: I/O base address or length out of range [ 1379.038469][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3346'. [ 1379.436574][T19751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3349'. [ 1382.593843][T19776] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1382.600354][T19776] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1382.659924][T19776] vhci_hcd vhci_hcd.0: Device attached [ 1382.744686][T19777] vhci_hcd: connection closed [ 1382.745934][ T1025] vhci_hcd vhci_hcd.3: stop threads [ 1382.787772][ T1025] vhci_hcd vhci_hcd.3: release socket [ 1382.820716][ T1025] vhci_hcd vhci_hcd.3: disconnect device [ 1383.289972][T19786] binder: BINDER_SET_CONTEXT_MGR already set [ 1383.296195][T19786] binder: 19783:19786 ioctl 4018620d 200000004a80 returned -16 [ 1383.630470][T19790] binder: BINDER_SET_CONTEXT_MGR already set [ 1383.636602][T19790] binder: 19788:19790 ioctl 4018620d 200000004a80 returned -16 [ 1384.100919][T19174] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1384.385858][T19174] usb 7-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1384.413067][T19174] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1384.431406][T19174] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1384.454471][T19174] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1384.509224][T19174] usb 7-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1384.533946][T19174] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.556691][T19174] usb 7-1: Product: syz [ 1384.568885][T19174] usb 7-1: Manufacturer: syz [ 1384.582836][T19174] usb 7-1: SerialNumber: syz [ 1384.690749][ T5718] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1384.874089][ T5718] usb 2-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1384.879614][T19784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.927827][ T5718] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1384.951118][T19784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.966753][ T5718] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1385.015844][ T5718] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1385.062532][ T5718] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1385.088062][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.096890][T19801] syz.5.3361 (19801): drop_caches: 2 [ 1385.116456][ T5718] usb 2-1: Product: syz [ 1385.134161][ T5718] usb 2-1: Manufacturer: syz [ 1385.150551][ T5718] usb 2-1: SerialNumber: syz [ 1385.210685][T19174] usb 7-1: USB disconnect, device number 2 [ 1385.618787][T19798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.638357][T19798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.684602][ T5718] usb 2-1: USB disconnect, device number 51 [ 1385.889845][T19821] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1385.909958][ T30] audit: type=1400 audit(1780197672.945:505): avc: denied { create } for pid=19820 comm="syz.6.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1386.296284][T19816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.303907][T19816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.455990][ T30] audit: type=1400 audit(1780197673.495:506): avc: denied { ioctl } for pid=19836 comm="syz.3.3367" path="socket:[86381]" dev="sockfs" ino=86381 ioctlcmd=0x54a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1386.485295][T19816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.507544][T19816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1386.546009][T19840] random: crng reseeded on system resumption [ 1387.170870][T13032] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.218011][T13032] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.301532][T13032] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.444089][T13032] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.480762][T12133] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1388.489475][T19174] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1388.650692][T12133] usb 4-1: Using ep0 maxpacket: 8 [ 1388.657615][T12133] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1388.810196][T12133] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1388.819201][T12133] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1388.831030][T12133] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1388.843162][T12133] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1388.858575][T19174] usb 6-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1388.870415][T12133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.882279][T19174] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1389.210770][T19174] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1389.221752][T19174] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1389.236595][T12133] hub 4-1:1.0: bad descriptor, ignoring hub [ 1389.251360][T19174] usb 6-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1389.587139][T12133] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1389.598122][T12133] cdc_wdm 4-1:1.0: skipping garbage [ 1389.604989][T19854] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1389.607323][T19174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.632207][T12133] cdc_wdm 4-1:1.0: skipping garbage [ 1389.649124][T12133] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1389.661536][T19174] usb 6-1: Product: syz [ 1389.670991][T19174] usb 6-1: Manufacturer: syz [ 1389.677631][T12133] cdc_wdm 4-1:1.0: Unknown control protocol [ 1389.693873][T19174] usb 6-1: SerialNumber: syz [ 1389.749517][T19857] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3374'. [ 1389.770293][T19857] IPVS: Unknown mcast interface: vcan0 [ 1389.887261][T19873] binder: BINDER_SET_CONTEXT_MGR already set [ 1389.894532][T19873] binder: 19868:19873 ioctl 4018620d 200000004a80 returned -16 [ 1390.162476][T19844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.178050][T19876] FAULT_INJECTION: forcing a failure. [ 1390.178050][T19876] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.205409][T19876] CPU: 1 UID: 0 PID: 19876 Comm: syz.2.3378 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.205434][T19876] Tainted: [L]=SOFTLOCKUP [ 1390.205438][T19876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1390.205445][T19876] Call Trace: [ 1390.205449][T19876] [ 1390.205455][T19876] dump_stack_lvl+0x100/0x190 [ 1390.205472][T19876] should_fail_ex.cold+0x5/0xa [ 1390.205490][T19876] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1390.205507][T19876] should_failslab+0xc2/0x120 [ 1390.205519][T19876] __kmalloc_noprof+0xe0/0x850 [ 1390.205535][T19876] ? kfree+0x1dd/0x6c0 [ 1390.205550][T19876] tomoyo_realpath_from_path+0xb6/0x690 [ 1390.205570][T19876] tomoyo_path_number_perm+0x23c/0x580 [ 1390.205586][T19876] ? tomoyo_path_number_perm+0x22e/0x580 [ 1390.205602][T19876] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1390.205630][T19876] ? find_held_lock+0x2b/0x80 [ 1390.205639][T19876] ? __fget_files+0x215/0x3d0 [ 1390.205652][T19876] ? hook_file_ioctl_common+0x149/0x410 [ 1390.205663][T19876] ? __fget_files+0x215/0x3d0 [ 1390.205678][T19876] ? __fget_files+0x21f/0x3d0 [ 1390.205693][T19876] security_file_ioctl+0xd3/0x230 [ 1390.205710][T19876] __x64_sys_ioctl+0xb7/0x210 [ 1390.205723][T19876] do_syscall_64+0x115/0x870 [ 1390.205737][T19876] ? clear_bhb_loop+0x40/0x90 [ 1390.205751][T19876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.205762][T19876] RIP: 0033:0x7f555af9ce59 [ 1390.205772][T19876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.205783][T19876] RSP: 002b:00007f555be7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1390.205794][T19876] RAX: ffffffffffffffda RBX: 00007f555b215fa0 RCX: 00007f555af9ce59 [ 1390.205801][T19876] RDX: 0000000000000000 RSI: 00000000800448d5 RDI: 0000000000000004 [ 1390.205808][T19876] RBP: 00007f555be7e090 R08: 0000000000000000 R09: 0000000000000000 [ 1390.205814][T19876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1390.205820][T19876] R13: 00007f555b216038 R14: 00007f555b215fa0 R15: 00007fffaff031d8 [ 1390.205834][T19876] [ 1390.205851][T19876] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1390.226793][ T5718] usb 4-1: USB disconnect, device number 64 [ 1390.261627][T19844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.549347][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 1390.564334][T19878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3379'. [ 1390.603315][T19174] usb 6-1: USB disconnect, device number 4 [ 1392.790709][ T1343] bridge_slave_1: left allmulticast mode [ 1393.021311][ T1343] bridge_slave_1: left promiscuous mode [ 1393.029224][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.070369][ T1343] bridge_slave_0: left allmulticast mode [ 1393.370150][ T1343] bridge_slave_0: left promiscuous mode [ 1393.396857][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.566581][T19909] binder: BINDER_SET_CONTEXT_MGR already set [ 1393.573333][T19909] binder: 19905:19909 ioctl 4018620d 200000004a80 returned -16 [ 1394.637829][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.660088][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.679820][ T1343] bond0 (unregistering): Released all slaves [ 1394.710382][ T1343] bond1 (unregistering): Released all slaves [ 1394.752618][ T1343] bond2 (unregistering): Released all slaves [ 1394.791796][ T1343] bond3 (unregistering): Released all slaves [ 1394.800732][ T5718] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1394.840538][ T1343] bond4 (unregistering): Released all slaves [ 1394.862613][T19174] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1394.973511][ T5718] usb 6-1: Using ep0 maxpacket: 8 [ 1395.018136][ T5718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.039149][T19174] usb 3-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1395.051200][ T5718] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1395.083954][ T1343] tipc: Left network mode [ 1395.087373][T19174] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1395.092581][ T5718] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1395.127653][T19174] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1395.207646][ T5718] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1395.255954][ T5718] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1395.286705][ T5718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.291403][T19174] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1395.409848][ T5718] hub 6-1:1.0: bad descriptor, ignoring hub [ 1395.432700][ T5718] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1395.465616][ T5718] cdc_wdm 6-1:1.0: skipping garbage [ 1395.471122][ T5718] cdc_wdm 6-1:1.0: skipping garbage [ 1395.486714][T19174] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1395.512253][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3392'. [ 1395.525967][ T5718] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1395.552897][T19931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3392'. [ 1395.562522][ T5718] cdc_wdm 6-1:1.0: Unknown control protocol [ 1395.581498][T19174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.640209][T19924] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1395.656272][T19174] usb 3-1: Product: syz [ 1395.690026][T19174] usb 3-1: Manufacturer: syz [ 1395.705571][T19174] usb 3-1: SerialNumber: syz [ 1395.717063][ T1343] hsr_slave_0: left promiscuous mode [ 1395.782168][ T1343] hsr_slave_1: left promiscuous mode [ 1395.817237][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.862567][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.114339][T19941] FAULT_INJECTION: forcing a failure. [ 1396.114339][T19941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1396.127592][T19941] CPU: 0 UID: 0 PID: 19941 Comm: syz.6.3393 Tainted: G L syzkaller #0 PREEMPT(full) [ 1396.127620][T19941] Tainted: [L]=SOFTLOCKUP [ 1396.127627][T19941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1396.127637][T19941] Call Trace: [ 1396.127643][T19941] [ 1396.127650][T19941] dump_stack_lvl+0x100/0x190 [ 1396.127680][T19941] should_fail_ex.cold+0x5/0xa [ 1396.127705][T19941] _copy_from_user+0x2e/0xd0 [ 1396.127728][T19941] xsk_setsockopt+0x8c7/0xab0 [ 1396.127749][T19941] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1396.127767][T19941] ? find_held_lock+0x2b/0x80 [ 1396.127783][T19941] ? __fget_files+0x215/0x3d0 [ 1396.127808][T19941] ? selinux_socket_setsockopt+0x6a/0x80 [ 1396.127834][T19941] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1396.127854][T19941] do_sock_setsockopt+0xf3/0x1d0 [ 1396.127878][T19941] __sys_setsockopt+0x195/0x220 [ 1396.127909][T19941] __x64_sys_setsockopt+0xbd/0x160 [ 1396.127933][T19941] ? do_syscall_64+0x90/0x870 [ 1396.127955][T19941] ? lockdep_hardirqs_on+0x78/0x100 [ 1396.127979][T19941] do_syscall_64+0x115/0x870 [ 1396.128001][T19941] ? clear_bhb_loop+0x40/0x90 [ 1396.128023][T19941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1396.128041][T19941] RIP: 0033:0x7f37a259ce59 [ 1396.128056][T19941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1396.128073][T19941] RSP: 002b:00007f37a07f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1396.128090][T19941] RAX: ffffffffffffffda RBX: 00007f37a2816090 RCX: 00007f37a259ce59 [ 1396.128102][T19941] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 1396.128113][T19941] RBP: 00007f37a07f6090 R08: 0000000000000020 R09: 0000000000000000 [ 1396.128124][T19941] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 1396.128134][T19941] R13: 00007f37a2816128 R14: 00007f37a2816090 R15: 00007ffe0a05f128 [ 1396.128157][T19941] [ 1396.579971][T19921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.987027][T19921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.055827][T19174] usb 3-1: USB disconnect, device number 50 [ 1397.924595][ T1343] team0 (unregistering): Port device team_slave_1 removed [ 1398.049915][ T1343] team0 (unregistering): Port device team_slave_0 removed [ 1398.398348][ T10] usb 6-1: USB disconnect, device number 5 [ 1399.664582][T19972] binder: BINDER_SET_CONTEXT_MGR already set [ 1399.670758][T19972] binder: 19969:19972 ioctl 4018620d 200000004a80 returned -16 [ 1401.229542][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'. [ 1401.251087][T19998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'. [ 1401.632036][T20010] FAULT_INJECTION: forcing a failure. [ 1401.632036][T20010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.661865][T20010] CPU: 0 UID: 0 PID: 20010 Comm: syz.2.3407 Tainted: G L syzkaller #0 PREEMPT(full) [ 1401.661895][T20010] Tainted: [L]=SOFTLOCKUP [ 1401.661902][T20010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1401.661912][T20010] Call Trace: [ 1401.661924][T20010] [ 1401.661932][T20010] dump_stack_lvl+0x100/0x190 [ 1401.661958][T20010] should_fail_ex.cold+0x5/0xa [ 1401.661983][T20010] strncpy_from_user+0x3b/0x2d0 [ 1401.662005][T20010] ? get_pid_task+0x106/0x250 [ 1401.662028][T20010] path_setxattrat+0x127/0x3b0 [ 1401.662055][T20010] ? __pfx_path_setxattrat+0x10/0x10 [ 1401.662104][T20010] ? fput+0x79/0x100 [ 1401.662128][T20010] ? ksys_write+0x1ac/0x250 [ 1401.662147][T20010] ? __pfx_ksys_write+0x10/0x10 [ 1401.662170][T20010] __x64_sys_fsetxattr+0xc5/0x140 [ 1401.662196][T20010] ? do_syscall_64+0x90/0x870 [ 1401.662219][T20010] ? lockdep_hardirqs_on+0x78/0x100 [ 1401.662242][T20010] do_syscall_64+0x115/0x870 [ 1401.662264][T20010] ? clear_bhb_loop+0x40/0x90 [ 1401.662285][T20010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.662303][T20010] RIP: 0033:0x7f555af9ce59 [ 1401.662319][T20010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.662336][T20010] RSP: 002b:00007f555be7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 1401.662354][T20010] RAX: ffffffffffffffda RBX: 00007f555b215fa0 RCX: 00007f555af9ce59 [ 1401.662366][T20010] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 1401.662377][T20010] RBP: 00007f555be7e090 R08: 0000000000000001 R09: 0000000000000000 [ 1401.662388][T20010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.662398][T20010] R13: 00007f555b216038 R14: 00007f555b215fa0 R15: 00007fffaff031d8 [ 1401.662421][T20010] [ 1402.065832][T20016] binder: BINDER_SET_CONTEXT_MGR already set [ 1402.072011][T20016] binder: 20014:20016 ioctl 4018620d 200000004a80 returned -16 [ 1402.197027][T17621] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1402.460658][ T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1402.482061][T17621] usb 6-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1402.495749][T17621] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1402.523907][T17621] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1402.554377][T17621] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1402.594866][T17621] usb 6-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1402.620242][T17621] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.635290][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.648494][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1402.666877][T17621] usb 6-1: Product: syz [ 1402.679843][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.688388][T17621] usb 6-1: Manufacturer: syz [ 1402.694134][T20022] gfs2: not a GFS2 filesystem [ 1402.700970][T17621] usb 6-1: SerialNumber: syz [ 1402.713785][ T10] usb 2-1: config 0 descriptor?? [ 1403.016997][T20025] binder: BINDER_SET_CONTEXT_MGR already set [ 1403.024107][T20025] binder: 20023:20025 ioctl 4018620d 200000004a80 returned -16 [ 1403.239918][T20013] lo speed is unknown, defaulting to 1000 [ 1403.251826][T20013] lo speed is unknown, defaulting to 1000 [ 1403.261231][T20013] lo speed is unknown, defaulting to 1000 [ 1403.274513][T20013] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1403.311494][T20013] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1403.329788][T20013] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1403.381451][T19174] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1403.830627][T19174] usb 7-1: Using ep0 maxpacket: 8 [ 1403.840039][T19174] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1403.848742][T19174] usb 7-1: config 179 has no interface number 0 [ 1403.859569][T19174] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1404.225019][T19174] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1404.236782][T19174] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1404.270712][T19174] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1404.298700][T19174] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1404.321730][T20013] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1404.329186][T19174] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1404.447885][T19174] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.553463][T20029] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1405.960853][T20042] lo speed is unknown, defaulting to 1000 [ 1406.057445][T20006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.079056][T12133] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input20 [ 1406.128485][ T30] audit: type=1400 audit(1780197693.165:507): avc: denied { read } for pid=4970 comm="acpid" name="js0" dev="devtmpfs" ino=3571 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1406.773556][T20006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.794052][T17621] usb 6-1: USB disconnect, device number 6 [ 1406.816977][ T30] audit: type=1400 audit(1780197693.165:508): avc: denied { open } for pid=4970 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3571 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1406.904732][ T30] audit: type=1400 audit(1780197693.165:509): avc: denied { ioctl } for pid=4970 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=3571 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1407.054801][ T30] audit: type=1400 audit(1780197694.095:510): avc: denied { write } for pid=20052 comm="syz.5.3419" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1407.185376][T20013] lo speed is unknown, defaulting to 1000 [ 1407.210664][ T30] audit: type=1400 audit(1780197694.245:511): avc: denied { ioctl } for pid=20052 comm="syz.5.3419" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1407.273819][T20013] lo speed is unknown, defaulting to 1000 [ 1407.298319][T20013] lo speed is unknown, defaulting to 1000 [ 1407.328718][T20013] lo speed is unknown, defaulting to 1000 [ 1407.367759][T20013] lo speed is unknown, defaulting to 1000 [ 1407.418248][T20013] lo speed is unknown, defaulting to 1000 [ 1407.440287][T20013] lo speed is unknown, defaulting to 1000 [ 1407.470209][T20013] lo speed is unknown, defaulting to 1000 [ 1407.518631][T20013] lo speed is unknown, defaulting to 1000 [ 1407.632859][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1407.638963][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1407.778632][ T10] usb 2-1: USB disconnect, device number 52 [ 1408.478982][T12133] usb 7-1: USB disconnect, device number 3 [ 1408.484859][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1408.484884][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1408.956757][T20076] IPv6: Can't replace route, no match found [ 1409.090000][T20072] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1409.268462][ T4934] Bluetooth: hci3: command 0x0406 tx timeout [ 1409.540759][T17621] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1409.692758][T17621] usb 7-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1409.720687][ T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1409.730748][T17621] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1409.764037][T17621] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1409.792477][T17621] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1409.824127][T17621] usb 7-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1409.841406][T17621] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.850681][T17621] usb 7-1: Product: syz [ 1409.854894][T17621] usb 7-1: Manufacturer: syz [ 1409.859556][T17621] usb 7-1: SerialNumber: syz [ 1409.890744][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 1409.897499][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1409.908164][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1409.917225][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1409.929454][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1409.941091][ T10] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1409.950229][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.970936][ T29] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1409.985655][ T10] hub 2-1:1.0: bad descriptor, ignoring hub [ 1410.003406][ T10] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1410.026859][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1410.040706][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 1410.051859][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1410.058083][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 1410.100185][T20077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.110440][T20077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.140666][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 1410.154407][ T29] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.161634][T17621] usb 7-1: USB disconnect, device number 4 [ 1410.188039][ T29] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1410.203905][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1410.230965][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1410.250618][ T29] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1410.269695][T20087] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1410.270650][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.293192][ T29] hub 4-1:1.0: bad descriptor, ignoring hub [ 1410.310622][ T29] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1410.318054][ T29] cdc_wdm 4-1:1.0: skipping garbage [ 1410.330605][ T29] cdc_wdm 4-1:1.0: skipping garbage [ 1410.374869][ T29] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 1410.393797][ T29] cdc_wdm 4-1:1.0: Unknown control protocol [ 1410.532499][ T10] usb 2-1: USB disconnect, device number 53 [ 1410.538495][T20084] cdc_wdm 2-1:1.0: Error autopm - -16 [ 1410.563472][T20084] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1410.852192][T17621] usb 4-1: USB disconnect, device number 65 [ 1411.011841][T20094] IPv6: NLM_F_CREATE should be specified when creating new route [ 1411.021394][T20094] IPv6: Can't replace route, no match found [ 1411.380803][ T29] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1411.570743][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 1411.584256][ T29] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1411.599708][ T29] usb 7-1: config 179 has no interface number 0 [ 1411.612750][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1411.645024][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1411.672811][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1411.691214][ T29] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1411.702731][ T29] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1411.723118][ T29] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1411.746298][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.761796][T20096] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1411.980665][T17621] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1412.150687][T17621] usb 6-1: Using ep0 maxpacket: 8 [ 1412.159004][T17621] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.193342][T17621] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1412.203108][T17621] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1412.223549][T17621] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1412.325640][T17621] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1412.409361][T17621] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.505271][ T29] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input21 [ 1412.541198][T17621] hub 6-1:1.0: bad descriptor, ignoring hub [ 1412.662416][T17621] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1412.779462][T20099] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1412.838039][T17621] cdc_wdm 6-1:1.0: skipping garbage [ 1412.971835][T17621] cdc_wdm 6-1:1.0: skipping garbage [ 1413.040951][T17621] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1413.131541][T17621] cdc_wdm 6-1:1.0: Unknown control protocol [ 1413.320753][ T5351] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1413.482580][T20119] binder: BINDER_SET_CONTEXT_MGR already set [ 1413.488692][T20119] binder: 20117:20119 ioctl 4018620d 200000004a80 returned -16 [ 1413.841944][ T5351] usb 2-1: not running at top speed; connect to a high speed hub [ 1413.857901][ T5351] usb 2-1: config 45 has an invalid interface number: 2 but max is 0 [ 1413.869660][ T5351] usb 2-1: config 45 has no interface number 0 [ 1413.892443][ T5351] usb 2-1: config 45 interface 2 has no altsetting 0 [ 1413.915394][ T5351] usb 2-1: language id specifier not provided by device, defaulting to English [ 1413.942154][ T5351] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 1413.964299][ T5351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.974170][ T5351] usb 2-1: Product: 剰吉䫲ᙿ겉⿃눊礦숊姸曱慩貭䓋챺༗撵彪蝑眡•毭曐떔咗龚⛻㻛賜擐핅ꡊ蕉緶読錦덪䷂ጢ턌椏외⨯閞夢 [ 1413.994274][ T5351] usb 2-1: SerialNumber: 鯄㊻ⓩ畄⠅ᅙ吣ᣲꗜߍͷ퐈卑⇇謞鈀།꿜퇃䦞甥뿮ᭆ皀遆？챒溿ຉ嚀뺜詚ꁴꅑ⡙峥㔭歐£㷲⋱IJ랔授남櫚韾癳걟寸Ͽงࣳ៭ꨏ渴ꘞ軵镄ﻙ̅⠖㳄鼲䝹䋄筋蹲錭믑䭨売䍈訹弞埣⠠苆粅䒦㰧︽뛒醻㏹ [ 1414.297338][ T5800] usb 7-1: USB disconnect, device number 5 [ 1414.297341][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1414.297384][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1414.638720][T20127] IPv6: Can't replace route, no match found [ 1414.871564][ T29] usb 6-1: USB disconnect, device number 7 [ 1415.823776][ T5351] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1415.851808][ T5351] dvb-usb: bulk message failed: -22 (3/0) [ 1415.904294][ T5351] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1415.919871][ T5351] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1415.953323][ T5351] usb 2-1: media controller created [ 1415.967760][ T5351] dvb-usb: bulk message failed: -22 (5/0) [ 1415.976389][ T5351] dvb-usb: MAC address reading failed. [ 1415.984530][ T5351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1416.281226][T20142] lo speed is unknown, defaulting to 1000 [ 1417.412005][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.418341][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1418.237273][ T5351] dvb-usb: bulk message failed: -22 (6/0) [ 1418.243888][ T5351] dvb-usb: bulk message failed: -22 (6/0) [ 1418.250474][ T5351] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1418.263176][ T5351] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 1418.279297][ T5351] dvb-usb: schedule remote query interval to 100 msecs. [ 1418.286420][ T5351] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1418.407042][T17621] dvb-usb: bulk message failed: -22 (2/0) [ 1418.424649][ T5351] usb 2-1: USB disconnect, device number 54 [ 1418.435984][T17621] dvb-usb: error while querying for an remote control event. [ 1418.953023][ T5351] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1419.124658][T17621] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1419.254658][ T1014] bridge_slave_1: left allmulticast mode [ 1419.273581][ T1014] bridge_slave_1: left promiscuous mode [ 1419.291128][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.314460][T17621] usb 4-1: Using ep0 maxpacket: 8 [ 1419.336859][T17621] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.338240][ T1014] bridge_slave_0: left allmulticast mode [ 1419.368596][T20180] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1419.375127][T20180] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1419.383382][T17621] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1419.388080][ T1014] bridge_slave_0: left promiscuous mode [ 1419.406645][T20180] vhci_hcd vhci_hcd.0: Device attached [ 1419.410157][T17621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1419.413140][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.439453][T17621] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1419.453989][T17621] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1419.463626][T17621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.479705][T17621] hub 4-1:1.0: bad descriptor, ignoring hub [ 1419.488133][T20182] vhci_hcd: connection closed [ 1419.488577][ T1343] vhci_hcd vhci_hcd.6: stop threads [ 1419.511758][ T1343] vhci_hcd vhci_hcd.6: release socket [ 1419.520636][T17621] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1419.538772][ T1343] vhci_hcd vhci_hcd.6: disconnect device [ 1419.563518][T17621] cdc_wdm 4-1:1.0: skipping garbage [ 1419.575041][T17621] cdc_wdm 4-1:1.0: skipping garbage [ 1419.586507][T17621] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1419.594754][T17621] cdc_wdm 4-1:1.0: Unknown control protocol [ 1419.640635][T12133] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1419.729763][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.741399][T20191] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1419.748461][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.759623][ T1014] bond0 (unregistering): Released all slaves [ 1419.778464][ T1014] bond1 (unregistering): Released all slaves [ 1419.795727][ T1014] bond2 (unregistering): Released all slaves [ 1419.800680][T18042] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1419.830627][T12133] usb 3-1: Using ep0 maxpacket: 8 [ 1419.838917][T12133] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1419.860640][T12133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.896429][T12133] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1419.924368][T12133] pvrusb2: ********** [ 1419.936856][T12133] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1419.952448][ T1014] tipc: Left network mode [ 1419.967990][T12133] pvrusb2: Important functionality might not be entirely working. [ 1419.984407][T18042] usb 6-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1419.996335][T12133] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1420.023398][T18042] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1420.046389][T12133] pvrusb2: ********** [ 1420.057997][T18042] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1420.149090][T18042] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1420.207285][ T2364] pvrusb2: Invalid write control endpoint [ 1420.255555][T12133] usb 3-1: USB disconnect, device number 51 [ 1420.281140][T18042] usb 6-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1420.369347][T18042] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.581045][T18042] usb 6-1: Product: syz [ 1420.619534][T18042] usb 6-1: Manufacturer: syz [ 1420.661114][T18042] usb 6-1: SerialNumber: syz [ 1421.514160][ T2364] pvrusb2: Invalid write control endpoint [ 1421.546888][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1421.595141][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1421.634555][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1421.659557][T20189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1421.796931][ T2364] pvrusb2: Device being rendered inoperable [ 1421.989600][ T5351] usb 4-1: USB disconnect, device number 66 [ 1421.989959][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1422.017298][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1422.044668][T20189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.069502][ T2364] pvrusb2: Attached sub-driver cx25840 [ 1422.105975][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1422.124010][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1422.856667][ T30] audit: type=1400 audit(1780197709.845:512): avc: denied { setopt } for pid=20214 comm="syz.3.3463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1422.928530][T18042] usb 6-1: USB disconnect, device number 8 [ 1422.979125][T20209] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1423.301812][ T1014] hsr_slave_0: left promiscuous mode [ 1423.309846][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'. [ 1423.435057][ T1014] hsr_slave_1: left promiscuous mode [ 1423.450620][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3467'. [ 1423.464923][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.884830][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1424.098042][T20238] binder: BINDER_SET_CONTEXT_MGR already set [ 1424.104281][T20238] binder: 20236:20238 ioctl 4018620d 200000004a80 returned -16 [ 1424.586887][T20243] IPv6: NLM_F_CREATE should be specified when creating new route [ 1424.751794][ T1014] team0 (unregistering): Port device team_slave_1 removed [ 1424.767179][ T1014] team0 (unregistering): Port device team_slave_0 removed [ 1427.418752][T20255] lo speed is unknown, defaulting to 1000 [ 1427.848072][ T5719] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1428.231152][ T5719] usb 3-1: Using ep0 maxpacket: 8 [ 1428.253841][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.279853][ T5719] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1428.297136][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1428.330645][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1428.361169][ T5719] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1428.386756][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.449690][ T5719] hub 3-1:1.0: bad descriptor, ignoring hub [ 1428.462883][ T5719] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1428.484118][ T5719] cdc_wdm 3-1:1.0: skipping garbage [ 1428.500492][ T5719] cdc_wdm 3-1:1.0: skipping garbage [ 1428.529312][ T5719] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1428.563281][ T5719] cdc_wdm 3-1:1.0: Unknown control protocol [ 1428.885344][T20281] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1429.189126][T20284] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1429.195660][T20284] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1429.288316][T20284] vhci_hcd vhci_hcd.0: Device attached [ 1429.590375][T20285] vhci_hcd: connection closed [ 1429.590614][ T6944] vhci_hcd vhci_hcd.1: stop threads [ 1429.600668][ T6944] vhci_hcd vhci_hcd.1: release socket [ 1429.600763][ T5719] usb 36-1: SetAddress Request (19) to port 0 [ 1429.613310][ T6944] vhci_hcd vhci_hcd.1: disconnect device [ 1429.633428][ T5719] usb 36-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1429.690843][ T5719] usb 36-1: enqueue for inactive port 0 [ 1429.800820][T12133] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1429.976538][T12133] usb 6-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1430.014713][T12133] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1430.065742][T12133] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1430.117260][ T5719] usb usb36-port1: attempt power cycle [ 1430.128032][T12133] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1430.200511][T12133] usb 6-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1430.225471][T12133] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.241653][T12133] usb 6-1: Product: syz [ 1430.245984][T12133] usb 6-1: Manufacturer: syz [ 1430.250923][T12133] usb 6-1: SerialNumber: syz [ 1431.021783][T12133] usb 6-1: USB disconnect, device number 9 [ 1431.240946][ T5351] usb 3-1: USB disconnect, device number 52 [ 1431.300450][ T5719] usb usb36-port1: unable to enumerate USB device [ 1431.345332][T20308] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1431.351877][T20308] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1431.364231][ T5718] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1431.387315][T20308] vhci_hcd vhci_hcd.0: Device attached [ 1432.650682][T17621] usb 36-1: SetAddress Request (23) to port 0 [ 1432.658217][T17621] usb 36-1: new SuperSpeed USB device number 23 using vhci_hcd [ 1432.752108][ T5718] usb 7-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1432.762483][ T5718] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1432.781137][ T5718] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1432.825781][ T5718] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1432.874250][ T5718] usb 7-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1432.897987][T20311] vhci_hcd: connection reset by peer [ 1432.925997][ T5718] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.935057][ T57] vhci_hcd vhci_hcd.1: stop threads [ 1432.947732][ T57] vhci_hcd vhci_hcd.1: release socket [ 1432.953068][ T5718] usb 7-1: Product: syz [ 1432.983818][ T57] vhci_hcd vhci_hcd.1: disconnect device [ 1432.993373][ T5718] usb 7-1: Manufacturer: syz [ 1433.256386][ T5718] usb 7-1: SerialNumber: syz [ 1433.446175][T20328] FAULT_INJECTION: forcing a failure. [ 1433.446175][T20328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1433.459286][T20328] CPU: 1 UID: 0 PID: 20328 Comm: syz.3.3489 Tainted: G L syzkaller #0 PREEMPT(full) [ 1433.459312][T20328] Tainted: [L]=SOFTLOCKUP [ 1433.459319][T20328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1433.459329][T20328] Call Trace: [ 1433.459335][T20328] [ 1433.459343][T20328] dump_stack_lvl+0x100/0x190 [ 1433.459367][T20328] should_fail_ex.cold+0x5/0xa [ 1433.459393][T20328] _copy_from_user+0x2e/0xd0 [ 1433.459420][T20328] snd_seq_oss_write+0x395/0x800 [ 1433.459444][T20328] ? rcu_is_watching+0x12/0xc0 [ 1433.459474][T20328] ? irqentry_exit+0x24d/0x970 [ 1433.459497][T20328] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1433.459522][T20328] ? __pfx_odev_write+0x10/0x10 [ 1433.459548][T20328] ? __pfx_odev_write+0x10/0x10 [ 1433.459565][T20328] odev_write+0x51/0xa0 [ 1433.459584][T20328] vfs_writev+0x5ea/0xe10 [ 1433.459610][T20328] ? __pfx_vfs_writev+0x10/0x10 [ 1433.459628][T20328] ? find_held_lock+0x2b/0x80 [ 1433.459645][T20328] ? ksys_write+0x190/0x250 [ 1433.459677][T20328] ? __fget_files+0x21f/0x3d0 [ 1433.459706][T20328] ? do_writev+0x13e/0x340 [ 1433.459722][T20328] do_writev+0x13e/0x340 [ 1433.459742][T20328] ? __pfx_do_writev+0x10/0x10 [ 1433.459758][T20328] ? exit_to_user_mode_loop+0xf3/0x670 [ 1433.459782][T20328] ? rcu_is_watching+0x12/0xc0 [ 1433.459811][T20328] do_syscall_64+0x115/0x870 [ 1433.459833][T20328] ? clear_bhb_loop+0x40/0x90 [ 1433.459854][T20328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.459872][T20328] RIP: 0033:0x7facfe19ce59 [ 1433.459888][T20328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.459905][T20328] RSP: 002b:00007facff0c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1433.459922][T20328] RAX: ffffffffffffffda RBX: 00007facfe416180 RCX: 00007facfe19ce59 [ 1433.459934][T20328] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 1433.459945][T20328] RBP: 00007facff0c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1433.459955][T20328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.459966][T20328] R13: 00007facfe416218 R14: 00007facfe416180 R15: 00007fff6e8e8eb8 [ 1433.459989][T20328] [ 1433.638611][ T5718] usb 7-1: USB disconnect, device number 6 [ 1434.200722][ T5719] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1434.351716][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 1434.490353][T20348] lo speed is unknown, defaulting to 1000 [ 1435.222972][ T5719] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1435.249052][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.262490][ T5719] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1435.269855][ T5719] pvrusb2: ********** [ 1435.620024][ T5719] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1435.654027][ T5719] pvrusb2: Important functionality might not be entirely working. [ 1435.679054][ T5719] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1435.708975][ T5351] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1435.726743][ T5719] pvrusb2: ********** [ 1435.743322][ T2364] pvrusb2: Invalid write control endpoint [ 1435.752004][ T5719] usb 2-1: USB disconnect, device number 55 [ 1435.874322][ T2364] pvrusb2: Invalid write control endpoint [ 1435.880603][ T5351] usb 6-1: Using ep0 maxpacket: 8 [ 1435.892957][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1435.912226][ T5351] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1435.931350][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1435.950641][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1435.950655][ T5351] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.978842][ T2364] pvrusb2: Device being rendered inoperable [ 1435.999888][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1436.020180][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1436.039705][ T2364] pvrusb2: Attached sub-driver cx25840 [ 1436.059421][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1436.077764][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1436.103908][ T5351] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1436.119302][ T5351] pvrusb2: ********** [ 1436.134772][ T5351] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1436.155850][ T5351] pvrusb2: Important functionality might not be entirely working. [ 1436.167292][ T5351] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1436.185159][ T5351] pvrusb2: ********** [ 1436.322214][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 1437.272605][ T5351] usb 6-1: USB disconnect, device number 10 [ 1437.278882][ T5351] pvrusb2: Device being rendered inoperable [ 1438.627039][T17621] usb 36-1: device descriptor read/8, error -110 [ 1438.984788][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1439.339571][ T10] usb 3-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1439.359236][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1439.384104][ T10] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1439.406863][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1439.446358][ T10] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1439.472024][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.500610][ T10] usb 3-1: Product: syz [ 1439.510170][ T10] usb 3-1: Manufacturer: syz [ 1439.520384][ T10] usb 3-1: SerialNumber: syz [ 1439.531568][T17621] usb usb36-port1: attempt power cycle [ 1440.144042][T20377] lo speed is unknown, defaulting to 1000 [ 1440.370837][T15796] Bluetooth: hci1: command 0x0406 tx timeout [ 1440.561784][T17621] usb usb36-port1: unable to enumerate USB device [ 1441.661172][ T10] usb 3-1: USB disconnect, device number 53 [ 1442.133442][T20387] IPv6: NLM_F_CREATE should be specified when creating new route [ 1442.141745][T20387] IPv6: Can't replace route, no match found [ 1442.415173][T20388] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1442.929478][T20395] lo speed is unknown, defaulting to 1000 [ 1444.174315][T20401] lo speed is unknown, defaulting to 1000 [ 1444.569163][T20411] IPv6: Can't replace route, no match found [ 1446.330989][T20422] binder: BINDER_SET_CONTEXT_MGR already set [ 1446.338320][T20422] binder: 20418:20422 ioctl 4018620d 200000004a80 returned -16 [ 1447.346524][T20429] lo speed is unknown, defaulting to 1000 [ 1450.030866][ T5719] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1450.234990][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 1450.257357][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.282184][ T5719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1450.731056][ T5719] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1450.756448][ T5719] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1450.767694][ T5719] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1450.786994][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1450.814058][ T5719] hub 2-1:1.0: bad descriptor, ignoring hub [ 1450.844599][ T5719] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1450.861128][ T5719] cdc_wdm 2-1:1.0: skipping garbage [ 1450.866816][ T5719] cdc_wdm 2-1:1.0: skipping garbage [ 1450.883234][ T5719] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1450.889386][ T5719] cdc_wdm 2-1:1.0: Unknown control protocol [ 1451.559914][T20451] lo speed is unknown, defaulting to 1000 [ 1451.662405][T20460] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1452.282854][ T10] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1452.324931][ T1014] usb 2-1: Failed to suspend device, error -71 [ 1452.324931][T17621] usb 2-1: USB disconnect, device number 56 [ 1452.440949][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1452.449275][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.459847][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1452.468906][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1452.481809][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1452.493105][ T10] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1452.502196][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.518029][ T10] hub 4-1:1.0: bad descriptor, ignoring hub [ 1452.566585][ T10] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1452.576538][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1452.587033][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 1452.626647][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1452.650649][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 1452.802555][T20466] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1453.275905][ T5719] usb 4-1: USB disconnect, device number 67 [ 1454.338531][T20474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3525'. [ 1454.357983][T20474] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3525'. [ 1457.643279][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1457.657781][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1457.672735][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1457.702048][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1457.709851][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1457.979054][T20479] lo speed is unknown, defaulting to 1000 [ 1458.390643][T17621] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1458.522325][T20497] lo speed is unknown, defaulting to 1000 [ 1458.570606][T17621] usb 3-1: Using ep0 maxpacket: 8 [ 1458.645432][T17621] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1458.670723][T17621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.149152][T17621] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1459.185904][T17621] pvrusb2: ********** [ 1459.208858][T17621] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1459.256468][T17621] pvrusb2: Important functionality might not be entirely working. [ 1459.285320][T17621] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1459.300310][T17621] pvrusb2: ********** [ 1459.360181][ T2364] pvrusb2: Invalid write control endpoint [ 1459.417584][T17621] usb 3-1: USB disconnect, device number 54 [ 1459.548302][ T2364] pvrusb2: Invalid write control endpoint [ 1459.725851][T20535] lo speed is unknown, defaulting to 1000 [ 1459.834009][ T4934] Bluetooth: hci0: command tx timeout [ 1460.234480][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1460.243827][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1460.254284][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1460.274984][ T2364] pvrusb2: Device being rendered inoperable [ 1460.288637][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1460.311396][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1460.335636][ T2364] pvrusb2: Attached sub-driver cx25840 [ 1460.349890][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1460.373296][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1460.594646][T20497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1460.781196][T20497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.808392][T20545] binder: BINDER_SET_CONTEXT_MGR already set [ 1460.814539][T20545] binder: 20541:20545 ioctl 4018620d 200000004a80 returned -16 [ 1460.879198][T20497] bridge_slave_0: entered allmulticast mode [ 1460.887846][T20497] bridge_slave_0: entered promiscuous mode [ 1460.895487][T20497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1460.903631][T20497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1460.911956][T20497] bridge_slave_1: entered allmulticast mode [ 1460.930873][T20497] bridge_slave_1: entered promiscuous mode [ 1461.332453][T20497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1461.346909][T20497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1461.550313][T20497] team0: Port device team_slave_0 added [ 1461.634134][T20497] team0: Port device team_slave_1 added [ 1461.664087][T20497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.679540][T20497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.733142][T20497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.782893][T20497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.819802][T20497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.863202][T20497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1461.902609][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3541'. [ 1461.915332][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3541'. [ 1462.019296][T20497] hsr_slave_0: entered promiscuous mode [ 1462.043741][T20497] hsr_slave_1: entered promiscuous mode [ 1462.291961][ T4934] Bluetooth: hci0: command tx timeout [ 1463.147881][T20564] lo speed is unknown, defaulting to 1000 [ 1463.470635][ T5351] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1463.778018][ T5351] usb 4-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1463.800483][ T5351] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1463.830618][ T5351] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1463.843479][ T5351] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1463.933049][ T5351] usb 4-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1463.943289][T20580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3545'. [ 1463.958351][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.967961][ T5351] usb 4-1: Product: syz [ 1463.972931][ T5351] usb 4-1: Manufacturer: syz [ 1463.994866][ T5351] usb 4-1: SerialNumber: syz [ 1464.370643][ T4934] Bluetooth: hci0: command tx timeout [ 1464.401508][T20497] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1464.425458][T20497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1464.442073][T20497] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1464.472526][T20497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1464.503859][T20497] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1464.532037][T20497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1464.559230][T20497] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1464.707158][T20497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1464.743422][T20569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.194193][T20569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.287427][T20497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.328867][ T5351] usb 4-1: USB disconnect, device number 68 [ 1465.361749][T20497] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.426204][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.433299][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.474817][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.481919][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1465.708156][T20596] binder: BINDER_SET_CONTEXT_MGR already set [ 1465.714381][T20596] binder: 20594:20596 ioctl 4018620d 200000004a80 returned -16 [ 1466.098944][T20602] IPv6: Can't replace route, no match found [ 1466.452113][ T4934] Bluetooth: hci0: command tx timeout [ 1467.080156][T20613] IPv6: Can't replace route, no match found [ 1468.846185][T20497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1469.069348][T20623] IPv6: Can't replace route, no match found [ 1469.261054][ T5351] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1469.645036][ T5351] usb 4-1: not running at top speed; connect to a high speed hub [ 1469.668919][ T5351] usb 4-1: config 45 has an invalid interface number: 2 but max is 0 [ 1469.681431][ T5351] usb 4-1: config 45 has no interface number 0 [ 1469.697763][ T5351] usb 4-1: config 45 interface 2 has no altsetting 0 [ 1469.711083][ T5351] usb 4-1: language id specifier not provided by device, defaulting to English [ 1469.733805][ T5351] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 1469.746310][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.764546][ T5351] usb 4-1: Product: 剰吉䫲ᙿ겉⿃눊礦숊姸曱慩貭䓋챺༗撵彪蝑眡•毭曐떔咗龚⛻㻛賜擐핅ꡊ蕉緶読錦덪䷂ጢ턌椏외⨯閞夢 [ 1469.837700][ T5351] usb 4-1: SerialNumber: 鯄㊻ⓩ畄⠅ᅙ吣ᣲꗜߍͷ퐈卑⇇謞鈀།꿜퇃䦞甥뿮ᭆ皀遆？챒溿ຉ嚀뺜詚ꁴꅑ⡙峥㔭歐£㷲⋱IJ랔授남櫚韾癳걟寸Ͽงࣳ៭ꨏ渴ꘞ軵镄ﻙ̅⠖㳄鼲䝹䋄筋蹲錭믑䭨売䍈訹弞埣⠠苆粅䒦㰧︽뛒醻㏹ [ 1469.930636][T17621] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1470.034260][T20497] veth0_vlan: entered promiscuous mode [ 1470.047913][T20497] veth1_vlan: entered promiscuous mode [ 1470.095525][T17621] usb 2-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1470.103844][T20497] veth0_macvtap: entered promiscuous mode [ 1470.123840][ T5351] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1470.126073][T20497] veth1_macvtap: entered promiscuous mode [ 1470.138074][T17621] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1470.158586][ T5351] dvb-usb: bulk message failed: -22 (3/0) [ 1470.170817][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1470.175049][T20497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1470.279983][T17621] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1470.285897][T20497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1470.300910][T17621] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1470.460653][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1470.529215][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.544541][T20652] IPv6: Can't replace route, no match found [ 1470.550681][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1470.553421][T20260] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.560333][ T5351] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1470.580902][T17621] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1470.590464][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1470.608161][T17621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.610461][T20260] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.625488][ T5351] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1470.642875][T17621] usb 2-1: Product: syz [ 1470.648662][T20260] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.656016][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1470.675009][ T5351] usb 4-1: media controller created [ 1470.688222][T20260] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.690372][T17621] usb 2-1: Manufacturer: syz [ 1470.717148][ T5351] dvb-usb: bulk message failed: -22 (5/0) [ 1470.736447][ T10] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1470.745960][ T5351] dvb-usb: MAC address reading failed. [ 1470.751493][T17621] usb 2-1: SerialNumber: syz [ 1470.764304][ T5351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1470.779237][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.805802][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 1470.814097][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1470.821865][ T5351] dvb-usb: bulk message failed: -22 (6/0) [ 1470.830450][ T5351] dvb-usb: bulk message failed: -22 (6/0) [ 1470.836718][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1470.842308][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 1470.847615][ T5351] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1470.866974][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1470.870873][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.881499][ T5351] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 1470.896660][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 1471.014765][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.024720][T20660] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3560'. [ 1471.033677][T20648] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1471.065537][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.076708][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.038428][ T5351] dvb-usb: schedule remote query interval to 100 msecs. [ 1472.046339][ T10] usb 3-1: USB disconnect, device number 55 [ 1472.054182][ T5351] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1472.247990][ T5800] dvb-usb: bulk message failed: -22 (2/0) [ 1472.253762][ T5800] dvb-usb: error while querying for an remote control event. [ 1472.261484][ T5351] usb 4-1: USB disconnect, device number 69 [ 1472.323532][ T5351] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1472.553628][ T30] audit: type=1400 audit(1780197759.595:513): avc: denied { bind } for pid=20670 comm="syz.7.3529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1472.613862][ T5800] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1472.664622][T20643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.694929][T20643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.042662][ T5800] usb 7-1: Using ep0 maxpacket: 8 [ 1473.092337][ T5800] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.110607][ T5800] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1474.070395][ T5800] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1474.082518][ T5800] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1474.102684][T17621] usb 2-1: USB disconnect, device number 57 [ 1474.110340][ T5800] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1474.160442][ T5800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.226802][ T5800] hub 7-1:1.0: bad descriptor, ignoring hub [ 1474.233664][ T5800] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1474.273445][ T5800] cdc_wdm 7-1:1.0: skipping garbage [ 1474.299781][ T5800] cdc_wdm 7-1:1.0: skipping garbage [ 1474.386612][ T5800] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1474.558114][ T5800] cdc_wdm 7-1:1.0: Unknown control protocol [ 1474.748277][T20682] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1474.952521][T20685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1474.987004][T20685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1475.060981][ T5800] usb 7-1: USB disconnect, device number 7 [ 1475.598039][T20677] lo speed is unknown, defaulting to 1000 [ 1475.640949][ T5800] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1475.833319][ T4934] Bluetooth: hci4: command 0x0406 tx timeout [ 1475.859683][ T5800] usb 4-1: not running at top speed; connect to a high speed hub [ 1475.955559][ T5800] usb 4-1: config 45 has an invalid interface number: 2 but max is 0 [ 1475.985438][ T5800] usb 4-1: config 45 has no interface number 0 [ 1476.011564][ T5800] usb 4-1: config 45 interface 2 has no altsetting 0 [ 1476.055534][ T5800] usb 4-1: language id specifier not provided by device, defaulting to English [ 1476.101297][ T5800] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 1476.186464][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.214387][ T5800] usb 4-1: Product: 剰吉䫲ᙿ겉⿃눊礦숊姸曱慩貭䓋챺༗撵彪蝑眡•毭曐떔咗龚⛻㻛賜擐핅ꡊ蕉緶読錦덪䷂ጢ턌椏외⨯閞夢 [ 1476.299835][ T5800] usb 4-1: SerialNumber: 鯄㊻ⓩ畄⠅ᅙ吣ᣲꗜߍͷ퐈卑⇇謞鈀།꿜퇃䦞甥뿮ᭆ皀遆？챒溿ຉ嚀뺜詚ꁴꅑ⡙峥㔭歐£㷲⋱IJ랔授남櫚韾癳걟寸Ͽงࣳ៭ꨏ渴ꘞ軵镄ﻙ̅⠖㳄鼲䝹䋄筋蹲錭믑䭨売䍈訹弞埣⠠苆粅䒦㰧︽뛒醻㏹ [ 1476.742344][ T5800] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1476.771569][ T5800] dvb-usb: bulk message failed: -22 (3/0) [ 1476.772617][T20698] binder_alloc: 20697: binder_alloc_buf, no vma [ 1476.822143][ T5800] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1476.843008][ T5800] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1476.874841][ T5800] usb 4-1: media controller created [ 1476.888139][ T5800] dvb-usb: bulk message failed: -22 (5/0) [ 1476.900595][ T5800] dvb-usb: MAC address reading failed. [ 1477.087229][T20709] IPv6: NLM_F_CREATE should be specified when creating new route [ 1477.194644][ T5800] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1477.233727][ T5800] dvb-usb: bulk message failed: -22 (6/0) [ 1477.392796][T20713] IPv6: NLM_F_CREATE should be specified when creating new route [ 1477.401122][T20713] IPv6: Can't replace route, no match found [ 1477.534889][ T5800] dvb-usb: bulk message failed: -22 (6/0) [ 1477.557141][ T5800] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1477.601735][ T5800] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 1477.660264][ T5800] dvb-usb: schedule remote query interval to 100 msecs. [ 1477.680520][ T5800] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1477.860876][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 1477.950398][ T10] dvb-usb: error while querying for an remote control event. [ 1477.985222][ T5800] usb 4-1: USB disconnect, device number 70 [ 1478.049397][ T5800] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1478.346058][T20726] binder: BINDER_SET_CONTEXT_MGR already set [ 1478.352189][T20726] binder: 20722:20726 ioctl 4018620d 200000004a80 returned -16 [ 1478.765361][T20734] FAULT_INJECTION: forcing a failure. [ 1478.765361][T20734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1478.778961][T20734] CPU: 1 UID: 0 PID: 20734 Comm: syz.1.3579 Tainted: G L syzkaller #0 PREEMPT(full) [ 1478.778990][T20734] Tainted: [L]=SOFTLOCKUP [ 1478.778998][T20734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1478.779008][T20734] Call Trace: [ 1478.779015][T20734] [ 1478.779022][T20734] dump_stack_lvl+0x100/0x190 [ 1478.779049][T20734] should_fail_ex.cold+0x5/0xa [ 1478.779076][T20734] _copy_to_user+0x32/0xd0 [ 1478.779100][T20734] simple_read_from_buffer+0xcb/0x170 [ 1478.779127][T20734] proc_fail_nth_read+0x1af/0x230 [ 1478.779148][T20734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1478.779170][T20734] ? rw_verify_area+0xce/0x6d0 [ 1478.779188][T20734] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1478.779208][T20734] vfs_read+0x1e4/0xb30 [ 1478.779231][T20734] ? __pfx_vfs_read+0x10/0x10 [ 1478.779250][T20734] ? __fget_files+0x215/0x3d0 [ 1478.779279][T20734] ? __fget_files+0x21f/0x3d0 [ 1478.779309][T20734] ksys_read+0x12a/0x250 [ 1478.779329][T20734] ? __pfx_ksys_read+0x10/0x10 [ 1478.779351][T20734] ? rcu_is_watching+0x12/0xc0 [ 1478.779381][T20734] do_syscall_64+0x115/0x870 [ 1478.779405][T20734] ? clear_bhb_loop+0x40/0x90 [ 1478.779429][T20734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.779455][T20734] RIP: 0033:0x7f66a135d68e [ 1478.779472][T20734] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1478.779490][T20734] RSP: 002b:00007f66a2255fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1478.779509][T20734] RAX: ffffffffffffffda RBX: 00007f66a22566c0 RCX: 00007f66a135d68e [ 1478.779521][T20734] RDX: 000000000000000f RSI: 00007f66a22560a0 RDI: 000000000000000c [ 1478.779532][T20734] RBP: 00007f66a2256090 R08: 0000000000000000 R09: 0000000000000000 [ 1478.779543][T20734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1478.779558][T20734] R13: 00007f66a1616218 R14: 00007f66a1616180 R15: 00007ffc20cf1e38 [ 1478.779584][T20734] [ 1479.004779][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1479.011243][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1480.313477][ T5800] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1480.410881][T17621] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1480.500612][ T5800] usb 3-1: Using ep0 maxpacket: 8 [ 1480.512112][ T5800] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.530498][ T5800] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1480.573728][T17621] usb 8-1: Using ep0 maxpacket: 8 [ 1480.608126][T17621] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.618871][ T5800] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1480.630101][T17621] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1480.639963][ T5800] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1480.652703][T17621] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1480.680235][ T5800] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1480.695730][T17621] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1480.708795][ T5800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.717268][T17621] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1480.727716][T17621] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.746729][ T5800] hub 3-1:1.0: bad descriptor, ignoring hub [ 1480.765905][T17621] hub 8-1:1.0: bad descriptor, ignoring hub [ 1480.783778][ T5800] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1480.794180][T17621] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1480.806833][ T5800] cdc_wdm 3-1:1.0: skipping garbage [ 1480.812844][ T5800] cdc_wdm 3-1:1.0: skipping garbage [ 1480.818947][T17621] cdc_wdm 8-1:1.0: skipping garbage [ 1480.845115][T17621] cdc_wdm 8-1:1.0: skipping garbage [ 1480.858543][ T5800] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1480.884959][T17621] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 1480.895796][ T5800] cdc_wdm 3-1:1.0: Unknown control protocol [ 1480.908075][T17621] cdc_wdm 8-1:1.0: Unknown control protocol [ 1480.980497][ T9] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1481.251879][T20762] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1481.262227][T20745] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1481.391610][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 1481.421006][ T9] usb 4-1: config 45 has an invalid interface number: 2 but max is 0 [ 1481.429949][ T9] usb 4-1: config 45 has no interface number 0 [ 1481.437113][ T9] usb 4-1: config 45 interface 2 has no altsetting 0 [ 1481.444895][ C0] wdm_int_callback: 2956 callbacks suppressed [ 1481.444910][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1481.457528][ C0] wdm_int_callback: 2956 callbacks suppressed [ 1481.457543][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1481.475444][ T57] usb 3-1: Failed to suspend device, error -71 [ 1481.482176][ T9] usb 4-1: language id specifier not provided by device, defaulting to English [ 1481.494222][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 1481.506061][T17621] usb 3-1: USB disconnect, device number 56 [ 1481.516445][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.526113][ T9] usb 4-1: Product: 剰吉䫲ᙿ겉⿃눊礦숊姸曱慩貭䓋챺༗撵彪蝑眡•毭曐떔咗龚⛻㻛賜擐핅ꡊ蕉緶読錦덪䷂ጢ턌椏외⨯閞夢 [ 1481.543901][ T9] usb 4-1: SerialNumber: 鯄㊻ⓩ畄⠅ᅙ吣ᣲꗜߍͷ퐈卑⇇謞鈀།꿜퇃䦞甥뿮ᭆ皀遆？챒溿ຉ嚀뺜詚ꁴꅑ⡙峥㔭歐£㷲⋱IJ랔授남櫚韾癳걟寸Ͽงࣳ៭ꨏ渴ꘞ軵镄ﻙ̅⠖㳄鼲䝹䋄筋蹲錭믑䭨売䍈訹弞埣⠠苆粅䒦㰧︽뛒醻㏹ [ 1481.600887][ T5719] usb 8-1: USB disconnect, device number 2 [ 1482.008600][ T9] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1482.028378][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 1482.048274][ T9] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1482.077993][ T9] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1482.146059][ T9] usb 4-1: media controller created [ 1482.162431][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 1482.179027][ T9] dvb-usb: MAC address reading failed. [ 1482.489640][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1482.595083][T20783] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1482.601593][T20783] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1482.603082][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1482.626648][T20783] vhci_hcd vhci_hcd.0: Device attached [ 1482.747542][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 1482.756467][ T9] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1482.988115][T20783] Bluetooth: MGMT ver 1.23 [ 1482.996920][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 1483.023692][T20785] vhci_hcd: connection closed [ 1483.035513][ T36] vhci_hcd vhci_hcd.3: stop threads [ 1483.074731][ T36] vhci_hcd vhci_hcd.3: release socket [ 1483.086419][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 1483.101955][ T36] vhci_hcd vhci_hcd.3: disconnect device [ 1483.112124][ T9] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1483.151270][ T9] usb 4-1: USB disconnect, device number 71 [ 1483.211078][T20221] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1483.211306][ T9] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1483.331910][T17621] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1483.414407][T20221] usb 3-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1483.436341][T20221] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1483.451660][T20221] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1483.476067][T20221] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1483.490996][T17621] usb 8-1: Using ep0 maxpacket: 8 [ 1483.491811][T20221] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1483.502711][T17621] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1483.514796][T20221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.523334][T20221] usb 3-1: Product: syz [ 1483.527521][T20221] usb 3-1: Manufacturer: syz [ 1483.531268][T17621] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.532642][T20221] usb 3-1: SerialNumber: syz [ 1483.665875][ T5800] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1483.703040][T17621] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1483.717811][T17621] pvrusb2: ********** [ 1483.722359][T17621] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1483.733210][T17621] pvrusb2: Important functionality might not be entirely working. [ 1483.741665][T17621] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1484.140603][T17621] pvrusb2: ********** [ 1484.150635][ T5800] usb 2-1: Using ep0 maxpacket: 8 [ 1484.157388][ T5800] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1484.166821][ T5800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.192295][ T5800] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1484.248441][ T5800] pvrusb2: ********** [ 1484.255181][ T5800] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1484.301200][ T5800] pvrusb2: Important functionality might not be entirely working. [ 1484.309403][ T5800] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1484.317897][T20784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1484.577163][ T2364] pvrusb2: Invalid write control endpoint [ 1484.610087][ T5800] pvrusb2: ********** [ 1484.626091][T20784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1484.739839][ T2364] pvrusb2: Invalid write control endpoint [ 1484.774477][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1484.809597][T20221] usb 3-1: USB disconnect, device number 57 [ 1484.827762][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1484.843492][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1484.855948][ T2364] pvrusb2: Device being rendered inoperable [ 1484.863214][T20793] pvrusb2: Attempted to execute control transfer when device not ok [ 1484.873001][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1484.880092][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1484.888736][ T2364] pvrusb2: Attached sub-driver cx25840 [ 1484.894310][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1484.904544][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1484.922160][ T2364] pvrusb2: Invalid write control endpoint [ 1484.931683][T20795] pvrusb2: Attempted to execute control transfer when device not ok [ 1485.054117][ T5800] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1485.160490][ T2364] pvrusb2: Invalid write control endpoint [ 1485.200654][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1485.210089][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1485.227072][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1485.261388][ T5800] usb 7-1: Using ep0 maxpacket: 8 [ 1485.265447][ T2364] pvrusb2: Device being rendered inoperable [ 1485.274550][ T2364] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1485.283083][ T2364] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1485.293089][ T5800] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1485.295798][ T2364] pvrusb2: Attached sub-driver cx25840 [ 1485.309548][ T5800] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1485.323159][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1485.323355][ T5800] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1485.338007][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1485.354438][ T5800] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1485.367024][ T5800] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1485.378322][ T5800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.501084][ T5800] hub 7-1:1.0: bad descriptor, ignoring hub [ 1485.520742][ T10] usb 2-1: USB disconnect, device number 58 [ 1485.535890][ T5800] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1485.552948][T20221] usb 8-1: USB disconnect, device number 3 [ 1485.560124][ T5800] cdc_wdm 7-1:1.0: skipping garbage [ 1485.568945][ T5800] cdc_wdm 7-1:1.0: skipping garbage [ 1485.629149][ T5800] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1485.637764][ T5800] cdc_wdm 7-1:1.0: Unknown control protocol [ 1485.822777][T20807] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1486.251809][ T5351] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1486.321871][ T5800] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1486.361037][T18042] usb 7-1: USB disconnect, device number 8 [ 1486.464675][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3608'. [ 1486.476638][T20831] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3608'. [ 1486.486722][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3608'. [ 1486.491522][ T5351] usb 3-1: not running at top speed; connect to a high speed hub [ 1486.495952][T20831] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3608'. [ 1486.505179][ T5800] usb 4-1: Using ep0 maxpacket: 8 [ 1486.520956][ T5800] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1486.529370][ T5800] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1486.542266][ T5351] usb 3-1: config 45 has an invalid interface number: 2 but max is 0 [ 1486.550454][ T5800] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1486.570602][ T5351] usb 3-1: config 45 has no interface number 0 [ 1486.582672][ T5351] usb 3-1: config 45 interface 2 has no altsetting 0 [ 1486.589436][ T5800] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1486.589455][T20836] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1486.605011][ T5800] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1486.605801][T20836] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1486.621091][T20836] vhci_hcd vhci_hcd.0: Device attached [ 1486.630873][ T5351] usb 3-1: language id specifier not provided by device, defaulting to English [ 1486.644946][T20837] vhci_hcd: connection closed [ 1486.646644][ T1014] vhci_hcd vhci_hcd.7: stop threads [ 1486.649568][ T5800] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1486.666964][ T1014] vhci_hcd vhci_hcd.7: release socket [ 1486.667120][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.684570][ T5351] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 1486.694029][ T1014] vhci_hcd vhci_hcd.7: disconnect device [ 1486.694640][ T5351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.711369][ T5351] usb 3-1: Product: 剰吉䫲ᙿ겉⿃눊礦숊姸曱慩貭䓋챺༗撵彪蝑眡•毭曐떔咗龚⛻㻛賜擐핅ꡊ蕉緶読錦덪䷂ጢ턌椏외⨯閞夢 [ 1486.763795][ T5351] usb 3-1: SerialNumber: 鯄㊻ⓩ畄⠅ᅙ吣ᣲꗜߍͷ퐈卑⇇謞鈀།꿜퇃䦞甥뿮ᭆ皀遆？챒溿ຉ嚀뺜詚ꁴꅑ⡙峥㔭歐£㷲⋱IJ랔授남櫚韾癳걟寸Ͽงࣳ៭ꨏ渴ꘞ軵镄ﻙ̅⠖㳄鼲䝹䋄筋蹲錭믑䭨売䍈訹弞埣⠠苆粅䒦㰧︽뛒醻㏹ [ 1487.074583][ T5800] usb 4-1: usb_control_msg returned -32 [ 1487.080276][ T5800] usbtmc 4-1:16.0: can't read capabilities [ 1487.528474][T20850] IPv6: Can't replace route, no match found [ 1487.639103][ T10] usb 4-1: USB disconnect, device number 72 [ 1487.920663][T18042] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1488.350588][T18042] usb 2-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1488.407855][T18042] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1488.444822][T18042] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1488.462450][T18042] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1488.492702][T18042] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1488.507412][T18042] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.516828][T18042] usb 2-1: Product: syz [ 1488.571842][T18042] usb 2-1: Manufacturer: syz [ 1488.580225][T18042] usb 2-1: SerialNumber: syz [ 1488.694818][ T5351] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1488.702565][ T5351] dvb-usb: bulk message failed: -22 (3/0) [ 1488.754042][ T5351] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1488.786454][ T5351] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1489.096202][ T5351] usb 3-1: media controller created [ 1489.177092][ T5351] dvb-usb: bulk message failed: -22 (5/0) [ 1489.207886][ T5351] dvb-usb: MAC address reading failed. [ 1489.217124][T20853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.250107][ T5351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1490.100801][T20221] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1490.307317][T20853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.307461][ C1] raw-gadget.2 gadget.6: ignoring, device is not running [ 1490.348890][ T5351] dvb-usb: bulk message failed: -22 (6/0) [ 1490.470956][T20221] usb 7-1: device descriptor read/64, error -32 [ 1490.699156][ T5351] dvb-usb: bulk message failed: -22 (6/0) [ 1490.730788][ T5351] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1490.742897][T20874] lo speed is unknown, defaulting to 1000 [ 1490.758456][ T5351] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 1490.778274][ T5351] dvb-usb: schedule remote query interval to 100 msecs. [ 1490.785999][ T5351] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1490.854943][ T5351] usb 3-1: USB disconnect, device number 58 [ 1490.908220][T18042] usb 2-1: USB disconnect, device number 59 [ 1490.955226][ T5351] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1491.102198][T20221] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1491.170728][ T4934] Bluetooth: hci6: command 0x0406 tx timeout [ 1491.221899][T20885] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1491.228443][T20885] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1491.251127][T20885] vhci_hcd vhci_hcd.0: Device attached [ 1491.598136][T20886] vhci_hcd: connection closed [ 1491.598356][ T1014] vhci_hcd vhci_hcd.3: stop threads [ 1491.598600][T20221] usb 7-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1491.603102][ T1014] vhci_hcd vhci_hcd.3: release socket [ 1491.603267][ T1014] vhci_hcd vhci_hcd.3: disconnect device [ 1491.678445][T20221] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1491.702284][T20221] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1491.742873][T20221] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1491.784527][T20221] usb 7-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1491.804740][T20221] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.823452][T20221] usb 7-1: Product: syz [ 1491.834743][T20221] usb 7-1: Manufacturer: syz [ 1491.853110][T20221] usb 7-1: SerialNumber: syz [ 1493.459293][T20221] usb 7-1: USB disconnect, device number 10 [ 1493.594284][ T5351] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1493.860772][T19174] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1493.972957][ T5351] usb 8-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1493.993148][ T5351] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1494.027966][ T5351] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1494.031562][T19174] usb 3-1: not running at top speed; connect to a high speed hub [ 1494.060433][ T5351] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1494.079087][T19174] usb 3-1: config 45 has an invalid interface number: 2 but max is 0 [ 1494.088431][T19174] usb 3-1: config 45 has no interface number 0 [ 1494.096956][T19174] usb 3-1: config 45 interface 2 has no altsetting 0 [ 1494.124596][ T5351] usb 8-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1494.149055][ T5351] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.151077][T19174] usb 3-1: language id specifier not provided by device, defaulting to English [ 1494.186635][ T5351] usb 8-1: Product: syz [ 1494.195282][ T5351] usb 8-1: Manufacturer: syz [ 1494.207184][ T5351] usb 8-1: SerialNumber: syz [ 1494.209607][T19174] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 1494.273797][T19174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.304273][T19174] usb 3-1: Product: 剰吉䫲ᙿ겉⿃눊礦숊姸曱慩貭䓋챺༗撵彪蝑眡•毭曐떔咗龚⛻㻛賜擐핅ꡊ蕉緶読錦덪䷂ጢ턌椏외⨯閞夢 [ 1494.360881][T19174] usb 3-1: SerialNumber: 鯄㊻ⓩ畄⠅ᅙ吣ᣲꗜߍͷ퐈卑⇇謞鈀།꿜퇃䦞甥뿮ᭆ皀遆？챒溿ຉ嚀뺜詚ꁴꅑ⡙峥㔭歐£㷲⋱IJ랔授남櫚韾癳걟寸Ͽงࣳ៭ꨏ渴ꘞ軵镄ﻙ̅⠖㳄鼲䝹䋄筋蹲錭믑䭨売䍈訹弞埣⠠苆粅䒦㰧︽뛒醻㏹ [ 1494.400015][T17621] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1494.629254][T17621] usb 2-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1494.701481][T17621] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1494.727698][T17621] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1494.758031][T17621] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1494.844387][T17621] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1494.870282][ T30] audit: type=1326 audit(1780197781.905:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20917 comm="syz.6.3631" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a259ce59 code=0x7fc00000 [ 1494.907811][T17621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.942354][T17621] usb 2-1: Product: syz [ 1494.955664][T17621] usb 2-1: Manufacturer: syz [ 1494.973425][T17621] usb 2-1: SerialNumber: syz [ 1495.315388][T20903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.331966][T20925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1495.342339][T20925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.355514][T20903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1495.445758][T17621] usb 2-1: USB disconnect, device number 60 [ 1495.621976][ T5351] usb 8-1: USB disconnect, device number 4 [ 1495.724643][T19174] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1495.733026][T19174] dvb-usb: bulk message failed: -22 (3/0) [ 1495.759806][T19174] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1495.798903][T19174] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1495.808400][T19174] usb 3-1: media controller created [ 1495.814153][T19174] dvb-usb: bulk message failed: -22 (5/0) [ 1495.820608][T19174] dvb-usb: MAC address reading failed. [ 1495.843718][T19174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1495.860498][T19174] dvb-usb: bulk message failed: -22 (6/0) [ 1495.869239][T19174] dvb-usb: bulk message failed: -22 (6/0) [ 1495.876265][T19174] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1495.887594][T19174] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 1495.919762][T19174] dvb-usb: schedule remote query interval to 100 msecs. [ 1495.928035][T19174] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1495.972174][T19174] usb 3-1: USB disconnect, device number 59 [ 1496.062600][T19174] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1496.085935][T20919] syz.3.3629 (20919): drop_caches: 2 [ 1496.397318][T20935] lo speed is unknown, defaulting to 1000 [ 1497.197613][T20941] lo speed is unknown, defaulting to 1000 [ 1497.813108][T20949] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1497.819623][T20949] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1497.833274][T20949] vhci_hcd vhci_hcd.0: Device attached [ 1497.866084][T20950] vhci_hcd: connection closed [ 1497.867036][T13032] vhci_hcd vhci_hcd.1: stop threads [ 1497.885802][T13032] vhci_hcd vhci_hcd.1: release socket [ 1497.893087][T13032] vhci_hcd vhci_hcd.1: disconnect device [ 1498.921196][T20221] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1499.050607][T19174] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1499.092069][T20221] usb 2-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1499.109592][T20221] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.118879][T20221] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1499.146978][T20221] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1499.162600][T20221] usb 2-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1499.166502][ T10] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1499.174518][T20221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.188341][T20221] usb 2-1: Product: syz [ 1499.193379][T20221] usb 2-1: Manufacturer: syz [ 1499.198067][T20221] usb 2-1: SerialNumber: syz [ 1499.210608][T19174] usb 8-1: Using ep0 maxpacket: 8 [ 1499.217078][T19174] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1499.237390][T19174] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1499.249477][T19174] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1499.265391][T19174] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1499.281072][T19174] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1499.290178][T19174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.315960][T19174] hub 8-1:1.0: bad descriptor, ignoring hub [ 1499.323314][T19174] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1499.336326][T19174] cdc_wdm 8-1:1.0: skipping garbage [ 1499.342733][T19174] cdc_wdm 8-1:1.0: skipping garbage [ 1499.350398][T19174] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1499.358451][T19174] cdc_wdm 8-1:1.0: Unknown control protocol [ 1499.381418][ T10] usb 4-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1499.411443][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1499.430767][ T10] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1499.440622][T12133] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1499.450626][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1499.473282][T20956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.474343][ T10] usb 4-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1499.510696][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.511714][T20956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.532857][ T10] usb 4-1: Product: syz [ 1499.538546][ T10] usb 4-1: Manufacturer: syz [ 1499.547161][ T10] usb 4-1: SerialNumber: syz [ 1499.567967][T20221] usb 2-1: USB disconnect, device number 61 [ 1499.583817][T20967] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1499.600645][T12133] usb 3-1: Using ep0 maxpacket: 8 [ 1499.608707][T12133] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1499.639880][T12133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.665616][T12133] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1499.678297][T12133] pvrusb2: ********** [ 1499.686019][T12133] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1499.696436][T12133] pvrusb2: Important functionality might not be entirely working. [ 1499.707826][T12133] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1499.719486][T12133] pvrusb2: ********** [ 1499.771083][T19174] usb 8-1: USB disconnect, device number 5 [ 1499.879674][ T2364] pvrusb2: Invalid write control endpoint [ 1499.882319][ T10] usb 4-1: USB disconnect, device number 73 [ 1499.890513][T12133] usb 3-1: USB disconnect, device number 60 [ 1499.958831][T20966] pvrusb2: Invalid write control endpoint [ 1499.974209][ T2364] pvrusb2: Invalid write control endpoint [ 1499.980009][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1499.994870][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1500.003302][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1500.014391][ T2364] pvrusb2: Device being rendered inoperable [ 1500.020354][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1500.027509][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1500.035503][ T2364] pvrusb2: Attached sub-driver cx25840 [ 1500.042760][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1500.053644][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1500.821152][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1501.261102][ T10] usb 8-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1501.420268][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1501.437930][T20985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3647'. [ 1501.455606][ T10] usb 8-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1501.493022][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1501.522502][ T10] usb 8-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1501.558010][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.590194][ T10] usb 8-1: Product: syz [ 1501.600481][ T10] usb 8-1: Manufacturer: syz [ 1501.611613][ T10] usb 8-1: SerialNumber: syz [ 1501.704149][T20992] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1501.710687][T20992] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1501.771376][T20992] vhci_hcd vhci_hcd.0: Device attached [ 1501.830768][T20993] vhci_hcd: connection closed [ 1501.831193][ T1014] vhci_hcd vhci_hcd.3: stop threads [ 1501.858951][ T1014] vhci_hcd vhci_hcd.3: release socket [ 1501.882484][ T1014] vhci_hcd vhci_hcd.3: disconnect device [ 1501.901162][T20974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1501.981020][T20974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1502.042466][ T10] usb 8-1: USB disconnect, device number 6 [ 1502.666764][T21004] FAULT_INJECTION: forcing a failure. [ 1502.666764][T21004] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.698735][T21004] CPU: 1 UID: 0 PID: 21004 Comm: syz.1.3653 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.698755][T21004] Tainted: [L]=SOFTLOCKUP [ 1502.698759][T21004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1502.698765][T21004] Call Trace: [ 1502.698770][T21004] [ 1502.698775][T21004] dump_stack_lvl+0x100/0x190 [ 1502.698792][T21004] should_fail_ex.cold+0x5/0xa [ 1502.698807][T21004] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1502.698824][T21004] should_failslab+0xc2/0x120 [ 1502.698837][T21004] __kmalloc_noprof+0xe0/0x850 [ 1502.698853][T21004] ? kfree+0x1dd/0x6c0 [ 1502.698868][T21004] tomoyo_realpath_from_path+0xb6/0x690 [ 1502.698889][T21004] tomoyo_path_number_perm+0x23c/0x580 [ 1502.698903][T21004] ? tomoyo_path_number_perm+0x22e/0x580 [ 1502.698923][T21004] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1502.698951][T21004] ? find_held_lock+0x2b/0x80 [ 1502.698963][T21004] ? __fget_files+0x215/0x3d0 [ 1502.698976][T21004] ? hook_file_ioctl_common+0x149/0x410 [ 1502.698987][T21004] ? __fget_files+0x215/0x3d0 [ 1502.699003][T21004] ? __fget_files+0x21f/0x3d0 [ 1502.699018][T21004] security_file_ioctl+0xd3/0x230 [ 1502.699035][T21004] __x64_sys_ioctl+0xb7/0x210 [ 1502.699047][T21004] do_syscall_64+0x115/0x870 [ 1502.699062][T21004] ? clear_bhb_loop+0x40/0x90 [ 1502.699075][T21004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.699086][T21004] RIP: 0033:0x7f66a139ce59 [ 1502.699096][T21004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.699107][T21004] RSP: 002b:00007f66a2298028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1502.699118][T21004] RAX: ffffffffffffffda RBX: 00007f66a1615fa0 RCX: 00007f66a139ce59 [ 1502.699125][T21004] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1502.699131][T21004] RBP: 00007f66a2298090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.699137][T21004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1502.699144][T21004] R13: 00007f66a1616038 R14: 00007f66a1615fa0 R15: 00007ffc20cf1e38 [ 1502.699158][T21004] [ 1502.699170][T21004] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1503.983087][T17621] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1504.236377][T17621] usb 8-1: Using ep0 maxpacket: 8 [ 1504.247025][T17621] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1504.271949][T17621] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1504.306083][T17621] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1504.338077][T17621] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1504.351802][T17621] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1504.361516][T17621] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.466288][T17621] hub 8-1:1.0: bad descriptor, ignoring hub [ 1504.472797][T17621] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1504.480335][T17621] cdc_wdm 8-1:1.0: skipping garbage [ 1504.492064][T17621] cdc_wdm 8-1:1.0: skipping garbage [ 1504.537066][T17621] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1504.558723][T17621] cdc_wdm 8-1:1.0: Unknown control protocol [ 1504.595113][T21027] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1504.601658][T21027] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1504.622906][T21027] vhci_hcd vhci_hcd.0: Device attached [ 1504.890973][T20221] usb 36-1: SetAddress Request (27) to port 0 [ 1504.942716][T20221] usb 36-1: new SuperSpeed USB device number 27 using vhci_hcd [ 1504.944509][T21034] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1504.959948][T21028] vhci_hcd: connection closed [ 1504.968894][ T1014] vhci_hcd vhci_hcd.1: stop threads [ 1504.994166][ T1014] vhci_hcd vhci_hcd.1: release socket [ 1505.003640][ T1014] vhci_hcd vhci_hcd.1: disconnect device [ 1505.190988][T19174] usb 8-1: USB disconnect, device number 7 [ 1505.272861][T12133] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1505.564010][T12133] usb 4-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 1505.607284][T12133] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1505.643916][T12133] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 96, using maximum allowed: 30 [ 1505.718595][T12133] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 96 [ 1505.764656][T12133] usb 4-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1505.785179][T12133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.799852][T12133] usb 4-1: Product: syz [ 1505.804801][T21040] lo speed is unknown, defaulting to 1000 [ 1505.814652][T12133] usb 4-1: Manufacturer: syz [ 1506.084913][T12133] usb 4-1: SerialNumber: syz [ 1506.320632][ T10] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1506.563630][T21054] IPv6: Can't replace route, no match found [ 1506.757709][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 1506.780091][ T10] usb 2-1: config 45 has an invalid interface number: 2 but max is 0 [ 1506.807229][ T10] usb 2-1: config 45 has no interface number 0 [ 1506.821794][ T10] usb 2-1: config 45 interface 2 has no altsetting 0 [ 1506.848813][ T10] usb 2-1: language id specifier not provided by device, defaulting to English [ 1506.870101][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 1506.882391][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.913553][ T10] usb 2-1: Product: 剰吉䫲ᙿ겉⿃눊礦숊姸曱慩貭䓋챺༗撵彪蝑眡•毭曐떔咗龚⛻㻛賜擐핅ꡊ蕉緶読錦덪䷂ጢ턌椏외⨯閞夢 [ 1506.964902][ T10] usb 2-1: SerialNumber: 鯄㊻ⓩ畄⠅ᅙ吣ᣲꗜߍͷ퐈卑⇇謞鈀།꿜퇃䦞甥뿮ᭆ皀遆？챒溿ຉ嚀뺜詚ꁴꅑ⡙峥㔭歐£㷲⋱IJ랔授남櫚韾癳걟寸Ͽงࣳ៭ꨏ渴ꘞ軵镄ﻙ̅⠖㳄鼲䝹䋄筋蹲錭믑䭨売䍈訹弞埣⠠苆粅䒦㰧︽뛒醻㏹ [ 1507.032552][T12133] usb 4-1: USB disconnect, device number 74 [ 1507.220372][ T10] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1507.237933][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1507.251086][ T5719] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1507.251771][ T10] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1507.288508][ T10] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1507.296803][ T10] usb 2-1: media controller created [ 1507.312168][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 1507.333291][ T10] dvb-usb: MAC address reading failed. [ 1507.355382][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1507.376465][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1507.383207][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1507.389138][ T10] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1507.402777][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 1507.420578][ T5719] usb 8-1: Using ep0 maxpacket: 8 [ 1507.421299][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 1507.435615][ T10] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1507.436910][ T5719] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.447784][ T10] usb 2-1: USB disconnect, device number 62 [ 1507.503369][ T5719] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1507.529534][ T5719] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1507.550603][ T5719] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1507.566924][ T10] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1507.568650][ T5719] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1507.608737][ T5719] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.630658][ T5719] hub 8-1:1.0: bad descriptor, ignoring hub [ 1507.651627][ T5719] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1507.659437][ T5719] cdc_wdm 8-1:1.0: skipping garbage [ 1507.678284][ T5719] cdc_wdm 8-1:1.0: skipping garbage [ 1508.041545][ T5719] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1508.060333][ T5719] cdc_wdm 8-1:1.0: Unknown control protocol [ 1508.062304][T21058] tmpfs: Unknown parameter 'usrquota_block_ha' [ 1509.012300][T17621] usb 8-1: USB disconnect, device number 8 [ 1509.096391][ T30] audit: type=1400 audit(1780197796.115:515): avc: denied { watch } for pid=21066 comm="syz.2.3672" path="/110/file0" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1509.190741][ T30] audit: type=1400 audit(1780197796.115:516): avc: denied { watch_sb watch_reads } for pid=21066 comm="syz.2.3672" path="/110/file0" dev="tmpfs" ino=599 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1509.403434][T21081] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1509.409955][T21081] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1509.431626][T21081] vhci_hcd vhci_hcd.0: Device attached [ 1509.479812][T21082] vhci_hcd: connection reset by peer [ 1509.496765][ T5921] vhci_hcd vhci_hcd.1: stop threads [ 1509.514845][ T5921] vhci_hcd vhci_hcd.1: release socket [ 1509.531460][ T4934] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1509.542974][ T4934] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1509.554633][ T4934] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1509.568419][ T4934] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1509.580189][ T5921] vhci_hcd vhci_hcd.1: disconnect device [ 1509.588311][ T4934] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1510.050785][T20221] usb 36-1: device descriptor read/8, error -110 [ 1510.519637][T20221] usb usb36-port1: attempt power cycle [ 1510.537152][T21084] lo speed is unknown, defaulting to 1000 [ 1511.298853][T20221] usb usb36-port1: unable to enumerate USB device [ 1511.730690][ T5351] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1511.733023][ T4934] Bluetooth: hci7: command tx timeout [ 1511.767360][T21084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.917560][T21084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.930956][T21084] bridge_slave_0: entered allmulticast mode [ 1511.939340][T21084] bridge_slave_0: entered promiscuous mode [ 1511.951859][T21084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.959262][T21084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.966748][T21084] bridge_slave_1: entered allmulticast mode [ 1511.978352][T21084] bridge_slave_1: entered promiscuous mode [ 1511.994333][ T5351] usb 4-1: not running at top speed; connect to a high speed hub [ 1512.008129][ T5351] usb 4-1: config 45 has an invalid interface number: 2 but max is 0 [ 1512.019897][ T5351] usb 4-1: config 45 has no interface number 0 [ 1512.019938][T21130] FAULT_INJECTION: forcing a failure. [ 1512.019938][T21130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1512.042720][ T5351] usb 4-1: config 45 interface 2 has no altsetting 0 [ 1512.052487][T21130] CPU: 0 UID: 0 PID: 21130 Comm: syz.1.3684 Tainted: G L syzkaller #0 PREEMPT(full) [ 1512.052505][T21130] Tainted: [L]=SOFTLOCKUP [ 1512.052509][T21130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1512.052516][T21130] Call Trace: [ 1512.052520][T21130] [ 1512.052524][T21130] dump_stack_lvl+0x100/0x190 [ 1512.052540][T21130] should_fail_ex.cold+0x5/0xa [ 1512.052557][T21130] _copy_from_user+0x2e/0xd0 [ 1512.052571][T21130] copy_msghdr_from_user+0x9f/0x4f0 [ 1512.052585][T21130] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1512.052605][T21130] ___sys_sendmsg+0x106/0x1e0 [ 1512.052619][T21130] ? __pfx____sys_sendmsg+0x10/0x10 [ 1512.052647][T21130] __sys_sendmsg+0x170/0x220 [ 1512.052664][T21130] ? __pfx___sys_sendmsg+0x10/0x10 [ 1512.052686][T21130] ? rcu_is_watching+0x12/0xc0 [ 1512.052703][T21130] do_syscall_64+0x115/0x870 [ 1512.052717][T21130] ? clear_bhb_loop+0x40/0x90 [ 1512.052730][T21130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.052741][T21130] RIP: 0033:0x7f66a139ce59 [ 1512.052750][T21130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1512.052761][T21130] RSP: 002b:00007f66a2298028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1512.052772][T21130] RAX: ffffffffffffffda RBX: 00007f66a1615fa0 RCX: 00007f66a139ce59 [ 1512.052779][T21130] RDX: 0000000000008000 RSI: 00002000000010c0 RDI: 0000000000000003 [ 1512.052785][T21130] RBP: 00007f66a2298090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.052791][T21130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.052797][T21130] R13: 00007f66a1616038 R14: 00007f66a1615fa0 R15: 00007ffc20cf1e38 [ 1512.052811][T21130] [ 1512.058771][T21126] IPv6: Can't replace route, no match found [ 1512.275254][ T5351] usb 4-1: language id specifier not provided by device, defaulting to English [ 1512.306203][ T5351] usb 4-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 1512.330397][T21084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.341145][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.350870][ T5351] usb 4-1: Product: 剰吉䫲ᙿ겉⿃눊礦숊姸曱慩貭䓋챺༗撵彪蝑眡•毭曐떔咗龚⛻㻛賜擐핅ꡊ蕉緶読錦덪䷂ጢ턌椏외⨯閞夢 [ 1512.373731][T21084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1512.385731][T21133] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1512.385893][ T5351] usb 4-1: SerialNumber: 鯄㊻ⓩ畄⠅ᅙ吣ᣲꗜߍͷ퐈卑⇇謞鈀།꿜퇃䦞甥뿮ᭆ皀遆？챒溿ຉ嚀뺜詚ꁴꅑ⡙峥㔭歐£㷲⋱IJ랔授남櫚韾癳걟寸Ͽงࣳ៭ꨏ渴ꘞ軵镄ﻙ̅⠖㳄鼲䝹䋄筋蹲錭믑䭨売䍈訹弞埣⠠苆粅䒦㰧︽뛒醻㏹ [ 1512.392243][T21133] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1512.442878][T21084] team0: Port device team_slave_0 added [ 1512.452681][T21084] team0: Port device team_slave_1 added [ 1512.459953][T21133] vhci_hcd vhci_hcd.0: Device attached [ 1512.501958][T21084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1512.501987][T21134] vhci_hcd: connection closed [ 1512.509185][ T1025] vhci_hcd vhci_hcd.1: stop threads [ 1512.519247][ T1025] vhci_hcd vhci_hcd.1: release socket [ 1512.524749][ T1025] vhci_hcd vhci_hcd.1: disconnect device [ 1512.530406][T21084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1512.557899][T21084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1512.592575][T21084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.599624][T21084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1512.647744][T21084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1512.673842][ T5351] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 1512.689004][ T5351] dvb-usb: bulk message failed: -22 (3/0) [ 1512.705240][ T5351] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 1512.722709][ T5351] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 1512.754024][ T5351] usb 4-1: media controller created [ 1512.760205][T21084] hsr_slave_0: entered promiscuous mode [ 1512.767113][ T5351] dvb-usb: bulk message failed: -22 (5/0) [ 1512.774769][T21084] hsr_slave_1: entered promiscuous mode [ 1512.781407][ T5351] dvb-usb: MAC address reading failed. [ 1512.816244][T21084] debugfs: 'hsr0' already exists in 'hsr' [ 1512.823883][ T5351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1512.832541][T21084] Cannot create hsr debugfs directory [ 1512.856785][ T5351] dvb-usb: bulk message failed: -22 (6/0) [ 1512.900950][ T5351] dvb-usb: bulk message failed: -22 (6/0) [ 1512.930463][ T5351] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 1513.003396][ T5351] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 1513.219066][ T5351] dvb-usb: schedule remote query interval to 100 msecs. [ 1513.325543][ T5351] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 1513.364383][ T5351] usb 4-1: USB disconnect, device number 75 [ 1513.441345][ T5351] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 1513.498649][T21146] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1513.505196][T21146] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1513.514232][T21146] vhci_hcd vhci_hcd.0: Device attached [ 1513.550288][T21148] vhci_hcd: connection closed [ 1513.550597][T20260] vhci_hcd vhci_hcd.3: stop threads [ 1513.587811][T21150] binder_alloc: 21145: binder_alloc_buf, no vma [ 1513.590964][T20260] vhci_hcd vhci_hcd.3: release socket [ 1513.611822][T20260] vhci_hcd vhci_hcd.3: disconnect device [ 1513.667485][T21147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3687'. [ 1513.802974][T21084] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1513.810590][ T4934] Bluetooth: hci7: command tx timeout [ 1513.813894][T21084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1513.826657][T21084] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1513.837450][T21084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1513.846935][T21084] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1513.862271][T21084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1513.878755][T21084] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1513.901427][T21084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1514.102230][T21156] IPv6: Can't replace route, no match found [ 1514.428030][T21165] binder: BINDER_SET_CONTEXT_MGR already set [ 1514.434332][T21165] binder: 21163:21165 ioctl 4018620d 200000004a80 returned -16 [ 1514.692177][ T31] INFO: task syz.4.3244:19368 blocked for more than 143 seconds. [ 1514.702274][ T31] Tainted: G L syzkaller #0 [ 1514.722667][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1514.739969][ T31] task:syz.4.3244 state:D stack:26696 pid:19368 tgid:19326 ppid:18520 task_flags:0x400140 flags:0x00080002 [ 1514.752988][ T31] Call Trace: [ 1514.757846][ T31] [ 1514.765092][T21084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.772028][ T31] __schedule+0x1295/0x67a0 [ 1514.779209][ T31] ? __pfx___schedule+0x10/0x10 [ 1514.803852][ T31] ? find_held_lock+0x2b/0x80 [ 1515.562725][ T31] ? schedule+0x2bf/0x390 [ 1515.567765][ T31] schedule+0xdd/0x390 [ 1515.611214][T21171] lo speed is unknown, defaulting to 1000 [ 1515.693715][ T31] schedule_timeout+0x1b2/0x280 [ 1515.703622][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1515.717908][T21084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.726100][ T31] ? __wait_for_common+0x2da/0x4c0 [ 1515.736968][ T31] ? rcu_is_watching+0x12/0xc0 [ 1515.742139][ T31] __wait_for_common+0x2e7/0x4c0 [ 1515.747164][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1515.752787][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1515.761568][ T31] ? find_held_lock+0x2b/0x80 [ 1515.766258][ T31] ? __flush_work+0x928/0xcb0 [ 1515.772163][ T31] ? __flush_work+0x928/0xcb0 [ 1515.776962][ T31] ? __flush_work+0x4ca/0xcb0 [ 1515.782173][ T31] __flush_work+0x7c7/0xcb0 [ 1515.787076][ T31] ? __pfx___flush_work+0x10/0x10 [ 1515.792475][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1515.797984][ T31] ? __pfx___might_resched+0x10/0x10 [ 1515.820783][ T31] ? rcu_is_watching+0x12/0xc0 [ 1515.832576][ T31] p9_fd_close+0x299/0x5a0 [ 1515.854487][ T31] p9_client_create+0x678/0xd40 [ 1515.874872][ T31] ? __pfx_p9_client_create+0x10/0x10 [ 1515.890819][ T4934] Bluetooth: hci7: command tx timeout [ 1515.891919][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.899334][ T31] ? __init_rwsem+0x10e/0x180 [ 1515.903296][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1515.918110][ T31] v9fs_session_init+0x3c/0xd20 [ 1515.948387][ T31] ? kasan_save_track+0x14/0x30 [ 1515.982147][ T31] v9fs_get_tree+0xb8/0xb50 [ 1515.996823][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.003953][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.013396][ T31] ? rcu_is_watching+0x12/0xc0 [ 1516.020553][ T31] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1516.027428][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1516.038330][ T31] ? security_capable+0x80/0x260 [ 1516.044852][ T31] vfs_get_tree+0x92/0x320 [ 1516.049297][ T31] path_mount+0x7d0/0x23d0 [ 1516.053844][ T31] ? __pfx_path_mount+0x10/0x10 [ 1516.058709][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 1516.064224][ T31] ? putname+0xb1/0x110 [ 1516.068825][ T31] ? kmem_cache_free+0x127/0x6c0 [ 1516.075788][ T31] ? __x64_sys_mount+0x293/0x310 [ 1516.081167][ T31] __x64_sys_mount+0x293/0x310 [ 1516.085933][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 1516.092222][ T31] ? rcu_is_watching+0x12/0xc0 [ 1516.097016][ T31] do_syscall_64+0x115/0x870 [ 1516.101633][ T31] ? clear_bhb_loop+0x40/0x90 [ 1516.106299][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.112279][ T31] RIP: 0033:0x7f137239ce59 [ 1516.116692][ T31] RSP: 002b:00007f1373191028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1516.125106][ T31] RAX: ffffffffffffffda RBX: 00007f1372616180 RCX: 00007f137239ce59 [ 1516.133542][ T31] RDX: 0000200000000040 RSI: 0000200000000180 RDI: 0000000000000000 [ 1516.141686][ T31] RBP: 00007f1372432d6f R08: 0000200000000100 R09: 0000000000000000 [ 1516.149652][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1516.157998][ T31] R13: 00007f1372616218 R14: 00007f1372616180 R15: 00007ffe575ef728 [ 1516.166272][ T31] [ 1516.453676][ T31] [ 1516.453676][ T31] Showing all locks held in the system: [ 1516.545710][ T31] 3 locks held by kworker/0:0/9: [ 1516.564101][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1516.593340][ T31] #1: ffffc900000e7d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1516.609001][ T31] #2: ffff88806ae0a250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 1516.630845][ T31] 1 lock held by khungtaskd/31: [ 1516.640737][ T31] #0: ffffffff8e7e55e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1516.670665][ T31] 4 locks held by kworker/u8:2/36: [ 1516.677288][ T31] #0: ffff88801c6c0940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1516.704003][ T31] #1: ffffc90000ac7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1516.730600][ T31] #2: ffffffff905ea608 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1516.750600][ T31] #3: ffffffff90603360 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1516.763357][ T31] 3 locks held by kworker/u8:8/1025: [ 1516.783835][ T31] #0: ffff888032bc4140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1516.810592][ T31] #1: ffffc90004d2fd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1516.830592][ T31] #2: ffffffff90603360 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 1516.850773][ T31] 2 locks held by getty/5375: [ 1516.860594][ T31] #0: ffff888037e020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1516.890158][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1516.900360][ T31] 3 locks held by kworker/1:4/5719: [ 1516.905628][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1516.916116][ T31] #1: ffffc90003cd7d08 (key_gc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1516.925613][ T31] #2: ffffffff8e7f1128 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1516.936151][ T31] 3 locks held by kworker/u8:10/5921: [ 1516.941570][ T31] #0: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1516.951529][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 1516.960198][ T31] #2: ffff8880b8526358 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6e7/0xca0 [ 1516.969171][ T31] 2 locks held by kworker/1:2/17895: [ 1516.974453][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1516.984897][ T31] #1: ffffc9000654fd08 (p9_poll_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1516.995333][ T31] 1 lock held by syz.1.3063/18506: [ 1517.000461][ T31] #0: ffff888059cc0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1517.010078][ T31] 3 locks held by kworker/1:5/19174: [ 1517.015407][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1517.025886][ T31] #1: ffffc9000474fd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1517.035567][ T31] #2: ffffffff8e7f1128 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1517.045595][ T31] 1 lock held by syz.3.3401/20004: [ 1517.050711][ T31] #0: ffff8880506d0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1517.060292][ T31] 1 lock held by syz-executor/21084: [ 1517.065573][ T31] #0: ffff888085bccea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1517.075171][ T31] 1 lock held by syz.7.3693/21168: [ 1517.080248][ T31] #0: ffffffff90603360 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1517.089815][ T31] [ 1517.105044][ T31] ============================================= [ 1517.105044][ T31] [ 1517.119090][ T31] NMI backtrace for cpu 0 [ 1517.119107][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1517.119130][ T31] Tainted: [L]=SOFTLOCKUP [ 1517.119136][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1517.119146][ T31] Call Trace: [ 1517.119152][ T31] [ 1517.119159][ T31] dump_stack_lvl+0x100/0x190 [ 1517.119184][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1517.119205][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1517.119226][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1517.119255][ T31] sys_info+0x141/0x190 [ 1517.119278][ T31] watchdog+0xcb1/0x1030 [ 1517.119303][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1517.119325][ T31] ? __pfx_watchdog+0x10/0x10 [ 1517.119345][ T31] ? __kthread_parkme+0x18c/0x230 [ 1517.119375][ T31] ? kthread+0x13a/0x450 [ 1517.119393][ T31] ? __pfx_watchdog+0x10/0x10 [ 1517.119411][ T31] kthread+0x370/0x450 [ 1517.119430][ T31] ? __pfx_kthread+0x10/0x10 [ 1517.119451][ T31] ret_from_fork+0x72b/0xd50 [ 1517.119472][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.119492][ T31] ? __switch_to+0x800/0x1100 [ 1517.119515][ T31] ? __pfx_kthread+0x10/0x10 [ 1517.119534][ T31] ret_from_fork_asm+0x1a/0x30 [ 1517.119566][ T31] [ 1517.119573][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1517.251177][ C1] NMI backtrace for cpu 1 [ 1517.251194][ C1] CPU: 1 UID: 0 PID: 5719 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 1517.251215][ C1] Tainted: [L]=SOFTLOCKUP [ 1517.251221][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1517.251230][ C1] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 1517.251255][ C1] RIP: 0010:__skb_flow_dissect+0x1d6b/0x6b70 [ 1517.251274][ C1] Code: 8d 78 08 48 89 c1 48 89 c2 48 c7 00 00 00 00 00 48 83 e7 f8 48 c7 40 48 00 00 00 00 31 c0 48 29 f9 83 c1 50 c1 e9 03 f3 48 ab <48> c7 42 54 00 00 00 00 48 c7 42 60 00 00 00 00 c7 42 68 00 00 00 [ 1517.251288][ C1] RSP: 0018:ffffc90003cd7140 EFLAGS: 00000206 [ 1517.251299][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1517.251308][ C1] RDX: fffff5200079ae3a RSI: ffffffff895d157c RDI: fffff5200079ae88 [ 1517.251317][ C1] RBP: ffffc90003cd7580 R08: 0000000000000003 R09: 000000000000fb88 [ 1517.251327][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1517.251335][ C1] R13: 000000000000ff80 R14: ffffc90003cd7618 R15: 0000000000000000 [ 1517.251344][ C1] FS: 0000000000000000(0000) GS:ffff888124483000(0000) knlGS:0000000000000000 [ 1517.251359][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1517.251368][ C1] CR2: 0000558c91f1f168 CR3: 000000000e596000 CR4: 00000000003526f0 [ 1517.251377][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1517.251385][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1517.251394][ C1] Call Trace: [ 1517.251399][ C1] [ 1517.251410][ C1] ? __pfx___skb_flow_dissect+0x10/0x10 [ 1517.251436][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1517.251459][ C1] ? find_held_lock+0x2b/0x80 [ 1517.251471][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1517.251490][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1517.251513][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1517.251529][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1517.251546][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1517.251565][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1517.251582][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1517.251600][ C1] ? __skb_get_hash_net+0xc2/0x560 [ 1517.251615][ C1] ? __asan_memset+0x23/0x50 [ 1517.251633][ C1] __skb_get_hash_net+0xc2/0x560 [ 1517.251649][ C1] ? __pfx___skb_get_hash_net+0x10/0x10 [ 1517.251665][ C1] ? find_held_lock+0x2b/0x80 [ 1517.251676][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1517.251694][ C1] ? unwind_next_frame+0x3be/0x2090 [ 1517.251715][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1517.251736][ C1] encrypt_packet+0x756/0x8e0 [ 1517.251756][ C1] ? __pfx_encrypt_packet+0x10/0x10 [ 1517.251801][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1517.251820][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 1517.251841][ C1] wg_packet_encrypt_worker+0x2c0/0xbd0 [ 1517.251861][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 1517.251879][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 1517.251907][ C1] ? rcu_is_watching+0x12/0xc0 [ 1517.251928][ C1] process_one_work+0xa0e/0x1980 [ 1517.251951][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1517.251970][ C1] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 1517.251991][ C1] worker_thread+0x5ef/0xe50 [ 1517.252011][ C1] ? kthread+0x13a/0x450 [ 1517.252025][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1517.252041][ C1] kthread+0x370/0x450 [ 1517.252055][ C1] ? __pfx_kthread+0x10/0x10 [ 1517.252070][ C1] ret_from_fork+0x72b/0xd50 [ 1517.252087][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.252104][ C1] ? __switch_to+0x800/0x1100 [ 1517.252123][ C1] ? __pfx_kthread+0x10/0x10 [ 1517.252138][ C1] ret_from_fork_asm+0x1a/0x30 [ 1517.252162][ C1] [ 1517.701721][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1517.708601][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1517.719283][ T31] Tainted: [L]=SOFTLOCKUP [ 1517.723590][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1517.733631][ T31] Call Trace: [ 1517.736888][ T31] [ 1517.739805][ T31] dump_stack_lvl+0x100/0x190 [ 1517.744468][ T31] vpanic+0x552/0x970 [ 1517.748429][ T31] ? __pfx_vpanic+0x10/0x10 [ 1517.752908][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1517.759053][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1517.765195][ T31] panic+0xd1/0xe0 [ 1517.768894][ T31] ? __pfx_panic+0x10/0x10 [ 1517.773294][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1517.779431][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1517.785571][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1517.791711][ T31] ? watchdog.cold+0x1ec/0x234 [ 1517.796453][ T31] ? watchdog+0xcc1/0x1030 [ 1517.800852][ T31] watchdog.cold+0x1fd/0x234 [ 1517.805427][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1517.811222][ T31] ? __pfx_watchdog+0x10/0x10 [ 1517.815891][ T31] ? __kthread_parkme+0x18c/0x230 [ 1517.820909][ T31] ? kthread+0x13a/0x450 [ 1517.825134][ T31] ? __pfx_watchdog+0x10/0x10 [ 1517.829792][ T31] kthread+0x370/0x450 [ 1517.833839][ T31] ? __pfx_kthread+0x10/0x10 [ 1517.838411][ T31] ret_from_fork+0x72b/0xd50 [ 1517.842985][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1517.848078][ T31] ? __switch_to+0x800/0x1100 [ 1517.852739][ T31] ? __pfx_kthread+0x10/0x10 [ 1517.857310][ T31] ret_from_fork_asm+0x1a/0x30 [ 1517.862072][ T31] [ 1517.865287][ T31] Kernel Offset: disabled [ 1517.869584][ T31] Rebooting in 86400 seconds..