last executing test programs: 8m40.848146467s ago: executing program 1 (id=631): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x62e03, 0x0) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000300)={&(0x7f0000000280)=[{0x1000, 0x9010, 0x1, &(0x7f0000000180)="e0"}, {0x8, 0x7010, 0x0, 0x0}], 0x2}) ioctl$SNAPSHOT_FREE(r0, 0x3305) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000006c0)=[@in_dx={0x69, 0x20, {0xee4, 0x4}}, @set_irq_handler={0xc8, 0x20, {0x31, 0x2}}, @nested_create_vm={0x12d, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0x611, 0x3}}, @out_dx={0x6a, 0x28, {0x52f8, 0x4, 0x8000000000000001}}, @out_dx={0x6a, 0x28, {0x36c0, 0x0, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest_nat=0x6822, 0x80000001, 0x1, 0x6}}, @cpuid={0x64, 0x18, {0x37a1, 0x81}}, @nested_load_code={0x12e, 0x6b, {0x3, "0f01c1460f08c4015df3546ef466410f3acf190048b8f8000000000400000f23c80f21f8350c0050000f23f8b805000000b9000000008f2978c7870000000066ba61000fc79900800000eff04420a38d40370b"}}, @set_irq_handler={0xc8, 0x20, {0x10, 0x2}}, @code={0xa, 0x5d, {"c7442400b9000000e8442402004061ccc7442406000000000f011424490fc76e700f303665440f0766ba6100b000ee63a6b8e9000000d066ba4200b8d9000000ef660fdc7890c4237d392600"}}, @nested_vmresume={0x130, 0x18, 0x1}, @wr_crn={0x67, 0x20, {0x0, 0x6}}, @wrmsr={0x65, 0x20, {0x182, 0x3}}, @wrmsr={0x65, 0x20, {0x0, 0x10001}}, @wrmsr={0x65, 0x20, {0x8fdd4b3b5125f9e7, 0x401}}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x64, 0x18, {0xfffffff8, 0x10001}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control64=0x2010, 0x0, 0x1, 0x8}}, @code={0xa, 0x5d, {"b9800000c00f3235008000000f303e3e0f01c50f01c266baf80cb8f35d1886ef66bafc0cecb9950a0000b800000000ba010000000f300fc75b0166420fec5b00450fc770040f78016446dad0"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0xab, 0x988b, 0x9, 0xb526}}], 0x395}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x815, 0x0, 0x3}, {0x771}, {0xb23, 0x0, 0x86}]}) r3 = memfd_secret(0x0) ftruncate(r3, 0x0) r4 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0xe, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) getpid() syz_usb_control_io$sierra_net(r4, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f0000000040)={0x0, r5, 0x1, 0x4, 0x1}) 8m37.599949701s ago: executing program 1 (id=645): r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) syz_usb_connect$uac1(0x5, 0xea, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x2, 0x5, 0xff, 0x8, 0x1}, 0x155, &(0x7f0000000280)={0x5, 0xf, 0x155, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0xd, 0x2}, @generic={0xfa, 0x10, 0xf, "938259be4bf31e9dee0cb1e411021199dcd8db0c85cbd2e7151da616978e5a52b1ac49d13572f1d22ff73a3d49154399580c4d6a38ae9c6da3412498ed5fd1709f0197e12f063ffe7c40f280dc03229d913963adc6b6e78789148bab7090cd2ee889f9710497827da7e93eca66b62d9b694dcadee6b629120be63dee401a4c8bdf7ae6cc344bdc3d0da8152c82a3cffe44d05b1ef1ddeeb8dce076d4611395d025d3c1db6871b9c6fd22370522b20b8678bf5916001c4d0f3cbb3b422607fa6556d0a5947fa2e2adc747a67bfaada48c815fbca42530c886abbfc3ceb60eca6ce71d038b90399d244f01c030c7ae19ac1cb74fff1f91a0"}, @generic={0x31, 0x10, 0xa, "8ce09e06eb62c6e65d008a138691b159f80e2cfdf97a2deb5a191846f8c9058f7cd6feb7ff325cd709b189a28507"}, @ss_container_id={0x14, 0x10, 0x4, 0xa8, "16ed2edeb1120020f56c268c2ce6b973"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x32, 0x3, 0xc0d}]}}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 8m35.395679868s ago: executing program 1 (id=656): r0 = fsopen(&(0x7f0000000cc0)='exofs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e00)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000011c0)=ANY=[@ANYRES64, @ANYRESHEX=0x0, @ANYBLOB="010025bd7000ffdbdf2539000000080003007cabd02fbcbfdcaf7d56e6e29fd633abde387f5f09804177e6c17056df724c77bd9270c6f45dcdd5f17e161cf0e58c3066b9cbe7160faceaf5facdde1dc4aa1732056670aefe6d1195d7d9a9d95968a469ec2cec02c5ba5ec827abe074e277b9a3f0ed2f3a9afa7e11b3d285fb8cdafbb289b47e28ac62949198cb9608c55dd7c72403ba8025f8cb464e3ce45201ff3ea3e84c505708917782b75ab833e4b39cf4d4b192e8d18fc3871662a04b2429a01f8ec1090a386589564d3baeb91131a59e2a3632bd6c57fb7d06", @ANYRES32=r3, @ANYBLOB="1c005a801800008014000500010001000000010000000900ff7f0080"], 0x38}}, 0x0) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x2a0) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084524, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (rerun: 64) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) (async) openat$sndseq(0xffffff9c, &(0x7f00000000c0), 0x880) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r5, &(0x7f0000000ec0), 0x0, 0x20, 0x0) (async) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000f40)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fmt_Misc/register\x00\xee[oL\x038\x05\x0f\xe2\x03\x00\xc1\xf1\xbbB8:\x98\xa1`\tLR\xc6\x03\xb7\xae\x92\x85\x05\xdaA#\xc1f,t\xe6\xce6\xa3\xc7\xcd\xd7\x03\b\xfd\xd0\r[t\xe8\xe0KC\x1f/\xc0\x93P3\xd6L\xbc=\xe4^\x1f\xdfC^\x0f\x1c>\xe6V\x8b\xc2\xab\x1f\xb1\xf9\xce\xc2\x10\x81\xc8\x14A\xa4\x8f\xe0\x97\xb5\x81\xe4\x97\xb4\xfcTI\x1f\x1b\x03:\xdc3\x88}.\xae\xe2y\xafl\xdc\x06\x00\x00\x00\x00\x00\x00\x00\x01\xe3\xa8n\x9cT\x00D\xe5\xc1%\x04\x03\xcd\xb9\xfd\xb6B\x8f\xf9\xec\x18\xf3\xc0)\xb1%\xf0!(I\b\xcd.\x11t6\f\xb7\x91\x9f\xba\tC\xb6\xbd`\xa0\xbf%\x189\xcc\xf8Gj\xe9[\x17\x93\x1b,\xf3\x05\xb6\xb2\xc9\x9d\xd6\xaa\x890\xd1\xdd\xbaj\x89bN(\xf8L\xc10\x0f\xbc\x18N\x95\xd3\x83\f\x9d\xbb\x8d\x86\xf8\xf9\x01\x00\xcb5\xd8\x8b\xf2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x80i\xd4\x9f\x99x\xe1\xa4f(\f\x00\x00|:\x8c\x16\n\xc6\xe3=W\xe4-\x11\x91\xe9\xfek?0\xbd\xa7\x06\xf0nq61\x98\x8b\x83\n\xd0\xa7i\x02\xa6\xfc\xf9\xfd\x95\xe6\xd1\x84\x00\xd1\xbf\x03\x9a\x01\xfa\x0e\x84[7^N\x82\xfd\xd3\x8c\fir\xbc\xfd\xa9eA\xb8\x8cL\nK\x8d\xdf\x8d\x9b\xd2\x196\xa0\x9co\xfb\xbbi$\x0e\xa8\x80\xdf\xf10x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r9}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r1}, 0x94) mkdir(&(0x7f0000000680)='./file0\x00', 0x0) 8m34.894449642s ago: executing program 1 (id=659): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xecac}, &(0x7f0000000140)=0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x18a100a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) syz_pidfd_open(r4, 0x0) (async) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, 0x0) setns(r6, 0x66020000) (async) setns(r6, 0x66020000) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x20000) get_robust_list(0x0, 0x0, 0xffffffffffffffff) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102, 0xffffffffffffffff, "fa5a86dae3018d273a4716649c554d595159d60ad8c508c6ac85ec54c64ce747", 0xb260, 0x8000, 0x200, 0x1000}, 0x3c) (async) setsockopt$MRT_DEL_MFC(r7, 0x0, 0xcd, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102, 0xffffffffffffffff, "fa5a86dae3018d273a4716649c554d595159d60ad8c508c6ac85ec54c64ce747", 0xb260, 0x8000, 0x200, 0x1000}, 0x3c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0/../file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x10001, 0x1, 0x28}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x10001, 0x1, 0x28}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r8}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='fsi_master_gpio_cmd_abs_addr\x00', r9, 0x0, 0x7}, 0x18) landlock_restrict_self(r0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 8m34.28812374s ago: executing program 1 (id=663): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x9c72c5ea1c8d824, &(0x7f0000000040)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(r0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9c5c2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) 8m33.980020079s ago: executing program 1 (id=664): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x455, 0x4000000b, r0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) syz_io_uring_setup(0x4951, 0x0, 0x0, &(0x7f0000000380)) (async) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) (async) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000280)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x4, 0x400201) (async) r5 = fsmount(0xffffffffffffffff, 0x1, 0x70) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000040)={0xe}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000000800018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') 8m33.859478139s ago: executing program 32 (id=664): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) getpid() (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) fanotify_mark(0xffffffffffffffff, 0x455, 0x4000000b, r0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) syz_io_uring_setup(0x4951, 0x0, 0x0, &(0x7f0000000380)) (async) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) (async) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000280)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x4, 0x400201) (async) r5 = fsmount(0xffffffffffffffff, 0x1, 0x70) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000040)={0xe}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000feffffff000000000000800018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200000000000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') 11.65490728s ago: executing program 0 (id=2376): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac02058040670916900000001090212ee00000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "d8b7e8b60600", "c09fa5b5383aa9fccd47ee2de2b3c965", "3e6a956b", "850c590da718da48"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "4a027050209ffeca", "9acc4f9a763acb80a0adcc6694ab1100", "d0d395e6", "96c3178e95b78fbd"}, 0x28) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f0000000100)) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000003000000060000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000050, &(0x7f0000000540)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000480)={'rti802\x00', [0xb02f, 0x401, 0xdf, 0x3, 0x88d7, 0x80000004, 0x1007, 0x8001, 0x1002, 0xffffffff, 0x200081, 0x7, 0x10000006, 0x7d08, 0x5, 0x1ff, 0x8, 0x3, 0xb, 0x8e, 0xd2, 0x80000001, 0x2, 0xa, 0x5, 0x80004, 0xb0c5, 0xe, 0xbbf, 0x400002, 0x4000004]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 7.795556319s ago: executing program 5 (id=2390): madvise(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r4, 0x80) accept$netrom(r4, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.637294812s ago: executing program 5 (id=2394): sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) (async) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000080)='irq_noise\x00', r2}, 0xfffffffffffffe0e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x14, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100c28, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 6.546391776s ago: executing program 0 (id=2395): mount(&(0x7f0000000000)=@sr0, 0x0, &(0x7f0000000180)='omfs\x00', 0x1000048, 0x0) waitid(0x1, 0x0, 0x0, 0x1000008, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x2b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) rt_sigqueueinfo(r5, 0x1, &(0x7f0000000f40)={0x1b, 0x8, 0x7}) 5.884533236s ago: executing program 4 (id=2399): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000340), 0x8) (async, rerun: 32) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f00000002c0)=0xa4) (async, rerun: 32) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="3400000040000701feffffff00000000017c0000040042800c00018006000600800a0000100002800900148004"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) r6 = socket(0x10, 0x2, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xfffffff7, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x8000, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x8004) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x0, r4}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2d) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1b, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', r8, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000000)=@arm64={0x3, 0xff, 0x6, '\x00', 0x3eb6}) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000040)={0x5a000}) 5.882345842s ago: executing program 4 (id=2400): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x48}}, 0x4024) 5.840016878s ago: executing program 4 (id=2401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01001f774d20611e032f1b00000010002e800600040000000000000000000c00060001"], 0x30}}, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0xac03, 0x0) fcntl$setlease(r3, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000580)=""/200, 0xc8, 0x69a) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) mkdir(&(0x7f0000000100)='./bus\x00', 0x3eb) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=""/4096, 0x1000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x2fe}, "9bb26bd11b70bcf4", "47407aa7a310fdd5bd3f779dae026957", "0cfda54b", "4d1190381540e7dd"}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083000000000000000100000085000000280000e5ca800b6bee043f180085000000500000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000280)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) close(r6) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x39, 0x1a, r6, 0x0) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0xffffe000) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_128={{0x303}, "d76867ee78d4c1d9", "33b719562ae46d08ec38ca3112984a29", "1ce76966", "bf595f7c6c22d9c7"}, 0x28) 5.660844569s ago: executing program 5 (id=2402): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083911000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) getsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 5.568899575s ago: executing program 0 (id=2403): socket(0xa, 0x3, 0x3a) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 64) syz_open_dev$video(&(0x7f00000002c0), 0x1d24, 0x23635de98486b93e) (rerun: 64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff, 0x2}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000180)=""/88, 0x58}, {&(0x7f0000000500)=""/191, 0xbf}], 0x2, 0x5, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) (async, rerun: 32) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async, rerun: 32) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac6000/0x1000)=nil, 0x1000, 0x1000000, 0x8010, 0xffffffffffffffff, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) (async) r6 = socket$inet(0x2, 0x2, 0x1) shutdown(r6, 0x0) (async, rerun: 64) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (async, rerun: 64) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) 5.397027117s ago: executing program 0 (id=2405): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x2004c804) fcntl$notify(0xffffffffffffffff, 0x402, 0x2b) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf9fdd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) 5.375295453s ago: executing program 5 (id=2406): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac02058040670916900000001090212ee00000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, "d8b7e8b60600", "c09fa5b5383aa9fccd47ee2de2b3c965", "3e6a956b", "850c590da718da48"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "4a027050209ffeca", "9acc4f9a763acb80a0adcc6694ab1100", "d0d395e6", "96c3178e95b78fbd"}, 0x28) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, 0x0, &(0x7f0000000100)) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000003000000060000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000050, &(0x7f0000000540)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000480)={'rti802\x00', [0xb02f, 0x401, 0xdf, 0x3, 0x88d7, 0x80000004, 0x1007, 0x8001, 0x1002, 0xffffffff, 0x200081, 0x7, 0x10000006, 0x7d08, 0x5, 0x1ff, 0x8, 0x3, 0xb, 0x8e, 0xd2, 0x80000001, 0x2, 0xa, 0x5, 0x80004, 0xb0c5, 0xe, 0xbbf, 0x400002, 0x4000004]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 4.776222961s ago: executing program 4 (id=2407): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="a644ae", 0x3, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(r3, 0x5, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbf21, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x102}}}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) shutdown(r0, 0x1) 4.576350142s ago: executing program 3 (id=2408): ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x1, 0x3, 0x4, 0x0, 0x2}) (async) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x1, 0x3, 0x4, 0x0, 0x2}) r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x3, 0x1, @stop_pts=0x5b3f}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) fchown(r0, 0xee00, r2) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/166, 0xa6) (async) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/166, 0xa6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x480000) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x480000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000380)={0x10000, 0x2, 0x0, 'queue0\x00', 0xf}) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000380)={0x10000, 0x2, 0x0, 'queue0\x00', 0xf}) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000480)={0x0, 0x3, 0x2, 0x0, 0x4}) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000004c0)={0x3, 0x3, 0x6, {0x8000, 0x6, 0x9, 0x7}}) io_setup(0x9, &(0x7f0000000500)) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000540)) accept4$unix(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x6e, 0x80000) (async) r6 = accept4$unix(0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000000600)=0x6e, 0x80000) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = fcntl$getown(r0, 0x9) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000029c0), 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000002a00)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002a40)={{{@in=@multicast2, @in6}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000002b40)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002a40)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000002b40)=0xe8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000002b80)={{0x1, 0x1, 0x18, r3, {0x100}}, '\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000004480)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f00000044c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000044c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000006500)='./file0\x00', &(0x7f0000006540), 0x100) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000006500)='./file0\x00', &(0x7f0000006540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) socket$inet6(0xa, 0x2, 0x6f) (async) r16 = socket$inet6(0xa, 0x2, 0x6f) r17 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006600)={&(0x7f00000065c0)='thread_noise\x00', r3, 0x0, 0xd98}, 0x18) r18 = inotify_init() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000006640)=0x0) r20 = syz_clone3(&(0x7f0000006c40)={0x100, &(0x7f0000006a80), &(0x7f0000006ac0), &(0x7f0000006b00), {0x1}, &(0x7f0000006b40)=""/47, 0x2f, &(0x7f0000006b80)=""/65, &(0x7f0000006c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0xa}, 0x58) sendmmsg$unix(r6, &(0x7f0000007140)=[{{&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000940)=[{&(0x7f00000006c0)="add742365ec21829f48c24edc41f3cbf8e9569fb12ce36f9d077a900e9cfd05ce7420196e76b12588ba3356c132af488ce8a068a2b38609bb50b60d49c7775f59ab97e89382040", 0x47}, {&(0x7f0000000740)="d241b333a7572cdd72cc5778cfd676a84ccda089fd87bc258301124389331abf2e4e44c01415b07804c61b560dcd70bf071f0b43b05d6a221c0e3e9a5703551f22788ff1e24b568e6f7298083a932d9bf68d5f772918ef51484782f32ac76c529d8a8beba7af01d9285157478c974d11d5ace7efa753cc26765994798f9110de32505a676a036f2256f9e12a800e63e8b8d15eba8b193f9d6c2f7617403fe451dec61c0a4d79e669c9fc83a7df15ddf61ed956837f7ad1bcb45a4ee39a46eca7dc5a878f3529dcce585663632570feba7e58b40dab", 0xd5}, {&(0x7f0000000840)="dbbc23d89c59d555712c1a4a70e95c9a1217747767029dc675e50351345a5a9d03acf25782646d89be3fe3f8b2b8a86f4118d1379702380a42d1103cb335caedc28ab188a6b4842675dd064da2bbc26d72a16b63db0ecdf927f96472502a79e8742a60f976ff5521ffc25abe40c43ab15384b32132ebdafce46bbfe8c9c8d1cc03283ad7509fa425045c6335722be04fc88c134c64ca4320d89da11c25257e30fdedfa1184b09a54881c94f4f0fa85bded0e9222c9dbe330ae29db0a5b8101afb1f8309808c6d7d676bc", 0xca}], 0x3, &(0x7f0000002bc0)=[@rights={{0x24, 0x1, 0x1, [r4, r3, r4, r5, r5]}}, @rights={{0x2c, 0x1, 0x1, [r5, r5, r0, r4, r0, r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r1, r2}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r8, r1, r2}}}, @rights={{0x1c, 0x1, 0x1, [r5, r9, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r4, r4, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r2}}}, @rights={{0x38, 0x1, 0x1, [r4, r0, r3, r0, r0, r5, r12, r4, r4, r4]}}], 0x168, 0x10}}, {{&(0x7f0000002d40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000002dc0)="3de81d550c34a9a3e438460ac1c31ca444ccda765c5a3432021752036e1c2ee8410902005b5f460db5ac149c72550ca5f00dadf44057cc9d5a42a81dbf052410db78d174805a2c26e96a8c58b355bcb92d65f7e62502b6c9f6d993ec885c4abfd20dc33cf72f94037f4ed3539c09e368ce49e348be33edbdcefaf2871d7f9bc305", 0x81}, {&(0x7f0000002e80)="ab4d78b26bd38faee0abbd13ae5812ba0734166f65cd51a0098c0c70277f4ddad4011bde726826e486277e13995b21500ad05c662ac80ba68c83ee7dc26638f5426d6b2db6ea54712d5e3304c6ef1d617ffdaff10fb4e026a14b95f17494813445146736dbb8faaaaebd04854da29b76b1824056ca848bf65e159d8e518d69356d303ffee71beb15f2c8c1341780b32aad2aa8aeeae4ab51e8b16be7961f6b001fdae6ca1ac5d038b46c", 0xaa}, {&(0x7f0000002f40)="aba508f9b0dcea9923bc6724b9669de4198349f5e94c6ba7d1e2e03477468887506e292704650eea74b07e", 0x2b}, {&(0x7f0000002f80)="39af097a65737baa458cc31ed34c1847f05fadf724c8868d8c0a709bcf95673dcc3c263165bfea61141b7bd09b111b439f1d123afa115d50dfee8f2c8acd", 0x3e}, {&(0x7f0000002fc0)="b21219a6e711ea0d0a9e9d057b874547fccc74446595ae597611d066da2c6a166d3a65cf1752c1500c0f29c9d5dde73f", 0x30}], 0x5, 0x0, 0x0, 0x40000}}, {{&(0x7f0000003080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003100), 0x0, &(0x7f0000003140)=[@cred={{0x1c, 0x1, 0x2, {0x0, r1, r2}}}], 0x20, 0x5}}, {{&(0x7f0000003180)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004400)=[{&(0x7f0000003200)="c89a208c712aec176e46028a9b36a78bc3bb69f38c8e89c00653999650", 0x1d}, {&(0x7f0000003240)="2aece01de4f94a6da6a43b8439ca48700726bb96faffb4f88371a4a57b5dd0a74a46307e7241d34783068a7fd7bfa7adac5ddec68cef7b0089f961ad52830f9343391e0d0e24a10d2dd9e91b72bc8b88bb57c39990a1352c1e17ef87ba543d843a497be7dfe0894e5895aaf83ea99ddbe0e69e8b2562c5461754bf096b74fa982da749656c70bd943860508324030410904afe97464870a1edfb973cb005ed804baed9c3803104de90822fc3fd306d5f05f0d71002bd8e2e15e16cf852", 0xbd}, {&(0x7f0000003300)="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", 0x1000}, {&(0x7f0000004300)="f067c298d79d03093060182ed6e24ab6822caac4bf821c342ecad6f1505f93f806665eaa7d6595ae6acfa4624e715a835f7d7280818319b7f758f2443a236373", 0x40}, {&(0x7f0000004340)="bfe087d9503155d17a0b547cac22e70e34aa8d5beea2d2aeecf5c79230e34a18f843b0c81c92dca8", 0x28}, {&(0x7f0000004380)="8c5c8d1c26e209e0ab10473994e149dbdb59d6a8ec5377022793f7cdf448562f13463c954a16c2ce4174ad82956b12eb9a", 0x31}, {&(0x7f00000043c0)="f4a80922276ad3307cf1bc8b4b6c0c0ed495b2051b45c863d03935ea40b399a596d760a8c5d4effdc32014c1539ad5b8d31ce55ae577", 0x36}], 0x7, &(0x7f0000006680)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x1c, 0x1, 0x1, [r5, r4, r13]}}, @rights={{0x28, 0x1, 0x1, [r3, r5, 0xffffffffffffffff, r4, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, r1, r2}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, r15}}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, r3, r5, r0, r4, r3, r5]}}, @rights={{0x24, 0x1, 0x1, [r3, r4, r16, r17, r0]}}, @rights={{0x30, 0x1, 0x1, [r0, r3, r5, r3, r4, r0, r3, r18]}}, @cred={{0x1c, 0x1, 0x2, {r19, r1, 0xee00}}}], 0x148, 0x4080}}, {{&(0x7f0000006800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000006a40)=[{&(0x7f0000006880)="d1d8c1b494259bfaa1729a36eb4ceaa1d39635cf6632ba4e3a1b9871e64258d05609e48a4f2f81c3e6a965a5e7e8", 0x2e}, {&(0x7f00000068c0)="e372a5bea5cd110d01415cd4d52a750c193baab9352e806ab9b7bb370bae6cf4906572186e5e16680ffeb3e2cf4b51cef319778ea976ff5ec543df1b78bdb65f06fd9e4e0c4416191bfb967a231dcd0b08fee92d78340e1e6a23216c81398d67a4a34aa207459573984a95bbb14cdc9b9d6ddd3bc202384f820fa8272ee362fccfbaa64a9cc043943527c5726765392400a706b0e90136d02f49f14c77fad203aa9122704662c221e22b1e9d401051af297dc4de9a770647e9ca72786698175a97aff9c42260a2e1119d9f0d703f0cd3907040a36e45de46bf3fb85cc309", 0xde}, {&(0x7f00000069c0)="64e6f1410f44c5fae16ce69d46e2f98baf0d969bb48481a19d5e55c03d325b3c204b54ba2904e453ae82cfc17238153c9cb2295223aae74f4c0fd18dcd92a7875fb9740b30", 0x45}], 0x3, &(0x7f0000007100)=[@cred={{0x1c, 0x1, 0x2, {r20, 0x0, r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x20040004}}], 0x5, 0x8001) 4.36253714s ago: executing program 2 (id=2409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async, rerun: 64) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async, rerun: 64) socket(0x1a, 0x2, 0x7) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x80000002, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) fcntl$F_SET_RW_HINT(r2, 0x40c, 0x0) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) timer_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) (async) timer_gettime(0x0, &(0x7f0000000300)) (async) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) memfd_create(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000640)=@ethtool_regs={0x4, 0xa, 0xc1, "a51ff654acfebc75c3d036a5ce1af44793d5e316bc1f7bcc2f8105baf9a56150e37df09208ad0ba6781ecab3584795e34319f828bd3a7599e8ad5b3214e40a93df0dd6da92f9fca4bc27ff2029c16de7c61550c7693c1c9a22c400730a366f910ee1f2ac2dfdbca75b3e0ba20d13499ea3a634e8ac0926be9abc05e6491971d4eca13fde43d32e8009fe9801ff71e08b302638437ddb29def179c46303ced8165165c3fe2d7a04bd91ba7878e750b5e9895f73ad52e71a8e027936880231840747"}}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x0, 'syz0\x00', 0x1}) ioprio_set$pid(0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) pipe(0x0) 4.020709854s ago: executing program 2 (id=2410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={0x0, 0x1, 0x6, @multicast}, 0x10) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0)=0x9d, 0x4) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) 4.020312161s ago: executing program 4 (id=2411): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000000)=[@wr_crn={0x67, 0x20, {0x0, 0x1}}, @cpuid={0x64, 0x18, {0x8, 0x4}}], 0x38}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000000c0)={[0xfffffffffffffff9, 0x7fff, 0x2, 0x8, 0x26c, 0x9, 0x2, 0xe1, 0x0, 0x8, 0x2, 0x6, 0x401, 0x1, 0xbc, 0x7d], 0xd000, 0x4000}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x84, &(0x7f0000000240)=@string={0x84, 0x3, "4c815b4460d2a854788b7a1d4670d3ba9cfcab43604301d3b21c5d0eba9bcf579f67254dab4205790f9818a6a8f733aed80a2e593b0b688729ce21b6f7c8462f10e2dda2edc816dac7e8b60c380df409ff127eae0e15254a5689fe8b9d59567b75cbe5b895e21b100930bd39905f0607703fbe414436a3078e392ebe9a45bc89f201"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x402}}, {0x9f, &(0x7f0000000300)=@string={0x9f, 0x3, "a96540d358131f46269184ddd62230500ac32cd5d9da5dfcc808d1f16644ceb3cd7a5cc8095a50941226e501190e02e28c9f4c86c75d02e158fa1e6b1a6dea3ad9c341fd46d3bc5a86a2660521e638d84320a4b8ceb10edbe9696703dcaaee16f6b7450e51bf31b2d2effa16901f97d5f5e0ead197ba0e177dba5ead964ed8e7d4934088fa7fd13b98b165e677dfd0061e0c46c434fac787433415e882"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x40b}}, {0x64, &(0x7f0000000480)=@string={0x64, 0x3, "2302e990c91d51000e6fcfc604fcaf9fc31b1f8728722dc22c55b7ad62a32e0383362fbf3d4acf8c9acf4ec3eaf83275fa669c3e7fd4e654aa197b13f8b1d1cae9ef5f0602813cd60b28670dc40c9c33a2f6d82452eec7e72a252e201332f8adb7f1"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x405}}, {0x43, &(0x7f0000000500)=@string={0x43, 0x3, "754080df0dc648664a19caccf5be7909be41b6b76470738d60dd27847616f253a1bfa293c3dcfedc301a37e38925f35e6e1507a32cad8b7000a8c0fade93738f0d"}}, {0x2a, &(0x7f0000000640)=@string={0x2a, 0x3, "438499ea6263d46c04ca9de8e73b5e05479037db909b97df8b644f7186fc01e60d3032b9a4780f73"}}]}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 3.728224236s ago: executing program 3 (id=2412): socketpair$nbd(0x1, 0x1, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) io_setup(0x5, &(0x7f0000000240)=0x0) r1 = inotify_init() r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) inotify_add_watch(r1, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800800000000000007599dd02d8952a5d1044cda0c741"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) socket$l2tp(0x2, 0x2, 0x73) writev(r9, &(0x7f0000000a40)=[{&(0x7f00000006c0)="e2beb793001d26965225b722efca6f7fcfe31e7b263ff6becca1e33b11416ee2054e6c8789899aa1982066f4625b95dddd34dd74fb0d5fed4e8a5607c014c5afff6b3a89c29143ec2147eb71457f5f9f879276816036546e80a9320a5cdb8a5c993c71e8c49e1cd8ea9d927f73c8128a0acfa20718869dd5085f875ec2ed7222cefa3d7fc2e5a1584b639c2fda8708563771ffd29aa477ddaa260d7ee5fb", 0x9e}, {&(0x7f0000000380)="888639a4dfe5dedea513e1850c0335ed", 0x10}, {&(0x7f0000000500)="8635fe72d82de9e41bea5ccc9f8dcb637162330291a0b43b2f70f88b0de1984dab6edca11e4465c0406a4383090000009bf4106347e94fe657464f5f5061acc72da01b8d688af2220dc5b04fd3", 0x4d}, {&(0x7f0000000c80)="7528ce65a01a8b9978339d137fde86bf9fae7afcaf7c6e9444445bded55b568bcfcb0cffc606000000dc9ed6997bd0e624a053a9e1725a4a8de783af4c908af9e1c834f54eb2a8ef1abf72b832994ce411aff46c06263c9e0ed7f5c279ba1e39f7ac2acc0600debac0851013fc27de4133e4ca7d639cb86e225a7a9bd3ae28282f6dab15e44bb39c532a081f966ace37158b979849bb9b6a021089651ebc2e9c2183ea62d519e25218ae96efe60cda5c84b7880df81b6796512c4071d3193e60fc2581e4dc68341102656494eece07f5015074967957a7b0695ee0a110ae5c9001b619c93705fe7f5a11c873ab6b2cacba75a17c5f5ccf9fd9a72a83", 0xfc}, {&(0x7f0000000800)="2bc61d254d7fde4c7fd66a8a40306ccb936700129e23ded96a66548956779e253b517e6f475d2cd042160baf15eb442ee1cafc6a160b32589042758008d1e6335c6758d2978e5366d3bd2603222de1f5d14afc48ed73d13fb49e97de6031e9124e3b815e2dda672b45f6c4bb0ac203e7b6d2cab43402b3796db12f39132631d0428e725faf9e77c40e32b69bb7b73111b081aeb4584f8fa250203930939abeb2c7ef0a9804bf381bb0a08d9f", 0xac}, {&(0x7f00000008c0)="cc2d8115be37fc80562d838c8daa9ce90fe21ad8bbc79baa5f2a678a24f861d13cd77c61d41d4e754363113e8e09dbc2be9e89ca25b54e346c98e8149d2eca26df3658f017d78dd648eaedbcbac50bee7d2b863248efbe9a9c06fdc2103f58207c8aebfbfa99488c3e3acd60c1910044327a92d33a9c60b421c58cad3ffa9cf6fec5c2e4f5f0a794813fc3c03eb9977955b76704a049fbea11fea423fa8c0c07d32ebec4de0796002b93bca141ee7efa80839cae6dab207662e069dac74f58bcf6a871246fc9fbae69d2d7a9b3694c1be4", 0xd1}, {&(0x7f0000000580)="90cf21f7de2ef19a7d97fab23bbc29676f12e66113f48afdeb170793be78af4fcfe5b71994722efee0e2", 0x2a}], 0x7) syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04090318"], 0x6) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendto$packet(r4, &(0x7f00000002c0)="44c394f305916c4516999d", 0xb, 0x0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="fb76f11b713b"}, 0x14) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r10, 0x4004e502, 0x0) 3.036776083s ago: executing program 0 (id=2413): r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="85", 0x1, 0xffffffffffffffff) keyctl$read(0x3, r0, 0x0, 0x0) keyctl$read(0xb, r0, &(0x7f0000000300)=""/4096, 0xffffffffffffffdc) (async) keyctl$read(0xb, r0, &(0x7f0000000300)=""/4096, 0xffffffffffffffdc) io_uring_setup(0x7cac, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.840789674s ago: executing program 2 (id=2414): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000400000000010000000900010073797a"], 0xa4}}, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.827303597s ago: executing program 0 (id=2415): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlinkprop={0x20, 0x6c, 0x1, 0x70bd26, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x14624, 0x1e000}}, 0x20}, 0x1, 0x0, 0x0, 0x4004009}, 0x8840) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) 2.44397699s ago: executing program 2 (id=2416): r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xdc83, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.416218456s ago: executing program 3 (id=2417): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000, 0x0, 0x0, 0x2) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fe8000000000000000000000000000bbfe8000000000000000000000000000bb000005a6cc59de132134947c6e39a200", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000007f00000000000000030000000000000000000000000000000000000000000000ffffffffffffffff0002000000000000fffffffffffffffe030000000000000000000000000000000000000000000000010000000000000006000000000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 2.243943662s ago: executing program 3 (id=2418): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x5e1480, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0xce, 0x3, 0xb0}) (async) close_range(r0, r0, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x7fffffff) (async) r2 = syz_open_dev$swradio(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000140)={0x7, 0x5, 0x9, 0x7, 0x80000000, 0x0, 0xffff}) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) (async) semtimedop(0x0, &(0x7f0000000240)=[{0x3, 0xd, 0x1000}, {0x3, 0x101, 0x1800}, {0x4, 0x5, 0x400}, {0x0, 0x100, 0x1800}], 0x4, &(0x7f0000000280)) (async) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{r3, 0x4}, {0xffffffffffffffff, 0x86}, {r0, 0xa003}], 0x3, &(0x7f0000000380)={r4, r5+10000000}, &(0x7f00000003c0)={[0x1]}, 0x8) read$FUSE(r3, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f0000002440)={0x28, 0x0, r6, {{0x8bb3, 0x9, 0x2, r1}}}, 0x28) r10 = syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000002480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r10, &(0x7f0000002780)={0x2c, &(0x7f00000024c0)={0x20, 0x10, 0xef, {0xef, 0x7, "acdce741489329e46c4a54f4fb54b989b4f6193437ff5abc443792ed43769db61ff5898b2fbd0ef68cf0a322c704da0073a8f2296ba7ba5ad7ad2c85ca8fe81bc2476a2ad8691f6c2d67111c7ed376fe12eea733abef215556a4100695b9db0d8771a57d14ca1d0806d91b665f4d6fdc90544e1269f0fdd28c539ce3ed0af9e5ad274be96a72ebd382f768c85a9ad8600028583b965a44ffee01cd1c1e3d3b9a0b524b9f3c3ea4d678d8d6405f9cb3003376ad9aae71c88b53bdb8738b797d32315e3d1124cfd4e04a472d421a6d640feac4516065d6047508cb7c1c27ddf82831efa0be86ad4434a194a7f746"}}, &(0x7f00000025c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x440a}}, &(0x7f0000002600)={0x0, 0xf, 0xf0, {0x5, 0xf, 0xf0, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "cd5fd2cc97b0c2c88fbfc28d31d71a11"}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x4, 0x78f, 0x7, [0x0, 0xff0060]}, @generic={0xc0, 0x10, 0x3, "0637fee377e491bdf2e5ecc826da4f5cd016515c914de9133d3ca428d5c0d3ed63bf50f337c4dda97581c602475371faa1c659ef3bdc804d661d9c3e62706d230f1f3508718304c7667cbdca8c6d1585810f86406db95400f52baaa6652660f826382f64334edcb6d2540eb85cda03297cbe15aa3838bfe133cdc810aa6d83231e667ba2de3895f44a0475c544836e4fa1964ed80bd51516083148936febc33b859e3ecbe94ce2cbe3f08bb5aa63b3e1b285d819233fa5dc75f0d66167"}]}}, &(0x7f0000002700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x3, 0x6, "366b9894", "7fe92359"}}, &(0x7f0000002740)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x18, 0x80, 0x9, 0x1, 0x629, 0x8001}}}, &(0x7f0000002bc0)={0x84, &(0x7f00000027c0)={0x0, 0x10, 0xe, "018cb86d2bdaaaf129e547846b11"}, &(0x7f0000002800)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000002840)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000002880)={0x20, 0x0, 0x4, {0x2}}, &(0x7f00000028c0)={0x20, 0x0, 0x8, {0x400, 0x90, [0x0]}}, &(0x7f0000002900)={0x40, 0x7, 0x2, 0xfff7}, &(0x7f0000002940)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000002980)={0x40, 0xb, 0x2, "e211"}, &(0x7f00000029c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000002a00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000002a40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000002a80)={0x40, 0x19, 0x2, '\x00{'}, &(0x7f0000002ac0)={0x40, 0x1a, 0x2, 0xcc00}, &(0x7f0000002b00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002b40)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000002b80)={0x40, 0x21, 0x1, 0x2}}) (async) syz_usb_control_io(r10, &(0x7f0000002ec0)={0x2c, &(0x7f0000002c80)={0x40, 0xc, 0xd9, {0xd9, 0x21, "e8c4997ce43bf2cb1cc3906691625441fe216b553dff554c549ee2ed9ac0aa41b2ed2f74bb49580356ef1b9054d9ceee936fe6f521a5f65e9c883414f097c31dc4eea1cc21996e11e1b8557c0ac8d7d3729ff469557cb34f4299a63ed65ab2b7e93751149fd381d838f9ac916e4452215d9ba373b4fe540bb38aefc5ddc93ff6ae1830371330d705da72909d1e296ff8ffe187702a3e3684fbf281e2e036d86c3ccf53933c350c8e9267d58b6de218cbc251dfb63e726a8f97416491e8da92b96f3fe23cdd735ab0370868352132cb888359633baf79bd"}}, &(0x7f0000002d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f0000002dc0)={0x0, 0xf, 0x66, {0x5, 0xf, 0x66, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x9, 0x4, 0x0, 0x1}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0xe3, 0xe100, 0xa, [0xff0000, 0xcf, 0x0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x9, 0xf00, 0x9, [0xffcf, 0x0, 0xff0f, 0xc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0xda, 0x10, 0x3, 0xf5}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "5d818d7953145d06746eb8ff12cfbf8b"}, @ptm_cap={0x3}]}}, &(0x7f0000002e40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x8, 0x2, 0x3, "f6c9cb86", "a8d42fd4"}}, &(0x7f0000002e80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x3, 0x81, 0x3, 0x4, 0x29, 0x8}}}, &(0x7f00000033c0)={0x84, &(0x7f0000002f00)={0x0, 0x8, 0xe0, "4113464071574b8a32e3d29cd02980d5a85ce63407f479761dee17006ef06a8e987db0c28396456107f1857b1a7fbfdd52d69a4fd14fce6cc8f3d66ad5d549efef747a7d587bfcb89f7e84132da95c01715cf2a98f7997bbf490d70da956bf797445e99194786095959cbdf93c8929d66266702ab61167490675d31ee56f08e4b188914f147c509847b058c03c88acd6af03a3b9ddd20a6bf19e39c6dd6eb68f47b8df8ef2e8dfdead686590811311adc7b1c8a0bcdf9702922058081057b6250e16fb889e27a1d1617e8447c6fd9ecd500ec16a94cc355e695a53d12030ac7d"}, &(0x7f0000003000)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000003040)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000003080)={0x20, 0x0, 0x4, {0x4, 0x3}}, &(0x7f00000030c0)={0x20, 0x0, 0x4, {0x10, 0x40}}, &(0x7f0000003100)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000003140)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000003180)={0x40, 0xb, 0x2, 'hJ'}, &(0x7f00000031c0)={0x40, 0xf, 0x2, 0xe99}, &(0x7f0000003200)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000003240)={0x40, 0x17, 0x6, @local}, &(0x7f0000003280)={0x40, 0x19, 0x2, "b70b"}, &(0x7f00000032c0)={0x40, 0x1a, 0x2, 0x101}, &(0x7f0000003300)={0x40, 0x1c, 0x1}, &(0x7f0000003340)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000003380)={0x40, 0x21, 0x1, 0xe}}) (async) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000003480), 0x2, 0x0) (async, rerun: 64) syz_usb_control_io$rtl8150(r10, &(0x7f0000003540)={0x14, &(0x7f00000034c0)={0x20, 0x31, 0x16, {0x16, 0x30, "ed6eb0c333beba06397a6976b8c4b2fcd15901ff"}}, &(0x7f0000003500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000003700)={0x2c, &(0x7f0000003580)={0x20, 0xb, 0x64, "add0db15300e4964910d9685278c80165014eb68e20838fd463411a74884a19c14314dd74550159109df6a258c99d4a5b0451cca3a027da09617c0af7b3af1f16167d5f88e2e0b51cec98ca6e438f0f77cb444a653de14778cbdc9c554ffc5616a3dbaba"}, &(0x7f0000003600)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000003640)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000003680), &(0x7f00000036c0)={0x40, 0x5, 0x1, "04"}}) (async, rerun: 64) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000003740), &(0x7f0000003780)=0x14) (async) getgroups(0x4, &(0x7f0000005cc0)=[r8, r8, r8, r8]) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000005d00)='./file0\x00', &(0x7f0000005d40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) (async, rerun: 64) r14 = geteuid() (rerun: 64) syz_fuse_handle_req(r11, &(0x7f00000037c0)="35903920b750f9fa9821c582f47437e6f25cec700111d0a3752d1c20340ee593094d10e62cce01108dedce14df2bd0782ee25a56ef0cd416c753a8e2b35cf15cbe33fa50ce96493c3d1c8b269424dc0fc458652c3e2f544c56ba9e8a11087a4924fd6c434face4969208668e371e57279b8fa45332f52586f61abd283e0f8c9e153f456ea828fd4679f04ffa75baf9a056bcf7d8a6e01d5bbabed34a2c66eccdc8a1e905205973e9ca1a6cd82ab83fd68c88d6e7eae0c0b16b8491a05588fdc856531b90dd17489c60c8e71f1e697b9571df237c4b143739a6bf79f87e76ada9c558fb8bab8298d3b727c1d7d4690128feba81dcf79b8fd5d27bbe655a0517a3ba7b1c496936476a220ca9371660db492cbbca483cf2728a689ea7045aeb2b9036a37a87e88300bbb825d6bc1db23af449ea1f9c1179696209f2741fc91f931b0abec24248aaefd71fe4bc579ca2c5b6c7a6eb052db4d91ccc50506b37f8ef9dba2113368b8a58f736931b119e7a90f2b1af44063d6cc15b47b9d091f0bfe2ace873cdeea4b2771727e7499efe1b0ee2468f748ce69596ae09acaf0900af3563160e80a9d478391f5bc64bc797cc2ee8c9affeec5a3e55c05bc77a7d86fa9455079bd13a78f87645d9f805a7f0697466aa5f8b18d71229efe5e469833450b653dac1f5b4852a7e5cc53f931fa9c39377e4c7d59c21c243484ef118b2393c3ffab62cc5d2aac02835b90a6bb5e10f4abdf6989093d627ff0dbe22d10aa1541b955e920b56e14ff760a2e398d7ea0611b63bb28d928bee04ca1335a66f9d1505779eab2c8c8b7783ad290566f41d84111fedcf4b71bb3e649f621e4bd8a83066fa4701c7a25627ae723e92d344df6edfe2f9a69214485c2dce2453b34f20840d9940c29571d43e7d4e4916cdafbdc037118e42c9bdfa78c93e6acfcafcfaf078cd1540e042222fd2d4cb95d3442eddbef9bc7c3abfd929c590d9f9505cd0111653e636f34e993fd5e7c9c255b29bdd212fe4acef042f9d7e6d60962043b77d0789a6f0ce3440d459a2e034dfdf3e2ef00d0fd1999c94a386391b988ac08595915b19cdcdf6f695ab0d63bbc9436b7913cc838c13afb36b7293ba4aabc03ddfd7a11011296eab1ec360d5a641f0731dea8c75810e576a18889e201bdc174e98afd60f373e381424c2bbf1d40c7bd99f3d03311f8723281b4c5628e76ac1f93427cb9b0a19b5a803a887ab0b566239837992b612490494c8b21710e6962d300bff1586732e7a974818e5f3fb10d1025b7857835f5ea7eb3da18640bd3697cf51dc42cf50851267ea50e8222726679fbfa6407400460ef7fb4c9f241b000a3c1e7a791bcfb3c64a3220fb23f50befd76004c7022a3c31ba5a9b1da1995446717d890aa2b29b94b7a7b4a554aa341f5fc55f4e191a7cb4cad782634f8f3ee08e7392071b907b6e14cec2e1ff6660218db47d5a0b17ba27354b5607d5dd384f3effce1a6754c78ca829b14c8bc0f29b2ab24682019c2a0081d40da8453f2976402a71c54e6b369481e8754edeb33a85dbe10f949ee5d360fb576d11ac0a8746b8189af330f6f231e450500561949d4cd044f11e642c9defdca81167aa7d15f8b75519d824c1682a538c2954fba9bd813341c13bc81306b9699b132b1a996baee607d21602b0ebea1e6eebca8ca7b1531be070ca121bc24150cc8ab2076e00ce9705b9ee423ba29c35a66d8a31f760e0791b017420ade4fb237700454fd7452b73e4fa448a989c106f38a9e5336e481106a98e184d6c6f960c80e51f751ea62e0fd893748ef95d9ee49cab4df822d46dbd4d6d4e8456505497d95e9cdb4fc33132a3086490ff6654670a331fc92b90d42d602eb2c75759f729279612e2ac03a918323bec72cfd06bd5da77eedd241f67a431378096e707ca37082190e76873c01a6c3c28616bdcc9f5a765d0cc764ef2bfcbe51d8044a6a59d57e40b500c54da2ca8e502308d9a480da008e70deb6e8915a1e18f5a3318d243db2b4a70d7c10b19e318d172064c1ade2c5704002715444e230b033689d413056ac413b1f668ab8743ab0cd42bd16a44f95436bd5dd13952119870008b3f3765e8bd7e70c82490eb793187e84e287b443b5df3415fa84786ec3b7ea3e93f874e11beeaa369061762e3eb5e69d37ed7805d6908469c8645edb6190775d507549a303cd069f92d108c38c7881e381d9a86b8d58191e63e9a91376a0a8ecc3021af0227d4b81e710251b66bd16562eb119eddcdebbc17cc636f77805407ef849a42573dc67d1b04addb3639531112551c99fae921f74889007498c648401b9311144bae3bae05c68cf28de64c7247d04fcf4ea370cb42a77f8d722be69f5b8e1b1d1b484d273762afb4876630fa90c79abbb82909fdaa5c9cec2977b6b7466647724b3d040f876dcd5de8173bf928bbb963567025a84e4339ef79621038711aae125661feb4d356888f6ceabd3168b692c48f3cb8282d4958d2adb4f99bee0892175766788dac0d8f4f58023d2f8fd35ef53adb4b9155bd21f8d3adfd7a2b14cfa40b0f7176476a1d4ba7a45b4217723dfa07bb6ec7c9d9a62c8dace7360234401187fd2458d712b27f8c7cf5a32adda05958e85a42012f78abe0cfb83ed4f9f89284fd420a6246db3b02ec0f4e648e6937eea536e95289c1fb4885bda96166edf5f796c570bb79bca37cfc5747a66ffa1b476b78663ed9f3ec2140ada4cb3ff9766560861ccfecc0b1c85e9eb66fc663f6940a2671469f06e1ec08fd17025affa2dd491171716b77082951d821930f5cefd81b097a5e7a2d9942069880a0cd58104762c131fc296fe2d57c929dd3ba284e1a3d6eea235d6b2a70fb44f04a3bfa6eefd9ac90e939623bea7f27ffe809e6be6e5c66a0a2f15bb25a5c38c703a3d9c8ba4d8d41fa004465a4e081294b9659c8f841cdcf4781bd2fe317a5e7824fd725b8862b36ec5ac41f5e1595355f7d797c6f7a3f84011f989ebb0a20dee2b22cb118428bc44818925c973e388cbdac7955fb8d43df90a83492550961e456b9289a74be0f2f166315fac2d1a3f6c6fbeda5cb7928acaf550af30e878b2377c81efd431b2396d8402aaa57f3a6108fdcddd743501c9ee8335b38311d668d3a0a09ba335b884276f37a3d1a3f190f6d1ef4f98cfe4059fa72df10cf7192f4b4a424a89d13c90f40ea6cba7f8f78e050ef9da7b4b82d04d97bb7e10dbc1bed2beed744976864a64cd211f390a0f6d4b8e5f6b298f8d757ec85268cb2a1366d66307c31fb726cee0d704e44ca96566183bc073039e0f6dc8434f0bec8b418f344f9a9b029f7f6a025d010291aa0490d9e1413676271ae597f442c72d457b1843df195d1e2e708ec92906ef1a0f93aafb140a7668d63d4e0826a11660995b864a18c5085656d048b49aef4dc37b04c795794b33055e285d909bc90a3a7a908a62a070d75a3efd200be61d59770032ab601182177e59e5e24c651ec0a7910317a09876e62d4865a7fe5c46f5d25406bca1ba442f7606944dacb37eec3c2d8e97b765a14eb8f526efbd2b7165c0d27b93964afc06b13167a08e834d78efb2d33441f4a6502073bd4fdf09a2d7f40ab728bb48ee56b4ebdd9aa4653b4fefb8eb8f92fb788d3fba96948c2648e4fde8bc3c97cc21f544c05edca683b09914a6216f62fdbcd4f92fa12f206f316c63b5a52ebad6d47c4ed98e219fe91fa80255e919449988303400e019792e28017f1fb57998e24af032d4987abdded43c94dd9c03d538b0962b41ba4cee1c7d0b5468bbf04fbfa5549c7323d4c0c07ded7f4dc97cec92eba6cb681187233cedceeb83cdf6723a3837cefe274d31f57ff90a190e20d682dc939b97062a73d59ad8449b29def2783dd6aef1866eb281957c4678625c183433eb6b570995a3de132b19565ceb0766400df65b8fe1e51dcaa25e3984b310183ac038737ad524913de2f81a13dc321fc22a95324dabd304bd35e9da639ad96bd4918c7d6ff4f9ec190ce3e149e261723b015d23c0264bba2745ec17080786ea06bbd6716142eb5d5f58921c24267e5cc838207c0ffec6ebdd5248257487dda85b1de2c523f2eeb0f848b211c3349793f4b1bfb1766ee1db96e32b82768bdc90b55ab769a38951b2c320d5fa43b43fa5abb4342aaf82903d18598695f7e03fda4aa7f41bdd3621c1c31f8783dea36e3dd961cdd65da98b76040b04569c11d58b9746664f8ce06648e48a089dc40934e1094579c8e51e4124ec0b61a02173e7b770842d8f3a3af991cf68e74b3007c55377493983b49a217cd84d95b9d0bf9b784d9a3cf37b8bc7f27741a290e4f4c4923fa92a1e55b73a3361e5840b31c474b905ff630aea3bf829fa9f89f08715451d8b4aa820bb0cb878d8452a7278f14802c0f40674138d41bd1fe81857baae4272f0c7ed3e21ffc638c64f1b6550761b24bcf8abedbbdef869b3d15d0f4e2fd0cbff1009c06fd8582a00e7f19da156201021347c565602852ac084cbe7cf1e580e85fa2b06465a1d025be7c70769a6a1fc8a94e3e549dfe1d1998c1f3bb4b2b704569981823d6d1f4169d56560ad233ce66e0d62bdffd6d7a377731ac9c024f4108bda2b0eca3acf4a757967a4919931f57724872415c32abe2040741d9061239d1c1d075153fafb777f4ea6a0c81caab0fa42a15b1ae7c70f4bb3d163a042f9c3b01c986430bd7137eb716ab0b1bb77a125cb403048c99cd51bb670bdda243ca28fa4e0f9699cbd9d963107fc5caf5988f8f6a1a1c66eeacba3e1ab876d80679800c74f9655f8ab1c6f7e21ad0acac67d43293b58134681041bce692f418285ed4f522ae9899ee3b59fadabc0aa278ba56d8b8d79b569b46126f4c94b7002d86b117e583c7c91bcac70acabd3ef45f86eba5c7b9c4931a76c6aedf3fb2de8036a24bb00e3d400bbcf33e1a183c3925b1222495eb5752c2e179a1bf7389534c731982dbee91ce1a26e96a30591459cb5b97b3333ce882bfd926b5b73ab58d14edda9bb5f26a6b5f04317b6d66c0dd03b7e450028d48785ccbe86f6c28554364a7422c8290ef4965ddb1a401a6d7585de811a165c155496f665c1e40f2eb9f69c80e6af94254e99ee88d07d569221b1ebbd36bd342b34632e7cf67d8c48042202c0d2328a563be7dbc309399b7c46f8f8a5224dbabb122deb125e120f1691df5cf6266d47911f4d89f2e9afc99af3b64b8becb26d051581c8de5529ae32d5ef3506f005ac38866de29cb65167424cc815a95f27f26bc9ce5edc948904567221b8f926979a9d8c1f6a7dbb86534461491cb052d098ccb2dc7a7fa090f0ffa3946e5a223c09ce8ddd462eff9bb9989ec544e866047414fb921c72f3528ac4afadab4ba396398a28953e597a3252ed51faddc9628d9098f6989799cf26e29b1ec4e49207c6925631a6d72693fc577fa8811cb871857618d5dc39c55e3509da9279a65a5b3515265013d16bdf3988a0b7ebec13a57dc3b9f879581ec9449af703455ef7ca3e0e88263fdaadbb9d2e5454aee30d13738d953e02f72776da9d4bbf40ccb8b1caa1fb689355d693c8c2b0d2197082c176ad805aac2295a95a5d93cf2068db30cdbbc6a1d31f5f1f6d15fae23f783e0d91b772976129867e51e8d4c2a4602660aece486474eabe4ac6261f2138af0c1261ffade41d13863c14a594d6e7365c028dba225b96921a1d5c519b272f49dbd5afa5bf28324e7d13c8d739ab67206666ce40f0b6b84e8d2faf367a1aa80c55a82f3272bbc001a9376e2d80d55564f274637164a9b267cb8b70bab63d79d706db668c07826fbe61428b24fca46fc2b4d6307e830a884ad07863c65f775823118d9f03ad425da64cc752e4e18206b995cf04a47a6ff8bc6fc5afb098d73ec39407e312961de2fe61948e12728aaf1305c53c82822b9bee0167914812c18dd1d6cf1deff6926f0927caa2e78ca76e9a672255abec1a492503130ffc8f55aaddaf8864f8e039d04015dcaba51a2ce4f04a7087f7f35a732432b019ce3fddcb5992642b69e0764f9748d059dcb7ee8e3ed56959f31efb6e1ffd2605bf995b1273131e7f92dfa41474e733bb9f378a5c3649d181e82c2d0adef4de8b0b1401b1108f9e593a1acf0584e30623f5a8abc39132ed32ccce92264dbd2f9ab29ed9e205c7c31d2024311432085c7c705e5aabd3f932e52509e4d88ebdfd0c13b3c1f95828c94a456a1516fb3e22f32875fd1293d6b7b7292c4280a7107f2a3036dc5fd02c235f9dab0307927b96b84adf5dbbd0cb6a9a49443ce509825dfbfdbb03a767849b4b55586e65613c36716bda9c67d83d1be444300a63dad8614343af6893824fd4f60fa4656257fe47adf6ffd4a4a2a7ed96fd1f10147e0ba2faf009c90ff213ce0e1d35f6519aab1d5d658d70aa741b5d0616d283cc262b01930aaed16f10f05c16ea4dcb1e03b95783997ec9c3fda3e0ca3634a2c373844459b67167029a43eb99048f9d56815d56b76fcdc861d7712e5ca19e8fa9c3dfa93c3326e15acfb394ece0a0eba5ac79d1d52f9986003e18558d3f8bcad32e5f54be07978d9477a998e8944d4c2345a286d435cf2ae26fbef71a3b0c1263941aed696d432e09784bf5ea39e4fc4429de8eacab059c4152448f94c4475d6ac31dfc416e784924c2bc21e6a1cba3fb565c0d72f8a22ac65c3dc519ce5fe0a935d9900cd0e332cf8965dc1f91968db0b0923b4624d5a62229514479607f9d11d22d9e0846ce3e9838ba8af02d0af21e760299c57d7ab8dc15c740509038c1e463023c5570271b527143393cfca9318cf3e0cdf91fb21d6bc64345f802f496e01116b95412ef29a7738608d9ba7004f2d9402fe963d366674d1acbd38c6ef2b189416724e73d9911f44b9c983d17ee16f2942985f421a51020391d87fbdc1efb92d27f817e8abbf9235c87e86cd3a03fba620ae3f591e3c3ee593b7104c1581b18143d81f837703b720e1831250a01a7469a4ed3021916cf3c657ec2b8dc0b3a014979413b84e792192561bfc9055b8f732f9a6cafb9241d2df59146e0869432a943682136baab72ff25880a73e366dbe768dcc882de05d696312cf54bd41724d12fbc7b8d0125764e4cb0e22473772f9d78d5d8d7947a1f53a344d44459f00b90d3fe978081121050a10295a8feae2310a983a8300c9ef38f9d377d7d071d0c65653411988855afabab39559c6866feee68c4b043e793dc4f511d05f8da84730e8c4b2ff32ce3587b1b18d91982b09d6ca69ecca267d80d3d4141b36ac0e4044204373424c580b6008c4ff7d5b6fa12b4fa661900384ea9ad1426ce2d0fa723c40ebbc1655c948e07c9e23ff09217d9687edb9d5fb09957aca06ac9cfb4b3d576efd67209e363e672c1425f639471b7b3d32e98dac19525ba6ea2914b83d889eed7dd91f42d5d9bc6c6de35942ca9e9d520179de0519d1b31f63fc3069646faf6c4c24a0ba0d77e129c2b66ea482841035fcc6771195287cadde1752971de4a4d89ca345120c94ccb8589e69ff84546679e56e749ab577e4e15bac0e59997e40ca0a6649b62cc28596bbcd9140ac7cd9e90ab68e73eba7ef0f024a9c5397a491c7c710b7e827fdc86ca513a10eae90a85a841c8aaac08f91fbb7ba911db6723af98fc0ef3cdba5950668e4e5c9c4de7f50ffd56f6422156f9567452ec6ca71b296e4e790839dfc22fb5ede14e22027063f3f82fa4cbc3e198c39d7e9ef353a11adf93c2dae8d29d934938a7d1bddba679a075ca93af03841f80494e3b7290148a33649d2386cab88242571f74ebc392ebe9bbc323e7f13bf50247e2f6ec47c20e02b20fd5509d1f294a2764cd184d9d9535a7d453126003e3815ee432e572299a7c9107ec68bb7bad2c9daa7a85015169d7f669ed753df7325ccc7a7d342afe99cfbf8d91f52e5693d6203eb44c757f4cd9692932a13962698660f8ad3b3f98ed5b0c387a1cb4f8cba1d2491d4c6917b1e24548aff891d37fdb9e959400f689de743fc259ccbc699a225114a7c00e77cd33412c1b92b149f687d40b556998a34d291185df4bf1dcf232ac10bb535b8583fe1e92509c061f133cbbe6bbc2a510fcbf13eb4c88144efcb1aca6f15f90b047b9ac362ab2e60feee4fc9368c5c21dbaa0e4aa80246504006f882ef53595450ee05c64c5722067cca900741f1c0f879197bb112fc875f8f5d74248851eb5b030d9a001c07eb849bf8413f71970fdc48d6bb7a1c7b6f8e2d525e0c278a49d360cb9157bd9819e75ea5fcdd92e531ee0294779ea974b1104be109260a7171e002ea15dafef3f10604cc39936d50b476c441f1374da0a2f4c0e84ed4b30d57c42e8b9b28d51cc947fd6ad270bcafb86a6917c26966979356d5909c23e8dd9575e28256b897db13b0a7f54f336be3fa40b287397dc9ee7bb1ab5a350f8061d373743f88208c489cae2dd26dc715a259c77f1f4f99d24d0789ce97476ccc1a4dd2ab94e87ce87557133fa686ace826873405943c89003e50c46666d33492fa6adb71da7f7daecb17b5e5a84c2648bac40ceb35d6954ae9534501dba8a4e96219c738b89b75fecf3aa1ecc9355e13bd8cfd08fc49c7aea930c5b82e82bf5a4f5276764f3365b50cb4b18732e642c4508c91779614648f2943a20b8316f32c4e1e5fad9e51a9dd288770606f603994ceee91c12d0b132f07c5e39ba7438565f1298eca1ebe366874a1e02dd6d691020b30f06cf89c1aef61d4841ac6447a180dc4cf07e97e6140ba76077ca25743f72b8d7e11dd7b30d7eac07ded0af93a78323bef0d491acca7dd84a1491169c0e2335a614924030fc1579828694af7fe9bdb33d5e6a473d9995c6a3e868880a0acdb82ebbaef910d18b33bf1b565b8d028e90e030739a6fe432b53ef2ce4a6898b2c859fad03f3dd726de9e7d8106a57dc7e721c4bcd1ffb9f0b4b4478cc99146114b429932af6503d80132a6c0794a5730dc99079a2c0ab72dd092eb408f8b94bb7702d208499db67fb5df5b87fb4d6951da5dd807c5d61bbb230c06c9c8a58e5ed479879295064a5648816ced593e88a8029f29f5b2e271a1b8b60dbdce6b41d75ce72658699dab2d803cf328ce2fe1b4cdf90bcfd4f59b20948322a16a3d75f49fcc6647e8828d5f1cbc1e985c861b5690c8f6827b77924c8f0c549269e678a2ca8ff30ff80676d49d1448a97e51dcd39f889ede44dd82b8b9e96933bbbb4ad54459deda80dda712db240ce23ac697e4251646e10a829e82b64e3e7049824b42229c18b40b670ecbfddfe4a62f327eb5ea0f9de35247f260e1c16ba46d77ff93546f23c9b66f149a69419dcc039662eafe65fbd7ba6dfc6959353d1f3b37ccbfa41ce24b62cc0eac3a17095883d8bb4b692e208a00248a77eb1429d04a6fd915a2a90125612a74a0ef7319c154174bbfeb48050159e4e33e00575df0333a7a6167e32eee822ddd14ae1448f5e9b41036feb44c198eb4ee766898a0119cfa64fa7de5627d061df83f6ab54b5400ad0267ea9aa64b62865505c612c3149bf5d30a3fbcdbd743ae781e9ab8b6d8dac0459b4bb731eef35e9db0e29ff1a6129e829fd2a648289ff3c390010b95cd7b6d3c172244d866b094e95e7342fe32666a3950bc06242e9417f13a9a851ede03f1056f011370aa50d5e4d7161270fb322d55b45c0e91de144e6d7bf368661b144735a2d0b2c97af75004eb4e51ba25c60e642b19aa04f4e89be92018649b88ac4db65dafe4808cbb46fec3db3ce543c11c8b7395540e6fb7d74b691658a52085b827c0477755d3252b1b296536ffe362aa3886f2747aa4766dcce460a727d73a8a6b46fa7f7d4af9495bada79954c8718e6f8749c0cc95b74524a445b420ab6f065c4f4845ed285311d91b3b718f04099efbd6d1622d3b41acecad9723001c43249dd5a959a29ec9c55030d4a87675341c979272620f9b7cae7c1dfde5c8cfd604434088ee661d1e3b24682323acf00ae161dbe3989cb0e93de4060a91eb5ac881c0ca19b298afa626548046ff2788c47c93dfff042368a0c7aa71fb6ebbff5d1f00f53cfaece6bba70717555c9c11d65f2c8a0cbf8d5a48ae62d01f4b43e4ec6df28931508b1f77771eaf6e46d4e50ae79fe8f9b8989bf3ba12eca3bfd304863fc27583234760a7ba482d3a820d02a8755b8c2f7b310c4249b5847b02f30379c58526fcfe5c351262c71629adb6630f074a1f63ecbae00707e585c4b0e1d8912cc9d8b56a4accca31bd1fb87f946b1b381c0ee8597b5e42c7c2b88e4532e32b554ee71ee673872034eaed04f5233346cd8605b8c84834cc96da0e451d9e603954538646ce8b9e406b14e4b69df765ba4afec125fb5b7c3b166a8f1d6e87bdad0d494c6689e3ff474e43ba28cdb677409b9c0086f599dc4e2e44ff48fdc7f2590a07ef9720e316c74e889d11ed14de8ddfbee39b75137cea7f470822fb2a178f02765eced5164def31fce6230d8daa5f25cebe8f558f2f2778b1b9248d24d8d61046910c6a62f961d89128ff14bb1531ebe42e8425016baf05263b9590ad1159de283c3ef8e6386c4724f3d62528c901dde0aed0f1f344c10b92df7ac52652b0c564fa03f479762705dbc0b2aa04b2e52ca05f3cb3da02a415aad3785da01a2342f863764e2c90796df137ff8e38a58d53ec416b999af9f4ed195b843ccc6dcdb21470753613417e18348197a9e61feea8dbad57036432d3750f6a98d749567c068a47170323ae8e1421a5f09c62915c98d42abe93c5259c23ebeaed28da09abde71356a29845391ae5f1997cf730c1ee09c7a4196bc6fc5435c8672dabcead2d11037c2019231b80ee76a3bdffb2508e0de69e76b960f8bd337f7780e58462c1fefd861180525558bf8f8a85c15e95579f035952fd313c11c5a8c87bb04182442d12119610bbd02b62c8b8831a27370865824ebbc433ee6cf27344f1a1a1536f467220f6c016abbefab01265faa313a40ae5ea2ac806d3049f27f8085be8ae2b7a23382741471ccec32d5557560488f7ecf27deb75a6eda3ef26c3ae281b26b128ad93fb7cead5cbc0342f93a9fdb6507c1785d30162a49639e09328972874cb8719117a1d02e749084b7da2d32548e880572909261767650dcafeb337f9de69b8ff311222af56a8700e0e0005c20c721e43a0da25e40ea7baca437362fbc507276d338dd250ccaea2803247a406725d19246332d7ddd48228df4c8b38d9832522d44f3cb5add5dcf8d60c53e8598d1c81076ce0af453539a7b41f6705e6ef36d6987568846aa5249a96c799c9981e7d3267c963cedf63c49ce4f76a2492175f6d526fa020a3260d3a54a41ccc4693af5a2e6778e8b38e37d98df8e4b28805170d1bac90595f245c162e1943b9af076d6d6265893efc386e317d865f296ba16a7bb0e10b4ffb6b60f32c89163bb93905bb15bcb22fc9fa8ff9b7e082f9d4090c9f1d56cc6b64d20152450b3373c67a3fd17ae54e1b474341f640d157a47559786eb8bc0cd32ead47788cc3e23d90ce1d2dceb9cac2c1fe283d2952dac7e19d2db92696020f3dc592efd344e1d4", 0x2000, &(0x7f0000006400)={&(0x7f00000057c0)={0x50, 0x0, 0x6051, {0x7, 0x2b, 0x0, 0x200000, 0xe, 0xfff, 0xfffffff7, 0x1, 0x0, 0x0, 0x1, 0x4}}, &(0x7f0000005840)={0x18, 0x0, 0xbc5c, {0x8001}}, &(0x7f0000005880)={0x18, 0x7fffffffffffffd0, 0x9, {0xa97}}, &(0x7f00000058c0)={0x18, 0x0, 0x0, {0x6}}, &(0x7f0000005900)={0x18, 0x0, 0x0, {0x100}}, &(0x7f0000005940)={0x28, 0x0, 0x2, {{0x9, 0xeb3, 0x2, r9}}}, &(0x7f0000005980)={0x60, 0x0, 0x2, {{0x4, 0x2, 0x6d4, 0x8001, 0x5ee, 0x7b2a, 0x8, 0x8}}}, &(0x7f0000005a00)={0x18, 0x0, 0x2, {0xe1f}}, &(0x7f0000005a40)={0x1c, 0xffffffffffffffda, 0xfffffffffffffffe, {'{#:%*-!){*:\x00'}}, &(0x7f0000005a80)={0x20, 0x0, 0x9e, {0x0, 0x4}}, &(0x7f0000005ac0)={0x78, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x0, {0x2, 0x1000, 0x400, 0x0, 0x3, 0xe, 0x40, 0x9, 0xfff, 0x4000, 0x5596, r7, r8, 0x10001, 0x5}}}, &(0x7f0000005b40)={0x90, 0x0, 0x4, {0x5, 0x1, 0x7ff, 0xe, 0x3, 0x4, {0x4, 0x3, 0x2, 0x4, 0xffffffffffffffc8, 0x1, 0x5, 0x6, 0x1, 0x4000, 0x6, r7, r8, 0x1, 0xa606}}}, &(0x7f0000005c00)={0xb0, 0xffffffffffffffda, 0x0, [{0x3, 0x1, 0x14, 0x2, '/dev/dri/renderD128\x00'}, {0x3, 0x4, 0x1, 0xfffffffd, 'O'}, {0x4, 0x2, 0x3, 0x5, '{-,'}, {0x2, 0x3, 0x18, 0x8, '/selinux/avc/hash_stats\x00'}]}, &(0x7f0000005dc0)={0x3f0, 0x0, 0x7, [{{0x0, 0x3, 0x0, 0x8, 0x6, 0xd, {0x2, 0x22, 0x1, 0x7fff, 0x3, 0x401, 0x8, 0x60000000, 0x1, 0xa000, 0x81, r7, r8, 0xffffffff, 0x10}}, {0x3, 0x1, 0x14, 0x7ff, '/dev/dri/renderD128\x00'}}, {{0x6, 0x0, 0x100000000000000, 0x2, 0x7f, 0x15a, {0x3, 0xe52a, 0x7fff, 0x2a, 0x10000, 0x101, 0xfffff4b6, 0x7, 0x1, 0x1000, 0xae, r7, r12, 0x5, 0x4}}, {0x5, 0x3, 0xa, 0xd73a, '/dev/fuse\x00'}}, {{0x3, 0x2, 0x5, 0x0, 0x1000, 0x8, {0x5, 0x4, 0x1, 0x8000000000000001, 0x9, 0x1ff, 0x5, 0x10000, 0x1, 0x6000, 0x2932, r13, r8, 0x2, 0x3}}, {0x5, 0x0, 0x5, 0x4, '\xaa\xaa\xaa\xaa\xaa'}}, {{0x0, 0x1, 0x16364c76, 0x8, 0x9, 0xff, {0x1, 0x7fff, 0x7f, 0x61, 0x4, 0x0, 0xd, 0x3, 0xc7c7, 0x8000, 0xb2, r14, r8, 0x3, 0x5}}, {0x2, 0x7, 0x2, 0x6, '%{'}}, {{0x1, 0x2, 0x3, 0x7, 0x0, 0x6, {0x3, 0x4e, 0x3, 0x7a, 0x8, 0x400, 0x9, 0x2, 0x4, 0x8000, 0x7, r7, r8, 0x3ff, 0x101}}, {0x4, 0x8, 0xe, 0xa, '/dev/swradio#\x00'}}, {{0x6, 0x1, 0x5, 0xb2, 0x9, 0x1, {0x1, 0x80, 0x80000001, 0x3, 0x7, 0x101, 0x3, 0x7fffffff, 0x80000000, 0x1000, 0x1, r7, r8, 0x10000, 0x800}}, {0x3, 0x0, 0x5, 0x3, '\xaa\xaa\xaa\xaa\xaa'}}]}, &(0x7f00000061c0)={0xa0, 0xfffffffffffffff5, 0x7fffffff, {{0x5, 0x2, 0x6, 0x80000000, 0x9, 0x7fffffff, {0x5, 0x7642, 0x5, 0xf5, 0x3, 0x1, 0xffffff81, 0x3, 0xfffffffc, 0xc000, 0x10000, 0xffffffffffffffff, r8, 0xc85d, 0xd7f}}, {0x0, 0x6}}}, &(0x7f0000006280)={0x20, 0x0, 0xfffffffffffffffd, {0x9, 0x0, 0x3, 0x2}}, &(0x7f00000062c0)={0x130, 0x0, 0xb, {0x80000000, 0x7, 0x0, '\x00', {0x4, 0x7, 0x101, 0x2, r7, r8, 0x0, '\x00', 0x4, 0xfb, 0x4, 0xfffffffffffffffc, {0x8, 0x2}, {0x8, 0x11c}, {0xfffffffffffffff3, 0xa}, {0x7, 0xb66}, 0x3, 0x4, 0x10, 0x713f}}}}) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f00000064c0)) (async) r15 = socket$nl_audit(0x10, 0x3, 0x9) ppoll(&(0x7f0000006500)=[{r15, 0x8200}, {r2, 0x28}, {r3, 0x3749}, {r0, 0x2001}, {r0, 0x114}], 0x5, &(0x7f0000006540), &(0x7f0000006580)={[0x7]}, 0x8) (async, rerun: 32) ioctl$sock_TIOCINQ(r15, 0x541b, &(0x7f00000065c0)) (rerun: 32) r16 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x30, r3, 0x0) syz_io_uring_submit(r16, 0x0, &(0x7f0000006600)=@IORING_OP_FALLOCATE={0x11, 0x1e, 0x0, @fd=r15, 0x6, 0x0, 0x5a61}) 2.227521036s ago: executing program 2 (id=2419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080005000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x20048005}, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)="a0c02e46a88edaa80690479db1e86afc785c367db606f414273a822722e0223e83e5a02b59d4b2d4b4b57a7d2faefa96b17e045288b8a7e46a8f8b31f8088c7aa41bf818163bc2904d2be24c0cc49dc3b1d471822548dc2c62e8b98eabeedcb459b50c55dc4d5fb64bbd81ca202601c829d5b7cad29d3b5d01a8300c507457401c1c2acc233a4a1d182dd0e5e56ef3b131e4caa776c9ed66ee1708775182f262a6a4953e5b40b0d91341", 0xaa}, {&(0x7f0000000140)="4f2b30d78acdddcbaf0c", 0xa}], 0x2) 2.156760101s ago: executing program 3 (id=2420): madvise(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r4, 0x80) accept$netrom(r4, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.08461273s ago: executing program 5 (id=2421): madvise(&(0x7f0000bde000/0x3000)=nil, 0x3000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000380)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r4, 0x80) accept$netrom(r4, &(0x7f0000000400)={{}, [@netrom, @netrom, @remote, @bcast, @remote, @bcast, @netrom, @bcast]}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.109944599s ago: executing program 2 (id=2422): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x80002) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x1cd, 0x85}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8021, 0x0, 0x3f26, 0xf01, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_open_dev$video4linux(0x0, 0xfffffffffffffffe, 0x2000c0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x202480, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000003c0)={0x40, 0xd, 0x5, "3def53a2d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="e07b292fe079989cb9547ed387db", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x20000000) getsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000), &(0x7f00000002c0)=0x4) 516.63963ms ago: executing program 3 (id=2423): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc201000210000009500000000000000159bb11d55cd54f795ebc6c48b7ee57df364594defe47aa18c81fbb86c6042dbf743a90b61bae3a57ba478e003fe723b194058bc41fc8c6082cee0dce6c4e98c8804a03eb15abe991b86e1c207e4b9c2e545253ec3e0a8800fd697685e0d14ef22ee60615176aa2972a57268ec0127b3869d981e769df4fd0f63d8bde942339d7e8fa10c87b5562d7cd8a361f5801b6e29c575dac7f00846c103fa144116db9a8a8850b0715c590a250c52c2b47c7a4176a8c5e2702c9ad3df0cc0"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) socket(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r2, 0x0, 0x480c4) r3 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40603d07, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f0000000200)=@default_ibss_ssid, 0x6, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) write$selinux_create(r5, &(0x7f0000000100)=@objname={'system_u:object_r:gpg_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x101, 0x20, './file0\x00'}, 0x4d) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x20, 0xa7e, 0x400070}, 0x2c) 47.526149ms ago: executing program 5 (id=2424): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020e00008500000082000000850000007d000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r3, 0x25, 0x4, @void}, 0x10) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="8a6c5bbfe92a1e6893", 0x9}], 0x1}, 0x8000) write$tun(r1, &(0x7f0000001540)=ANY=[], 0x12ea) 0s ago: executing program 4 (id=2425): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) creat(0x0, 0x101) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) socket(0xa, 0x2, 0x0) sendto$packet(r4, &(0x7f0000000080)="330320000a00140000007e19143baa4b1f0f858c6632f47042195e000000b80600"/42, 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, 0x0, 0x1, 0x62, 0x6, @remote}, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kernel console output (not intermixed with test programs): nt 0x81 has an invalid bInterval 0, changing to 7 [ 580.050789][ T7985] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.063005][ T7985] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 580.076675][ T7985] usb 3-1: config 7 interface 0 has no altsetting 0 [ 580.086237][ T7985] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 580.095731][ T7985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.931488][ T7985] usbhid 3-1:7.0: can't add hid device: -71 [ 580.938682][ T7985] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 580.953826][ T7985] usb 3-1: USB disconnect, device number 71 [ 581.879748][ T5964] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 582.029802][ T5964] usb 6-1: Using ep0 maxpacket: 16 [ 582.051750][ T5964] usb 6-1: New USB device found, idVendor=0458, idProduct=004a, bcdDevice= 0.00 [ 582.072297][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 582.088783][ T5964] usb 6-1: Product: syz [ 582.098320][ T5964] usb 6-1: SerialNumber: syz [ 582.115813][ T5964] usb 6-1: config 0 descriptor?? [ 582.138812][ T5964] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 582.357164][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1619'. [ 582.366416][T12402] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1619'. [ 582.375613][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1619'. [ 582.384998][T12402] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1619'. [ 582.397457][ T9] usb 6-1: USB disconnect, device number 34 [ 582.890964][ T5898] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 582.907252][ T5898] dvb_usb_ec168 1-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 582.920136][ T5898] usb 1-1: USB disconnect, device number 57 [ 583.289785][ T5898] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 583.345699][T12429] Failed to initialize the IGMP autojoin socket (err -2) [ 583.353721][ T30] audit: type=1400 audit(1767835008.147:782): avc: denied { write } for pid=12428 comm="syz.0.1628" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 583.481369][ T5898] usb 6-1: config 0 interface 0 has no altsetting 0 [ 583.495776][ T5898] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 583.508527][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.527916][ T5898] usb 6-1: config 0 descriptor?? [ 583.683718][T12446] : entered promiscuous mode [ 584.046527][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.055497][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.181021][T12454] 9p: Bad value for 'rfdno' [ 584.799848][ T9] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 584.971582][ T9] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid maxpacket 763, setting to 64 [ 584.982669][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 584.989313][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 585.000819][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.011400][ T9] usb 3-1: config 0 descriptor?? [ 585.016926][T12461] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 585.269713][ T5964] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 585.429031][ T9] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v5.01 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 586.543318][ T5898] usbhid 6-1:0.0: can't add hid device: -71 [ 586.550357][ T5898] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 586.560965][ T5898] usb 6-1: USB disconnect, device number 35 [ 586.668776][T12474] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1638'. [ 586.680079][ T5964] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 586.699955][ T5964] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 586.720915][ T5964] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 586.743058][ T5964] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 586.759911][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.767942][ T5964] usb 1-1: Product: syz [ 586.789930][ T5964] usb 1-1: Manufacturer: syz [ 586.794545][ T5964] usb 1-1: SerialNumber: syz [ 586.801173][ T5964] usb 1-1: config 0 descriptor?? [ 586.807716][T12464] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 586.817577][T12464] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 586.828593][ T5964] usb 1-1: ucan: probing device on interface #0 [ 586.915250][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1639'. [ 586.987570][T12481] netlink: 'syz.4.1637': attribute type 21 has an invalid length. [ 587.032963][T12464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.048794][T12463] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 587.049020][T12464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.244155][ T7985] usb 3-1: USB disconnect, device number 72 [ 587.694769][ T30] audit: type=1400 audit(1767835012.517:783): avc: denied { write } for pid=12462 comm="syz.0.1635" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 587.847150][ T5964] usb 1-1: ucan: could not read protocol version, ret=-110 [ 587.855617][ T5964] usb 1-1: ucan: probe failed; try to update the device firmware [ 587.972024][ T5964] usb 1-1: USB disconnect, device number 58 [ 588.017108][T12494] Failed to initialize the IGMP autojoin socket (err -2) [ 588.025110][T12495] Failed to initialize the IGMP autojoin socket (err -2) [ 588.984410][T12514] random: crng reseeded on system resumption [ 588.990728][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 589.308278][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.755432][T12525] futex_wake_op: syz.3.1653 tries to shift op by -1; fix this program [ 589.993699][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.005612][ T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 590.018373][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.028960][ T9] usb 3-1: config 0 descriptor?? [ 590.102195][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1654'. [ 590.150423][T12534] netlink: 'syz.5.1656': attribute type 30 has an invalid length. [ 590.489771][T12547] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 590.529739][ T7985] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 590.681247][ T7985] usb 6-1: config 12 has an invalid interface number: 121 but max is 0 [ 590.700504][ T7985] usb 6-1: config 12 has an invalid descriptor of length 128, skipping remainder of the config [ 590.714980][ T7985] usb 6-1: config 12 has no interface number 0 [ 590.722970][ T7985] usb 6-1: config 12 interface 121 has no altsetting 0 [ 590.733570][ T7985] usb 6-1: New USB device found, idVendor=0421, idProduct=0154, bcdDevice= 3.9b [ 590.743731][ T7985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.752182][ T7985] usb 6-1: Product: syz [ 590.763278][ T7985] usb 6-1: Manufacturer: syz [ 590.768281][ T7985] usb 6-1: SerialNumber: syz [ 591.411853][T12555] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.1662'. [ 591.945820][ T30] audit: type=1400 audit(1767835016.757:784): avc: denied { write } for pid=12560 comm="syz.0.1664" path="socket:[39186]" dev="sockfs" ino=39186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 591.974334][ T7985] rndis_host 6-1:12.121: skipping garbage [ 591.988773][ T7985] usb 6-1: bad CDC descriptors [ 592.002879][ T7985] cdc_acm 6-1:12.121: skipping garbage [ 592.028746][ T7985] usb 6-1: USB disconnect, device number 36 [ 592.053785][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 592.060815][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 592.074013][ T9] usb 3-1: USB disconnect, device number 73 [ 592.338556][T12572] block nbd4: Dead connection, failed to find a fallback [ 592.347691][T12572] block nbd4: shutting down sockets [ 592.355528][T12572] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.373961][T12572] buffer_io_error: 6 callbacks suppressed [ 592.373983][T12572] Buffer I/O error on dev nbd4, logical block 0, async page read [ 592.408517][T12572] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.428600][T12572] Buffer I/O error on dev nbd4, logical block 1, async page read [ 592.446176][T12572] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.456279][T12572] Buffer I/O error on dev nbd4, logical block 2, async page read [ 592.464850][T12572] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.474691][T12572] Buffer I/O error on dev nbd4, logical block 3, async page read [ 592.483610][T12572] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.494431][T12572] Buffer I/O error on dev nbd4, logical block 0, async page read [ 592.509816][T12572] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.519546][T12572] Buffer I/O error on dev nbd4, logical block 1, async page read [ 592.527966][T12572] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.537838][T12572] Buffer I/O error on dev nbd4, logical block 2, async page read [ 592.548013][T12572] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.558300][T12572] Buffer I/O error on dev nbd4, logical block 3, async page read [ 592.644839][T12572] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.679774][T12572] Buffer I/O error on dev nbd4, logical block 0, async page read [ 592.687589][T12572] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 592.710857][T12572] Buffer I/O error on dev nbd4, logical block 1, async page read [ 592.722501][T12572] ldm_validate_partition_table(): Disk read failed. [ 592.732917][T12572] Dev nbd4: unable to read RDB block 0 [ 592.741944][T12578] 9pnet_fd: p9_fd_create_unix (12578): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 592.743949][T12572] nbd4: unable to read partition table [ 592.938585][T12573] ldm_validate_partition_table(): Disk read failed. [ 592.956151][T12573] Dev nbd4: unable to read RDB block 0 [ 592.988492][T12573] nbd4: unable to read partition table [ 593.972249][T12612] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1677'. [ 593.972459][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.029897][ T55] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 594.030436][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.050932][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.069993][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.078316][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.100088][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.108931][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.117785][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.126864][T12615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.148572][T12615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.179745][ T55] usb 3-1: device descriptor read/64, error -71 [ 594.263901][T12623] netlink: 'syz.4.1679': attribute type 2 has an invalid length. [ 594.439750][ T55] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 594.719858][ T55] usb 3-1: device descriptor read/64, error -71 [ 594.841882][ T55] usb usb3-port1: attempt power cycle [ 594.884321][T12629] program syz.0.1680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 595.320180][ T55] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 595.320744][ T5898] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 595.340304][ T55] usb 3-1: device descriptor read/8, error -71 [ 595.509808][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 595.516387][ T5898] usb 1-1: config index 0 descriptor too short (expected 60946, got 18) [ 595.524933][ T5898] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 595.533422][ T5898] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 595.621507][ T55] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 596.043544][ T5898] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 596.054305][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.066345][ T5898] usb 1-1: config 0 descriptor?? [ 596.071679][ T55] usb 3-1: device descriptor read/8, error -71 [ 596.087405][ T5898] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 596.180025][ T55] usb usb3-port1: unable to enumerate USB device [ 596.629618][T12651] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 596.763507][T12651] mkiss: ax0: crc mode is auto. [ 596.828093][ T5898] gspca_sunplus: reg_w_riv err -110 [ 596.839768][ T5898] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 596.938841][ T5898] usb 1-1: USB disconnect, device number 59 [ 597.062277][T12657] tipc: Started in network mode [ 597.067307][T12657] tipc: Node identity d2c89d4b142c, cluster identity 4711 [ 597.075271][T12657] tipc: Enabled bearer , priority 0 [ 597.086555][T12657] syzkaller0: entered promiscuous mode [ 597.092773][T12657] syzkaller0: entered allmulticast mode [ 597.617110][ T30] audit: type=1326 audit(1767835022.437:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 597.663694][ T30] audit: type=1326 audit(1767835022.437:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 597.687969][ T30] audit: type=1326 audit(1767835022.437:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 597.762015][ T30] audit: type=1326 audit(1767835022.437:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 597.790127][T12653] tipc: Resetting bearer [ 597.889717][ T30] audit: type=1326 audit(1767835022.437:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 597.923069][ T30] audit: type=1326 audit(1767835022.437:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 598.047977][ T30] audit: type=1326 audit(1767835022.437:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 598.085684][T12653] tipc: Disabling bearer [ 598.096058][ T10] tipc: Node number set to 3336871243 [ 598.110054][ T30] audit: type=1326 audit(1767835022.437:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 598.188664][ T30] audit: type=1326 audit(1767835022.437:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12660 comm="syz.3.1690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 598.288509][T12679] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1695'. [ 598.593239][ T30] audit: type=1326 audit(1767835022.867:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12676 comm="syz.0.1694" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9cc18f749 code=0x0 [ 599.569905][ T7985] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 599.589887][ T10] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 599.730310][ T7985] usb 6-1: no configurations [ 599.734929][ T7985] usb 6-1: can't read configurations, error -22 [ 599.750257][ T10] usb 3-1: too many configurations: 241, using maximum allowed: 8 [ 599.768938][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 599.778314][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.786784][ T10] usb 3-1: Product: syz [ 599.791428][ T10] usb 3-1: Manufacturer: syz [ 599.796094][ T10] usb 3-1: SerialNumber: syz [ 599.805094][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 599.822844][ T5898] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 599.869895][ T7985] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 600.021226][ T7985] usb 6-1: no configurations [ 600.025881][ T7985] usb 6-1: can't read configurations, error -22 [ 600.034384][ T7985] usb usb6-port1: attempt power cycle [ 600.361507][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1707'. [ 600.370501][T12729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1707'. [ 600.379415][T12729] netlink: 'syz.3.1707': attribute type 13 has an invalid length. [ 600.387555][T12729] netlink: 'syz.3.1707': attribute type 12 has an invalid length. [ 600.423971][ T7985] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 600.451693][ T7985] usb 6-1: no configurations [ 600.456912][ T7985] usb 6-1: can't read configurations, error -22 [ 600.531780][ T5964] usb 3-1: USB disconnect, device number 78 [ 600.601988][ T7985] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 600.636197][ T7985] usb 6-1: no configurations [ 600.641871][ T7985] usb 6-1: can't read configurations, error -22 [ 600.650857][ T7985] usb usb6-port1: unable to enumerate USB device [ 600.879706][ T5898] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 600.887847][ T5898] ath9k_htc: Failed to initialize the device [ 600.895258][ T5964] usb 3-1: ath9k_htc: USB layer deinitialized [ 601.139749][ T10] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 601.289834][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 601.306897][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 601.318060][ T10] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 601.326977][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 601.338575][ T10] usb 1-1: config 4 has no interface number 0 [ 601.351691][ T10] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 601.365612][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.387502][ T10] usb 1-1: Product: syz [ 601.401418][ T10] usb 1-1: Manufacturer: syz [ 601.416592][ T10] usb 1-1: SerialNumber: syz [ 601.604811][T12737] delete_channel: no stack [ 602.511342][T12753] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12753 comm=syz.5.1712 [ 602.947401][T12767] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1715'. [ 602.970100][T12767] tipc: Enabling of bearer rejected, failed to enable media [ 604.092047][ T10] uvcvideo 1-1:4.147: probe with driver uvcvideo failed with error -22 [ 604.103470][ T10] usb 1-1: USB disconnect, device number 60 [ 604.174201][T12751] syz.2.1711 (12751): drop_caches: 1 [ 604.268559][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 604.268577][ T30] audit: type=1400 audit(1767835029.087:798): avc: denied { accept } for pid=12786 comm="syz.2.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 604.299247][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 604.449615][T12794] netlink: zone id is out of range [ 604.456622][T12794] netlink: zone id is out of range [ 604.462979][T12794] netlink: zone id is out of range [ 604.469066][T12794] netlink: zone id is out of range [ 604.476824][T12794] netlink: zone id is out of range [ 604.483143][T12794] netlink: zone id is out of range [ 604.489222][T12794] netlink: zone id is out of range [ 604.495581][T12794] netlink: zone id is out of range [ 604.500831][T12794] netlink: zone id is out of range [ 604.506188][T12794] netlink: zone id is out of range [ 604.522138][T12793] batman_adv: batadv0: Adding interface: macvtap1 [ 604.528677][T12793] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.566273][T12793] batman_adv: batadv0: Interface activated: macvtap1 [ 605.867914][T12762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 607.765957][ T30] audit: type=1400 audit(1767835032.587:799): avc: denied { write } for pid=12872 comm="syz.0.1744" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 607.792392][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 607.821755][T12874] fuse: Bad value for 'fd' [ 607.929284][T12874] IPv6: NLM_F_CREATE should be specified when creating new route [ 608.531002][ T10] usb 3-1: config 0 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 608.825763][ T30] audit: type=1400 audit(1767835033.647:800): avc: denied { shutdown } for pid=12878 comm="syz.0.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 608.881650][ T10] usb 3-1: config 0 interface 0 altsetting 211 endpoint 0x81 has invalid wMaxPacketSize 0 [ 608.895034][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 608.904545][ T10] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 608.914747][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.915286][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1747'. [ 608.925288][ T10] usb 3-1: config 0 descriptor?? [ 609.564951][T12860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.580249][T12860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.592403][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 609.599807][ T5964] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 609.603597][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 609.636501][ T10] usb 3-1: USB disconnect, device number 79 [ 609.760132][ T5964] usb 1-1: Using ep0 maxpacket: 32 [ 609.888082][ T5964] usb 1-1: config 0 has an invalid interface number: 210 but max is 0 [ 609.900237][ T5964] usb 1-1: config 0 has no interface number 0 [ 609.906443][ T5964] usb 1-1: config 0 interface 210 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 609.924285][ T5964] usb 1-1: config 0 interface 210 altsetting 1 endpoint 0x82 has invalid maxpacket 42392, setting to 1024 [ 609.968227][ T5964] usb 1-1: config 0 interface 210 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 609.982649][ T5964] usb 1-1: config 0 interface 210 has no altsetting 0 [ 609.995277][ T5964] usb 1-1: New USB device found, idVendor=0bfd, idProduct=000e, bcdDevice=52.6c [ 610.015731][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.025831][ T5964] usb 1-1: Product: syz [ 610.034229][ T5964] usb 1-1: Manufacturer: syz [ 610.045242][ T5964] usb 1-1: SerialNumber: syz [ 610.053755][ T5964] usb 1-1: config 0 descriptor?? [ 610.060711][T12881] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 610.067887][T12881] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 610.229585][T12911] netlink: 'syz.3.1754': attribute type 11 has an invalid length. [ 610.242188][T12911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1754'. [ 610.280252][ T5964] kvaser_usb 1-1:0.210: error -EPROTO: Cannot get software info [ 610.287959][ T5964] kvaser_usb 1-1:0.210: probe with driver kvaser_usb failed with error -71 [ 610.300182][ T5964] usb 1-1: USB disconnect, device number 61 [ 610.840504][T12918] can: request_module (can-proto-3) failed. [ 610.987576][T12918] can: request_module (can-proto-3) failed. [ 611.332615][T12932] net_ratelimit: 12 callbacks suppressed [ 611.332667][T12932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.721941][ T4457] Bluetooth: (null): Too short H5 packet [ 611.732648][ T4457] Bluetooth: (null): Invalid header checksum [ 611.761135][ T4457] Bluetooth: (null): Invalid header checksum [ 611.785028][ T4457] Bluetooth: (null): Invalid header checksum [ 611.808338][ T4457] Bluetooth: (null): Invalid header checksum [ 611.825856][ T4457] Bluetooth: (null): Invalid header checksum [ 612.176829][ T5817] Bluetooth: hci1: unexpected event for opcode 0x0029 [ 612.618694][ T30] audit: type=1326 audit(1767835037.437:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12970 comm="syz.3.1769" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac298f749 code=0x0 [ 612.789773][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 612.959946][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 612.968467][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 188, changing to 11 [ 613.012191][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 25072, setting to 1024 [ 613.073709][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1504, bcdDevice=30.22 [ 613.111377][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.140943][ T10] usb 3-1: config 0 descriptor?? [ 613.155425][ T10] iowarrior 3-1:0.0: no interrupt-out endpoint found [ 614.241734][ T5964] usb 3-1: USB disconnect, device number 80 [ 615.583737][ T30] audit: type=1400 audit(1767835040.407:802): avc: denied { execute } for pid=13001 comm="syz.3.1780" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=40091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 616.280043][ T5817] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 616.288984][ T5817] Bluetooth: hci1: Injecting HCI hardware error event [ 616.299333][ T5817] Bluetooth: hci1: hardware error 0x00 [ 616.571636][T13024] siw: device registration error -23 [ 616.596532][ T30] audit: type=1326 audit(1767835041.407:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.3.1785" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ac298f749 code=0x0 [ 617.145062][T13037] fuse: Bad value for 'fd' [ 617.171748][T13041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'. [ 617.196523][T13041] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1790'. [ 617.506410][ T30] audit: type=1326 audit(1767835042.327:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 618.084217][ T30] audit: type=1326 audit(1767835042.327:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 618.470968][ T5817] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 618.575786][ T30] audit: type=1326 audit(1767835042.327:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 618.666791][ T30] audit: type=1326 audit(1767835042.327:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 618.773667][ T30] audit: type=1326 audit(1767835042.327:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 618.849522][ T30] audit: type=1326 audit(1767835042.327:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 618.942172][ T30] audit: type=1326 audit(1767835042.327:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 618.999819][ T30] audit: type=1326 audit(1767835042.327:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 619.052782][T13083] Failed to initialize the IGMP autojoin socket (err -2) [ 619.149999][ T30] audit: type=1326 audit(1767835042.327:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 619.173474][ T30] audit: type=1326 audit(1767835042.327:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 619.212788][ T30] audit: type=1326 audit(1767835042.327:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13045 comm="syz.3.1792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ac298f749 code=0x7ffc0000 [ 621.205503][T13106] bridge0: port 3(gretap0) entered blocking state [ 621.212739][T13106] bridge0: port 3(gretap0) entered disabled state [ 621.221182][T13106] gretap0: entered allmulticast mode [ 621.233676][T13106] gretap0: entered promiscuous mode [ 621.241307][T13106] bridge0: port 3(gretap0) entered blocking state [ 621.247807][T13106] bridge0: port 3(gretap0) entered forwarding state [ 621.765847][T13121] netlink: 'syz.5.1810': attribute type 10 has an invalid length. [ 621.884532][T13117] 9p: Bad value for 'wfdno' [ 623.662906][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1813'. [ 623.850032][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.856335][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.309814][ T9] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 624.484348][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 88, changing to 10 [ 624.501653][ T9] usb 3-1: New USB device found, idVendor=0eef, idProduct=7207, bcdDevice= 0.40 [ 624.511836][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.522150][ T9] usb 3-1: Product: 餰瘑혒é”⸉攴陆è¯â ›å¡œÉ¦ç³‘å­î°³í壟㞱ᓅ凉 [ 624.534680][ T9] usb 3-1: Manufacturer: Ñ [ 624.540835][ T9] usb 3-1: SerialNumber: ᖰᨂï½ï¡‹îª‰ç­šì¸æ¾£è¥¸î»»ìª¾ï‹“샚᎓丬쎗빺쟒凒ëŒî³¾å«­ï…‰â˜—䉫뇹込å¹ãŽ¸ã»ä†˜ã·ží’ Û½ï³†î´‹æ›¤å¸©ë§‡ï£¥ì¢·á›‹è’±æº—ଲì»ì§£î†œê‰²âšŒí‹‰èŸšæ¶Œæ‘ˆã…•ãª“퓕ꢙ섫ങ㱣氱们콅妗O縱鳊掻㒵妔á໹粂朦脑ㄜ䒟솑ໞìœî‰®íŸ¯ãšê¸£ãˆáŒ´é—·ëˆ‹áµ™çˆ¨è”èžá´ î«Œç­›æ¨‰é¬Žæ—®ã¡¥ [ 624.639731][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 624.810836][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 624.817675][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 624.826610][ T10] usb 6-1: config 4 interface 0 has no altsetting 0 [ 624.835895][ T10] usb 6-1: string descriptor 0 read error: -22 [ 624.842537][ T10] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 624.851828][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.865881][ T10] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 624.876360][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 624.886991][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 624.895403][ T10] usb 6-1: media controller created [ 624.901713][ T9] usbhid 3-1:1.0: can't add hid device: -71 [ 624.907782][ T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 624.929900][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 624.939523][ T9] usb 3-1: USB disconnect, device number 81 [ 625.068900][T13181] tc_dump_action: action bad kind [ 625.650240][ T5898] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 626.603240][ T5898] usb 1-1: device descriptor read/64, error -71 [ 626.616801][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 627.789953][ T5898] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 627.929759][ T5898] usb 1-1: device descriptor read/64, error -71 [ 628.887779][ T5898] usb usb1-port1: attempt power cycle [ 628.895982][ T10] usb 6-1: USB disconnect, device number 41 [ 629.409731][ T7985] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 629.558765][T13218] netlink: 'syz.0.1831': attribute type 1 has an invalid length. [ 629.571688][ T7985] usb 3-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 629.582975][T13218] 8021q: adding VLAN 0 to HW filter on device bond5 [ 630.010837][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 630.010854][ T30] audit: type=1400 audit(1767835054.837:849): avc: denied { bind } for pid=13221 comm="syz.5.1829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 630.046587][T13228] could not open pipe file descriptor [ 630.053986][T13228] could not open pipe file descriptor [ 630.210045][ T7985] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.236517][ T7985] usb 3-1: config 0 interface 0 has no altsetting 0 [ 630.249382][ T7985] usb 3-1: New USB device found, idVendor=046d, idProduct=c22c, bcdDevice= 0.00 [ 630.264656][ T7985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.363010][ T7985] usb 3-1: config 0 descriptor?? [ 630.386445][ T7985] usb 3-1: can't set config #0, error -71 [ 630.399504][T13218] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 630.426638][ T7985] usb 3-1: USB disconnect, device number 82 [ 631.376940][T13245] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 631.652128][T13245] mkiss: ax0: crc mode is auto. [ 631.840897][T13245] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 631.909731][T13237] fuse: Unknown parameter '' [ 632.103791][T13260] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 632.944756][ T30] audit: type=1400 audit(1767835057.767:850): avc: denied { associate } for pid=13253 comm="syz.0.1843" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 632.966241][T13278] x_tables: ip_tables: udp match: only valid for protocol 17 [ 633.151999][T13283] tipc: Enabled bearer , priority 0 [ 633.181670][T13283] tipc: Disabling bearer [ 633.358130][T13290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1852'. [ 635.092614][ T30] audit: type=1400 audit(1767835059.657:851): avc: denied { shutdown } for pid=13303 comm="syz.2.1855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 635.976896][T13317] infiniband syû: set down [ 635.988553][T13317] infiniband syû: added bond_slave_0 [ 636.004449][T13317] syû: rxe_create_qp: returned err = -2 [ 636.017916][T13317] infiniband syû: Couldn't create ib_mad QP1 [ 636.038465][T13317] infiniband syû: Couldn't open port 1 [ 636.117970][T13317] RDS/IB: syû: added [ 636.140210][T13317] smc: adding ib device syû with port count 1 [ 636.152740][T13317] smc: ib device syû port 1 has no pnetid [ 636.389769][ T5898] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 636.580024][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.599901][ T5898] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 636.630118][ T5898] usb 6-1: config 1 has no interface number 0 [ 636.636294][ T5898] usb 6-1: config 1 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 636.696046][ T5898] usb 6-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 636.716036][ T5898] usb 6-1: config 1 interface 2 has no altsetting 1 [ 636.879005][T13326] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.1862' sets config #1 [ 636.896425][ T5898] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.915671][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.939840][ T5898] usb 6-1: Product: syz [ 636.948539][ T5898] usb 6-1: Manufacturer: syz [ 636.957477][ T5898] usb 6-1: SerialNumber: syz [ 637.190007][ T5898] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 637.283603][T13322] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 637.375435][ T10] usb 6-1: USB disconnect, device number 42 [ 637.381470][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 637.398890][ T5898] usb 3-1: config 0 interface 0 has no altsetting 0 [ 637.413416][ T5898] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 637.434350][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.444358][ T5898] usb 3-1: Product: syz [ 637.448632][ T5898] usb 3-1: Manufacturer: syz [ 637.454287][ T5898] usb 3-1: SerialNumber: syz [ 637.462308][ T5898] usb 3-1: config 0 descriptor?? [ 637.532921][T13348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 637.768991][ T5898] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 638.025854][ T5898] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 638.053548][ T5898] usb 3-1: USB disconnect, device number 83 [ 638.338441][ T30] audit: type=1400 audit(1767835063.157:852): avc: denied { append } for pid=13362 comm="syz.2.1869" name="mouse0" dev="devtmpfs" ino=989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 638.749952][ T7985] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 638.984289][ T7985] usb 1-1: device descriptor read/64, error -71 [ 639.123659][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1872'. [ 639.249759][ T7985] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 639.419853][ T7985] usb 1-1: device descriptor read/64, error -71 [ 639.517085][ T55] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 639.670659][ T7985] usb usb1-port1: attempt power cycle [ 639.706154][ T55] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 639.960163][ T5964] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 640.004283][ T55] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1 [ 640.024940][ T55] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 640.039296][ T7985] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 640.061167][ T55] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 640.080562][ T7985] usb 1-1: device descriptor read/8, error -71 [ 640.089752][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.107875][T13378] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 640.118176][ T55] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 640.126105][ T55] usb 3-1: invalid MIDI in EP 0 [ 640.139875][ T5964] usb 6-1: device descriptor read/64, error -71 [ 640.156386][ T55] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 640.329829][ T7985] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 640.343477][ T30] audit: type=1326 audit(1767835065.167:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484c78f749 code=0x7ffc0000 [ 640.370563][ T7985] usb 1-1: device descriptor read/8, error -71 [ 640.380270][ T30] audit: type=1326 audit(1767835065.207:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f484c78f749 code=0x7ffc0000 [ 640.407415][ T30] audit: type=1326 audit(1767835065.207:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484c78f749 code=0x7ffc0000 [ 640.409785][ T5964] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 640.440141][ T30] audit: type=1326 audit(1767835065.207:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484c78f749 code=0x7ffc0000 [ 640.464390][ T30] audit: type=1326 audit(1767835065.237:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13377 comm="syz.2.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f484c78f749 code=0x7ffc0000 [ 640.480104][ T7985] usb usb1-port1: unable to enumerate USB device [ 640.575256][ T5964] usb 6-1: device descriptor read/64, error -71 [ 640.692042][ T5964] usb usb6-port1: attempt power cycle [ 640.711057][ T7985] usb 3-1: USB disconnect, device number 84 [ 640.751038][T13388] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 640.791931][ T30] audit: type=1400 audit(1767835065.617:858): avc: denied { setopt } for pid=13387 comm="syz.2.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 640.829748][ T30] audit: type=1400 audit(1767835065.617:859): avc: denied { write } for pid=13387 comm="syz.2.1875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 641.039894][ T5964] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 641.091660][ T5964] usb 6-1: device descriptor read/8, error -71 [ 641.430015][ T5964] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 641.471498][ T5964] usb 6-1: device descriptor read/8, error -71 [ 641.600355][ T5964] usb usb6-port1: unable to enumerate USB device [ 642.679169][T13435] overlay: filesystem on ./bus not supported as upperdir [ 642.853126][T13435] [U]  [ 644.155554][T13445] team0: Port device team_slave_0 removed [ 644.162142][T13445] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 644.334355][T13456] nvme_fabrics: missing parameter 'transport=%s' [ 644.360756][T13456] nvme_fabrics: missing parameter 'nqn=%s' [ 644.509776][ T5925] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 644.546739][T13466] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 644.682796][ T5925] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 644.750314][ T5925] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 644.759461][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.768896][ T5925] usb 1-1: Product: syz [ 644.773265][ T5925] usb 1-1: Manufacturer: syz [ 644.778519][ T5925] usb 1-1: SerialNumber: syz [ 645.220852][ T5964] usb 1-1: USB disconnect, device number 69 [ 646.859850][ T5898] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 646.921116][ T30] audit: type=1400 audit(1767835071.747:860): avc: denied { getattr } for pid=13503 comm="syz.5.1902" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=42135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 647.040141][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 647.046478][ T5898] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 647.057389][ T5898] usb 1-1: config 0 has no interface number 0 [ 647.072920][ T5898] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 647.086629][ T5898] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 647.102418][ T5898] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 647.116186][ T5898] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 647.128655][ T5898] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 647.149399][ T5898] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 647.162567][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.172128][ T5898] usb 1-1: Product: syz [ 647.225148][ T5898] usb 1-1: Manufacturer: syz [ 647.229904][ T5898] usb 1-1: SerialNumber: syz [ 647.237505][ T5898] usb 1-1: config 0 descriptor?? [ 647.351199][T13512] syzkaller0: entered promiscuous mode [ 647.357220][T13512] syzkaller0: entered allmulticast mode [ 647.378446][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1904'. [ 647.455872][ T30] audit: type=1326 audit(1767835072.277:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13488 comm="syz.0.1897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9cc18f749 code=0x0 [ 647.877359][T13519] overlayfs: failed to clone upperpath [ 647.989736][ T7985] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 648.119806][ T7985] usb 3-1: device descriptor read/64, error -71 [ 648.560079][ T7985] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 648.709825][ T7985] usb 3-1: device descriptor read/64, error -71 [ 648.899078][ T7985] usb usb3-port1: attempt power cycle [ 649.191322][ T30] audit: type=1400 audit(1767835074.017:862): avc: denied { mounton } for pid=13544 comm="syz.4.1913" path="/378/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 649.239855][ T7985] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 649.270934][ T7985] usb 3-1: device descriptor read/8, error -71 [ 649.519759][ T7985] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 649.540204][ T7985] usb 3-1: device descriptor read/8, error -71 [ 649.634360][ T5898] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 649.651752][ T7985] usb usb3-port1: unable to enumerate USB device [ 649.671652][ T5898] usb 1-1: USB disconnect, device number 70 [ 650.011714][T13577] overlayfs: failed to clone upperpath [ 650.479207][T13538] random: crng reseeded on system resumption [ 650.619963][ T5898] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 650.840250][ T5898] usb 1-1: device descriptor read/64, error -71 [ 651.079926][ T5898] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 651.430147][ T5898] usb 1-1: device descriptor read/64, error -71 [ 652.421340][ T5898] usb usb1-port1: attempt power cycle [ 653.423565][T13615] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 653.494864][T13615] 8021q: adding VLAN 0 to HW filter on device bond4 [ 653.622097][T13619] 8021q: adding VLAN 0 to HW filter on device bond4 [ 653.881959][T13619] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 653.897514][T13619] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 654.104942][T13635] afs: Bad value for 'flock' [ 654.247216][T13638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1934'. [ 654.256396][T13639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1934'. [ 654.308523][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1935'. [ 654.532768][ T30] audit: type=1326 audit(1767835079.357:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2867f8f749 code=0x7ffc0000 [ 654.711303][ T30] audit: type=1326 audit(1767835079.357:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f2867f8f749 code=0x7ffc0000 [ 654.753717][ T30] audit: type=1326 audit(1767835079.357:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2867f8f749 code=0x7ffc0000 [ 654.778084][T13615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1928'. [ 654.787165][ T30] audit: type=1326 audit(1767835079.357:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2867f8f749 code=0x7ffc0000 [ 654.811177][ T30] audit: type=1326 audit(1767835079.357:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2867f8f749 code=0x7ffc0000 [ 654.889035][T13619] veth3: entered promiscuous mode [ 654.948030][T13651] overlayfs: empty lowerdir [ 654.979765][ T30] audit: type=1326 audit(1767835079.357:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2867f8f749 code=0x7ffc0000 [ 655.109895][ T30] audit: type=1326 audit(1767835079.357:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2867f8f749 code=0x7ffc0000 [ 655.136107][ T30] audit: type=1326 audit(1767835079.357:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2867f8f749 code=0x7ffc0000 [ 655.163524][T13654] ip6tnl1: entered promiscuous mode [ 655.171602][ T30] audit: type=1326 audit(1767835079.407:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2867f865e7 code=0x7ffc0000 [ 655.199905][ T30] audit: type=1326 audit(1767835079.407:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13643 comm="syz.4.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2867f2b829 code=0x7ffc0000 [ 655.224977][T13658] openvswitch: netlink: Missing valid actions attribute. [ 655.240663][T13658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.309783][ T7985] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 655.551541][ T7985] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.575411][ T7985] usb 6-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 655.601316][ T7985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.632102][ T7985] usb 6-1: config 0 descriptor?? [ 655.840737][T13651] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1936'. [ 655.879814][ T5925] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 656.040287][ T5898] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 656.059443][ T5925] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 656.078344][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.100203][ T5925] usb 3-1: config 0 descriptor?? [ 656.115499][ T5925] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 656.211342][ T5898] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 656.219596][ T5898] usb 1-1: config 0 has no interface number 0 [ 656.235153][ T5898] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 656.255030][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.271725][T13676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.280285][ T5898] usb 1-1: Product: syz [ 656.280609][T13651] overlay: Unknown parameter '' [ 656.284479][ T5898] usb 1-1: Manufacturer: syz [ 656.294947][T13676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.317380][ T5925] gp8psk: usb in 128 operation failed. [ 656.325662][ T5898] usb 1-1: SerialNumber: syz [ 656.328505][ T7985] usbhid 6-1:0.0: can't add hid device: -71 [ 656.339953][ T7985] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 656.355064][ T7985] usb 6-1: USB disconnect, device number 47 [ 656.367934][ T5925] gp8psk: usb in 137 operation failed. [ 656.377056][ T5898] usb 1-1: config 0 descriptor?? [ 656.384708][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 656.412097][ T5925] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 656.433311][ T5925] usb 3-1: media controller created [ 656.447170][T13681] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13681 comm=syz.5.1945 [ 656.465429][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 656.503075][ T5925] gp8psk_fe: Frontend attached [ 656.515066][ T5925] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 656.533289][ T5925] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 656.614459][ T5898] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 656.631514][ T5898] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 656.658422][ T5898] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 656.672553][ T5898] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 656.697315][ T5898] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 656.819106][ T5925] gp8psk: usb in 137 operation failed. [ 656.832438][ T5925] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 656.852287][ T5925] gp8psk: found Genpix USB device pID = 203 (hex) [ 657.465384][T13692] netlink: 'syz.3.1948': attribute type 4 has an invalid length. [ 657.473456][T13692] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1948'. [ 657.484971][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 657.713266][ T7985] usb 3-1: USB disconnect, device number 89 [ 658.050522][ T7985] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 658.070542][T13703] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1951'. [ 658.969114][ T5898] usb 1-1: USB disconnect, device number 74 [ 658.988436][ T5898] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 659.002744][ T5898] keyspan 1-1:0.133: device disconnected [ 660.251398][T13739] ceph: No mds server is up or the cluster is laggy [ 660.258278][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 660.647874][T13746] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 660.910055][ T5925] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 661.070816][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 661.077870][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.566975][ T5925] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 661.576360][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 661.585045][ T5925] usb 6-1: Product: syz [ 661.589524][ T5925] usb 6-1: Manufacturer: syz [ 661.594444][ T5925] usb 6-1: SerialNumber: syz [ 661.601728][ T5925] usb 6-1: config 0 descriptor?? [ 661.615217][ T5925] usb 6-1: no audio or video endpoints found [ 661.826256][ T5925] usb 6-1: USB disconnect, device number 48 [ 661.849253][T13766] 8021q: adding VLAN 0 to HW filter on device bond4 [ 661.898646][T13769] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 661.918128][T13766] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 661.934418][T13766] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 662.218026][T13776] siw: device registration error -23 [ 662.699395][T13774] macvlan2: entered promiscuous mode [ 662.706130][T13774] macvlan2: entered allmulticast mode [ 662.714264][T13774] bond4: entered allmulticast mode [ 662.721391][T13774] bond4: entered promiscuous mode [ 662.730328][T13774] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 662.754805][T13774] team0: Port device macvlan2 added [ 663.105374][T13789] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 663.180146][T13792] syz.3.1973 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 663.299743][ T5898] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 663.350086][T13797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 663.357343][T13797] IPv6: NLM_F_CREATE should be set when creating new route [ 663.364678][T13797] IPv6: NLM_F_CREATE should be set when creating new route [ 663.371873][T13797] IPv6: NLM_F_CREATE should be set when creating new route [ 663.465785][T13806] all (unregistering): Released all slaves [ 663.500366][ T5898] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 663.607406][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.671861][ T5898] usb 3-1: Product: syz [ 663.682000][ T5898] usb 3-1: Manufacturer: syz [ 663.687181][ T5898] usb 3-1: SerialNumber: syz [ 663.694686][ T5898] usb 3-1: config 0 descriptor?? [ 663.705126][ T5898] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 090 [ 663.950140][ T7985] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 664.099757][ T7985] usb 1-1: device descriptor read/64, error -71 [ 664.339706][ T7985] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 664.479691][ T7985] usb 1-1: device descriptor read/64, error -71 [ 664.589879][ T7985] usb usb1-port1: attempt power cycle [ 664.939824][ T7985] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 664.961342][ T7985] usb 1-1: device descriptor read/8, error -71 [ 665.379425][ T7985] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 665.410095][ T7985] usb 1-1: device descriptor read/8, error -71 [ 665.519968][ T7985] usb usb1-port1: unable to enumerate USB device [ 665.769939][ T5898] (null): failure setting delay to 10us [ 665.775771][ T5898] i2c-tiny-usb 3-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 665.877757][ T5898] usb 3-1: USB disconnect, device number 90 [ 666.026807][T13837] netlink: 'syz.2.1985': attribute type 10 has an invalid length. [ 666.037076][T13837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.045960][T13837] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 666.207997][T13841] vivid-000: ================= START STATUS ================= [ 666.216063][ T5898] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 666.319395][T13841] vivid-000: Generate PTS: true [ 666.331621][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 666.331635][ T30] audit: type=1400 audit(1767835091.157:877): avc: denied { append } for pid=13839 comm="syz.4.1987" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 666.368840][T13841] vivid-000: Generate SCR: true [ 666.373880][ T30] audit: type=1400 audit(1767835091.157:878): avc: denied { map } for pid=13839 comm="syz.4.1987" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 666.379644][T13841] tpg source WxH: 720x576 (R'G'B) [ 666.406967][ T30] audit: type=1400 audit(1767835091.157:879): avc: denied { execute } for pid=13839 comm="syz.4.1987" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 666.421980][T13841] tpg field: 2 [ 666.438519][T13841] tpg crop: (0,0)/64x576 [ 666.443251][T13841] tpg compose: (0,0)/16x576 [ 666.459093][T13841] tpg colorspace: 1 [ 666.464049][T13841] tpg transfer function: 0/0 [ 666.476870][T13841] tpg quantization: 0/0 [ 666.481258][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 666.501099][T13841] tpg RGB range: 0/2 [ 666.505240][T13841] vivid-000: ================== END STATUS ================== [ 666.516443][ T5898] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 666.528384][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.538761][ T5898] usb 6-1: Product: syz [ 666.543038][ T5898] usb 6-1: Manufacturer: syz [ 666.550538][ T5898] usb 6-1: SerialNumber: syz [ 666.557923][ T5898] usb 6-1: config 0 descriptor?? [ 666.771141][ T7985] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 666.823952][ T5898] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 666.831025][ T5898] gspca_sunplus: reg_w_riv err -71 [ 666.836315][ T5898] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 666.847432][ T5898] usb 6-1: USB disconnect, device number 49 [ 666.929716][ T7985] usb 3-1: Using ep0 maxpacket: 32 [ 666.938006][ T7985] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 666.949865][ T7985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.961870][ T7985] usb 3-1: config 0 descriptor?? [ 666.970058][ T7985] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 666.988301][ T7985] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 667.176648][ T5898] usb 3-1: USB disconnect, device number 91 [ 667.182478][ T5964] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 667.749681][ T5964] usb 1-1: Using ep0 maxpacket: 32 [ 667.756699][ T5964] usb 1-1: config index 0 descriptor too short (expected 60946, got 18) [ 667.765263][ T5964] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 667.774155][ T5964] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 667.783681][ T5964] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 667.792983][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.992797][ T5964] usb 1-1: config 0 descriptor?? [ 668.102065][ T5964] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 668.504174][T13888] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2001'. [ 668.528269][T13889] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 668.553502][T13889] mkiss: ax0: crc mode is auto. [ 668.760086][ T5964] gspca_sunplus: reg_w_riv err -110 [ 668.771226][ T5964] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 668.805861][ T5964] usb 1-1: USB disconnect, device number 79 [ 668.820119][ T30] audit: type=1400 audit(1767835093.647:880): avc: denied { shutdown } for pid=13881 comm="syz.3.2001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 669.029725][ T5898] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 669.109719][ T10] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 669.179717][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 669.229556][ T5898] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 669.239650][ T5898] usb 3-1: config 0 has no interface number 0 [ 669.248255][ T5898] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 669.259270][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.269120][ T5898] usb 3-1: Product: syz [ 669.273867][ T5898] usb 3-1: Manufacturer: syz [ 669.278943][ T5898] usb 3-1: SerialNumber: syz [ 669.284643][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 669.293921][ T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 669.296003][T13897] ipvlan0: entered promiscuous mode [ 669.302449][ T5898] usb 3-1: config 0 descriptor?? [ 669.319446][ T10] usb 6-1: config 0 has no interface number 0 [ 669.329749][ T10] usb 6-1: config 0 interface 12 has no altsetting 0 [ 669.340598][ T5898] smsc95xx v2.0.0 [ 669.360368][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 669.369501][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.386510][ T10] usb 6-1: Product: syz [ 669.391363][ T10] usb 6-1: Manufacturer: syz [ 669.395117][T13902] Failed to initialize the IGMP autojoin socket (err -2) [ 669.396018][ T10] usb 6-1: SerialNumber: syz [ 669.410277][ T10] usb 6-1: config 0 descriptor?? [ 669.543996][ T30] audit: type=1400 audit(1767835094.367:881): avc: denied { append } for pid=13892 comm="syz.2.2005" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 669.707963][T13915] CUSE: info not properly terminated [ 669.756259][ T10] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 669.784921][ T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 669.810286][ T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 669.829890][ T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 669.874291][ T10] usb 6-1: USB disconnect, device number 50 [ 669.899255][T13922] fuse: Bad value for 'fd' [ 669.966584][T13924] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2011'. [ 670.005602][T13924] can: request_module (can-proto-3) failed. [ 670.052378][T13927] fuse: Bad value for 'fd' [ 670.116502][T13929] fuse: Bad value for 'fd' [ 673.414466][ T5898] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 673.450274][ T5898] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 673.469563][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 673.495998][ T30] audit: type=1326 audit(1767835098.317:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13973 comm="syz.0.2027" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd9cc18f749 code=0x0 [ 673.529959][ T5898] usb 3-1: USB disconnect, device number 92 [ 673.732265][T13983] loop6: detected capacity change from 0 to 2640 [ 673.741385][T13983] buffer_io_error: 118 callbacks suppressed [ 673.741420][T13983] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.755627][T13983] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.763725][T13983] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.771744][T13983] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.779772][T13983] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.789364][T13983] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.797483][T13983] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.805493][T13983] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.813406][T13983] ldm_validate_partition_table(): Disk read failed. [ 673.821400][T13983] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.829397][T13983] Buffer I/O error on dev loop6, logical block 0, async page read [ 673.837493][T13983] Dev loop6: unable to read RDB block 0 [ 673.843848][T13983] loop6: unable to read partition table [ 673.850182][T13983] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 674.409053][T14002] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 675.109891][ T5925] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 676.057892][ T5925] usb 3-1: device descriptor read/64, error -71 [ 676.361088][T14024] dlm: plock device version mismatch: kernel (1.2.0), user (129.0.0) [ 676.434731][ T5925] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 676.569781][ T5925] usb 3-1: device descriptor read/64, error -71 [ 676.690028][ T5925] usb usb3-port1: attempt power cycle [ 676.789403][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2043'. [ 676.799722][T14039] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2043'. [ 677.030157][ T5925] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 677.065154][ T5925] usb 3-1: device descriptor read/8, error -71 [ 677.234252][T14046] fuse: Bad value for 'rootmode' [ 677.329742][ T5925] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 677.935736][ T5925] usb 3-1: device descriptor read/8, error -71 [ 678.077476][ T5925] usb usb3-port1: unable to enumerate USB device [ 678.123859][T14060] netlink: 1424 bytes leftover after parsing attributes in process `syz.3.2053'. [ 678.291208][ T5925] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 678.470037][ T5925] usb 1-1: Using ep0 maxpacket: 8 [ 678.480383][ T5925] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 678.494703][ T5925] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 678.513839][ T5925] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 678.531812][ T5925] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 678.554344][ T5925] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 678.571915][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.589976][ T10] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 678.859254][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 678.874452][T14066] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2052'. [ 678.898738][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 678.911053][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.921908][ T10] usb 3-1: Product: syz [ 678.926139][ T10] usb 3-1: Manufacturer: syz [ 678.931401][ T10] usb 3-1: SerialNumber: syz [ 678.974154][ T5925] usb 1-1: GET_CAPABILITIES returned 0 [ 678.986521][ T10] usb 3-1: config 0 descriptor?? [ 678.992526][ T5925] usbtmc 1-1:16.0: can't read capabilities [ 679.191685][T14057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.201276][T14057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.497763][ T5964] usb 1-1: USB disconnect, device number 80 [ 680.842104][T14095] erspan0: entered promiscuous mode [ 680.857340][T14095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2061'. [ 680.911500][T14097] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2063'. [ 681.059729][ T5964] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 681.159767][ T5925] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 681.209742][ T5964] usb 1-1: Using ep0 maxpacket: 16 [ 681.216298][ T5964] usb 1-1: config 0 interface 0 altsetting 29 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.226379][ T5964] usb 1-1: config 0 interface 0 has no altsetting 0 [ 681.233064][ T5964] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 681.242149][ T5964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.251796][ T5964] usb 1-1: config 0 descriptor?? [ 681.311224][ T5925] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 681.319511][ T5925] usb 6-1: config 0 has no interface number 0 [ 681.326682][ T5925] usb 6-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 1088, setting to 64 [ 681.338439][ T5925] usb 6-1: config 0 interface 41 has no altsetting 0 [ 681.347138][ T5925] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 681.356474][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.369981][ T5925] usb 6-1: Product: syz [ 681.374245][ T5925] usb 6-1: Manufacturer: syz [ 681.379948][ T5925] usb 6-1: SerialNumber: syz [ 681.390001][ T5925] usb 6-1: config 0 descriptor?? [ 681.399247][T14097] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 681.471666][T14089] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 681.478195][T14089] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 681.486235][T14089] vhci_hcd vhci_hcd.0: Device attached [ 681.498304][T14102] vhci_hcd: connection closed [ 681.498473][ T5989] vhci_hcd vhci_hcd.0: stop threads [ 681.509201][ T5989] vhci_hcd vhci_hcd.0: release socket [ 681.521657][ T5964] usbhid 1-1:0.0: can't add hid device: -71 [ 681.529764][ T5989] vhci_hcd vhci_hcd.0: disconnect device [ 681.539655][ T5964] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 681.561106][ T7985] usb 3-1: USB disconnect, device number 97 [ 681.571049][ T5964] usb 1-1: USB disconnect, device number 81 [ 681.602076][T14107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 681.627984][T14097] netlink: 'syz.5.2063': attribute type 12 has an invalid length. [ 681.650315][T14097] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 681.861118][ T5925] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 681.872187][ T5925] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 681.885665][ T5925] usb 6-1: USB disconnect, device number 51 [ 682.831082][T14128] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2074'. [ 682.896411][T14129] sp0: Synchronizing with TNC [ 682.899756][ T5925] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 683.061587][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.072796][ T5925] usb 1-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 683.082286][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.092922][ T5925] usb 1-1: config 0 descriptor?? [ 684.256416][T14137] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 684.270277][T14139] geneve2: entered promiscuous mode [ 684.275572][T14139] geneve2: entered allmulticast mode [ 684.895127][T14155] could not allocate digest TFM handle cryptd(blake2b-160) [ 685.600080][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.612311][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.725725][ T5925] usbhid 1-1:0.0: can't add hid device: -71 [ 685.773951][ T5925] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 685.821038][ T5925] usb 1-1: USB disconnect, device number 82 [ 686.749739][ T5964] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 688.277103][ T5964] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 688.302874][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.331977][ T5964] usb 6-1: Product: syz [ 688.346435][ T5964] usb 6-1: Manufacturer: syz [ 688.364026][ T5964] usb 6-1: SerialNumber: syz [ 688.383070][ T5964] usb 6-1: config 0 descriptor?? [ 688.411460][ T5964] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 052 [ 688.807710][T14199] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2090'. [ 688.901622][T14199] Failed to initialize the IGMP autojoin socket (err -2) [ 689.110431][ T7985] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 689.299843][ T7985] usb 3-1: Using ep0 maxpacket: 32 [ 689.327165][ T7985] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 689.353244][ T7985] usb 3-1: config 0 has no interface number 0 [ 689.386410][ T7985] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 689.428299][ T5964] i2c i2c-1: failure reading functionality [ 689.436111][ T7985] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 689.460688][ T5964] i2c i2c-1: connected i2c-tiny-usb device [ 689.470565][ T7985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.497870][ T7985] usb 3-1: Product: syz [ 689.504488][ T5964] usb 6-1: USB disconnect, device number 52 [ 689.512566][ T7985] usb 3-1: Manufacturer: syz [ 689.529525][ T7985] usb 3-1: SerialNumber: syz [ 689.557863][ T7985] usb 3-1: config 0 descriptor?? [ 689.691087][ T7985] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 689.703928][ T7985] em28xx 3-1:0.132: Video interface 132 found: [ 690.163976][ T7985] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 690.655329][ T7985] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 690.674157][ T7985] em28xx 3-1:0.132: board has no eeprom [ 690.870103][ T7985] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 690.891039][ T7985] em28xx 3-1:0.132: analog set to bulk mode. [ 690.916893][ T7985] usb 3-1: USB disconnect, device number 98 [ 691.373193][ T7985] em28xx 3-1:0.132: Disconnecting em28xx [ 691.378926][ T5964] em28xx 3-1:0.132: Registering V4L2 extension [ 691.467645][T14238] bond4: Unable to set peer notification delay as MII monitoring is disabled [ 691.491093][T14238] bond4 (unregistering): Released all slaves [ 691.568565][T14240] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 691.799972][ T55] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 692.259792][ T5964] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 692.278585][ T5964] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 692.350086][ T5964] em28xx 3-1:0.132: No AC97 audio processor [ 692.362542][ T5964] usb 3-1: Decoder not found [ 692.367147][ T5964] em28xx 3-1:0.132: failed to create media graph [ 692.383862][ T5964] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 692.392114][ T5964] em28xx 3-1:0.132: Remote control support is not available for this card. [ 692.401108][ T7985] em28xx 3-1:0.132: Closing input extension [ 692.429694][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 692.436557][ T55] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 692.444976][ T55] usb 1-1: config 0 has no interface number 0 [ 692.453753][ T55] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 692.463010][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.471085][ T55] usb 1-1: Product: syz [ 692.475333][ T55] usb 1-1: Manufacturer: syz [ 692.480100][ T55] usb 1-1: SerialNumber: syz [ 692.528930][ T55] usb 1-1: config 0 descriptor?? [ 692.535189][ T7985] em28xx 3-1:0.132: Freeing device [ 692.544225][ T55] smsc95xx v2.0.0 [ 693.006307][T14279] overlay: Bad value for 'index' [ 693.013172][ T55] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 693.027178][ T55] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 693.349827][ T5925] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 693.418313][T14253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.452234][T14253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.527809][ T5925] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 693.546135][ T5925] usb 6-1: config 0 has no interface number 0 [ 693.576401][ T5925] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 693.588108][ T5925] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 693.605960][ T5925] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 693.624714][ T5925] usb 6-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 693.637615][ T55] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 693.638549][ T5925] usb 6-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 693.741213][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.750125][ T5925] usb 6-1: Product: syz [ 693.755074][ T5925] usb 6-1: Manufacturer: syz [ 693.759157][ T55] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 693.781245][ T5925] usb 6-1: SerialNumber: syz [ 693.789086][ T55] usb 1-1: USB disconnect, device number 83 [ 693.790500][ T5925] usb 6-1: config 0 descriptor?? [ 694.309561][ T5925] xpad 6-1:0.237: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 694.334354][ T5925] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.237/input/input31 [ 694.483925][ T30] audit: type=1400 audit(1767835119.307:883): avc: denied { audit_write } for pid=14299 comm="syz.3.2119" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 694.509509][ T5925] usb 6-1: USB disconnect, device number 53 [ 694.747340][ T30] audit: type=1400 audit(1767835119.567:884): avc: denied { accept } for pid=14304 comm="syz.4.2121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 695.927580][T14320] fuse: Bad value for 'fd' [ 696.281134][T14334] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 696.296152][T14334] overlayfs: missing 'lowerdir' [ 696.344950][ T30] audit: type=1326 audit(1767835121.167:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.0.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cc18f749 code=0x7ffc0000 [ 696.370112][ T30] audit: type=1326 audit(1767835121.167:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.0.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cc18f749 code=0x7ffc0000 [ 696.396696][ T5925] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 696.419993][ T30] audit: type=1326 audit(1767835121.197:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.0.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cc18f749 code=0x7ffc0000 [ 696.443784][ T30] audit: type=1326 audit(1767835121.197:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.0.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cc18f749 code=0x7ffc0000 [ 696.473956][ T30] audit: type=1326 audit(1767835121.197:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.0.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fd9cc18f749 code=0x7ffc0000 [ 696.498334][ T30] audit: type=1326 audit(1767835121.197:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.0.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cc18f749 code=0x7ffc0000 [ 696.523048][ T30] audit: type=1326 audit(1767835121.197:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.0.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cc18f749 code=0x7ffc0000 [ 696.546774][ T30] audit: type=1326 audit(1767835121.217:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14335 comm="syz.0.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cc18f749 code=0x7ffc0000 [ 696.570472][ T5925] usb 6-1: device descriptor read/64, error -71 [ 696.809821][ T5925] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 696.949881][ T5925] usb 6-1: device descriptor read/64, error -71 [ 697.059932][ T5925] usb usb6-port1: attempt power cycle [ 697.089668][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 697.251189][ T9] usb 1-1: config 0 has an invalid interface number: 28 but max is 0 [ 697.259416][ T9] usb 1-1: config 0 has no interface number 0 [ 697.265849][ T9] usb 1-1: config 0 interface 28 has no altsetting 0 [ 697.272962][ T9] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=b3.ea [ 697.282246][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.291738][ T9] usb 1-1: config 0 descriptor?? [ 697.298172][ T9] kobil_sct 1-1:0.28: KOBIL USB smart card terminal converter detected [ 697.308630][ T9] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 697.399772][ T5925] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 697.491098][ T5925] usb 6-1: device descriptor read/8, error -71 [ 697.500600][ T55] usb 1-1: USB disconnect, device number 84 [ 697.509165][ T55] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 697.519073][ T55] kobil_sct 1-1:0.28: device disconnected [ 698.140082][ T5925] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 698.201130][ T5925] usb 6-1: device descriptor read/8, error -71 [ 698.419062][ T5925] usb usb6-port1: unable to enumerate USB device [ 700.310313][T14379] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2140'. [ 700.326900][T14379] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2140'. [ 700.655761][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2144'. [ 700.749225][ T30] kauditd_printk_skb: 128 callbacks suppressed [ 700.749242][ T30] audit: type=1400 audit(1767835125.567:1021): avc: denied { execute_no_trans } for pid=14380 comm="syz.3.2143" path=2F6D656D66643A5B0BDB58AE5B35A990FF63FF1605F0A3FE36D5E3196B4CC1081510F3B6FF54BFD1C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=45041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 701.508959][T14392] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 702.481907][ T30] audit: type=1400 audit(1767835127.307:1022): avc: denied { append } for pid=14416 comm="syz.0.2149" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 703.079088][T14435] QAT: Device 197 not found [ 703.099841][ T5925] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 703.639767][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 703.649038][ T5925] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 703.658671][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.667415][ T5925] usb 1-1: Product: syz [ 703.672224][ T5925] usb 1-1: Manufacturer: syz [ 703.677212][ T5925] usb 1-1: SerialNumber: syz [ 703.769339][ T5925] usb 1-1: config 0 descriptor?? [ 703.882249][ T5925] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 703.997051][ T30] audit: type=1400 audit(1767835128.797:1023): avc: denied { write } for pid=14447 comm="syz.4.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 704.055544][ T30] audit: type=1400 audit(1767835128.807:1024): avc: denied { lock } for pid=14447 comm="syz.4.2159" path="socket:[46229]" dev="sockfs" ino=46229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 704.105029][ T5925] ssu100 1-1:0.0: probe with driver ssu100 failed with error -5 [ 704.116193][T14453] fuse: Unknown parameter '' [ 705.177334][T14485] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 705.290656][ T5925] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 705.465910][ T5925] usb 6-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 705.475708][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.484360][ T5925] usb 6-1: Product: syz [ 705.488650][ T5925] usb 6-1: Manufacturer: syz [ 705.498258][ T5925] usb 6-1: SerialNumber: syz [ 705.505166][ T5925] usb 6-1: config 0 descriptor?? [ 705.767300][ T5925] usb 6-1: selecting invalid altsetting 1 [ 705.774352][ T5925] comedi comedi4: could not switch to alternate setting 1 [ 705.781837][ T5925] usbduxfast 6-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 705.802928][ T5925] usb 6-1: USB disconnect, device number 58 [ 706.437025][ T55] usb 1-1: USB disconnect, device number 85 [ 706.566203][T14521] rdma_op ffff8880538451f0 conn xmit_rdma 0000000000000000 [ 706.806004][T14536] 9p: Bad value for 'wfdno' [ 706.827843][T14536] Failed to initialize the IGMP autojoin socket (err -2) [ 707.409830][ T5925] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 707.599937][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 708.017248][ T5925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.048605][ T5925] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0120, bcdDevice=f9.ad [ 708.073189][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.099390][ T5925] usb 3-1: Product: syz [ 708.109849][ T5925] usb 3-1: Manufacturer: syz [ 708.114615][ T5925] usb 3-1: SerialNumber: syz [ 708.122215][ T5925] usb 3-1: config 0 descriptor?? [ 708.130167][ T5925] kvaser_usb 3-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 708.787579][T14543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2187'. [ 708.825966][T14543] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 708.842963][ T5925] usb 3-1: USB disconnect, device number 99 [ 709.176498][T14569] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 711.679878][T14627] bridge2: entered promiscuous mode [ 711.692193][T14627] bridge2: entered allmulticast mode [ 711.764808][T14643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2210'. [ 711.946641][T14655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2216'. [ 711.963186][T14655] netlink: 'syz.2.2216': attribute type 5 has an invalid length. [ 711.972745][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2216'. [ 711.983681][T14655] veth1_to_bond: entered allmulticast mode [ 711.991284][T14655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 711.998610][T14655] IPv6: NLM_F_CREATE should be set when creating new route [ 712.005901][T14655] IPv6: NLM_F_CREATE should be set when creating new route [ 712.036271][T14655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 712.104193][T14655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14655 comm=syz.2.2216 [ 712.140423][T14655] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14655 comm=syz.2.2216 [ 712.749312][ T30] audit: type=1400 audit(1767835137.147:1025): avc: denied { module_load } for pid=14662 comm="syz.5.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 712.788331][T14651] veth1_to_bond: left allmulticast mode [ 713.027548][T14675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14675 comm=syz.0.2220 [ 713.040386][T14675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2565 sclass=netlink_tcpdiag_socket pid=14675 comm=syz.0.2220 [ 713.053328][T14675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=14675 comm=syz.0.2220 [ 713.066274][T14675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2563 sclass=netlink_tcpdiag_socket pid=14675 comm=syz.0.2220 [ 713.079250][T14675] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2571 sclass=netlink_tcpdiag_socket pid=14675 comm=syz.0.2220 [ 714.085978][T14687] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 715.922453][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2228'. [ 716.156206][T14706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 716.190112][T14706] netlink: 'syz.2.2228': attribute type 19 has an invalid length. [ 716.218209][T14705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2221'. [ 716.219697][T14706] netlink: 'syz.2.2228': attribute type 20 has an invalid length. [ 716.669725][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 716.685970][T14728] netlink: 'syz.4.2233': attribute type 2 has an invalid length. [ 716.836022][ T9] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 716.874184][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 716.886606][ T9] usb 3-1: New USB device found, idVendor=1b01, idProduct=0009, bcdDevice= 0.00 [ 716.913688][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.943970][ T9] usb 3-1: config 0 descriptor?? [ 717.045636][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 717.079953][T14740] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 718.299842][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 718.461037][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.479734][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.499008][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 718.517611][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.538319][ T9] usb 1-1: config 0 descriptor?? [ 718.644405][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2239'. [ 718.789693][ T55] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 718.942448][ T55] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 718.958117][ T55] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 718.969963][ T55] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 718.971114][ T9] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 718.979043][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.998272][ T9] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 719.009946][T14758] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 719.019170][ T55] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 719.159032][ T9] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 719.427566][ T55] usb 3-1: USB disconnect, device number 100 [ 719.569394][T14750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.586156][T14750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.623073][ T9] cp2112 0003:10C4:EA90.0015: error setting SMBus config [ 719.643740][ T9] cp2112 0003:10C4:EA90.0015: probe with driver cp2112 failed with error -71 [ 719.658114][ T9] usb 1-1: USB disconnect, device number 86 [ 721.073483][ T30] audit: type=1400 audit(1767835145.897:1026): avc: denied { write } for pid=14784 comm="syz.0.2244" path="socket:[47678]" dev="sockfs" ino=47678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 721.160467][T14777] orangefs_mount: mount request failed with -4 [ 722.008006][ T30] audit: type=1400 audit(1767835146.427:1027): avc: denied { append } for pid=14792 comm="syz.2.2248" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 722.143377][ T30] audit: type=1326 audit(1767835146.967:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2867f8f749 code=0x7ffc0000 [ 722.181998][ T30] audit: type=1326 audit(1767835146.987:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2867f8f749 code=0x7ffc0000 [ 722.253000][ T30] audit: type=1326 audit(1767835146.987:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14797 comm="syz.4.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2867f8f749 code=0x7ffc0000 [ 722.307924][ T55] usb 6-1: USB disconnect, device number 59 [ 722.324545][T14758] delete_channel: no stack [ 722.850131][ T5925] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 723.059829][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 723.069312][ T5925] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 723.078628][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.099160][ T5925] usb 1-1: Product: syz [ 723.109378][ T5925] usb 1-1: Manufacturer: syz [ 723.134851][ T5925] usb 1-1: SerialNumber: syz [ 723.151028][ T5925] usb 1-1: config 0 descriptor?? [ 723.442973][ T5925] snd-usb-6fire 1-1:0.0: unknown device firmware state received from device: [ 723.458498][ T5925] 5e 57 f9 3a eb 9a 47 80 [ 723.544113][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2262'. [ 723.553206][T14847] netlink: 'syz.2.2262': attribute type 5 has an invalid length. [ 723.561175][T14847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2262'. [ 723.683844][ T30] audit: type=1400 audit(1767835148.357:1031): avc: denied { watch } for pid=14844 comm="syz.2.2262" path="/451/file0" dev="tmpfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 723.710202][ T5925] snd-usb-6fire 1-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 723.710257][T14847] geneve2: entered promiscuous mode [ 723.725083][T14847] geneve2: entered allmulticast mode [ 723.753256][ T30] audit: type=1400 audit(1767835148.357:1032): avc: denied { watch_sb } for pid=14844 comm="syz.2.2262" path="/451/file0" dev="tmpfs" ino=2417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 724.280470][T14851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.293512][T14851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.509724][ T5925] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 724.573776][ T5898] lo speed is unknown, defaulting to 1000 [ 725.400015][ T5898] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 725.539750][ T5898] usb 6-1: device descriptor read/64, error -71 [ 725.597281][ T9] usb 1-1: USB disconnect, device number 87 [ 725.685289][T14869] syzkaller0: entered promiscuous mode [ 725.697291][T14869] syzkaller0: entered allmulticast mode [ 725.803080][ T5898] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 726.159969][ T5898] usb 6-1: device descriptor read/64, error -71 [ 726.230957][T14885] Failed to initialize the IGMP autojoin socket (err -2) [ 726.251201][T14882] Failed to initialize the IGMP autojoin socket (err -2) [ 726.642262][ T5898] usb usb6-port1: attempt power cycle [ 726.761626][T14895] netlink: 'syz.4.2275': attribute type 1 has an invalid length. [ 726.803793][T14895] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 726.815439][T14895] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 726.906318][T14895] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2275'. [ 726.980143][ T5898] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 727.045397][ T5898] usb 6-1: device descriptor read/8, error -71 [ 727.195586][ T30] audit: type=1400 audit(1767835152.017:1033): avc: denied { unmount } for pid=5828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 727.350193][ T5898] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 727.560288][ T5898] usb 6-1: device descriptor read/8, error -71 [ 727.639056][T14921] overlayfs: failed to clone upperpath [ 727.680362][ T5898] usb usb6-port1: unable to enumerate USB device [ 727.990432][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 728.005766][T14931] netlink: 'syz.3.2283': attribute type 5 has an invalid length. [ 728.014750][T14931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2283'. [ 728.056859][T14931] geneve3: entered promiscuous mode [ 728.062440][T14931] geneve3: entered allmulticast mode [ 728.304392][T14947] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 728.398444][T14947] macvtap2: entered promiscuous mode [ 728.404239][T14947] batadv_slave_0: entered promiscuous mode [ 728.411407][T14947] macvtap2: entered allmulticast mode [ 728.416947][T14947] batadv_slave_0: entered allmulticast mode [ 728.647924][ T5898] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 729.270116][ T5898] usb 6-1: device descriptor read/64, error -71 [ 729.435349][T14964] syzkaller0: entered promiscuous mode [ 729.441401][T14964] syzkaller0: entered allmulticast mode [ 729.520386][ T5898] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 729.670513][ T5898] usb 6-1: device descriptor read/64, error -71 [ 729.790205][ T5898] usb usb6-port1: attempt power cycle [ 730.219709][ T5898] usb 6-1: new low-speed USB device number 66 using dummy_hcd [ 730.250295][ T5898] usb 6-1: device descriptor read/8, error -71 [ 730.266468][T14987] fuse: Bad value for 'fd' [ 730.273002][T14987] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2299'. [ 730.499804][ T5898] usb 6-1: new low-speed USB device number 67 using dummy_hcd [ 730.562785][ T5898] usb 6-1: device descriptor read/8, error -71 [ 730.761995][ T5898] usb usb6-port1: unable to enumerate USB device [ 730.955154][T15002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2303'. [ 730.964274][T15002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2303'. [ 730.973374][T15002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2303'. [ 730.982608][T15002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2303'. [ 731.342049][T15007] fuse: Bad value for 'fd' [ 731.504314][T15018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2309'. [ 731.517663][T15011] syzkaller0: entered promiscuous mode [ 731.529322][T15011] syzkaller0: entered allmulticast mode [ 731.666188][T15022] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2309'. [ 731.859201][T15031] netlink: 'syz.0.2311': attribute type 10 has an invalid length. [ 732.131898][ T30] audit: type=1400 audit(1767835156.957:1034): avc: denied { ioctl } for pid=15029 comm="syz.0.2311" path="socket:[48199]" dev="sockfs" ino=48199 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 732.168368][T15031] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 732.230154][ T55] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 732.383867][ T55] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 732.401934][ T55] usb 3-1: config 1 has no interface number 0 [ 732.428270][ T55] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 732.459401][ T55] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 732.491171][ T55] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.542139][ T55] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 732.560885][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.581079][ T55] usb 3-1: Product: syz [ 732.585252][ T55] usb 3-1: Manufacturer: syz [ 732.601273][ T55] usb 3-1: SerialNumber: syz [ 732.618500][T15036] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 732.701293][ T30] audit: type=1400 audit(1767835157.517:1035): avc: denied { write } for pid=15047 comm="syz.5.2315" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 732.834443][T15036] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 733.056397][ T55] usb 3-1: Incompatible driver and firmware versions [ 733.278675][T15036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.299254][T15036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.316761][ T9] usb 3-1: USB disconnect, device number 102 [ 733.624278][T15067] lo: entered promiscuous mode [ 733.785467][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2322'. [ 734.579064][T15086] syzkaller0: entered promiscuous mode [ 734.584681][T15086] syzkaller0: entered allmulticast mode [ 735.259203][T15102] netlink: 'syz.3.2326': attribute type 21 has an invalid length. [ 735.267174][T15102] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2326'. [ 735.276311][T15102] netlink: 'syz.3.2326': attribute type 4 has an invalid length. [ 735.284083][T15102] netlink: 'syz.3.2326': attribute type 5 has an invalid length. [ 735.291823][T15102] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2326'. [ 735.303203][ T30] audit: type=1400 audit(1767835160.027:1036): avc: denied { create } for pid=15091 comm="syz.3.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 736.070296][T15123] program syz.0.2332 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 736.109780][T15123] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 736.979495][ T30] audit: type=1400 audit(1767835161.797:1037): avc: denied { relabelfrom } for pid=15132 comm="syz.4.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 737.004088][ T30] audit: type=1400 audit(1767835161.827:1038): avc: denied { relabelto } for pid=15132 comm="syz.4.2336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 737.295805][T15144] openvswitch: netlink: IP tunnel TTL not specified. [ 737.947842][T15142] syzkaller0: entered promiscuous mode [ 737.960541][T15142] syzkaller0: entered allmulticast mode [ 739.502719][T15152] Failed to initialize the IGMP autojoin socket (err -2) [ 739.597568][T15156] 8021q: VLANs not supported on ip6tnl0 [ 739.662755][T15158] lo speed is unknown, defaulting to 1000 [ 739.668900][T15158] lo speed is unknown, defaulting to 1000 [ 739.691594][T15158] lo speed is unknown, defaulting to 1000 [ 739.707235][T15158] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -2 [ 739.718411][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2342'. [ 739.796637][T15158] lo speed is unknown, defaulting to 1000 [ 739.805336][T15158] lo speed is unknown, defaulting to 1000 [ 739.812921][T15158] lo speed is unknown, defaulting to 1000 [ 739.820324][T15158] lo speed is unknown, defaulting to 1000 [ 739.827469][T15158] lo speed is unknown, defaulting to 1000 [ 739.889807][ T55] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 739.939661][ T5898] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 740.041460][T15172] vivid-000: disconnect [ 740.059659][ T55] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 740.081603][ T55] usb 1-1: config 0 has no interface number 0 [ 740.114304][ T55] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 65535, setting to 64 [ 740.125503][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 740.144552][ T55] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 740.154847][ T55] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 740.165794][ T55] usb 1-1: Product: syz [ 740.171436][ T55] usb 1-1: Manufacturer: syz [ 740.176594][ T55] usb 1-1: SerialNumber: syz [ 740.176752][ T5898] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 740.212816][ T55] usb 1-1: config 0 descriptor?? [ 740.225405][T15156] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 740.232594][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.234879][ T55] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 740.253092][ T55] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 740.253557][ T5898] usb 3-1: Product: syz [ 740.277547][ T5898] usb 3-1: Manufacturer: syz [ 740.279251][ T55] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 740.291552][ T5898] usb 3-1: SerialNumber: syz [ 740.293358][ T55] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 740.393922][ T55] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 740.422480][ T55] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 740.423081][ T5898] usb 3-1: config 0 descriptor?? [ 740.431530][ T55] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 740.447876][ T55] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 740.470493][ T55] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 740.485779][T15170] vivid-000: reconnect [ 740.490849][ T55] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 740.515546][ T55] usb 1-1: USB disconnect, device number 88 [ 740.528854][ T55] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 740.562036][ T55] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 740.582226][ T55] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 740.615260][ T55] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 740.626045][ T55] keyspan 1-1:0.107: device disconnected [ 740.646129][ T5898] snd-usb-6fire 3-1:0.0: unable to receive device firmware state. [ 740.660758][ T5898] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -32 [ 740.689817][ T5898] usb 3-1: USB disconnect, device number 103 [ 741.008774][ T9] lo speed is unknown, defaulting to 1000 [ 741.018205][T15196] syzkaller0: entered promiscuous mode [ 741.024761][T15196] syzkaller0: entered allmulticast mode [ 741.314766][T15202] could not open pipe file descriptor [ 741.759899][ T30] audit: type=1326 audit(1767835166.147:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eab38f749 code=0x7ffc0000 [ 741.797661][ T30] audit: type=1326 audit(1767835166.147:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eab38f749 code=0x7ffc0000 [ 741.821790][ T30] audit: type=1326 audit(1767835166.147:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eab38f749 code=0x7ffc0000 [ 741.857304][ T30] audit: type=1326 audit(1767835166.147:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4eab38f749 code=0x7ffc0000 [ 741.899780][ T30] audit: type=1326 audit(1767835166.147:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eab38f749 code=0x7ffc0000 [ 741.930771][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 741.956208][ T30] audit: type=1326 audit(1767835166.157:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eab38f749 code=0x7ffc0000 [ 742.006294][ T30] audit: type=1326 audit(1767835166.157:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eab38f749 code=0x7ffc0000 [ 742.050369][ T30] audit: type=1326 audit(1767835166.157:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f4eab38f749 code=0x7ffc0000 [ 742.075893][ T30] audit: type=1326 audit(1767835166.167:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eab38f749 code=0x7ffc0000 [ 742.102294][ T30] audit: type=1326 audit(1767835166.167:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15197 comm="syz.5.2352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4eab3c2005 code=0x7ffc0000 [ 742.126148][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 742.133319][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 742.142910][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 742.152910][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.164958][ T9] usb 1-1: Product: syz [ 742.182227][ T9] usb 1-1: Manufacturer: syz [ 742.186916][ T9] usb 1-1: SerialNumber: syz [ 742.223086][ T9] usb 1-1: config 0 descriptor?? [ 742.554091][T15230] syzkaller0: entered promiscuous mode [ 742.638032][ T9] gs_usb 1-1:0.0: Configuring for 3 interfaces [ 743.358661][T15230] syzkaller0: entered allmulticast mode [ 743.527648][ T9] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 1 (-EREMOTEIO) [ 743.996393][T15201] netlink: 'syz.0.2353': attribute type 8 has an invalid length. [ 744.269826][ T55] usb 3-1: new low-speed USB device number 104 using dummy_hcd [ 744.483340][ T55] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 744.506546][ T55] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=b3.76 [ 744.525867][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.542067][T15252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2365'. [ 744.588377][T15250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2369'. [ 744.593476][T15259] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 745.482151][T15270] SELinux: Context system_u:object_r:syslogd_exec_t:s0 is not valid (left unmapped). [ 746.722036][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.728411][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.739704][ T55] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 746.901145][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.912162][ T55] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.922012][ T55] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 746.931116][ T55] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.940833][ T55] usb 6-1: config 0 descriptor?? [ 747.351080][ T55] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 747.358345][ T55] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 747.366287][ T55] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 747.375929][ T55] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 747.383240][ T55] hid-steam 0003:28DE:1142.0016: unknown main item tag 0x0 [ 747.392119][ T55] hid-steam 0003:28DE:1142.0016: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 747.553415][ T55] usb 6-1: USB disconnect, device number 68 [ 748.680041][ T5898] usb 3-1: USB disconnect, device number 104 [ 748.714861][ T9] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 748.730069][T15274] nbd: couldn't find device at index 0 [ 748.747020][ T55] usb 1-1: USB disconnect, device number 89 [ 748.765809][T15280] Failed to initialize the IGMP autojoin socket (err -2) [ 749.179763][ T55] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 749.458132][T15292] ntfs3(nullb0): Primary boot signature is not NTFS. [ 749.492794][ T55] usb 1-1: Using ep0 maxpacket: 32 [ 749.510970][T15292] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 749.538051][ T55] usb 1-1: config index 0 descriptor too short (expected 60946, got 18) [ 749.560014][ T55] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 749.646601][ T55] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 749.764426][ T55] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 749.791982][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.606429][ T55] usb 1-1: config 0 descriptor?? [ 750.712033][ T55] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 750.780319][T15282] netlink: 'syz.2.2375': attribute type 3 has an invalid length. [ 751.220339][T15313] 9p: Bad value for 'wfdno' [ 751.379934][T15316] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 751.411878][T15316] mkiss: ax0: crc mode is auto. [ 751.624201][ T55] gspca_sunplus: reg_w_riv err -110 [ 751.645190][ T55] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 751.944440][ T5964] usb 1-1: USB disconnect, device number 90 [ 752.510374][T15334] netlink: zone id is out of range [ 752.515486][T15334] netlink: zone id is out of range [ 752.529822][T15334] netlink: zone id is out of range [ 752.535079][T15334] netlink: zone id is out of range [ 752.540737][T15334] netlink: zone id is out of range [ 752.546215][T15334] netlink: zone id is out of range [ 752.551547][T15334] netlink: zone id is out of range [ 752.556784][T15334] netlink: zone id is out of range [ 752.562870][T15333] overlay: Unknown parameter '/' [ 752.563367][T15334] netlink: zone id is out of range [ 752.573198][T15334] netlink: zone id is out of range [ 752.579145][T15333] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 752.652015][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 752.652032][ T30] audit: type=1400 audit(1767835177.477:1115): avc: denied { getopt } for pid=15331 comm="syz.2.2389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 754.189722][ T5898] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 754.250326][T15366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2398'. [ 754.429755][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 754.471217][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 754.482641][ T5898] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 754.492301][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.503264][ T5898] usb 3-1: config 0 descriptor?? [ 754.640222][ T30] audit: type=1400 audit(1767835179.367:1116): avc: denied { append } for pid=15377 comm="syz.4.2400" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 754.742119][T15382] netlink: 'syz.4.2401': attribute type 4 has an invalid length. [ 754.812878][T15384] netlink: 'syz.5.2402': attribute type 33 has an invalid length. [ 754.820906][T15384] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2402'. [ 754.953874][ T5898] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 755.038491][ T30] audit: type=1400 audit(1767835179.857:1117): avc: denied { connect } for pid=15393 comm="syz.3.2404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 755.064837][T15396] vlan0: entered promiscuous mode [ 755.070096][T15396] ip6gretap0: entered promiscuous mode [ 755.358503][T15359] netlink: 'syz.2.2396': attribute type 23 has an invalid length. [ 755.404654][T15359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.413354][T15359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.427158][ T9] usb 3-1: USB disconnect, device number 105 [ 755.539669][ T5898] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 755.699871][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 755.718982][ T5898] usb 6-1: config index 0 descriptor too short (expected 60946, got 18) [ 755.727800][ T5898] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 755.737053][ T5898] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 755.746515][ T5898] usb 6-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 755.756101][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.773906][ T5898] usb 6-1: config 0 descriptor?? [ 755.784050][ T5898] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 756.486482][T15427] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 756.554950][T15427] mkiss: ax0: crc mode is auto. [ 756.650704][ T5898] gspca_sunplus: reg_w_riv err -110 [ 756.656037][ T5898] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 756.807648][T15431] 9p: Bad value for 'rfdno' [ 756.961414][ T30] audit: type=1326 audit(1767835181.707:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.2.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484c78f749 code=0x7ffc0000 [ 757.265560][ T30] audit: type=1326 audit(1767835181.707:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.2.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484c78f749 code=0x7ffc0000 [ 757.327217][T15435] binder: 15433:15435 ioctl 541b 0 returned -22 [ 757.335761][ T30] audit: type=1326 audit(1767835181.707:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.2.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f484c78f749 code=0x7ffc0000 [ 757.416226][ T30] audit: type=1326 audit(1767835182.137:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.2.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484c78f749 code=0x7ffc0000 [ 757.449508][ T30] audit: type=1326 audit(1767835182.137:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15426 comm="syz.2.2410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484c78f749 code=0x7ffc0000 [ 757.570840][ T5898] usb 6-1: USB disconnect, device number 69 [ 757.920921][ T5964] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 758.080045][ T5964] usb 1-1: device descriptor read/64, error -71 [ 758.473407][ T5964] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 760.343885][ T5964] usb 1-1: device descriptor read/64, error -71 [ 760.426325][T15478] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 760.470411][ T5964] usb usb1-port1: attempt power cycle [ 865.599557][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 865.606510][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15421/1:b..l [ 865.614917][ C0] rcu: (detected by 0, t=10502 jiffies, g=61561, q=45 ncpus=2) [ 865.622515][ C0] task:syz.4.2407 state:R running task stack:24008 pid:15421 tgid:15421 ppid:5828 task_flags:0x40064c flags:0x00080001 [ 865.636595][ C0] Call Trace: [ 865.639856][ C0] [ 865.642761][ C0] ? __schedule+0x10b9/0x6150 [ 865.647412][ C0] __schedule+0x1139/0x6150 [ 865.651887][ C0] ? rcu_is_watching+0x12/0xc0 [ 865.656641][ C0] ? __pfx___schedule+0x10/0x10 [ 865.661464][ C0] preempt_schedule_irq+0x51/0x90 [ 865.666459][ C0] irqentry_exit+0x1d8/0x8c0 [ 865.671023][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 865.676974][ C0] RIP: 0010:__orc_find+0x8e/0xf0 [ 865.681885][ C0] Code: 00 48 89 da 48 c1 ea 03 0f b6 34 0a 48 89 da 83 e2 07 83 c2 03 40 38 f2 7c 05 40 84 f6 75 4b 48 63 13 48 01 da 49 39 d5 73 af <4c> 8d 63 fc 49 39 ec 73 b2 4d 29 f7 49 c1 ff 02 4b 8d 14 7f 48 8d [ 865.701462][ C0] RSP: 0018:ffffc9000c3f6ef8 EFLAGS: 00000283 [ 865.707498][ C0] RAX: ffffffff9132166e RBX: ffffffff90a8fc48 RCX: dffffc0000000000 [ 865.715439][ C0] RDX: ffffffff8244b7d0 RSI: 0000000000000000 RDI: ffffffff90a8fc30 [ 865.723381][ C0] RBP: ffffffff90a8fc30 R08: ffffffff913216bc R09: 00000000ffffffff [ 865.731321][ C0] R10: 0000000000000002 R11: 00000000000144b7 R12: ffffffff90a8fc60 [ 865.739261][ C0] R13: ffffffff8244b7c4 R14: ffffffff90a8fc30 R15: ffffffff90a8fc30 [ 865.747211][ C0] ? iput+0x34/0x40 [ 865.750993][ C0] ? iput+0x40/0x40 [ 865.754775][ C0] ? iput+0x34/0x40 [ 865.758550][ C0] unwind_next_frame+0x2ec/0x20b0 [ 865.763546][ C0] ? iput+0x35/0x40 [ 865.767322][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 865.773445][ C0] arch_stack_walk+0x94/0x100 [ 865.778096][ C0] ? iput+0x35/0x40 [ 865.781875][ C0] stack_trace_save+0x8e/0xc0 [ 865.786521][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 865.791861][ C0] ? __lock_acquire+0x436/0x2890 [ 865.796771][ C0] save_stack+0x160/0x1f0 [ 865.801071][ C0] ? __pfx_save_stack+0x10/0x10 [ 865.805891][ C0] ? free_unref_folios+0xa22/0x1610 [ 865.811057][ C0] ? folios_put_refs+0x4be/0x750 [ 865.815963][ C0] ? shmem_undo_range+0x58f/0x1140 [ 865.821043][ C0] ? shmem_evict_inode+0x39e/0xbe0 [ 865.826121][ C0] ? evict+0x3c2/0xad0 [ 865.830158][ C0] ? iput.part.0+0x621/0x1190 [ 865.834801][ C0] ? iput+0x35/0x40 [ 865.838578][ C0] ? page_ext_put+0x3e/0xd0 [ 865.843055][ C0] __reset_page_owner+0x84/0x1a0 [ 865.847965][ C0] free_unref_folios+0xa22/0x1610 [ 865.852960][ C0] ? rcu_is_watching+0x12/0xc0 [ 865.857703][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 865.863482][ C0] folios_put_refs+0x4be/0x750 [ 865.868226][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 865.873482][ C0] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 865.879781][ C0] shmem_undo_range+0x58f/0x1140 [ 865.884693][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 865.890047][ C0] ? find_held_lock+0x2b/0x80 [ 865.894711][ C0] shmem_evict_inode+0x39e/0xbe0 [ 865.899617][ C0] ? inode_wait_for_writeback+0x170/0x390 [ 865.905308][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 865.910734][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 865.916775][ C0] ? find_held_lock+0x2b/0x80 [ 865.921430][ C0] ? evict+0x37e/0xad0 [ 865.925469][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 865.930900][ C0] evict+0x3c2/0xad0 [ 865.934771][ C0] ? find_held_lock+0x2b/0x80 [ 865.939423][ C0] ? __pfx_evict+0x10/0x10 [ 865.943810][ C0] ? iput.part.0+0x619/0x1190 [ 865.948463][ C0] iput.part.0+0x621/0x1190 [ 865.952937][ C0] iput+0x35/0x40 [ 865.956540][ C0] dentry_unlink_inode+0x29c/0x480 [ 865.961627][ C0] __dentry_kill+0x1d0/0x600 [ 865.966186][ C0] finish_dput+0x76/0x480 [ 865.970485][ C0] dput.part.0+0x451/0x570 [ 865.974870][ C0] dput+0x1f/0x30 [ 865.978472][ C0] __fput+0x51c/0xb70 [ 865.982427][ C0] task_work_run+0x150/0x240 [ 865.986990][ C0] ? __pfx_task_work_run+0x10/0x10 [ 865.992076][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 865.997250][ C0] do_exit+0x87f/0x2bd0 [ 866.001375][ C0] ? irqentry_exit+0x1dd/0x8c0 [ 866.006109][ C0] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 866.012147][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 866.017752][ C0] ? __pfx_do_exit+0x10/0x10 [ 866.022314][ C0] do_group_exit+0xd3/0x2a0 [ 866.026788][ C0] get_signal+0x2671/0x26d0 [ 866.031270][ C0] ? __pfx_get_signal+0x10/0x10 [ 866.036099][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 866.041617][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 866.047746][ C0] ? __bad_area_nosemaphore+0x350/0x690 [ 866.053267][ C0] irqentry_exit+0x38a/0x8c0 [ 866.057830][ C0] asm_exc_page_fault+0x26/0x30 [ 866.062651][ C0] RIP: 0033:0x7f2867f8f751 [ 866.067036][ C0] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 866.073069][ C0] RAX: 0000000000000000 RBX: 00007f28681e6090 RCX: 00007f2867f8f749 [ 866.081010][ C0] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 866.088955][ C0] RBP: 00007f2868013f91 R08: 0000000000000000 R09: 0000000000000000 [ 866.096896][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 866.104852][ C0] R13: 00007f28681e6128 R14: 00007f28681e6090 R15: 00007ffcd4d86148 [ 866.112801][ C0] [ 866.115793][ C0] rcu: rcu_preempt kthread starved for 10550 jiffies! g61561 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 866.126950][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 866.136886][ C0] rcu: RCU grace-period kthread stack dump: [ 866.142742][ C0] task:rcu_preempt state:R running task stack:28048 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 866.156183][ C0] Call Trace: [ 866.159435][ C0] [ 866.162339][ C0] ? __schedule+0x10b9/0x6150 [ 866.166988][ C0] __schedule+0x1139/0x6150 [ 866.171482][ C0] ? __pfx___schedule+0x10/0x10 [ 866.176303][ C0] ? find_held_lock+0x2b/0x80 [ 866.180956][ C0] ? schedule+0x2d7/0x3a0 [ 866.185257][ C0] schedule+0xe7/0x3a0 [ 866.189298][ C0] schedule_timeout+0x123/0x290 [ 866.194117][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 866.199458][ C0] ? __pfx_process_timeout+0x10/0x10 [ 866.204714][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 866.210503][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 866.215934][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 866.220684][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 866.225942][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 866.231110][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 866.236018][ C0] ? rcu_gp_cleanup+0x7c1/0xe90 [ 866.240846][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 866.246624][ C0] rcu_gp_kthread+0x26d/0x380 [ 866.251272][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 866.256441][ C0] ? rcu_is_watching+0x12/0xc0 [ 866.261173][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 866.266343][ C0] ? __kthread_parkme+0x19e/0x250 [ 866.271336][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 866.276507][ C0] kthread+0x3c5/0x780 [ 866.280550][ C0] ? __pfx_kthread+0x10/0x10 [ 866.285121][ C0] ? rcu_is_watching+0x12/0xc0 [ 866.289855][ C0] ? __pfx_kthread+0x10/0x10 [ 866.294419][ C0] ret_from_fork+0x983/0xb10 [ 866.298988][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 866.304082][ C0] ? __switch_to+0x7af/0x10d0 [ 866.308745][ C0] ? __pfx_kthread+0x10/0x10 [ 866.313305][ C0] ret_from_fork_asm+0x1a/0x30 [ 866.318049][ C0] [ 866.321039][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 866.327329][ C0] Sending NMI from CPU 0 to CPUs 1: [ 866.332511][ C1] NMI backtrace for cpu 1 [ 866.332524][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.332543][ C1] Tainted: [L]=SOFTLOCKUP [ 866.332548][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 866.332557][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 866.332574][ C1] Code: b6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 39 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 866.332587][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 866.332597][ C1] RAX: 00000000028e7603 RBX: 0000000000000001 RCX: ffffffff8b7826d9 [ 866.332606][ C1] RDX: 0000000000000000 RSI: ffffffff8dace031 RDI: ffffffff8bf2b380 [ 866.332615][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 866.332624][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 866.332633][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b8d0 R15: 0000000000000000 [ 866.332642][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 866.332656][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 866.332665][ C1] CR2: 00007f2867f733e0 CR3: 00000000354e6000 CR4: 00000000003526f0 [ 866.332674][ C1] DR0: 0000000000000006 DR1: 0000000000000003 DR2: fffffffffffffff8 [ 866.332683][ C1] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 866.332692][ C1] Call Trace: [ 866.332697][ C1] [ 866.332701][ C1] default_idle+0x13/0x20 [ 866.332719][ C1] default_idle_call+0x6c/0xb0 [ 866.332738][ C1] do_idle+0x38d/0x510 [ 866.332758][ C1] ? __pfx_do_idle+0x10/0x10 [ 866.332778][ C1] ? do_idle+0x2e2/0x510 [ 866.332798][ C1] cpu_startup_entry+0x4f/0x60 [ 866.332818][ C1] start_secondary+0x21d/0x2d0 [ 866.332832][ C1] ? __pfx_start_secondary+0x10/0x10 [ 866.332847][ C1] common_startup_64+0x13e/0x148 [ 866.332868][ C1]