last executing test programs: 6m42.825461187s ago: executing program 1 (id=2407): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x5, 0x0, 0x50565559, 0x6, 0x8, [{0x5, 0x1}, {0xa3b, 0x109f}, {0x51b, 0x7}, {0xff, 0x7f}, {0xffffca2c, 0x9}, {0x7, 0x5}, {0x100, 0x4}, {0x9, 0x3}], 0x7, 0xeb, 0x4, 0x0, 0x4}}) 6m42.676771668s ago: executing program 1 (id=2408): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x8, 0x0, @fd_index=0x2, 0x5, 0x0, 0x6, 0x3, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='nilfs2_collection_stage_transition\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) syz_usb_connect(0x6, 0x740, &(0x7f0000000a00)={{0x12, 0x1, 0x310, 0x13, 0x9c, 0x70, 0x10, 0xf4e, 0x200, 0xb85d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72e, 0x3, 0x5, 0x7, 0x8, 0x9, [{{0x9, 0x4, 0x4b, 0xa7, 0xc, 0x13, 0xaa, 0xce, 0xff, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x1}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x2, 0x34, '*'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2f, 0x8, '\a'}]}], [{{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x0, 0xa1, 0xe}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x8, 0x9, 0x6e}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x0, 0x9, 0x40}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x400}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x1, 0x6c, 0x8, [@generic={0x7, 0x877d4df13809224d, "960cd04504"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x228, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xf, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x9}, @generic={0x6f, 0x21, "54f7296731d9b1c1e50db7464626d110fdca7360b5092739f8d92ab99983b2a0481e2fdb1e0ee44aaa038cfc607db700d2be2e5efcf469271e7b7833ff804ae1a00321ee46505ef3ca4347dca6507e5682195268b09fa912c9fc6232dd547f608bef56f85428f73568d8472f8e"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x10, 0x8, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x7}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x7ef, 0x3, 0x0, 0x2, [@generic={0x52, 0xf, "4368f3e15476bf80819832e25d0e0f5f38d98d5e8aef82827a4eb97e01def655f1790abc9491d672b7c9f868cd7828bea1cf007de8318b48f2fd4a2d04144f0ce249a63c174a640b70110eb924e36ff1"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0xf2, 0x9, [@generic={0xb4, 0x31, "b72702927820e3c970c854dbd21f4bcbcf3521fee41c4f1827f1e8d16b6dd6d32cb51dbb56498dee5b902a33367dd91f6f9ca7af8855f35d84f9d2298f015792fb1a8f0abded97dbe814dc373c6f2d90dc042f029e66ff2f81628c89220fd5ad8f092893f9a8cc1756af44feb842c1d227b01256e13b0297c909cd0f56d33d0f488ce811cabe90714fe29210a31a21b072547b5739f7e7d41550b263a7e4fb456c9c979203a63190dd8c9863b99a22d1838a"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0xc, 0x5, 0x7, [@generic={0xad, 0xe, "bafbfb5d6f02729b0cfb2260aef482474a4fb1428cf37f84002868814f2ed8aa79dd23e4a1c4bc7c2e35d345827154d80dcc851fd7a23c8ae9e02ca2a5a85b33aa3a21c78a49f51984285f577fdc363aa8b27aad08042482b8c89c1fb6b9b951eaaea1f1729c7be94efa4bd60c9ff3346cd3b502e14f93b236cc0e5392079a3128df8875a68eab69052e2dbebef4a6f691147237e85762500eaff26fc6a134db3ade03791963bb1c3afb2a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}]}}, {{0x9, 0x4, 0x30, 0x40, 0x5, 0xff, 0x1, 0x1, 0x1, [@hid_hid={0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0xb6}}, @generic={0xb8, 0x4, "2a3b86607e1a199d0d7ae4622269dcfa08c6cfd3d3ab5441575dff8693f70309b57a5e4ef9c88c8506dff43fcaf5fe14471a0f051b3d26d029e56981b9219d762851e9b514c85f77db105cccd65f491fdb3f44ba122d60a5deb9658e1a38ff2b8b1554daaaedb0e876d623c654c7bc8b4279c365e6d271061849ae80929452e008154ffc006d75b7d56dab8e2ba66723fab8945a6f777ca795622e6426e5fcf714a9748aaafb812d2015902a627dcabeca8ff33fa0ef"}], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x7, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xb2}, @generic={0x5a, 0x8, "bd0254dc64d174e84deb4a373d64483d955373b063dc8db974f08316f9bfd875689694124c511f0f8c68809f8b887d431a4e4e841d09cbba7f6a920ac0a76a8e3d70a64c0d62f42b586a119f42aed9edc6829eaa9e8847a8"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x40, 0x7a, 0x6, [@generic={0xc8, 0x4, "d534fb89fb18c775b6e9d24824cba60d9f176ecece6d43e9e7fada876877872a0b7276c5a9da0c792fa249fc58dfff663872ec43d25ad1e55858a8493b0a8998d0201ebe9ef26aa42f23e185a0f2c6640a30446bd29418c159b8db8af6d65c4d09bc9c9bed47a38a06aac594019de76e67d8358aaed8b1c9fe62e8abb525884894a4bcfd0a8736fd27a4fbdd33e116de9a852f3a3d33c7228298405a10d9713f821b99cc8c141ff8c7b49eba2d10a6ad652761a9eded4a4f8e1dcc1f5a9c222b28a3e3d74440"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x18, 0x0, 0x5a, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x5cb2d6c7ca1b02df, 0x3, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x146}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x0, 0x2, 0x40, [@generic={0x6d, 0x21, "5fd025387668f1a0eac5b1ebe9481100bd7f33408fc88dd58bd3ed1f08482845a5f74bda1a4b6d458cb965729532317f55c5116d5e4393a9584fbf2e7cd3b662edd75efd0df87f392c9544f52dcccf7285a99cad670cab2deef3eac603b4e029e741ea0d7108e85eb008dc"}]}}]}}, {{0x9, 0x4, 0x97, 0x80, 0x7, 0xfc, 0x99, 0x8a, 0x7, [@hid_hid={0x9, 0x21, 0x60, 0x10, 0x1, {0x22, 0x226}}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "23c488345d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x35d0, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x200, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x8161, 0x0, 0x0, 0x101, 0x36}, @mbim_extended={0x8, 0x24, 0x1c, 0x41, 0x6, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x35, 0x2d}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x2b, 0xa, 0x3e}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x5, 0x8, 0x2, 0x1, 0x1}]}], [{{0x9, 0x5, 0x1c, 0x0, 0x200, 0x5, 0x6, 0xf0}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x2, 0x6, [@generic={0xb7, 0xf, "ca71ee5bbf07228b8b03b204122cc02c219fd17dad2ac702a611a75c99e8a65fda7844c5ffcd044eade3c70335150c33b35d4333c61eec057ccb8a54307a587f06822b6b9774c143f7078d1da8439a72644d5122d2d04a61035291a3486132a9895afdd9e0096df05f6bf19130d89d2119ea809a06174215b4f4311909cdd824cd6968f5fede5ece7acc3a1e32a412fdc89fa5594eed5533b5f0329fb74f9dfc7b254a193a985ed1f5348d79ef1983cb4bc3e3e536"}, @generic={0x27, 0x8, "63b0439d4cfbec0187b36cd4aab891f86b5b3a0121aaff575099aa0ba01258395d6d105b03"}]}}, {{0x9, 0x5, 0x3, 0x11, 0x8, 0xe, 0xf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x13, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x2, 0x0, 0x40}}, {{0x9, 0x5, 0x9, 0x4, 0x3f7, 0x9, 0x9, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x2, 0xff, 0xf5}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x6, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x81, 0x7f}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x3, 0x4, 0x7f, 0x40, 0xb2}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x7, [{0xdc, &(0x7f00000006c0)=@string={0xdc, 0x3, "2789571371643071b395c95a19f0174e5c0fa3f90156f16d45f3f3ad3f2d3c0dcfecd19619309aee2676ef63f99313107f0413fb914160cee0c7ea69f10b351652908fc605c2060423d1df4f1d03cc66688ef6969f92c4c2407919e360c6446463adecbcc5cf6c9888c647f0a6109801ba6c553a68556365399bf6a08973ecf380e6a2cf142ed915b974bb3b59fcc4571be7b4040c5e1580f7b345cf2e4e66ecd8ff9bd906528e9e1ebf29403038ea0d0480db50fce70dd145a5b2daa68d77cfb6bdc1cc708a8d8d8d5bac4a204c4b9dceda4d06aef1fa3f8e77"}}, {0xe0, &(0x7f00000008c0)=@string={0xe0, 0x3, "ce463ad55d7059232f4e7bca4bd94fe56830f60d91cbfcd36fcd306f710fd03fa7d3ca7a236463b71e85c1998dd37625935773854314f8179c455d4e5a53854b52507eb9a35052f09b79e6054ce79d9a4c68d2ecfbdc99514284f1ccd0d97c65e700eacc139df58b49a2049ce6eb76d8636c292b2b73eadde3fa05b2b5bd31ca0696de2cd3e64960eb02aba6b3295eff76996dab6f434f5c0cfd3a4e768e0bb97e6e625a7a2e35c9b840f86433b5436e1b132f4a3f25ef403ba44519a5349c9be15f56c73ea542138ae7d601df526690740816173f7e9b34423eb2cc5132"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40e}}, {0x74, &(0x7f0000000600)=@string={0x74, 0x3, "00e2fa10ba655a002e520bd1b980c736be74832eb6f861b025664f375aebf1a6f740fc13350a1b1018fd6e58a0ac7490c7eb63a1033dca0b46a712eb30ace20e3016a6244abd6c12e70534ed6edc3b1e99b5d718004c779678682398df850cc16b90bb51a62403e682539f25714deb7a3225"}}, {0xa2, &(0x7f0000001140)=@string={0xa2, 0x3, "6a10e06450707a714e257c12838bb4046c7d3e1882d762ac1b71a498af5b3b3100edc33c9c90a35b9178c35fcca6d58026153ad82e29d7b7a6def659e6e0666bce626a03c49fdd3e8382ed9d4709a11b3983815eecbc8e03a97f2a62563fea59c0aca3f54f022cf4640d839536a80102046f55ed67d16a04530301b961a596caf422f5d3dc0eea34bc0986a27262cbd5d34b73b351b91378ac60f7838383a759"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x443}}, {0xb, &(0x7f0000001200)=@string={0xb, 0x3, "afdd2b7b507d98da6a"}}]}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r6}) close(r5) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5"]) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 6m39.438469635s ago: executing program 1 (id=2418): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x0, 0x3, 0x41, {0x41, 0x2, "1aba9ee1fe6b5a373a0a662df8b7ac4abec509daf4dd2e199c2bc31e5d076b6ae0c00f012b5b3bc9424730272b4b614d273a3b68a57f403600c96c4ba38e5b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "a800b88cbc6f916df9cf6623947785f63f5707f606069b8663"}}, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0xa, "21d36582"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27, 0x5, 0x1, {0x22, 0x391}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40, 0x2, 0x9f, "fac60ae66ba1d23560fcc95ce9353066890a5fd7207f867401740730e1efeaf2d00752f2fc77bed3d55986dae26b7ea53e59dceaa4ed763a7813e02bb14354265b69ef4c4b5b6a488da5c4dfa90320d280069e63be25dee093abfcf8ff28e284f8dade0fba26dd3b667f064bc0898f60499c6d31dde5f57f7a23bbe0958bb8381ebfa7177a438920a8e26fa9765b31f4c24b89a93a6efe61d61197b355d1ef"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x50}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x31}, &(0x7f0000000340)={0x20, 0x1, 0x42, "7d3b9e555577800be1c279873e98f3250d983c53f2fb9afacea5796359bfc7b70f5aa806efa2da8cfb563800c3c28b6dff528accafccfd3c7a499ca1d7de36505c0e"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x34}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r1, 0x1, 0x2) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="600100008e05"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m37.281180132s ago: executing program 1 (id=2427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x242100, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0xff68, 0x3, 0x5, 0x8}, {0x9, 0x5, 0x6, 0x6}, {0xb, 0x3, 0xa8, 0xfffff654}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) pipe2(&(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) r7 = dup(r6) sendfile(r6, r7, 0x0, 0x80006) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r8, 0xc0044dff, &(0x7f0000000240)=0xb6) close(r1) 6m36.629009662s ago: executing program 1 (id=2430): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) 6m36.52090767s ago: executing program 1 (id=2431): r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000820305000000000000000000000000000800010001000000"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f00000003c0)) (async) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f00000003c0)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x1, 0x4, 0x88, {}, 0x0, 0xffff}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x1, 0x4, 0x88, {}, 0x0, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x2}}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000000)={0xa9}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000000)={0xa9}, 0x1) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r12 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r12, r10, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r12, r10, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r12, r11, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r12, r11, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x1, 'X'}, &(0x7f0000000080)=0x9) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x1, 'X'}, &(0x7f0000000080)=0x9) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x1000, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfd, 0xb}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xb}}]}, 0x38}}, 0x1000c840) r14 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r14, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r14, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r14, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r3], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m21.462195231s ago: executing program 32 (id=2431): r0 = epoll_create1(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000820305000000000000000000000000000800010001000000"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f00000003c0)) (async) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, 0x0, &(0x7f00000003c0)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt(r7, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x1, 0x4, 0x88, {}, 0x0, 0xffff}) (async) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x3}, 0x1, 0x4, 0x88, {}, 0x0, 0xffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000040)={0x0, 0x0, {0x2}}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000000)={0xa9}, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r7, 0x84, 0x15, &(0x7f0000000000)={0xa9}, 0x1) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r12 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r12, r10, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r12, r10, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r12, r11, 0x0) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r12, r11, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x1, 'X'}, &(0x7f0000000080)=0x9) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x1, 'X'}, &(0x7f0000000080)=0x9) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x1000, {0xa, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfd, 0xb}, [@RTA_OIF={0x8, 0x4, r5}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xb}}]}, 0x38}}, 0x1000c840) r14 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r14, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r14, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r14, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r3], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.985458206s ago: executing program 4 (id=4204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ae685c0b163ef93d82c7e307969ae8c22842f85899c62ca3a6ff691f1df44c614a5fd3"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r1}, 0x10) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r2, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) timer_create(0x6, &(0x7f0000000040)={0x0, 0x3c, 0x0, @tid=r3}, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0c00450000680000000000219078ffffc87dffff000000000c009078f30000004300000000000008000000006401010100000000442c00030000000000000000ac1e0001000000100000000000000000e000000200000000ac1e0101000000009404000083070000000000000f1113c3902e0de38b0efcb66c2ad3f4"], 0x0) r7 = accept$unix(r5, 0x0, &(0x7f0000000400)) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x200000) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r10 = accept(r8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x20}}, 0x20000040) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x40010) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212"], 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_flags}) 10.906343688s ago: executing program 5 (id=4213): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x2, 0x20000) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000140)={0x7, 0x8}, 0x1) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYRES16=r3], 0x310) syz_usb_control_io$printer(r2, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x21, r6, 0x202, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000080)=0x1) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x0, &(0x7f0000000140)='grpquota') 9.708531259s ago: executing program 4 (id=4219): mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000180)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) sendto$inet6(r3, &(0x7f00000003c0)="d4", 0x1, 0x40000, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) shutdown(r3, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000000)={r4}, &(0x7f0000000140)=0x8) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r6 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1ab}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r6, 0x47f8, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) 8.774923897s ago: executing program 4 (id=4224): r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@mcast1, @in=@broadcast, 0x4e21, 0x9, 0x4e24, 0xffff, 0xa, 0x0, 0x80}, {0x7ff, 0x4, 0xc, 0x7, 0x0, 0x2, 0x1, 0x7}, {0xb, 0x3, 0xd0, 0x6}, 0x7c937028, 0x6e6bbe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@loopback, 0x4d5, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x27}, 0x3504, 0x3, 0x1, 0x6, 0x55b, 0x7, 0xa4b5}}, 0xe8) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x3, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x300}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) lseek(r2, 0xdb, 0x2) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000000)=0x80) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@workdir={'workdir', 0x3d, './file1'}}]}) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) setreuid(0xffffffffffffffff, 0xee00) setfsuid(0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x103300, 0x98) fcntl$setlease(r6, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x28, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x2}]}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_usb_disconnect(0xffffffffffffffff) r10 = syz_pidfd_open(r5, 0x0) setns(r10, 0x6000000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x54, 0x66, 0x201, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffe0, 0x8}, {0x9, 0x3}, {0x9, 0xd}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x2}, {0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x1}]}, 0x54}}, 0x40040) 7.952784537s ago: executing program 0 (id=4225): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r9, 0xe, 0x7f, 0xa, 0x2, [0x0], [0x0, 0x29, 0x2, 0xfffffffe], [0x0, 0xffffffff, 0x0, 0x1], [0x0, 0x0, 0x10001, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0x8400, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) close_range(r5, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r12 = socket(0x10, 0x3, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001000000850000", @ANYRESDEC=r1, @ANYBLOB="18000000f2ff00000000000000000000181100", @ANYRESDEC=r8, @ANYRES32=r9, @ANYRESOCT=r12], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000100)={'batadv_slave_0\x00', {0x2, 0x4e20, @remote}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000001c0)=r13, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 7.313493453s ago: executing program 5 (id=4229): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="de1c0cdcfafd", 'ip6_vti0\x00'}}, 0x1e) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'veth1_to_team\x00'}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="d0b4163e96457321d877d01ac22c", 0xe, 0x40000, &(0x7f00000001c0)={0x11, 0x1c, r4, 0x1, 0x70, 0x6, @local}, 0x14) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setreuid(0xee01, 0xee01) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r8, 0x0, 0x3, 0x0) fcntl$setpipe(r7, 0x4, 0xfffffffffffff000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$setregs(0xf, r10, 0x1200000, &(0x7f0000000000)) ioperm(0x2002, 0x11, 0x9e8f) getxattr(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.876921176s ago: executing program 0 (id=4230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) getitimer(0x2, &(0x7f00000000c0)) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x110, 0xc7, 0xbf, 0x80, 0x40, 0x2f3, 0x68b2, 0xb867, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x33, 0xc0, 0xc, [{{0x9, 0x4, 0xf6, 0x9b, 0x0, 0xe, 0x1, 0x1, 0x4}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x426}}, {0x0, 0x0}, {0x1b, &(0x7f0000000a80)=@string={0x1b, 0x3, "8442667574cc07c715c9f2e56355f2dbc8044f2e211d93d176"}}]}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000010) 6.707844435s ago: executing program 5 (id=4233): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="35000e0080000000ffffffffffff08021100000050505050505040000000000000000000640007100006020202020202250300ab4b00000005ff7f00000602020202020204002a0008000c000001000008000d"], 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000080)='./cgroup\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000a0a0104000000000900000000050000111d557227bd2a9548b39936cdbd91c38bbe7e97d7592ac0e18a35cbc9375ad4f72bc96b74db19f5aacc7cf8cdc2bfb395a17cb1473e05cf385b20b86928bf70b7b29e67fd013f801072fba403ee6c94f8ad77b106326a9658ff64c069405502"], 0x14}, 0x1, 0x0, 0x0, 0x20044004}, 0x4) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r4 = dup(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x8e59, 0xfffffffffffffffe, 0x3}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r7 = getpgid(0x0) kcmp(0x0, r7, 0x3, r6, r4) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000015c0)={0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x521001, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000100)={0x20, 0x10, 0x3c, {0x3c, 0x23, "ded3c239d13ae877b61cca0992d2498b821fc188823a7a4a086b124651859a3a308fde230534a3d01eacca0a81a4501fc8ed18400a5f9e6c798a"}}, &(0x7f0000000180)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "cfe9e7b4acf76b7358211174e2dd0d339005e515bc7a41a2a5710010abbe591936afd0c9cb20392a58342833f95855d72c1173bf9041165a0d5e9baa48bbea07059b0744c2eb74cb9c58feb45e7b22bd3f5da6d61a4b42587c5a3b705852a07bb4c18005d8bf8d820453c5b8e41004d08cc6044f47d2e50415d2b2942bc2b261ed7da4c31a7858e0239dcab883455dc1b23cb5b83f2bc32e05d46cfed0ba76040944a272e680313956f5f467850c32c2052e567df3f5b163a73dedb3ea3efff126198745f02343f1962daea656d76bd741ca9a7e"}}, &(0x7f0000000340)=ANY=[@ANYBLOB="000f5b000000050f5b000603100b1425040230bd8f3807c1b5595fa15ef78c849db60710020c9009000a1003000000feb9070024100a014600000000ff1101c000000060000000083f00000f00ff0000c0000000c000000a100302030009ee0a00"], &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x1, 0x7c, "fb350e0e", "27e42371"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x9, 0x1, 0x40, 0x0, 0x43}}}, &(0x7f0000000940)={0x84, &(0x7f0000000440)={0x20, 0x10, 0xf9, "1fd4dbae85d5a558949da62dbd55592226c66887095e8121f44dd666e3a460d06458a2a386d203ef4a481ccafa6219520b763689ccbf5f51828afbf11fe540472de497135d79fb905fcbee6fefe360a4a0824903bdc4387ca544b236e8aea7efff3c36fa0c6b8ac32245fa9bebfc635d41c75172da8d7144f28bea58b2d55f35cd897a6ffafa4ddf3d7bb52d4b07a5cc0a8410a7d2e68b189ca8737428b6d628b98585a8f5944bfabf59bada5117a9428c6989c70e704b4f95025fa33f47278b957ea8fe177df348d597d1f1d2dd4c00638b6882c80c7b3ae6cd73439e7aaadb55fd391957ac5df6f2dbaa3611534d968967cf74eaee4e9cd1"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x4, 0x1}}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x4, 0x80, [0xff0]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000700)={0x40, 0xb, 0x2, "ca9f"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="0eca9759dddc"}, &(0x7f0000000800)={0x40, 0x19, 0x2, 'aD'}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xc}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}}) 6.611553976s ago: executing program 4 (id=4235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000680)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x8, 0x0, @fd_index=0x2, 0x5, 0x0, 0x6, 0x3, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='nilfs2_collection_stage_transition\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) syz_usb_connect(0x6, 0x740, &(0x7f0000000a00)={{0x12, 0x1, 0x310, 0x13, 0x9c, 0x70, 0x10, 0xf4e, 0x200, 0xb85d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72e, 0x3, 0x5, 0x7, 0x8, 0x9, [{{0x9, 0x4, 0x4b, 0xa7, 0xc, 0x13, 0xaa, 0xce, 0xff, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x4, 0x1}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x4, 0x2, 0x34, '*'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2f, 0x8, '\a'}]}], [{{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x0, 0xa1, 0xe}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x8, 0x9, 0x6e}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x0, 0x9, 0x40}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x400}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x1, 0x6c, 0x8, [@generic={0x7, 0x877d4df13809224d, "960cd04504"}]}}, {{0x9, 0x5, 0x80, 0xc, 0x228, 0x9, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0xf, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x9}, @generic={0x6f, 0x21, "54f7296731d9b1c1e50db7464626d110fdca7360b5092739f8d92ab99983b2a0481e2fdb1e0ee44aaa038cfc607db700d2be2e5efcf469271e7b7833ff804ae1a00321ee46505ef3ca4347dca6507e5682195268b09fa912c9fc6232dd547f608bef56f85428f73568d8472f8e"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x10, 0x8, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x7}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x6, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x7}]}}, {{0x9, 0x5, 0xb, 0x0, 0x7ef, 0x3, 0x0, 0x2, [@generic={0x52, 0xf, "4368f3e15476bf80819832e25d0e0f5f38d98d5e8aef82827a4eb97e01def655f1790abc9491d672b7c9f868cd7828bea1cf007de8318b48f2fd4a2d04144f0ce249a63c174a640b70110eb924e36ff1"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x3, 0xf2, 0x9, [@generic={0xb4, 0x31, "b72702927820e3c970c854dbd21f4bcbcf3521fee41c4f1827f1e8d16b6dd6d32cb51dbb56498dee5b902a33367dd91f6f9ca7af8855f35d84f9d2298f015792fb1a8f0abded97dbe814dc373c6f2d90dc042f029e66ff2f81628c89220fd5ad8f092893f9a8cc1756af44feb842c1d227b01256e13b0297c909cd0f56d33d0f488ce811cabe90714fe29210a31a21b072547b5739f7e7d41550b263a7e4fb456c9c979203a63190dd8c9863b99a22d1838a"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0xc, 0x5, 0x7, [@generic={0xad, 0xe, "bafbfb5d6f02729b0cfb2260aef482474a4fb1428cf37f84002868814f2ed8aa79dd23e4a1c4bc7c2e35d345827154d80dcc851fd7a23c8ae9e02ca2a5a85b33aa3a21c78a49f51984285f577fdc363aa8b27aad08042482b8c89c1fb6b9b951eaaea1f1729c7be94efa4bd60c9ff3346cd3b502e14f93b236cc0e5392079a3128df8875a68eab69052e2dbebef4a6f691147237e85762500eaff26fc6a134db3ade03791963bb1c3afb2a"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}]}}, {{0x9, 0x4, 0x30, 0x40, 0x5, 0xff, 0x1, 0x1, 0x1, [@hid_hid={0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0xb6}}, @generic={0xb8, 0x4, "2a3b86607e1a199d0d7ae4622269dcfa08c6cfd3d3ab5441575dff8693f70309b57a5e4ef9c88c8506dff43fcaf5fe14471a0f051b3d26d029e56981b9219d762851e9b514c85f77db105cccd65f491fdb3f44ba122d60a5deb9658e1a38ff2b8b1554daaaedb0e876d623c654c7bc8b4279c365e6d271061849ae80929452e008154ffc006d75b7d56dab8e2ba66723fab8945a6f777ca795622e6426e5fcf714a9748aaafb812d2015902a627dcabeca8ff33fa0ef"}], [{{0x9, 0x5, 0x6, 0x10, 0x8, 0x7, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xb2}, @generic={0x5a, 0x8, "bd0254dc64d174e84deb4a373d64483d955373b063dc8db974f08316f9bfd875689694124c511f0f8c68809f8b887d431a4e4e841d09cbba7f6a920ac0a76a8e3d70a64c0d62f42b586a119f42aed9edc6829eaa9e8847a8"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x40, 0x7a, 0x6, [@generic={0xc8, 0x4, "d534fb89fb18c775b6e9d24824cba60d9f176ecece6d43e9e7fada876877872a0b7276c5a9da0c792fa249fc58dfff663872ec43d25ad1e55858a8493b0a8998d0201ebe9ef26aa42f23e185a0f2c6640a30446bd29418c159b8db8af6d65c4d09bc9c9bed47a38a06aac594019de76e67d8358aaed8b1c9fe62e8abb525884894a4bcfd0a8736fd27a4fbdd33e116de9a852f3a3d33c7228298405a10d9713f821b99cc8c141ff8c7b49eba2d10a6ad652761a9eded4a4f8e1dcc1f5a9c222b28a3e3d74440"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x18, 0x0, 0x5a, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x5cb2d6c7ca1b02df, 0x3, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x146}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x0, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0xf, 0x1, 0x10, 0x0, 0x2, 0x40, [@generic={0x6d, 0x21, "5fd025387668f1a0eac5b1ebe9481100bd7f33408fc88dd58bd3ed1f08482845a5f74bda1a4b6d458cb965729532317f55c5116d5e4393a9584fbf2e7cd3b662edd75efd0df87f392c9544f52dcccf7285a99cad670cab2deef3eac603b4e029e741ea0d7108e85eb008dc"}]}}]}}, {{0x9, 0x4, 0x97, 0x80, 0x7, 0xfc, 0x99, 0x8a, 0x7, [@hid_hid={0x9, 0x21, 0x60, 0x10, 0x1, {0x22, 0x226}}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "23c488345d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x35d0, 0x7, 0x9}, {0x6, 0x24, 0x1a, 0x200, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0xf}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x8161, 0x0, 0x0, 0x101, 0x36}, @mbim_extended={0x8, 0x24, 0x1c, 0x41, 0x6, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x35, 0x2d}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x2b, 0xa, 0x3e}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x5, 0x8, 0x2, 0x1, 0x1}]}], [{{0x9, 0x5, 0x1c, 0x0, 0x200, 0x5, 0x6, 0xf0}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x5, 0x2, 0x6, [@generic={0xb7, 0xf, "ca71ee5bbf07228b8b03b204122cc02c219fd17dad2ac702a611a75c99e8a65fda7844c5ffcd044eade3c70335150c33b35d4333c61eec057ccb8a54307a587f06822b6b9774c143f7078d1da8439a72644d5122d2d04a61035291a3486132a9895afdd9e0096df05f6bf19130d89d2119ea809a06174215b4f4311909cdd824cd6968f5fede5ece7acc3a1e32a412fdc89fa5594eed5533b5f0329fb74f9dfc7b254a193a985ed1f5348d79ef1983cb4bc3e3e536"}, @generic={0x27, 0x8, "63b0439d4cfbec0187b36cd4aab891f86b5b3a0121aaff575099aa0ba01258395d6d105b03"}]}}, {{0x9, 0x5, 0x3, 0x11, 0x8, 0xe, 0xf, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x13, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x2, 0x0, 0x40}}, {{0x9, 0x5, 0x9, 0x4, 0x3f7, 0x9, 0x9, 0x7}}, {{0x9, 0x5, 0x0, 0x1, 0x400, 0x2, 0xff, 0xf5}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x6, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x183, 0x81, 0x7f}]}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x3, 0x4, 0x7f, 0x40, 0xb2}, 0x5, &(0x7f0000000480)={0x5, 0xf, 0x5}, 0x7, [{0xdc, &(0x7f00000006c0)=@string={0xdc, 0x3, "2789571371643071b395c95a19f0174e5c0fa3f90156f16d45f3f3ad3f2d3c0dcfecd19619309aee2676ef63f99313107f0413fb914160cee0c7ea69f10b351652908fc605c2060423d1df4f1d03cc66688ef6969f92c4c2407919e360c6446463adecbcc5cf6c9888c647f0a6109801ba6c553a68556365399bf6a08973ecf380e6a2cf142ed915b974bb3b59fcc4571be7b4040c5e1580f7b345cf2e4e66ecd8ff9bd906528e9e1ebf29403038ea0d0480db50fce70dd145a5b2daa68d77cfb6bdc1cc708a8d8d8d5bac4a204c4b9dceda4d06aef1fa3f8e77"}}, {0xe0, &(0x7f00000008c0)=@string={0xe0, 0x3, "ce463ad55d7059232f4e7bca4bd94fe56830f60d91cbfcd36fcd306f710fd03fa7d3ca7a236463b71e85c1998dd37625935773854314f8179c455d4e5a53854b52507eb9a35052f09b79e6054ce79d9a4c68d2ecfbdc99514284f1ccd0d97c65e700eacc139df58b49a2049ce6eb76d8636c292b2b73eadde3fa05b2b5bd31ca0696de2cd3e64960eb02aba6b3295eff76996dab6f434f5c0cfd3a4e768e0bb97e6e625a7a2e35c9b840f86433b5436e1b132f4a3f25ef403ba44519a5349c9be15f56c73ea542138ae7d601df526690740816173f7e9b34423eb2cc5132"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40e}}, {0x74, &(0x7f0000000600)=@string={0x74, 0x3, "00e2fa10ba655a002e520bd1b980c736be74832eb6f861b025664f375aebf1a6f740fc13350a1b1018fd6e58a0ac7490c7eb63a1033dca0b46a712eb30ace20e3016a6244abd6c12e70534ed6edc3b1e99b5d718004c779678682398df850cc16b90bb51a62403e682539f25714deb7a3225"}}, {0xa2, &(0x7f0000001140)=@string={0xa2, 0x3, "6a10e06450707a714e257c12838bb4046c7d3e1882d762ac1b71a498af5b3b3100edc33c9c90a35b9178c35fcca6d58026153ad82e29d7b7a6def659e6e0666bce626a03c49fdd3e8382ed9d4709a11b3983815eecbc8e03a97f2a62563fea59c0aca3f54f022cf4640d839536a80102046f55ed67d16a04530301b961a596caf422f5d3dc0eea34bc0986a27262cbd5d34b73b351b91378ac60f7838383a759"}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x443}}, {0xb, &(0x7f0000001200)=@string={0xb, 0x3, "afdd2b7b507d98da6a"}}]}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r6}) close(r5) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b20a5a5"]) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 6.375005484s ago: executing program 2 (id=4236): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='\f[(]]!\xfe@\xd5\xfe+\x00', 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={r0}, &(0x7f0000000100)=ANY=[@ANYBLOB="656e633d6f61657020686173683d6d69636861656c5f6d696300000000000000000000000000000000000000000000000000000000062419007fd421e300"/78], 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045503, &(0x7f00000000c0)) (async) ioctl$USBDEVFS_CONNECTINFO(r1, 0x80045503, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=0x1, 0x36, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map=0x1, 0x36, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r3) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x194, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x194}, 0x1, 0x0, 0x0, 0x8040}, 0x48084) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x194, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x194}, 0x1, 0x0, 0x0, 0x8040}, 0x48084) write$binfmt_elf64(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d00000000000000ed08000000000000f0ffffffffffffff0000000000000000080000000000000003000000cff5ffff800300000000000001000000000000000500000000000000ff"], 0x5b0) close(r3) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000380)={0x100000000, 0xffff1000, 0x0, r2}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x4, 0x25dfdbfc, {0x60, 0x0, 0x0, r8, {}, {0xd, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "000000000010000000030200"}}}]}, 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x3c, "c2e0adf6863d502379d54d11d068e05e86c63f4799c478dc103e21b4d4af3e581180ab50d64fe9e45fc22d523094ad73a0c738392f259c6b8e2ab90c"}, &(0x7f0000000300)=0x44) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000340)={r9, 0x80000000}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) 4.428786439s ago: executing program 5 (id=4238): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x80201, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000400)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf122dc16a5658a3b58626b458ae4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r3) r5 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r5, r4, r5}, &(0x7f0000000580)=""/259, 0x54, &(0x7f00000002c0)={&(0x7f00000003c0)={'sha256-generic\x00'}}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000007040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x3, 0x8}, {0x1, 0x6, 0xe}}}}, 0x15) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="241a"], 0x24}], 0x1}, 0x0) 3.931533371s ago: executing program 5 (id=4240): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, 0xffffffffffffffff}) fcntl$lock(r0, 0x11, &(0x7f0000003c80)={0x0, 0x0, 0x380000000000, 0x8}) r1 = gettid() r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000240)={0x4008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2fa5e34fe0bf16cf) r5 = fsopen(&(0x7f0000000280)='nfsd\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}, 0x2020) setregid(r7, r7) ioctl$vim2m_VIDIOC_QUERYBUF(r6, 0xc0585609, 0x0) stat(0x0, &(0x7f0000000180)) read$FUSE(0xffffffffffffffff, &(0x7f0000002700)={0x2020}, 0x2020) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.865655121s ago: executing program 2 (id=4241): ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f0000000000)=0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40d0}, 0x40840) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_mr_vif\x00') ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={0x1, @null, @netrom={'nr', 0x0}, 0x4, 'syz0\x00', @bcast, 0x2, 0x4, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f00000006c0)={r4, "114d9e231343ccd16e1fcdfc6fccba41"}) (async) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x60, 0x6, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000001800)={@null, 0xa, 'wg2\x00'}) (async) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000001a00), r3) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000001b00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a80)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async) socket(0xa, 0x3, 0x2) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001b40)={0x2, 0x5, @status={[0x5, 0x7fffffffffffffff, 0xffffffffffffff19, 0x3, 0x7, 0x8]}, [0x100000001, 0xfffffffffffffff7, 0x2, 0x0, 0x7fffffff, 0x39e9, 0x3d0, 0x7, 0x6, 0x1, 0x1981, 0x8001, 0x2, 0x2, 0x2, 0xa771, 0x81, 0x3, 0x2, 0xfffffffffffffff0, 0x6, 0x100000, 0xffffffffffffffc0, 0xffffffffffffff98, 0x2, 0x0, 0x7, 0x8, 0x800, 0x9d5, 0x7, 0x7, 0xf, 0x1, 0xf10, 0x8, 0xc, 0x32a0, 0x200, 0x1, 0x9, 0x7, 0x200000, 0x7fffffffffffffff, 0x4, 0xd, 0xfffffffffffff5a1, 0x8000000000000000, 0x0, 0x4, 0x3, 0xfc, 0xffffffff8ec1bfea, 0x0, 0x6, 0x4, 0xa, 0x1, 0xffffffff, 0x8001, 0xfffffffffffffffa, 0x81, 0xfb, 0x1]}) (async) readv(r0, &(0x7f0000002740)=[{&(0x7f0000002580)=""/172, 0xac}, {&(0x7f0000002640)=""/233, 0xe9}], 0x2) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000027c0)={&(0x7f0000002780)='net_dev_start_xmit\x00', r3, 0x0, 0x7}, 0x18) (async) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002800), 0x40000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000002840)={0x0, 0x0, r3}) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000002880)=0x49a3, 0x4) (async) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f00000028c0)=0xea) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000002900)={0x2, 0x3, @start={r4, 0x0, "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", "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"}, [0x5, 0xe525, 0x2, 0xa, 0x1200000, 0xe5, 0x0, 0x0, 0x8, 0x10000, 0x971, 0x2, 0x9, 0x8, 0x7, 0x101, 0x4, 0xfffffffffffffff9, 0x4f, 0x4, 0x7, 0x6, 0xdd, 0x7, 0x225, 0x5, 0x178, 0x7f, 0xa00000000, 0x1, 0x6, 0x8000000000000000, 0xc7, 0x6c43, 0x100, 0x101, 0x6, 0x4, 0x7, 0x1, 0x1ff, 0x1b9, 0x9, 0x1, 0xae, 0xfffffffeffffffff, 0x9c8, 0x1ff, 0x400, 0x40, 0x2, 0x9, 0x0, 0x0, 0x10000, 0x2bb7, 0x4800, 0x5, 0x1, 0x7f, 0x1, 0x8, 0x1, 0x300000000000]}) connect$inet6(r3, &(0x7f0000003340)={0xa, 0x4e24, 0x7, @mcast2, 0x7f}, 0x1c) (async) r6 = socket(0x26, 0x6, 0x1) (async) prctl$PR_GET_NO_NEW_PRIVS(0x27) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003400)={{r3, 0xffffffffffffffff}, &(0x7f0000003380), &(0x7f00000033c0)='%pK \x00'}, 0x20) fcntl$dupfd(r7, 0x406, r6) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000003580)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x21}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6000}, 0x4804) 3.853641698s ago: executing program 0 (id=4242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='task_rename\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r3, 0x3, 0xfff1, 0x0, 0xfffff801, 0x439}, 0x14) 3.732958586s ago: executing program 2 (id=4243): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r3, 0x0) accept4$nfc_llcp(r3, 0x0, 0x0, 0x80000) 3.30170335s ago: executing program 3 (id=4244): socket$netlink(0x10, 0x3, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x21, 0x80000, 0xfffffefe) getsockname$packet(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x20}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x561, @remote, 0xd}, 0x1c) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$setpipe(r6, 0x407, 0x0) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r6, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000240)={'system_u:object_r:var_lock_t:s0', 0x20, '/usr/sbin/cups-browsed'}, 0x4c) fcntl$setpipe(r6, 0x407, 0x2000000) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f00000003c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) 2.968036695s ago: executing program 3 (id=4245): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000010001008112e0ff0096cf2fe1000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x800, 0x0) syz_clone3(0x0, 0xfffffffffffffed8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x5, &(0x7f0000000200)) sync() openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='~', 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x8004745a, 0x2000000c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x0, 0x20004005, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000080)={0x0, "638d0bd930b49e408170e8b600003d0000671bbbab000000000000000700", 0x2, 0x0, 0x1, 0x8, 0x4}) 2.955382998s ago: executing program 4 (id=4246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x6, 0x0, "2a87ad857104f89045a04b3af5119be0a076675a9e222123f51126fd4a548920f880462b93f33c537f43b9f96bb5d21ffe3fd1695de93f48dcc9b9b70df5ffc1150677ddb4121aab42b61df9891cc861"}, 0xd8) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x5c}, @void, @val={0xc, 0x99, {0x756618cd, 0x14}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x14000040}, 0x1) r3 = socket(0x6, 0x9, 0x8) r4 = syz_open_dev$sndpcmc(&(0x7f0000000280), 0x2, 0x585000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f00000002c0)=0x200, 0x4) r5 = pidfd_getfd(r2, r4, 0x0) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000340)="2ccf95cb6c3698c3ff17279272cdbcc0cb5c64b7a53d25f7800be5a2f964ce78aea5e4bf9c2503793108c5d3a328aa18f75a8149e68cec37bc56ddd1", 0x3c}, {&(0x7f0000000380)="f146f8ae2415bcf345acfa22250a5453910c5735da3c646d2a4d712fa2dfe785ac2bafbff6b108627ac0421ebd6c21d1ce5c1d4029a8fa79e0707b538bb8d3c1c2b8decd0841463fea20bf9d1049c5c8f4334c16d19681", 0x57}, {&(0x7f0000000400)="d3083773f845d3c57b030a0efbaf6eb5a59d4f82688014a36b75d0495b0f7e6932cbdbf7c77af569ce269d07a2b96157c4808beddf1654574d014595eaad44b89b425f54f956d2d6fd9eadc37298825a27478d960fdc58ab366da286282ae796dcd3866404c6943d60e5be9125aef200d1bd4a563457352026f15319321734f9cb030420c9a043512c16b2bc50002ebc38a44dc2c41b0e7d70", 0x99}, {&(0x7f00000004c0)="a1aeb0d7f3924aa80855d25538457fc411149abd2e5bd66209cba22c3c0a4904b5325ba04a1c4348ff65798e56abbefa34e4b455e1656cf55e2b3fa696649116b04834e41e2b5e0548ea8b856a1240ebbd01f0bd248d6e36fb89debc42fb95694e339c465d95378ece42d08456f6aee5bd3f70515f0de0e426a8bb9795596a3151d8c37f9f92f3a238f7dd3353edca15744a99f0a43d4e42d383c940cc63257c185116a0a4fbbe27e0d32e4b143e6fb95a655cde37837a9be02891", 0xbb}, {&(0x7f0000000580)="7f6242385f6b544ef111ad24e262cd917d5cce9affb25489793dbaf7f8fb18437348", 0x22}, {&(0x7f00000005c0)="2b215249e0dcff0c8e5e887da30b9eb4300de7004233fe012a379a3dbf66a87e48d764c8a46cab2976319f87fdf55082f17faa71fc15b12cf2704ccc5b5704c1cb8a61bba47045f872c10776809c783272c8dc8f1105c031d5f30e51fc202b65bf3b835fd1c4d6dae48a5500b71a29793ca9f1cf86b061e1e607b3f9cdd8f5bd479bf651998decd0", 0x88}, {&(0x7f0000000680)="10525d93df9768839f8be1604e27ba30331252e88de28101ecc769d3d46a578c0b7293cb99059d5cfe14740653fa737d95c58e55ba14442ff52203953ca70dd4a56bbc0272d53eb44483efd4077a61e6d4f0b4ecff2fe66ff673e0b4ee0cfad5307b12b0ed05", 0x66}], 0x7, &(0x7f0000000780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x30}, 0x44000) syz_open_dev$sndpcmc(&(0x7f0000000800), 0xffff, 0x90080) syz_open_dev$usbfs(&(0x7f0000000840), 0x80000000, 0x482) syz_open_dev$sndpcmc(&(0x7f0000000880), 0x54, 0x28440) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000008c0)={0x0, 0x0}) syz_pidfd_open(r6, 0x0) r7 = geteuid() ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000940)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)) sendmsg$kcm(r2, &(0x7f0000000e00)={&(0x7f00000009c0)=@qipcrtr={0x2a, 0x2, 0xfffffffe}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000a40)="feff8cbd0cb46852c67f12dfa2b265f1abe1517ea2a33ef39f5848d06a754313c5c0595d7010cb9230253e5e3cc7541d1c9b4b836664068253d52f8d97fb4609516ef41c3ba2b4", 0x47}, {&(0x7f0000000ac0)="3da86ecc71", 0x5}, {&(0x7f0000000b00)="f12e2a473263671889ae486ad420fd247b6b98ff5d78cdad2d8fd3ed081b222afca12148479fe8b75456f48175a8fc632724f16130f44a278f3be83e43ca6dbba508cf4b7766a4927626e5d2b594f00834c4a7e1b82c484d0280e5760f3057b47349f82965314a7b97c0022c2db2ce164986ea35b205f2e8bc7f1840f0af890876", 0x81}, {&(0x7f0000000bc0)="e3cf0fa33e3d4d5d16c9a05da2da135934073eb82bfc0743bdd1602230e3b325754b935cc679f1a7bebb21cd8d03c0cfa0bde5340459a8ff8213a9e0e694710582414784c6add6f34cf3de7bb9bbe5b2f69b877ff0b1530a01247414e7138ea4221e7abd08bf60298fbdf0f006a30f72d79a4eeddbcde99610ba10a4686899d06742a4de1981d764ee75e90128fe03cfb3ee66daedc8638deec4f4049edd516def1264ccdd14ffc960e8cf1037f77652c45950d6bc5cfac5da0769c5b1ffc2cc3a9c414f590c6b697efb7acf82c7be1a62794faee023d225fcacc44762c468c5480a7b9f9d74ed2070a8362db33c2e55d9bc1a4d212725fd", 0xf8}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)="5a11e5dae2da46818627b7b25978944e5745eaed1a1437c713054e1270077b06f03402cdd9b1b6a1c8049c6f1a", 0x2d}, {&(0x7f0000000d40)="887ec7739a7cfa2a0237caab8f76183bb8d0720689e5a2d34d42d75e96", 0x1d}], 0x7}, 0x800) write$P9_RREADDIR(r2, &(0x7f0000000e40)={0x2a, 0x29, 0x1, {0x1, [{{0x10, 0x2, 0x3}, 0x5, 0x5, 0x7, './file0'}]}}, 0x2a) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x11, r5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000fc0)={&(0x7f0000000e80), 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)=@deltclass={0x54, 0x29, 0x400, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0xc, 0x5}, {0xfff1}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0xe}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008004) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x19) open(&(0x7f0000001000)='./file1\x00', 0xa0002, 0x82) r9 = openat$cgroup(r5, &(0x7f0000001080)='syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000010c0)=@o_path={&(0x7f0000001040)='./file0\x00', 0xffffffffffffffff, 0x4000, r9}, 0x18) r10 = dup(r0) r11 = accept4$x25(r10, 0x0, &(0x7f0000001100), 0x40800) ioctl$SIOCX25SCUDMATCHLEN(r11, 0x89e7, &(0x7f0000001140)={0x5f}) 2.87670941s ago: executing program 0 (id=4247): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket(0x28, 0x5, 0x0) recvfrom$inet(r6, &(0x7f00000000c0)=""/77, 0x4d, 0x41, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) bind$vsock_stream(r6, &(0x7f0000000040), 0x10) listen(r6, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)="a8", 0x1}], 0x1}}], 0x1, 0x200000c0) r7 = accept4$unix(r6, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/281, 0x119, 0xa2, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x19, &(0x7f0000001740)=ANY=[@ANYBLOB="180800000600000000000000000000008510"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @random="56c9d5282097", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x68, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x43}}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0xc, 0x0, {0x15, 0x4, 0x1, 0x5, 0x9, 0x64, 0x9, 0x8, 0x32, 0x5, @multicast1, @loopback, {[@generic={0x83, 0x2}, @generic={0x88, 0xa, "9b8feced469c7269"}, @cipso={0x86, 0x31, 0x1, [{0x7, 0xa, "1060fb88b5b4452c"}, {0x1, 0x5, "3bee8a"}, {0x6, 0x11, "28fa5f9711aa76a0053be6ceeeea9b"}, {0x2, 0xb, "71fd35ebaeb683f518"}]}]}}}}}}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 2.710572353s ago: executing program 2 (id=4248): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0x6) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001580)=""/4101, 0x1005, 0xa) 2.01865879s ago: executing program 0 (id=4249): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r2, 0x0, 0x10000000000002}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000180)) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r8}, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002600)={0x24, 0x4e, 0x1, 0x0, 0x0, "", [@typed={0x500, 0x0, 0x0, 0x0, @pid}]}, 0x24}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.014095696s ago: executing program 4 (id=4250): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x403, 0x97c1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x7, 0x0, 0x5}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005200b3ab"], 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x0) recvmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x2000, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x81, 0x100c050, 0x5, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x782, 0x28) syz_usb_control_io$hid(r0, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "fede60e0"}]}}, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r4, &(0x7f0000001b80)=""/4084, 0xff4, 0x0) 1.806925015s ago: executing program 3 (id=4251): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) listen(r3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='scmi_xfer_begin\x00'}, 0xffffffffffffff57) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ppoll(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000000)=0xfffffffe) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') ioctl$BLKSECDISCARD(r5, 0x127d, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r6, r6, 0xc, 0x7, &(0x7f0000000340)="9ccf7041e63e3d", 0x9, 0x1, 0x458, 0x9, 0x9, 0x1, 0x7, 'syz0\x00'}) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.488726695s ago: executing program 5 (id=4252): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106a0529000000000000010902"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=@framed={{}, [@map_idx]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000180)) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) fcntl$lock(r5, 0x5, &(0x7f00000002c0)={0x2, 0x2, 0x2, 0x5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000c83d850000002e00000095", @ANYRES8=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0x40505331, &(0x7f0000000540)={{}, {0x18, 0x4}, 0x0, 0x7}) close_range(r4, 0xffffffffffffffff, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) 819.781494ms ago: executing program 3 (id=4253): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="adee9b02de41fd700b8d89140002006a000106000000000000009b6248958cda3a94c4468f0004007f07105f768325d20082238d1c39a68e31596c532efe940f080840e1e71e91e71effb5842563c687429680775a037716e4bf7df2ba7905b55f3f57f5401bbf03fca1bf1fe0b997aae3c76f6259404b62b86fbe4c5d231258e22a70bb68e33f59c4c1"], 0x14}], 0x1}, 0x0) socket$inet(0x2, 0x2, 0x4) 670.561143ms ago: executing program 2 (id=4254): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$TCSETA(r0, 0x8924, 0x0) 528.68053ms ago: executing program 3 (id=4255): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b300000090698fd89355dbf833b643503c1a26bf8e5ec128ea13a7b8f285314cbd544f70f007261b46efa283d0e182fb32da91002d7fd38badc3c9047b7dbf12f2f888737d1e91ab0322d1a5616d6b37408a8611d13a2759819cb9aa353733559dd29a01b45accb3d12ec2f5adb525b72fe5e519a7d9b5efdaf9097bd6bb1afb16cf69ec2ab504e86adae4089194713a49813d5f2092bafb9d9c23b08257a488633c0a87ef31a573ee20fa9927f144c5ebb5cf554214ab2628dc74a0ddb5dec926c1e245cb1eeba1fd90be9feda94ef172b82c16b85763fa3fb62d73adb1b75b3f784964e5a046d8eb0e0c0d9e", @ANYRES16=0x0, @ANYBLOB="090000000000fddbdf25070000001800018014000400fc00"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20008814}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$evdev(&(0x7f0000004fc0), 0xd, 0x280000) signalfd4(r2, &(0x7f0000005100)={[0x66]}, 0x8, 0x80800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0x8, 0x101, 0x94, 0x1a, 0x0, 0x6, 0xfffffffd, {0x0, 0x1}}}}]}, 0x78}}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'dummy0\x00', 0x3}, 0x18) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x4, 0x0, 0x9}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000430007010000000000000000047c000008"], 0x1c}}, 0x48844) preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000240)}], 0x2, 0x34, 0x63a, 0x1) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r9, 0x81044804, &(0x7f0000000400)={0x1, 0x100}) close_range(r0, 0xffffffffffffffff, 0x0) 528.220667ms ago: executing program 2 (id=4256): open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8000) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="13010000000000406d0486c000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8e5bb83264e04179}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="0000000038175a3665d9e10afc54081f4fa57ef09b780af83ad1c7bab64d3527ec9ebcfcb9292d34eb4d0f45171a777f2407b8c189a107c5f8", @ANYRES16=r4, @ANYBLOB="7e00000100efffffffe8004000160000002026ae4bd30000000000000001a419cefc73600cb741bafed25263b63abf0e12c65600d8655ef1a154ff63d64ba8c8ceda224c7c936e4196e8d0af3114dd991e4799a4fc387942c7e71fa135516d4155e424", @ANYRESDEC=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1c}, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0) getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000140)=0x8) syz_usb_control_io$hid(r2, 0x0, 0x0) setrlimit(0x7, &(0x7f00000003c0)={0x7, 0xcd}) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x20, 0x6, 0x5, {0x5, 0x30, "7b3cd8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 375.93033ms ago: executing program 0 (id=4257): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioperm(0x3, 0x4, 0x1000008) semctl$IPC_RMID(0x0, 0x0, 0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r2, 0x78ae, 0x2, 0x8, 0x0, 0xfffffffffffffe21) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r5 = geteuid() setreuid(r4, r5) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x0, 0xc08}}, 0x120) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000004c0)={0x1ff, "461cc58baa3d7431e70197d3e2ec93ce403adbb196ecbae07b09997dd5fc245d", 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x18) unshare(0x22020400) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000000c0)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) splice(r6, 0x0, r8, 0x0, 0x2000, 0x3) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r8, 0x80045510, &(0x7f0000000440)=0x6) r9 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x3) 0s ago: executing program 3 (id=4258): socket(0x11, 0x800000003, 0x0) (async, rerun: 32) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) (async, rerun: 32) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) (async, rerun: 64) r0 = socket$packet(0x11, 0xa, 0x300) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="030000000403000000000000e0ffffff02180000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x50) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x1a) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) setregid(0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7ffffffff000, 0x3, &(0x7f0000ff9000/0x4000)=nil) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 32) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 32) vmsplice(r3, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) (async) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) (async) io_setup(0x1, &(0x7f0000000b80)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) (async, rerun: 64) signalfd4(r4, &(0x7f0000000140), 0x8, 0x0) (async, rerun: 64) openat2(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000001c0)={0x40, 0x80, 0x2}, 0x18) kernel console output (not intermixed with test programs): umber 51 using dummy_hcd [ 887.748961][ T6344] usb 3-1: Using ep0 maxpacket: 16 [ 888.327389][ T6344] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 888.335872][ T6344] usb 3-1: config 0 has no interface number 0 [ 888.342336][ T6344] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 888.352432][ T6344] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 888.369547][ T6344] usb 3-1: config 0 interface 41 has no altsetting 0 [ 888.383152][ T6344] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 888.398422][ T6344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.406786][ T6344] usb 3-1: Product: syz [ 888.411181][ T6344] usb 3-1: Manufacturer: syz [ 888.415820][ T6344] usb 3-1: SerialNumber: syz [ 888.422190][ T6344] usb 3-1: config 0 descriptor?? [ 888.427992][T19319] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 888.435822][T19319] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 888.658654][T19319] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 888.675581][T19319] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 888.927716][ T29] audit: type=1400 audit(1740440267.510:2941): avc: denied { name_bind } for pid=19346 comm="syz.5.3554" src=16384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 888.950354][ T29] audit: type=1400 audit(1740440267.510:2942): avc: denied { write } for pid=19346 comm="syz.5.3554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 889.121707][ T6344] Error reading MAC address [ 889.148638][ T5897] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 889.298433][T19353] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 889.306215][T19353] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 889.317323][ T5897] usb 5-1: Using ep0 maxpacket: 16 [ 889.325371][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.335886][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.347616][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.357827][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 889.372219][ T5897] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c06, bcdDevice=47.00 [ 889.381318][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.391388][ T5897] usb 5-1: config 0 descriptor?? [ 889.568027][ T6342] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 889.719841][ T6342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 889.734411][ T6342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 889.744480][ T6342] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 889.764814][ T6342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.775722][ T6342] usb 6-1: config 0 descriptor?? [ 889.801909][ T5897] corsair-psu 0003:1B1C:1C06.0041: unknown main item tag 0x0 [ 889.826150][ T5897] corsair-psu 0003:1B1C:1C06.0041: hidraw0: USB HID v0.06 Device [HID 1b1c:1c06] on usb-dummy_hcd.4-1/input0 [ 889.899167][ T5897] corsair-psu 0003:1B1C:1C06.0041: unable to initialize device (-38) [ 889.974402][ T5897] corsair-psu 0003:1B1C:1C06.0041: probe with driver corsair-psu failed with error -38 [ 890.049003][T19363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.053987][ T5897] usb 5-1: USB disconnect, device number 33 [ 890.098800][T19363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.145222][ T5824] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 890.150685][T19363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 890.154501][ T5824] Bluetooth: hci2: Injecting HCI hardware error event [ 890.169646][T19363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 890.213252][ T5827] Bluetooth: hci2: hardware error 0x00 [ 890.380892][T19363] (syz.5.3557,19363,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 890.390619][T19363] (syz.5.3557,19363,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 890.555486][ T6344] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 890.587955][ T6342] ath6kl: Failed to read usb control message: -71 [ 890.594470][ T6342] ath6kl: Unable to read the bmi data from the device: -71 [ 890.618088][ T6344] usb 3-1: USB disconnect, device number 51 [ 890.625525][ T6342] ath6kl: Unable to recv target info: -71 [ 890.650017][ T6342] ath6kl: Failed to init ath6kl core: -71 [ 890.656007][ T6342] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 890.690750][ T6342] usb 6-1: USB disconnect, device number 36 [ 891.813008][T19395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3566'. [ 891.824867][ T29] audit: type=1400 audit(1740440270.401:2943): avc: denied { accept } for pid=19394 comm="syz.4.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 891.845449][ C0] vkms_vblank_simulate: vblank timer overrun [ 891.900333][T19401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3567'. [ 891.985107][ T29] audit: type=1400 audit(1740440270.401:2944): avc: denied { connect } for pid=19394 comm="syz.4.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 892.147134][T19409] netlink: 'syz.3.3570': attribute type 1 has an invalid length. [ 892.247646][ T7296] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 892.311177][ T5827] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 892.322390][T19409] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 893.123923][ T7296] usb 5-1: device descriptor read/64, error -71 [ 893.617842][T19423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'. [ 893.668244][ T7296] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 893.858016][ T7296] usb 5-1: device descriptor read/64, error -71 [ 894.228270][ T7296] usb usb5-port1: attempt power cycle [ 894.590468][ T7296] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 894.707907][ T7296] usb 5-1: device descriptor read/8, error -71 [ 894.784549][ T29] audit: type=1400 audit(1740440273.371:2945): avc: denied { name_bind } for pid=19471 comm="syz.0.3587" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 894.957997][ T7296] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 895.198184][ T7296] usb 5-1: device not accepting address 37, error -71 [ 895.245009][ T7296] usb usb5-port1: unable to enumerate USB device [ 895.655311][T19500] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 896.187246][ T7296] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 896.647142][ T7296] usb 5-1: Using ep0 maxpacket: 8 [ 896.683933][ T7296] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 896.693959][ T7296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.725864][ T7296] usb 5-1: Product: syz [ 896.743389][ T7296] usb 5-1: Manufacturer: syz [ 896.752207][ T7296] usb 5-1: SerialNumber: syz [ 896.776561][ T7296] usb 5-1: config 0 descriptor?? [ 896.797246][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3598'. [ 897.074469][ T7296] usb 5-1: USB disconnect, device number 38 [ 897.810243][T19533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3605'. [ 897.819494][T19533] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3605'. [ 897.836482][ T29] audit: type=1400 audit(1740440276.411:2946): avc: denied { read } for pid=19527 comm="syz.3.3605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 898.082880][T19537] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.092926][T19537] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.149808][ T29] audit: type=1400 audit(1740440276.441:2947): avc: denied { read write } for pid=19534 comm="syz.0.3607" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 898.381467][ T29] audit: type=1400 audit(1740440276.451:2948): avc: denied { open } for pid=19534 comm="syz.0.3607" path="/25/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 898.535909][ T29] audit: type=1800 audit(1740440276.491:2949): pid=19535 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.3607" name="/" dev="9p" ino=2 res=0 errno=0 [ 898.604500][ T29] audit: type=1400 audit(1740440277.111:2950): avc: denied { unmount } for pid=18970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 898.720002][ T29] audit: type=1804 audit(1740440277.302:2951): pid=19543 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.3610" name="/newroot/64/file0" dev="tmpfs" ino=361 res=1 errno=0 [ 900.323774][ T29] audit: type=1400 audit(1740440278.902:2952): avc: denied { lock } for pid=19568 comm="syz.5.3617" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 900.563855][T19577] netlink: 'syz.5.3617': attribute type 1 has an invalid length. [ 900.571836][T19577] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3617'. [ 901.049791][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3620'. [ 901.065896][T19581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3622'. [ 901.181449][T19583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3623'. [ 901.316536][T15742] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 901.456573][ T6343] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 901.457017][T15742] usb 5-1: device descriptor read/64, error -71 [ 901.616540][ T6343] usb 6-1: Using ep0 maxpacket: 16 [ 901.625198][ T6343] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 901.635149][ T6343] usb 6-1: config 0 has no interface number 0 [ 901.641646][ T6343] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 901.656720][ T6343] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 901.667506][ T6343] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.675604][ T6343] usb 6-1: Product: syz [ 901.680003][ T6343] usb 6-1: Manufacturer: syz [ 901.684716][ T6343] usb 6-1: SerialNumber: syz [ 901.690743][ T6343] usb 6-1: config 0 descriptor?? [ 901.716591][T15742] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 901.846593][T15742] usb 5-1: device descriptor read/64, error -71 [ 901.899079][ T6343] usbtouchscreen 6-1:0.214: Failed to read FW rev: -71 [ 901.907073][ T6343] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 901.918905][ T6343] usb 6-1: USB disconnect, device number 37 [ 901.967251][T15742] usb usb5-port1: attempt power cycle [ 901.994547][T19596] netlink: 'syz.2.3627': attribute type 12 has an invalid length. [ 902.003454][T19596] netlink: 'syz.2.3627': attribute type 29 has an invalid length. [ 902.011977][T19596] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3627'. [ 902.121723][ T29] audit: type=1400 audit(1740440280.702:2953): avc: denied { listen } for pid=19597 comm="syz.3.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 902.166442][ T29] audit: type=1400 audit(1740440280.702:2954): avc: denied { accept } for pid=19597 comm="syz.3.3628" lport=55801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 902.210388][ T29] audit: type=1400 audit(1740440280.792:2955): avc: denied { accept } for pid=19597 comm="syz.3.3628" laddr=::ac14:14aa lport=59194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 902.316558][T15742] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 902.360286][T15742] usb 5-1: device descriptor read/8, error -71 [ 902.626509][T15742] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 902.893866][T15742] usb 5-1: device descriptor read/8, error -71 [ 903.007238][T15742] usb usb5-port1: unable to enumerate USB device [ 903.188257][T19612] netlink: 'syz.3.3631': attribute type 3 has an invalid length. [ 903.428882][ T29] audit: type=1400 audit(1740440282.012:2956): avc: denied { append } for pid=19621 comm="syz.5.3634" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 903.706772][T15742] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 903.866321][T15742] usb 3-1: Using ep0 maxpacket: 32 [ 903.892814][T15742] usb 3-1: config 0 interface 0 has no altsetting 0 [ 903.905119][T15742] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 903.917445][T15742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.925514][T15742] usb 3-1: Product: syz [ 903.932599][T15742] usb 3-1: Manufacturer: syz [ 903.937767][T15742] usb 3-1: SerialNumber: syz [ 903.949092][T15742] usb 3-1: config 0 descriptor?? [ 904.046440][ T29] audit: type=1400 audit(1740440282.622:2957): avc: denied { nlmsg_write } for pid=19634 comm="syz.3.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 904.115954][ T29] audit: type=1400 audit(1740440282.662:2958): avc: denied { read } for pid=19634 comm="syz.3.3640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 904.296752][ T7296] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 904.360253][T15742] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 904.479349][ T7296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.490355][ T7296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.500238][ T7296] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 904.509775][ T7296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.522755][ T7296] usb 6-1: config 0 descriptor?? [ 904.967477][ T6342] usb 3-1: USB disconnect, device number 52 [ 905.218112][ T7296] arvo 0003:1E7D:30D4.0042: report_id 0 is invalid [ 905.224800][ T7296] arvo 0003:1E7D:30D4.0042: item 0 0 1 8 parsing failed [ 905.232420][ T7296] arvo 0003:1E7D:30D4.0042: parse failed [ 905.238367][ T7296] arvo 0003:1E7D:30D4.0042: probe with driver arvo failed with error -22 [ 905.431450][ T6342] usb 6-1: USB disconnect, device number 38 [ 905.530604][T19659] xt_bpf: check failed: parse error [ 905.720803][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'. [ 905.992117][T19676] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3652'. [ 906.071889][ T29] audit: type=1400 audit(1740440284.652:2959): avc: denied { unmount } for pid=18970 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 907.578585][T19703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3656'. [ 907.587556][T19703] bridge_slave_1: left allmulticast mode [ 907.593195][T19703] bridge_slave_1: left promiscuous mode [ 907.598949][T19703] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.621110][T19703] bridge_slave_0: left allmulticast mode [ 907.628007][T19703] bridge_slave_0: left promiscuous mode [ 907.633730][T19703] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.648475][T19709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3656'. [ 907.702422][T19710] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3661'. [ 907.913300][ T29] audit: type=1400 audit(1740440286.493:2960): avc: denied { watch } for pid=19715 comm="syz.0.3662" path="/36/file0" dev="tmpfs" ino=213 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 908.175906][T15742] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 909.019210][T15742] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 909.035769][T15742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.055942][T15742] usb 6-1: Product: syz [ 909.060243][T15742] usb 6-1: Manufacturer: syz [ 909.065157][T15742] usb 6-1: SerialNumber: syz [ 909.396212][T15742] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 909.518058][ T5897] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 910.511386][T19760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.567267][T19760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 910.627776][ T5897] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 910.659546][ T5897] ath9k_htc: Failed to initialize the device [ 910.772601][ T5897] usb 6-1: ath9k_htc: USB layer deinitialized [ 911.245321][ T6343] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 911.705305][ T6343] usb 5-1: Using ep0 maxpacket: 16 [ 911.713532][ T6343] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 911.740218][ T6343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.752435][ T6343] usb 5-1: Product: syz [ 911.757896][ T6343] usb 5-1: Manufacturer: syz [ 911.762690][ T6343] usb 5-1: SerialNumber: syz [ 911.773442][T19782] lo: entered allmulticast mode [ 911.785432][ T6343] usb 5-1: config 0 descriptor?? [ 911.805297][T19781] lo: left allmulticast mode [ 911.928522][ T7296] usb 6-1: USB disconnect, device number 39 [ 912.001066][ T6343] usb 5-1: USB disconnect, device number 43 [ 913.136943][ T7296] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 913.315439][ T7296] usb 6-1: Invalid ep0 maxpacket: 64 [ 913.508106][ T7296] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 913.635040][ T5897] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 913.866306][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 913.887210][ T7296] usb 6-1: Invalid ep0 maxpacket: 64 [ 913.950832][ T7296] usb usb6-port1: attempt power cycle [ 913.960548][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 913.977773][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 913.994269][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 914.013797][ T5897] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 914.025050][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.048033][ T5897] usb 5-1: config 0 descriptor?? [ 914.054104][T19825] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 914.345002][ T7296] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 914.365607][ T7296] usb 6-1: Invalid ep0 maxpacket: 64 [ 915.169480][ T7296] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 915.185170][ T5897] plantronics 0003:047F:FFFF.0043: unknown main item tag 0xd [ 915.202233][ T5897] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 915.211574][ T5897] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 915.304807][ T7296] usb 6-1: device descriptor read/8, error -71 [ 915.389881][T19852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3705'. [ 915.465860][ T7296] usb usb6-port1: unable to enumerate USB device [ 915.466465][ T6343] usb 5-1: USB disconnect, device number 44 [ 916.085679][T19864] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3711'. [ 916.104872][T19867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 916.402684][ T29] audit: type=1326 audit(1740440294.984:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19870 comm="syz.3.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fb78d169 code=0x7ffc0000 [ 916.446155][ T29] audit: type=1326 audit(1740440294.984:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19870 comm="syz.3.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fb78d169 code=0x7ffc0000 [ 916.504716][ T29] audit: type=1326 audit(1740440294.984:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19870 comm="syz.3.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f50fb78d169 code=0x7ffc0000 [ 916.548498][ T29] audit: type=1326 audit(1740440294.984:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19870 comm="syz.3.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fb78d169 code=0x7ffc0000 [ 916.738646][ T29] audit: type=1326 audit(1740440294.984:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19870 comm="syz.3.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f50fb78d169 code=0x7ffc0000 [ 916.762629][ T29] audit: type=1326 audit(1740440294.984:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19870 comm="syz.3.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fb78d169 code=0x7ffc0000 [ 916.787294][ T29] audit: type=1326 audit(1740440294.994:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19870 comm="syz.3.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f50fb78d169 code=0x7ffc0000 [ 917.104549][ T29] audit: type=1326 audit(1740440294.994:2968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19870 comm="syz.3.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 917.134603][ T29] audit: type=1326 audit(1740440294.994:2969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19870 comm="syz.3.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50fb78d169 code=0x7ffc0000 [ 917.498113][T19889] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.586467][T19889] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.674176][T19889] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.753757][T19889] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.828478][T19889] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.866920][T19889] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.916884][T19889] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.941522][T19889] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.961859][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3721'. [ 918.709016][T19913] wlan0 speed is unknown, defaulting to 1000 [ 919.037943][ T29] audit: type=1400 audit(1740440297.624:2970): avc: denied { relabelfrom } for pid=19910 comm="syz.4.3728" name="ALG" dev="sockfs" ino=69030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 921.034517][T19967] trusted_key: syz.2.3743 sent an empty control message without MSG_MORE. [ 921.046043][ T6342] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 921.215546][ T6342] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 921.302064][T19974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 921.777063][ T6342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 921.788373][ T6342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 921.806195][ T6342] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 921.821709][ T6342] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 921.835159][ T6344] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 921.862120][ T6342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.873739][ T6342] usb 6-1: config 0 descriptor?? [ 921.879650][T19953] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 922.018128][ T6344] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 922.031361][ T6344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.040095][ T6344] usb 3-1: Product: syz [ 922.044469][ T6344] usb 3-1: Manufacturer: syz [ 922.049115][ T6344] usb 3-1: SerialNumber: syz [ 922.055607][ T6344] usb 3-1: config 0 descriptor?? [ 922.067502][ T6344] usb 3-1: interface 1 not found [ 922.286024][T15742] usb 3-1: USB disconnect, device number 53 [ 922.301109][ T6342] plantronics 0003:047F:FFFF.0044: unknown main item tag 0xd [ 922.315529][ T6342] plantronics 0003:047F:FFFF.0044: No inputs registered, leaving [ 922.340165][ T6342] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 922.565711][ T6342] usb 6-1: USB disconnect, device number 44 [ 922.636146][T19994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3749'. [ 922.724882][T15742] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 923.295083][T15742] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 923.310972][T15742] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.321475][T15742] usb 3-1: config 0 interface 0 has no altsetting 0 [ 923.328242][T15742] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 923.339068][T15742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.352963][T15742] usb 3-1: config 0 descriptor?? [ 924.216573][T15742] saitek 0003:06A3:0621.0045: ignoring exceeding usage max [ 924.295953][T15742] saitek 0003:06A3:0621.0045: usage index exceeded [ 924.320692][T15742] saitek 0003:06A3:0621.0045: item 0 4 2 0 parsing failed [ 924.337767][T15742] saitek 0003:06A3:0621.0045: parse failed [ 924.345334][T15742] saitek 0003:06A3:0621.0045: probe with driver saitek failed with error -22 [ 924.469555][T20016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3754'. [ 924.487556][T15742] usb 3-1: USB disconnect, device number 54 [ 924.945931][T20023] pim6reg: entered allmulticast mode [ 925.602858][T20039] sctp: [Deprecated]: syz.4.3764 (pid 20039) Use of int in max_burst socket option deprecated. [ 925.602858][T20039] Use struct sctp_assoc_value instead [ 925.636348][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 925.636363][ T29] audit: type=1400 audit(1740440304.225:2973): avc: denied { ioctl } for pid=20038 comm="syz.4.3764" path="socket:[68513]" dev="sockfs" ino=68513 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 925.838217][T15742] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 926.003867][T15742] usb 6-1: device descriptor read/64, error -71 [ 926.260625][T15742] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 926.278889][T20047] xt_ecn: cannot match TCP bits for non-tcp packets [ 926.404076][T15742] usb 6-1: device descriptor read/64, error -71 [ 926.598656][T15742] usb usb6-port1: attempt power cycle [ 927.401816][T15742] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 927.441181][T15742] usb 6-1: device descriptor read/8, error -71 [ 928.215367][T15742] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 928.244341][T15742] usb 6-1: device descriptor read/8, error -71 [ 928.359422][T15742] usb usb6-port1: unable to enumerate USB device [ 928.979788][T20082] veth1: entered promiscuous mode [ 929.001123][T20082] netlink: 'syz.3.3778': attribute type 1 has an invalid length. [ 929.121337][ T29] audit: type=1400 audit(1740440307.705:2974): avc: denied { append } for pid=20091 comm="syz.0.3782" name="sg0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 929.204844][T20105] FAULT_INJECTION: forcing a failure. [ 929.204844][T20105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.219318][T20105] CPU: 1 UID: 0 PID: 20105 Comm: syz.5.3785 Not tainted 6.14.0-rc4-syzkaller #0 [ 929.219342][T20105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 929.219352][T20105] Call Trace: [ 929.219358][T20105] [ 929.219365][T20105] dump_stack_lvl+0x16c/0x1f0 [ 929.219389][T20105] should_fail_ex+0x50a/0x650 [ 929.219424][T20105] _copy_from_user+0x2e/0xd0 [ 929.219441][T20105] copy_msghdr_from_user+0x99/0x160 [ 929.219464][T20105] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 929.219495][T20105] ___sys_sendmsg+0xff/0x1e0 [ 929.219517][T20105] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.219548][T20105] ? __pfx_lock_release+0x10/0x10 [ 929.219570][T20105] ? trace_lock_acquire+0x14e/0x1f0 [ 929.219596][T20105] ? __fget_files+0x206/0x3a0 [ 929.219618][T20105] __sys_sendmsg+0x16e/0x220 [ 929.219640][T20105] ? __pfx___sys_sendmsg+0x10/0x10 [ 929.219676][T20105] do_syscall_64+0xcd/0x250 [ 929.219698][T20105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.219721][T20105] RIP: 0033:0x7f0d3058d169 [ 929.219734][T20105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.219750][T20105] RSP: 002b:00007f0d313b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.219767][T20105] RAX: ffffffffffffffda RBX: 00007f0d307a5fa0 RCX: 00007f0d3058d169 [ 929.219778][T20105] RDX: 0000000000000014 RSI: 0000400000000000 RDI: 0000000000000003 [ 929.219787][T20105] RBP: 00007f0d313b9090 R08: 0000000000000000 R09: 0000000000000000 [ 929.219797][T20105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.219807][T20105] R13: 0000000000000000 R14: 00007f0d307a5fa0 R15: 00007ffe5a00a808 [ 929.219827][T20105] [ 930.511108][ T29] audit: type=1326 audit(1740440309.085:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20091 comm="syz.0.3782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe9438d169 code=0x7fc00000 [ 930.787628][T20126] batadv_slave_1: entered allmulticast mode [ 931.132196][T20133] syz.4.3788: attempt to access beyond end of device [ 931.132196][T20133] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 931.145317][T20133] befs: (nbd4): unable to read superblock [ 932.022976][ T29] audit: type=1400 audit(1740440310.616:2976): avc: denied { mount } for pid=20140 comm="syz.4.3793" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 932.500012][T20138] batadv_slave_1: left allmulticast mode [ 932.738224][ T29] audit: type=1400 audit(1740440311.326:2977): avc: granted { setsecparam } for pid=20167 comm="syz.4.3799" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 932.769974][T20161] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.809627][T20170] overlayfs: failed to clone upperpath [ 932.817447][ T29] audit: type=1400 audit(1740440311.396:2978): avc: denied { map } for pid=20169 comm="syz.3.3801" path="/349/file0" dev="tmpfs" ino=1902 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 933.032936][T20161] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.527317][T20161] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.605761][T20161] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.720382][T20161] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.762032][T20161] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.778880][T20161] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.798569][T20161] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.092639][T20197] FAULT_INJECTION: forcing a failure. [ 934.092639][T20197] name failslab, interval 1, probability 0, space 0, times 0 [ 934.129206][T20197] CPU: 0 UID: 0 PID: 20197 Comm: syz.4.3808 Not tainted 6.14.0-rc4-syzkaller #0 [ 934.129230][T20197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 934.129239][T20197] Call Trace: [ 934.129245][T20197] [ 934.129251][T20197] dump_stack_lvl+0x16c/0x1f0 [ 934.129276][T20197] should_fail_ex+0x50a/0x650 [ 934.129299][T20197] ? fs_reclaim_acquire+0xae/0x150 [ 934.129325][T20197] should_failslab+0xc2/0x120 [ 934.129343][T20197] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 934.129360][T20197] ? fput+0x67/0x440 [ 934.129379][T20197] ? getname_flags.part.0+0x4c/0x550 [ 934.129405][T20197] getname_flags.part.0+0x4c/0x550 [ 934.129430][T20197] __x64_sys_mkdir+0xd8/0x140 [ 934.129447][T20197] do_syscall_64+0xcd/0x250 [ 934.129478][T20197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.129502][T20197] RIP: 0033:0x7f108e78d169 [ 934.129516][T20197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.129533][T20197] RSP: 002b:00007f108f675038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 934.129549][T20197] RAX: ffffffffffffffda RBX: 00007f108e9a5fa0 RCX: 00007f108e78d169 [ 934.129561][T20197] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000400000000440 [ 934.129571][T20197] RBP: 00007f108f675090 R08: 0000000000000000 R09: 0000000000000000 [ 934.129581][T20197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.129591][T20197] R13: 0000000000000000 R14: 00007f108e9a5fa0 R15: 00007fff1576cae8 [ 934.129613][T20197] [ 934.454530][ T29] audit: type=1400 audit(1740440313.046:2979): avc: denied { name_connect } for pid=20204 comm="syz.3.3813" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 934.722523][ T6343] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 934.872492][ T6343] usb 5-1: Using ep0 maxpacket: 16 [ 934.884853][ T6343] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 934.894265][ T6343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.904876][ T6343] usb 5-1: Product: syz [ 934.909177][ T6343] usb 5-1: Manufacturer: syz [ 934.914010][ T6343] usb 5-1: SerialNumber: syz [ 934.919990][ T6343] usb 5-1: config 0 descriptor?? [ 934.922433][T15742] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 934.940319][ T6343] as10x_usb: device has been detected [ 934.950607][ T6343] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 934.967482][ T6343] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 934.980187][ T6343] as10x_usb: error during firmware upload part1 [ 934.989104][ T6343] Registered device Sky IT Digital Key (green led) [ 935.063070][T15742] usb 6-1: device descriptor read/64, error -71 [ 935.207508][ T5897] usb 5-1: USB disconnect, device number 45 [ 935.227195][ T5897] Unregistered device Sky IT Digital Key (green led) [ 935.231937][ T5897] as10x_usb: device has been disconnected [ 935.467386][T20221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3812'. [ 935.614913][T15742] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 935.932900][T15742] usb 6-1: device descriptor read/64, error -71 [ 936.063464][T15742] usb usb6-port1: attempt power cycle [ 936.197254][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3825'. [ 936.382292][ T6343] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 936.452483][T15742] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 937.055193][T15742] usb 6-1: device descriptor read/8, error -71 [ 937.083584][ T29] audit: type=1400 audit(1740440315.676:2980): avc: denied { create } for pid=20253 comm="syz.3.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 937.123722][ T6343] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 937.137871][ T6343] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 937.158435][ T6343] usb 3-1: config 135 has no interface number 0 [ 937.168413][ T6343] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 937.180107][ T6343] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 937.193650][ T6343] usb 3-1: config 135 interface 230 has no altsetting 0 [ 937.202377][ T6343] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 937.211420][ T6343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.219595][ T6343] usb 3-1: Product: syz [ 937.223819][ T6343] usb 3-1: Manufacturer: syz [ 937.228614][ T6343] usb 3-1: SerialNumber: syz [ 937.494280][T20262] trusted_key: encrypted_key: key user:syz not found [ 937.498300][T15742] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 937.990359][ T6343] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 937.990859][T15742] usb 6-1: device descriptor read/8, error -71 [ 937.997171][ T6343] usb 3-1: No valid video chain found. [ 938.050824][T20264] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3830'. [ 938.102375][ T6342] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 938.112293][T15742] usb usb6-port1: unable to enumerate USB device [ 938.198983][T20273] vivid-000: disconnect [ 938.208404][T20244] openvswitch: netlink: Duplicate or invalid key (type 0). [ 938.216828][T20267] vivid-000: reconnect [ 938.232041][T20244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 938.251116][T20244] 9pnet_fd: Insufficient options for proto=fd [ 938.260591][ T6344] usb 3-1: USB disconnect, device number 55 [ 938.273406][ T6342] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 938.287622][ T6342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 938.344768][ T6342] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 938.404732][ T6342] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 938.417792][ T6342] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 938.485211][ T6342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.496800][ T6342] usb 5-1: config 0 descriptor?? [ 938.505466][T20261] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 939.094983][ T6342] plantronics 0003:047F:FFFF.0046: unknown main item tag 0xd [ 939.712625][ T6342] plantronics 0003:047F:FFFF.0046: No inputs registered, leaving [ 940.033058][ T6342] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 940.063326][T20295] sctp: [Deprecated]: syz.0.3842 (pid 20295) Use of struct sctp_assoc_value in delayed_ack socket option. [ 940.063326][T20295] Use struct sctp_sack_info instead [ 940.083630][ T6342] usb 5-1: USB disconnect, device number 46 [ 940.097489][T20300] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3843'. [ 941.121676][ T6342] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 941.512216][ T6342] usb 6-1: device descriptor read/64, error -71 [ 941.761654][ T6342] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 941.935913][ T6342] usb 6-1: device descriptor read/64, error -71 [ 942.221977][ T6342] usb usb6-port1: attempt power cycle [ 942.366730][T20336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3847'. [ 942.382242][ T29] audit: type=1400 audit(1740440320.967:2981): avc: denied { map } for pid=20326 comm="syz.0.3855" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 942.836508][ T6342] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 943.552678][ T6342] usb 6-1: device descriptor read/8, error -71 [ 943.764416][T20356] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3859'. [ 944.134695][ T29] audit: type=1400 audit(1740440322.577:2982): avc: denied { getopt } for pid=20352 comm="syz.4.3859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 946.581173][T15742] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 946.751620][T15742] usb 3-1: Using ep0 maxpacket: 16 [ 946.762203][T15742] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.017259][T15742] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.041051][T15742] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 947.070122][T20409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3877'. [ 947.085664][T15742] usb 3-1: config 0 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 947.121308][T15742] usb 3-1: config 0 interface 0 has no altsetting 0 [ 947.128746][T15742] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 947.139342][T15742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.151982][T15742] usb 3-1: config 0 descriptor?? [ 948.041393][ T5897] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 948.143626][T20395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.172362][T20395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.333959][T15742] hid (null): unknown global tag 0xd [ 948.339563][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short [ 948.355220][T15742] hid (null): unknown global tag 0x6c [ 948.360935][ T29] audit: type=1400 audit(1740440326.948:2983): avc: denied { bind } for pid=20421 comm="syz.5.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 948.361660][ T5897] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 948.380514][ C1] vkms_vblank_simulate: vblank timer overrun [ 948.398612][T15742] hid (null): unknown global tag 0xe [ 948.409836][T15742] hid (null): report_id 12265 is invalid [ 948.416202][T15742] hid (null): unknown global tag 0xd [ 948.425554][T15742] hid (null): unknown global tag 0xe [ 948.434165][T15742] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.0047/input/input82 [ 948.469188][ T5897] usb 5-1: can't read configurations, error -71 [ 948.491206][T15742] kye 0003:0458:5010.0047: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 948.565096][T15742] usb 3-1: USB disconnect, device number 56 [ 948.698056][T20436] netlink: 'syz.0.3885': attribute type 1 has an invalid length. [ 948.719917][T20436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 948.738328][T20436] bond1: (slave gretap1): making interface the new active one [ 948.746595][T20436] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 948.757096][ T29] audit: type=1400 audit(1740440327.348:2984): avc: denied { mounton } for pid=20435 comm="syz.0.3885" path="/72/bus" dev="tmpfs" ino=409 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 948.757101][T20436] Device name cannot be null; rc = [-22] [ 950.799389][T20481] wlan0 speed is unknown, defaulting to 1000 [ 950.819655][T15635] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 951.510535][T15635] usb 5-1: Using ep0 maxpacket: 8 [ 951.845473][T15635] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.874438][T15635] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 951.907570][T15635] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.930833][T15635] usb 5-1: config 0 descriptor?? [ 951.944487][T15635] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 952.130450][ T6342] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 952.280685][ T6342] usb 3-1: Using ep0 maxpacket: 8 [ 952.289793][ T6342] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 952.299740][ T6342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 952.309586][ T6342] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 952.319508][ T6342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 952.329505][ T6342] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 952.338602][ T6342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.347872][ T6342] usb 3-1: config 0 descriptor?? [ 952.353574][T20489] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 952.380392][ T6343] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 952.541686][ T6343] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 952.552819][ T6343] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 952.563019][ T6343] usb 6-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 952.569812][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3902'. [ 952.573082][ T6343] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 952.603045][ T6343] usb 6-1: SerialNumber: syz [ 952.634026][ T6343] usb 6-1: config 0 descriptor?? [ 952.680949][ T6343] port100 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 952.998647][ T6342] usb 6-1: USB disconnect, device number 57 [ 953.132466][ T8] usb 3-1: USB disconnect, device number 57 [ 953.195279][T20509] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 953.205128][T20509] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 953.489751][T20517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3908'. [ 953.547504][T20476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.556815][T20476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.950264][ T5867] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 954.674091][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 954.686780][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 954.689185][ T8] usb 5-1: USB disconnect, device number 49 [ 954.712395][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 954.727472][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 954.748035][ T5867] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 954.752681][T20552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3920'. [ 954.757834][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.834172][ T5867] usb 3-1: config 0 descriptor?? [ 954.864441][T20534] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 955.383313][ T5867] plantronics 0003:047F:FFFF.0048: unknown main item tag 0xd [ 955.392470][ T5867] plantronics 0003:047F:FFFF.0048: No inputs registered, leaving [ 955.402059][ T5867] plantronics 0003:047F:FFFF.0048: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 955.570225][ T6342] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 955.657769][ T8] usb 3-1: USB disconnect, device number 58 [ 955.721327][ T6342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.736406][ T6342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.746615][ T6342] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 955.755946][ T6342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.766048][ T6342] usb 6-1: config 0 descriptor?? [ 956.348414][ T6342] hid-led 0003:27B8:01ED.0049: probe with driver hid-led failed with error -71 [ 956.429598][ T6342] usb 6-1: USB disconnect, device number 58 [ 957.080691][T15635] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 957.313733][T15635] usb 5-1: Using ep0 maxpacket: 16 [ 957.335809][T15635] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 957.356902][T15635] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 957.378928][T15635] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 957.407824][T15635] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 957.417386][T15635] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.426332][T15635] usb 5-1: Product: syz [ 957.430771][T15635] usb 5-1: Manufacturer: syz [ 957.435434][T15635] usb 5-1: SerialNumber: syz [ 957.516121][T20583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3932'. [ 957.525344][T20583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3932'. [ 957.625972][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 957.699853][ T6342] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 957.845984][T15635] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 957.861369][ T6342] usb 3-1: config 0 interface 0 has no altsetting 0 [ 957.869703][ T6342] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 957.878830][ T6342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.886919][ T6342] usb 3-1: Product: syz [ 957.891401][ T6342] usb 3-1: Manufacturer: syz [ 957.896032][ T6342] usb 3-1: SerialNumber: syz [ 957.902009][ T6342] usb 3-1: config 0 descriptor?? [ 957.909169][ T6342] dvb-usb: found a 'DTV-DVB UDTT7049' in warm state. [ 957.917772][ T6342] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 957.927647][ T6342] dvbdev: DVB: registering new adapter (DTV-DVB UDTT7049) [ 957.934995][ T6342] usb 3-1: media controller created [ 957.950809][ T6342] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 958.135608][T20587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.144619][T20587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.747019][T20604] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 958.902253][ T29] audit: type=1400 audit(1740440337.499:2985): avc: denied { read } for pid=20615 comm="syz.5.3940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 959.201855][T20571] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3926'. [ 959.379134][T15635] usb 5-1: USB disconnect, device number 50 [ 959.869410][ T29] audit: type=1400 audit(1740440338.459:2986): avc: denied { watch_sb } for pid=20626 comm="syz.5.3943" path="/305" dev="tmpfs" ino=1636 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 959.930607][ T29] audit: type=1400 audit(1740440338.529:2987): avc: denied { read } for pid=20624 comm="syz.2.3945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 959.971214][ T6342] dvb-usb: no frontend was attached by 'DTV-DVB UDTT7049' [ 960.131295][ T8] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 960.140103][ T6342] rc_core: IR keymap rc-twinhan1027 not found [ 960.724060][ T6342] Registered IR keymap rc-empty [ 960.762602][ T6342] rc rc0: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 960.782337][ T6342] input: DTV-DVB UDTT7049 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input85 [ 960.851025][ T8] usb 6-1: device descriptor read/64, error -71 [ 960.887814][ T5897] IPVS: starting estimator thread 0... [ 960.909165][ T6342] dvb-usb: schedule remote query interval to 150 msecs. [ 960.913387][T20645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.926708][T20645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.929371][ T6342] dvb-usb: DTV-DVB UDTT7049 successfully initialized and connected. [ 960.947844][ T6342] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -32 [ 960.990403][T20643] IPVS: using max 32 ests per chain, 76800 per kthread [ 961.094409][ T6342] m920x_read = error: -32 [ 961.099144][ T6342] dvb-usb: error -32 while querying for an remote control event. [ 961.139338][ T8] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 961.175201][ T29] audit: type=1400 audit(1740440339.769:2988): avc: denied { accept } for pid=20653 comm="syz.3.3952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 961.271122][ T6342] m920x_read = error: -32 [ 961.275497][ T6342] dvb-usb: error -32 while querying for an remote control event. [ 961.284111][ T8] usb 6-1: device descriptor read/64, error -71 [ 961.399607][ T8] usb usb6-port1: attempt power cycle [ 961.459620][ T6342] m920x_read = error: -32 [ 961.467825][ T6342] dvb-usb: error -32 while querying for an remote control event. [ 961.685628][ T6342] m920x_read = error: -32 [ 961.690760][ T6342] dvb-usb: error -32 while querying for an remote control event. [ 961.833268][ T8] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 961.891686][ T6342] m920x_read = error: -32 [ 961.897079][ T6342] dvb-usb: error -32 while querying for an remote control event. [ 961.924430][ T8] usb 6-1: device descriptor read/8, error -71 [ 961.935939][ T6584] bridge_slave_1: left allmulticast mode [ 961.942817][ T6584] bridge_slave_1: left promiscuous mode [ 961.974809][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.034731][ T6584] bridge_slave_0: left allmulticast mode [ 962.048437][ T6584] bridge_slave_0: left promiscuous mode [ 962.061396][T15635] m920x_read = error: -32 [ 962.065867][T15635] dvb-usb: error -32 while querying for an remote control event. [ 962.073823][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.172192][ T8] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 962.231735][ T8] usb 6-1: device descriptor read/8, error -71 [ 962.241904][T15635] m920x_read = error: -32 [ 962.246352][T15635] dvb-usb: error -32 while querying for an remote control event. [ 962.339766][ T8] usb usb6-port1: unable to enumerate USB device [ 962.430303][ T8] m920x_read = error: -32 [ 962.459442][ T8] dvb-usb: error -32 while querying for an remote control event. [ 962.637498][ T6584] erspan0 (unregistering): left promiscuous mode [ 962.660397][ T8] m920x_read = error: -32 [ 962.664773][ T8] dvb-usb: error -32 while querying for an remote control event. [ 962.677616][ T6584] gretap0 (unregistering): left promiscuous mode [ 962.830214][ T8] m920x_read = error: -32 [ 962.845469][ T8] dvb-usb: error -32 while querying for an remote control event. [ 963.141171][ T8] m920x_read = error: -32 [ 963.284796][ T8] dvb-usb: error -32 while querying for an remote control event. [ 963.335526][ T6344] usb 3-1: USB disconnect, device number 59 [ 963.509065][ T8] m920x_read = error: -19 [ 963.515920][ T8] dvb-usb: error -19 while querying for an remote control event. [ 963.689111][ T8] m920x_read = error: -19 [ 963.770316][T20702] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 964.177677][ T8] dvb-usb: error -19 while querying for an remote control event. [ 964.277023][ T6584]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.287422][ T6584]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.298235][ T6584]  (unregistering): Released all slaves [ 964.349091][ T8] m920x_read = error: -19 [ 964.357570][ T8] dvb-usb: error -19 while querying for an remote control event. [ 964.443854][ T6584] bond0 (unregistering): Released all slaves [ 964.528368][ T6342] m920x_read = error: -19 [ 964.533206][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 964.813187][ T6342] m920x_read = error: -19 [ 964.820261][ T6584] : left promiscuous mode [ 964.825384][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 965.020103][ T6342] m920x_read = error: -19 [ 965.024474][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 965.046312][ T6584] tipc: Left network mode [ 965.192643][ T6342] m920x_read = error: -19 [ 965.197195][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 965.361099][ T6342] m920x_read = error: -19 [ 965.365678][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 966.300606][ T6342] m920x_read = error: -19 [ 966.308002][ T6584] hsr_slave_0: left promiscuous mode [ 966.330808][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 966.350090][ T6584] hsr_slave_1: left promiscuous mode [ 966.403189][ T6584] veth1_macvtap: left promiscuous mode [ 966.417602][ T6584] veth1_vlan: left promiscuous mode [ 966.435625][ T6584] veth0_vlan: left promiscuous mode [ 966.519450][ T6342] m920x_read = error: -19 [ 966.526104][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 966.722430][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3973'. [ 966.742383][T20736] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3973'. [ 966.751618][ T6342] m920x_read = error: -19 [ 966.766968][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 967.052768][ T29] audit: type=1400 audit(1740440345.520:2989): avc: denied { setopt } for pid=20727 comm="syz.5.3972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 967.323256][ T6342] m920x_read = error: -19 [ 967.327638][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 967.499143][ T8] m920x_read = error: -19 [ 967.507686][ T8] dvb-usb: error -19 while querying for an remote control event. [ 967.665119][T20753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3977'. [ 967.699126][ T8] m920x_read = error: -19 [ 967.712649][ T8] dvb-usb: error -19 while querying for an remote control event. [ 967.908478][ T8] m920x_read = error: -19 [ 967.931385][ T8] dvb-usb: error -19 while querying for an remote control event. [ 968.108660][ T8] m920x_read = error: -19 [ 968.113322][ T8] dvb-usb: error -19 while querying for an remote control event. [ 968.275252][T20757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.284422][T20757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.292342][ T6342] m920x_read = error: -19 [ 968.296827][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 968.397110][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 968.458691][ T6344] m920x_read = error: -19 [ 968.463142][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 968.510713][ T8] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 968.642046][ T6344] m920x_read = error: -19 [ 968.649434][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 968.669605][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 968.676362][ T8] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 968.684570][ T8] usb 3-1: config 0 has no interface number 0 [ 968.703666][ T8] usb 3-1: config 0 interface 88 has no altsetting 0 [ 968.712353][ T8] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 968.755487][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.763867][ T8] usb 3-1: Product: syz [ 968.768073][ T8] usb 3-1: Manufacturer: syz [ 968.773612][T20760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20760 comm=syz.0.3979 [ 968.786853][ T8] usb 3-1: SerialNumber: syz [ 968.792892][ T8] usb 3-1: config 0 descriptor?? [ 968.809436][ T8] gspca_main: se401-2.14.0 probing 047d:5003 [ 968.836697][ T6342] m920x_read = error: -19 [ 968.841196][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 969.013768][ T6342] m920x_read = error: -19 [ 969.018170][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 969.188391][ T6342] m920x_read = error: -19 [ 969.192808][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 969.318335][ T29] audit: type=1400 audit(1740440347.910:2990): avc: denied { write } for pid=20768 comm="syz.4.3983" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 969.359528][ T6342] m920x_read = error: -19 [ 969.363956][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 969.380614][ T29] audit: type=1400 audit(1740440347.910:2991): avc: denied { open } for pid=20768 comm="syz.4.3983" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 969.538448][ T6344] m920x_read = error: -19 [ 969.541802][ T5867] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 969.542865][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 969.699284][ T5867] usb 6-1: device descriptor read/64, error -71 [ 969.828289][ T6344] m920x_read = error: -19 [ 969.835659][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 969.969007][ T5867] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 970.014311][T20785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3986'. [ 970.018280][ T6344] m920x_read = error: -19 [ 970.032716][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 970.087638][T20785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.102450][ T29] audit: type=1400 audit(1740440348.700:2992): avc: denied { setopt } for pid=20789 comm="syz.2.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 970.128979][ T5867] usb 6-1: device descriptor read/64, error -71 [ 970.129233][ T29] audit: type=1400 audit(1740440348.700:2993): avc: denied { bind } for pid=20789 comm="syz.2.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 970.188574][ T29] audit: type=1400 audit(1740440348.700:2994): avc: denied { name_bind } for pid=20789 comm="syz.2.3988" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 970.209940][ T6344] m920x_read = error: -19 [ 970.218266][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 970.238409][ T5867] usb usb6-port1: attempt power cycle [ 970.243900][ T29] audit: type=1400 audit(1740440348.700:2995): avc: denied { node_bind } for pid=20789 comm="syz.2.3988" saddr=fe80::aa src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 970.388245][ T6342] m920x_read = error: -19 [ 970.392697][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 970.558252][ T6342] m920x_read = error: -19 [ 970.562615][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 970.745373][ T6342] m920x_read = error: -19 [ 970.755576][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 970.788708][ T8] gspca_se401: read req failed req 0x06 error -19 [ 970.803797][ T5867] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 970.813694][ T8] usb 3-1: USB disconnect, device number 60 [ 970.828776][ T5867] usb 6-1: device descriptor read/8, error -71 [ 971.528270][ T6342] m920x_read = error: -19 [ 971.532644][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 971.610504][T20810] sit1: entered allmulticast mode [ 971.670542][ T29] audit: type=1400 audit(1740440350.270:2996): avc: denied { read } for pid=20808 comm="syz.2.3992" name="/" dev="configfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 971.698744][ T29] audit: type=1400 audit(1740440350.290:2997): avc: denied { open } for pid=20808 comm="syz.2.3992" path="/135/file0" dev="configfs" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 971.698932][ T5867] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 971.745139][ T29] audit: type=1400 audit(1740440350.340:2998): avc: denied { unmount } for pid=18197 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 971.765764][ T8] m920x_read = error: -19 [ 971.771921][ T5867] usb 6-1: device descriptor read/8, error -71 [ 971.775874][ T8] dvb-usb: error -19 while querying for an remote control event. [ 971.806197][T20813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3994'. [ 971.885901][ T6584] IPVS: stop unused estimator thread 0... [ 971.892038][ T5867] usb usb6-port1: unable to enumerate USB device [ 971.948396][ T6342] m920x_read = error: -19 [ 971.954554][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 972.118004][ T6342] m920x_read = error: -19 [ 972.122425][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 972.332249][ T6342] m920x_read = error: -19 [ 972.341826][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 972.511212][ T6342] m920x_read = error: -19 [ 972.515575][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 972.680462][ T6342] m920x_read = error: -19 [ 972.685043][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 972.758088][ T5867] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 972.849231][ T8] m920x_read = error: -19 [ 972.853867][ T8] dvb-usb: error -19 while querying for an remote control event. [ 972.887902][ T5867] usb 6-1: device descriptor read/64, error -71 [ 973.032155][ T8] m920x_read = error: -19 [ 973.046774][ T8] dvb-usb: error -19 while querying for an remote control event. [ 973.196342][ T5867] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 973.217905][ T8] m920x_read = error: -19 [ 973.226410][T20841] sctp: [Deprecated]: syz.4.4003 (pid 20841) Use of int in max_burst socket option. [ 973.226410][T20841] Use struct sctp_assoc_value instead [ 973.232476][ T8] dvb-usb: error -19 while querying for an remote control event. [ 973.327459][T20846] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.364250][ T5867] usb 6-1: device descriptor read/64, error -71 [ 973.892382][ T5867] usb usb6-port1: attempt power cycle [ 973.936292][ T8] m920x_read = error: -19 [ 973.946364][ T8] dvb-usb: error -19 while querying for an remote control event. [ 974.177837][T15635] m920x_read = error: -19 [ 974.188069][T15635] dvb-usb: error -19 while querying for an remote control event. [ 974.378479][ T8] m920x_read = error: -19 [ 974.457404][ T8] dvb-usb: error -19 while querying for an remote control event. [ 974.458217][ T5867] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 974.480970][ T29] audit: type=1400 audit(1740440353.071:2999): avc: denied { connect } for pid=20852 comm="syz.4.4005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 974.627789][ T8] m920x_read = error: -19 [ 975.319938][ T8] dvb-usb: error -19 while querying for an remote control event. [ 975.563496][ T8] m920x_read = error: -19 [ 975.732864][ T8] dvb-usb: error -19 while querying for an remote control event. [ 975.862997][ T5867] usb 6-1: device descriptor read/8, error -71 [ 975.991417][ T8] m920x_read = error: -19 [ 976.000134][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4008'. [ 976.019200][ T8] dvb-usb: error -19 while querying for an remote control event. [ 976.562250][ T8] m920x_read = error: -19 [ 976.566630][ T8] dvb-usb: error -19 while querying for an remote control event. [ 976.727952][ T8] m920x_read = error: -19 [ 976.742131][ T8] dvb-usb: error -19 while querying for an remote control event. [ 976.907621][ T8] m920x_read = error: -19 [ 976.955237][ T8] dvb-usb: error -19 while querying for an remote control event. [ 977.041034][T20891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4015'. [ 977.050492][T20891] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4015'. [ 977.092752][T20892] xt_policy: output policy not valid in PREROUTING and INPUT [ 977.137400][ T8] m920x_read = error: -19 [ 977.221578][ T8] dvb-usb: error -19 while querying for an remote control event. [ 977.429703][T15635] m920x_read = error: -19 [ 977.437303][T15635] dvb-usb: error -19 while querying for an remote control event. [ 977.537654][ T8] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 977.670324][T15635] m920x_read = error: -19 [ 977.674691][T15635] dvb-usb: error -19 while querying for an remote control event. [ 977.950956][ T6344] m920x_read = error: -19 [ 977.955334][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 977.964031][ T8] usb 3-1: device descriptor read/64, error -71 [ 978.247244][ T6344] m920x_read = error: -19 [ 978.251765][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 979.198542][ T6344] m920x_read = error: -19 [ 979.202920][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 979.255586][T20917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4020'. [ 979.277132][ T8] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 979.387311][ T6344] m920x_read = error: -19 [ 979.391916][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 979.417361][ T8] usb 3-1: device descriptor read/64, error -71 [ 979.537448][ T8] usb usb3-port1: attempt power cycle [ 979.637400][ T6344] m920x_read = error: -19 [ 979.699756][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 980.126489][ T6344] m920x_read = error: -19 [ 980.160314][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 980.290141][ T8] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 980.337087][ T8] usb 3-1: device descriptor read/8, error -71 [ 980.494091][ T6344] m920x_read = error: -19 [ 980.621547][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 980.806523][ T6344] m920x_read = error: -19 [ 980.832415][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 980.861926][T20945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4030'. [ 981.017925][ T6344] m920x_read = error: -19 [ 981.023387][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 981.377006][T20951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4029'. [ 981.385927][T20951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4029'. [ 981.395006][T20951] netlink: 'syz.4.4029': attribute type 20 has an invalid length. [ 981.480166][ T6342] m920x_read = error: -19 [ 981.488156][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 981.656890][ T8] m920x_read = error: -19 [ 981.661421][ T8] dvb-usb: error -19 while querying for an remote control event. [ 981.824097][T20950] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 981.851862][T20939] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4028'. [ 981.919572][T20950] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.006574][T20950] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.008057][ T6344] m920x_read = error: -19 [ 982.062806][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 982.116212][T20965] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4034'. [ 982.154334][T20950] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.623599][ T6344] m920x_read = error: -19 [ 982.692472][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 982.713073][T20964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4033'. [ 982.746079][T20950] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.759845][T20950] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.775604][T20950] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.787558][T20950] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.955368][ T8] m920x_read = error: -19 [ 982.993640][ T8] dvb-usb: error -19 while querying for an remote control event. [ 983.157925][ T8] m920x_read = error: -19 [ 983.162261][ T8] dvb-usb: error -19 while querying for an remote control event. [ 983.536311][ T8] m920x_read = error: -19 [ 983.540905][ T8] dvb-usb: error -19 while querying for an remote control event. [ 983.757806][ T8] m920x_read = error: -19 [ 983.767145][ T8] dvb-usb: error -19 while querying for an remote control event. [ 983.931674][T15635] m920x_read = error: -19 [ 983.936055][T15635] dvb-usb: error -19 while querying for an remote control event. [ 983.975702][T20982] netlink: 'syz.5.4040': attribute type 11 has an invalid length. [ 984.117167][T15635] m920x_read = error: -19 [ 984.122046][T15635] dvb-usb: error -19 while querying for an remote control event. [ 984.316565][T15635] m920x_read = error: -19 [ 984.320943][T15635] dvb-usb: error -19 while querying for an remote control event. [ 984.458199][ T29] audit: type=1400 audit(1740440363.042:3000): avc: denied { bind } for pid=20997 comm="syz.3.4045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 984.487391][ T5897] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 984.516529][T15635] m920x_read = error: -19 [ 984.520915][T15635] dvb-usb: error -19 while querying for an remote control event. [ 984.707826][T15635] m920x_read = error: -19 [ 984.712200][T15635] dvb-usb: error -19 while querying for an remote control event. [ 985.481525][ T5897] usb 3-1: Using ep0 maxpacket: 8 [ 985.505542][T21009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4046'. [ 985.560068][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.681545][T15635] m920x_read = error: -19 [ 985.685914][T15635] dvb-usb: error -19 while querying for an remote control event. [ 985.867045][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.877156][ T5897] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 985.889150][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.901514][ T5897] usb 3-1: config 0 descriptor?? [ 986.061771][T15635] m920x_read = error: -19 [ 986.066241][T15635] dvb-usb: error -19 while querying for an remote control event. [ 986.799070][ T5897] usbhid 3-1:0.0: can't add hid device: -71 [ 986.808616][ T5897] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 986.841783][ T5897] usb 3-1: USB disconnect, device number 65 [ 986.864711][T21013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'. [ 986.966367][T15635] m920x_read = error: -19 [ 986.970739][T15635] dvb-usb: error -19 while querying for an remote control event. [ 986.978632][ T29] audit: type=1400 audit(1740440364.569:3001): avc: denied { getopt } for pid=21027 comm="syz.0.4053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 987.186276][T15635] m920x_read = error: -19 [ 987.190738][T15635] dvb-usb: error -19 while querying for an remote control event. [ 987.368424][T21041] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 987.846779][T15635] m920x_read = error: -19 [ 987.851158][T15635] dvb-usb: error -19 while querying for an remote control event. [ 988.039722][T15635] m920x_read = error: -19 [ 988.044728][T15635] dvb-usb: error -19 while querying for an remote control event. [ 989.051766][T15635] m920x_read = error: -19 [ 989.056724][T15635] dvb-usb: error -19 while querying for an remote control event. [ 989.115484][T21047] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 989.121887][T21047] PKCS7: Only support pkcs7_signedData type [ 989.897938][T15635] m920x_read = error: -19 [ 989.902318][T15635] dvb-usb: error -19 while querying for an remote control event. [ 990.075937][T15635] m920x_read = error: -19 [ 990.080442][T15635] dvb-usb: error -19 while querying for an remote control event. [ 990.427884][ T8] m920x_read = error: -19 [ 990.434643][ T8] dvb-usb: error -19 while querying for an remote control event. [ 990.555955][ T5897] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 990.596482][ T8] m920x_read = error: -19 [ 990.608661][ T8] dvb-usb: error -19 while querying for an remote control event. [ 990.713217][ T5897] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 990.755283][T21069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4064'. [ 990.755800][ T5897] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 990.871446][ T5897] usb 5-1: config 0 interface 0 altsetting 185 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 990.898708][ T8] m920x_read = error: -19 [ 990.929992][ T5897] usb 5-1: config 0 interface 0 has no altsetting 0 [ 990.963936][ T5897] usb 5-1: New USB device found, idVendor=046d, idProduct=4002, bcdDevice= 0.00 [ 991.024026][ T8] dvb-usb: error -19 while querying for an remote control event. [ 991.026853][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.097000][ T5897] usb 5-1: config 0 descriptor?? [ 991.195960][ T8] m920x_read = error: -19 [ 991.200328][ T8] dvb-usb: error -19 while querying for an remote control event. [ 991.440121][ T8] m920x_read = error: -19 [ 991.462423][ T8] dvb-usb: error -19 while querying for an remote control event. [ 992.289762][ T5897] hid-generic 0003:046D:4002.004A: item fetching failed at offset 3/5 [ 992.298667][ T5897] hid-generic 0003:046D:4002.004A: probe with driver hid-generic failed with error -22 [ 992.461281][ T8] m920x_read = error: -19 [ 992.465734][ T8] dvb-usb: error -19 while querying for an remote control event. [ 993.515357][ T8] m920x_read = error: -19 [ 993.519802][ T8] dvb-usb: error -19 while querying for an remote control event. [ 993.705528][ T8] m920x_read = error: -19 [ 993.723541][ T8] dvb-usb: error -19 while querying for an remote control event. [ 994.303508][T21098] Attempt to restore checkpoint with obsolete wellknown handles [ 994.895866][ T29] audit: type=1400 audit(1740440372.500:3002): avc: denied { ioctl } for pid=21087 comm="syz.5.4070" path="socket:[74919]" dev="sockfs" ino=74919 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 994.950019][ T8] m920x_read = error: -19 [ 994.954536][ T8] dvb-usb: error -19 while querying for an remote control event. [ 995.935556][ T29] audit: type=1400 audit(1740440373.240:3003): avc: denied { write } for pid=21096 comm="syz.0.4071" path="socket:[74664]" dev="sockfs" ino=74664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 996.180204][ T8] m920x_read = error: -19 [ 996.216606][ T8] dvb-usb: error -19 while querying for an remote control event. [ 996.293883][T15635] usb 5-1: USB disconnect, device number 51 [ 996.375143][ T8] m920x_read = error: -19 [ 996.385348][ T8] dvb-usb: error -19 while querying for an remote control event. [ 996.578138][ T8] m920x_read = error: -19 [ 996.582523][ T8] dvb-usb: error -19 while querying for an remote control event. [ 996.755129][T15635] m920x_read = error: -19 [ 996.772499][T15635] dvb-usb: error -19 while querying for an remote control event. [ 997.355110][T15635] m920x_read = error: -19 [ 997.501969][T15635] dvb-usb: error -19 while querying for an remote control event. [ 997.695472][T21124] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 997.817471][T15635] m920x_read = error: -19 [ 997.822098][T15635] dvb-usb: error -19 while querying for an remote control event. [ 997.848111][ T29] audit: type=1400 audit(1740440375.450:3004): avc: denied { ioctl } for pid=21129 comm="syz.2.4082" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 998.823775][T15635] m920x_read = error: -19 [ 998.828303][T15635] dvb-usb: error -19 while querying for an remote control event. [ 999.750083][T15635] m920x_read = error: -19 [ 999.757021][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1000.142965][T21138] input: syz0 as /devices/virtual/input/input86 [ 1000.187570][T21143] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4084'. [ 1000.236468][T15635] m920x_read = error: -19 [ 1000.259436][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1000.389562][T21148] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4086'. [ 1000.441005][T21147] evm: overlay not supported [ 1000.465379][T15635] m920x_read = error: -19 [ 1000.559330][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1000.604070][ T29] audit: type=1400 audit(1740440378.200:3005): avc: denied { connect } for pid=21141 comm="syz.0.4084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1000.730060][T21154] input: syz1 as /devices/virtual/input/input87 [ 1000.734890][T15635] m920x_read = error: -19 [ 1000.741443][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1000.925466][T15635] m920x_read = error: -19 [ 1000.929847][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1001.124906][T15742] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1001.195427][ T6344] m920x_read = error: -19 [ 1001.259501][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1001.434623][ T6344] m920x_read = error: -19 [ 1001.438994][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1001.474931][T15742] usb 3-1: Using ep0 maxpacket: 32 [ 1001.482553][T15742] usb 3-1: config 242 has an invalid interface number: 187 but max is 2 [ 1001.491277][T15742] usb 3-1: config 242 has an invalid interface number: 41 but max is 2 [ 1001.499730][T15742] usb 3-1: config 242 has an invalid interface number: 112 but max is 2 [ 1001.501804][ T29] audit: type=1400 audit(1740440379.100:3006): avc: denied { write } for pid=21175 comm="syz.3.4096" path="socket:[75142]" dev="sockfs" ino=75142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1001.508554][T15742] usb 3-1: config 242 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.532901][T15635] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1001.542788][T15742] usb 3-1: config 242 has no interface number 0 [ 1001.557083][T15742] usb 3-1: config 242 has no interface number 1 [ 1001.563396][T15742] usb 3-1: config 242 has no interface number 2 [ 1001.570570][T15742] usb 3-1: config 242 interface 41 altsetting 62 endpoint 0x5 has an invalid bInterval 129, changing to 7 [ 1001.582304][T15742] usb 3-1: config 242 interface 41 altsetting 62 bulk endpoint 0xF has invalid maxpacket 8 [ 1001.592599][T15742] usb 3-1: config 242 interface 41 altsetting 62 bulk endpoint 0xB has invalid maxpacket 32 [ 1002.101469][ T6344] m920x_read = error: -19 [ 1002.110094][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1002.447472][T15742] usb 3-1: config 242 interface 41 altsetting 62 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1002.458684][T15742] usb 3-1: config 242 interface 41 altsetting 62 has a duplicate endpoint with address 0x5, skipping [ 1002.469893][T15742] usb 3-1: config 242 interface 41 altsetting 62 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1002.481658][T15742] usb 3-1: config 242 interface 41 altsetting 62 has an invalid descriptor for endpoint zero, skipping [ 1002.493065][T15742] usb 3-1: config 242 interface 41 altsetting 62 has an invalid descriptor for endpoint zero, skipping [ 1002.504572][T15742] usb 3-1: config 242 interface 41 altsetting 62 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1002.523328][T15742] usb 3-1: config 242 interface 41 altsetting 62 has a duplicate endpoint with address 0xB, skipping [ 1002.574466][T15635] usb 6-1: device descriptor read/64, error -71 [ 1002.634527][ T6344] m920x_read = error: -19 [ 1002.640582][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1002.670672][T15742] usb 3-1: config 242 interface 112 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 1002.681893][T15742] usb 3-1: config 242 interface 112 altsetting 10 has a duplicate endpoint with address 0xF, skipping [ 1002.693164][T15742] usb 3-1: config 242 interface 112 altsetting 10 has a duplicate endpoint with address 0xA, skipping [ 1002.704161][T15742] usb 3-1: config 242 interface 112 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 1002.715608][T15742] usb 3-1: config 242 interface 112 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 1002.742463][T15742] usb 3-1: config 242 interface 112 altsetting 10 has 7 endpoint descriptors, different from the interface descriptor's value: 14 [ 1002.761831][T15742] usb 3-1: config 242 interface 187 has no altsetting 0 [ 1002.770013][T15742] usb 3-1: config 242 interface 41 has no altsetting 0 [ 1002.778035][T15742] usb 3-1: config 242 interface 112 has no altsetting 0 [ 1002.787360][T15742] usb 3-1: New USB device found, idVendor=07d1, idProduct=3c04, bcdDevice=8e.1b [ 1002.796640][T15742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.804707][T15742] usb 3-1: Product: 咢첏㌳奇嬪鷆쁁㭿닢⯕Ю貱養岔ⵂ拺퓮ⶾ䯔넔₊뇍묀ދ熐乃퓀颧ﭿ딺Ю棝㨻䒷夌窲〘ᙙ耫晍䃣␋킁ӈ [ 1002.814531][ T6344] m920x_read = error: -19 [ 1002.830985][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1002.840218][T15742] usb 3-1: Manufacturer: 斈自웫鹔緫䤭￢먈힉观آ鑔岞츽ƣ퀸덪㨒ঠ鹐ꛩ燥ꤏꛝ곱⹏䡋볱屬璡喒錢킥鐨鈦㧠븻ꁩ湛읦䌶訁缅醠ꍚ醕앰前밪䄈嫰湟ꏟ⢝ﬣ糫찭愇Ｓ堙龚湺퓥銃ﶲ᤮攰⧵鬘덦ᅖ纮晰ヤ糲ऒᱶ쪾ꕸ؆ྡ覻ꖷ慨딙࣊ኢ蝝帐艈䔬쟅眦뙷詈핏㘾繅䀉⧒䞪홂熻꾿鹶션᦯ [ 1002.854322][ T8] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1002.875471][T15742] usb 3-1: SerialNumber: syz [ 1002.882333][T15635] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1002.917179][T21193] netlink: 'syz.0.4101': attribute type 4 has an invalid length. [ 1002.940977][T21193] netlink: 'syz.0.4101': attribute type 4 has an invalid length. [ 1002.994509][ T6342] m920x_read = error: -19 [ 1002.998879][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1003.034347][T15635] usb 6-1: device descriptor read/64, error -71 [ 1003.054327][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 1003.060702][ T8] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1003.069913][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.095581][ T8] usb 5-1: config 0 descriptor?? [ 1003.148419][T15635] usb usb6-port1: attempt power cycle [ 1003.174585][ T6344] m920x_read = error: -19 [ 1003.179256][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1003.302562][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1003.344385][ T6344] m920x_read = error: -19 [ 1003.348761][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1003.494296][T15635] usb 6-1: new full-speed USB device number 73 using dummy_hcd [ 1003.514326][ T6344] m920x_read = error: -19 [ 1003.519796][T21181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.529135][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1003.534607][T21181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.537799][T15635] usb 6-1: device descriptor read/8, error -71 [ 1003.578216][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1003.602804][ T8] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1003.617240][ T8] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1003.640553][ T8] usb 5-1: USB disconnect, device number 52 [ 1003.649165][T21208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4106'. [ 1003.714722][ T6344] m920x_read = error: -19 [ 1003.735288][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1003.794285][T15635] usb 6-1: new full-speed USB device number 74 using dummy_hcd [ 1003.907550][T15635] usb 6-1: device descriptor read/8, error -71 [ 1003.915256][ T8] m920x_read = error: -19 [ 1003.921702][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1004.472360][T15635] usb usb6-port1: unable to enumerate USB device [ 1004.809542][ T8] m920x_read = error: -19 [ 1004.976801][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1005.104225][T15742] usb 3-1: USB disconnect, device number 66 [ 1005.154064][T15635] m920x_read = error: -19 [ 1005.158441][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1005.343319][T21227] /dev/nullb0: Can't lookup blockdev [ 1005.802433][T15635] m920x_read = error: -19 [ 1005.806953][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1005.826078][T21217] tmpfs: Bad value for 'mpol' [ 1005.973984][T15635] m920x_read = error: -19 [ 1005.978326][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1006.073958][T15742] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1006.125644][T21242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4117'. [ 1006.187689][T15635] m920x_read = error: -19 [ 1006.202425][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1006.275053][T15742] usb 3-1: Using ep0 maxpacket: 16 [ 1006.296571][T15742] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1006.320348][T15742] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1006.338164][T15742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.395130][T15742] usb 3-1: Product: syz [ 1006.418303][T15742] usb 3-1: Manufacturer: syz [ 1006.425219][ T8] m920x_read = error: -19 [ 1006.429546][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1006.518724][T15635] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1006.604086][ T8] m920x_read = error: -19 [ 1006.659064][ T29] audit: type=1400 audit(1740440384.141:3007): avc: denied { validate_trans } for pid=21248 comm="syz.4.4119" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1006.687262][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1006.695843][T15742] usb 3-1: SerialNumber: syz [ 1007.569056][T15742] usb 3-1: config 0 descriptor?? [ 1007.586542][T15635] usb 6-1: Using ep0 maxpacket: 8 [ 1007.744172][ T8] m920x_read = error: -19 [ 1007.751306][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1008.036734][ T29] audit: type=1326 audit(1740440385.641:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21222 comm="syz.2.4112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5dfdd8d169 code=0x0 [ 1008.074011][ T8] m920x_read = error: -19 [ 1008.088744][T15635] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 1008.097209][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1008.113664][T15635] usb 6-1: config 150 has no interface number 0 [ 1008.134797][T15635] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1008.188738][T15635] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1008.220662][T15635] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.240245][T15635] usb 6-1: Product: syz [ 1008.246355][T15635] usb 6-1: Manufacturer: syz [ 1008.336274][ T6344] m920x_read = error: -19 [ 1008.340629][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1008.351511][T15635] usb 6-1: SerialNumber: syz [ 1008.419491][T21274] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20004 [ 1008.470726][T21276] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.4124'. [ 1008.513684][ T8] m920x_read = error: -19 [ 1008.518249][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1008.585464][T15635] xr_serial 6-1:150.204: xr_serial converter detected [ 1008.693736][ T6343] m920x_read = error: -19 [ 1008.698216][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1008.743698][ T6344] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1008.863688][ T6343] m920x_read = error: -19 [ 1008.872883][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1008.903701][ T6344] usb 5-1: Using ep0 maxpacket: 16 [ 1008.916149][ T6344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.930598][ T6344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.940873][ T6344] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1008.950202][ T6344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.960525][ T6344] usb 5-1: config 0 descriptor?? [ 1009.043693][ T6343] m920x_read = error: -19 [ 1009.048277][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1009.181742][ T7296] usb 3-1: USB disconnect, device number 67 [ 1009.217380][ T6343] m920x_read = error: -19 [ 1009.221783][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1009.354253][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4128'. [ 1009.422049][ T6343] m920x_read = error: -19 [ 1009.455890][T15635] usb 6-1: xr_serial converter now attached to ttyUSB0 [ 1009.464553][ T6344] hid-multitouch 0003:1FD2:6007.004B: item fetching failed at offset 3/5 [ 1009.474579][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1009.477439][T21293] netlink: 'syz.3.4130': attribute type 21 has an invalid length. [ 1010.236931][T15635] usb 6-1: USB disconnect, device number 75 [ 1010.246770][ T6344] hid-multitouch 0003:1FD2:6007.004B: probe with driver hid-multitouch failed with error -22 [ 1010.262343][T21293] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4130'. [ 1010.283305][T15635] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1010.380560][T21293] netlink: 'syz.3.4130': attribute type 5 has an invalid length. [ 1010.381108][T15635] xr_serial 6-1:150.204: device disconnected [ 1010.389916][T21293] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4130'. [ 1010.394599][ T6344] m920x_read = error: -19 [ 1010.408083][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1010.573558][ T6344] m920x_read = error: -19 [ 1010.578083][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1010.678215][T15742] usb 5-1: USB disconnect, device number 53 [ 1010.744879][T15635] m920x_read = error: -19 [ 1010.756825][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1010.953433][T15635] m920x_read = error: -19 [ 1010.964489][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1011.170715][T15635] m920x_read = error: -19 [ 1011.175600][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1012.187650][T15635] m920x_read = error: -19 [ 1012.192046][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1012.363893][T21324] FAULT_INJECTION: forcing a failure. [ 1012.363893][T21324] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.379189][T15635] m920x_read = error: -19 [ 1012.384072][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1012.392407][T21324] CPU: 1 UID: 0 PID: 21324 Comm: syz.5.4138 Not tainted 6.14.0-rc4-syzkaller #0 [ 1012.392430][T21324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1012.392439][T21324] Call Trace: [ 1012.392444][T21324] [ 1012.392451][T21324] dump_stack_lvl+0x16c/0x1f0 [ 1012.392476][T21324] should_fail_ex+0x50a/0x650 [ 1012.392503][T21324] should_failslab+0xc2/0x120 [ 1012.392524][T21324] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1012.392544][T21324] ? skb_clone+0x190/0x3f0 [ 1012.392572][T21324] skb_clone+0x190/0x3f0 [ 1012.392596][T21324] netlink_deliver_tap+0xabd/0xd30 [ 1012.392623][T21324] netlink_unicast+0x5e1/0x7f0 [ 1012.392648][T21324] ? __pfx_netlink_unicast+0x10/0x10 [ 1012.392683][T21324] netlink_sendmsg+0x8b8/0xd70 [ 1012.392709][T21324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.392740][T21324] ____sys_sendmsg+0xaaf/0xc90 [ 1012.392758][T21324] ? copy_msghdr_from_user+0x10b/0x160 [ 1012.392781][T21324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1012.392811][T21324] ___sys_sendmsg+0x135/0x1e0 [ 1012.392835][T21324] ? __pfx____sys_sendmsg+0x10/0x10 [ 1012.392870][T21324] ? __pfx_lock_release+0x10/0x10 [ 1012.392893][T21324] ? trace_lock_acquire+0x14e/0x1f0 [ 1012.392921][T21324] ? __fget_files+0x206/0x3a0 [ 1012.392946][T21324] __sys_sendmsg+0x16e/0x220 [ 1012.392969][T21324] ? __pfx___sys_sendmsg+0x10/0x10 [ 1012.393009][T21324] do_syscall_64+0xcd/0x250 [ 1012.393032][T21324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.393059][T21324] RIP: 0033:0x7f0d3058d169 [ 1012.393072][T21324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.393087][T21324] RSP: 002b:00007f0d313b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.393102][T21324] RAX: ffffffffffffffda RBX: 00007f0d307a5fa0 RCX: 00007f0d3058d169 [ 1012.393113][T21324] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000004 [ 1012.393122][T21324] RBP: 00007f0d313b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.393132][T21324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.393142][T21324] R13: 0000000000000000 R14: 00007f0d307a5fa0 R15: 00007ffe5a00a808 [ 1012.393164][T21324] [ 1012.548227][T15635] m920x_read = error: -19 [ 1012.569315][T21324] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4138'. [ 1012.656305][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1012.682297][T21331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4139'. [ 1012.992665][T21334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1013.077258][T15635] m920x_read = error: -19 [ 1013.081637][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1013.245306][ T6344] m920x_read = error: -19 [ 1013.255492][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1014.100953][ T6344] m920x_read = error: -19 [ 1014.146557][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1014.357845][T21344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4143'. [ 1014.473139][ T6343] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1014.552978][ T6344] m920x_read = error: -19 [ 1014.557419][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1014.719844][T21353] block device autoloading is deprecated and will be removed. [ 1014.730531][T21353] syz.0.4144: attempt to access beyond end of device [ 1014.730531][T21353] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1014.744391][T21353] FAT-fs (loop1): unable to read boot sector [ 1014.863028][ T29] audit: type=1400 audit(1740440392.262:3009): avc: denied { mounton } for pid=21345 comm="syz.0.4144" path="/116/file0" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1015.049455][ T6344] m920x_read = error: -19 [ 1015.053896][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1015.082856][ T6343] usb 5-1: device descriptor read/64, error -71 [ 1015.102278][T21356] bridge1: entered promiscuous mode [ 1015.213550][ T6344] m920x_read = error: -19 [ 1015.217946][ T6344] dvb-usb: error -19 while querying for an remote control event. [ 1015.336561][T21374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.336808][ T6344] libceph: connect (1)[c::]:6789 error -101 [ 1015.357929][ T6344] libceph: mon0 (1)[c::]:6789 connect error [ 1015.366221][ T6343] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1015.380335][T21368] ceph: No mds server is up or the cluster is laggy [ 1015.481388][ T6342] m920x_read = error: -19 [ 1015.486015][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1015.560015][ T6343] usb 5-1: device descriptor read/64, error -71 [ 1015.628811][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4155'. [ 1015.682599][ T6342] m920x_read = error: -19 [ 1015.691284][ T6343] usb usb5-port1: attempt power cycle [ 1015.706960][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1015.994448][ T6342] m920x_read = error: -19 [ 1015.998912][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1016.642664][ T6343] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1017.093047][T15635] m920x_read = error: -19 [ 1017.246381][ T6343] usb 5-1: device not accepting address 56, error -71 [ 1017.256175][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1017.282841][T21402] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=21402 comm=syz.5.4157 [ 1017.392319][T21410] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4163'. [ 1017.401913][T21410] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4163'. [ 1017.496891][T15635] m920x_read = error: -19 [ 1017.501606][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1017.606132][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4166'. [ 1017.672746][T15635] m920x_read = error: -19 [ 1017.827775][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1018.242554][ T6343] m920x_read = error: -19 [ 1018.247137][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1018.451982][ T6342] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1018.468133][ T6343] m920x_read = error: -19 [ 1018.515195][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1019.065039][ T6343] m920x_read = error: -19 [ 1019.088848][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1019.335258][ T6342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1019.352666][ T6342] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.404248][ T6343] m920x_read = error: -19 [ 1019.411331][ T6342] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1019.425669][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1019.436393][ T6342] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1019.444681][ T6342] usb 3-1: Manufacturer: syz [ 1019.452598][ T6342] usb 3-1: config 0 descriptor?? [ 1019.592370][ T6343] m920x_read = error: -19 [ 1019.597078][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1019.772305][ T6343] m920x_read = error: -19 [ 1019.782293][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1019.887823][ T6342] usbhid 3-1:0.0: can't add hid device: -71 [ 1019.895944][ T6342] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1019.918894][ T6342] usb 3-1: USB disconnect, device number 68 [ 1019.952948][ T6343] m920x_read = error: -19 [ 1019.957537][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1019.997551][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4174'. [ 1020.279148][ T6342] m920x_read = error: -19 [ 1020.292322][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1021.168163][ T6343] m920x_read = error: -19 [ 1021.172593][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1021.246824][T21457] wlan0 speed is unknown, defaulting to 1000 [ 1021.332157][ T6342] m920x_read = error: -19 [ 1021.336530][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1021.366578][T21463] netlink: 'syz.4.4177': attribute type 2 has an invalid length. [ 1021.394541][ T29] audit: type=1400 audit(1740440398.993:3010): avc: denied { listen } for pid=21459 comm="syz.5.4179" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1021.450603][T21457] veth1_vlan: left promiscuous mode [ 1021.492960][ T29] audit: type=1400 audit(1740440399.063:3011): avc: denied { map } for pid=21461 comm="syz.2.4178" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1021.530460][T21470] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4181'. [ 1021.539693][ T6342] m920x_read = error: -19 [ 1021.550308][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1021.620275][T21476] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1021.635264][T21466] wlan0 speed is unknown, defaulting to 1000 [ 1021.755882][ T6342] m920x_read = error: -19 [ 1021.805909][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1021.808561][ T29] audit: type=1400 audit(1740440399.403:3012): avc: denied { search } for pid=21474 comm="syz.4.4183" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1021.962201][ T6342] m920x_read = error: -19 [ 1021.966611][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1022.057580][T21487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=338 sclass=netlink_route_socket pid=21487 comm=syz.4.4183 [ 1022.176470][ T6342] m920x_read = error: -19 [ 1022.190017][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1022.372842][ T6343] m920x_read = error: -19 [ 1022.377298][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1022.392981][T21486] netlink: 'syz.0.4185': attribute type 25 has an invalid length. [ 1022.400994][T21486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4185'. [ 1022.490902][T21492] ipvlan1: entered allmulticast mode [ 1022.521803][T21492] veth0_vlan: entered allmulticast mode [ 1022.542006][ T6343] m920x_read = error: -19 [ 1022.546405][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1022.606899][T21492] wlan0 speed is unknown, defaulting to 1000 [ 1022.751985][ T6342] m920x_read = error: -19 [ 1022.756408][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1022.932029][ T6342] m920x_read = error: -19 [ 1022.936406][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1023.103636][ T6342] m920x_read = error: -19 [ 1023.107995][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1023.271980][ T6342] m920x_read = error: -19 [ 1023.276316][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1023.869257][T21519] Cannot find add_set index 0 as target [ 1024.148985][ T6342] m920x_read = error: -19 [ 1024.156932][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1024.286922][T21522] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4194'. [ 1024.382373][T15635] m920x_read = error: -19 [ 1024.386825][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1024.652092][T15635] m920x_read = error: -19 [ 1024.666011][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1024.758491][ T29] audit: type=1804 audit(1740440402.353:3013): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.4198" name="file0" dev="tmpfs" ino=2574 res=1 errno=0 [ 1024.931137][T15635] m920x_read = error: -19 [ 1024.970409][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1025.066133][ T29] audit: type=1804 audit(1740440402.353:3014): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.4198" name="file0" dev="tmpfs" ino=2574 res=1 errno=0 [ 1025.221666][T15635] m920x_read = error: -19 [ 1025.226043][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1025.391729][T15635] m920x_read = error: -19 [ 1025.396217][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1025.587724][T21555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4203'. [ 1025.591620][T15635] m920x_read = error: -19 [ 1025.643493][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1025.821568][T21555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4203'. [ 1025.870493][T15635] m920x_read = error: -19 [ 1025.875340][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1025.999459][ T29] audit: type=1400 audit(1740440403.593:3015): avc: denied { write } for pid=21554 comm="syz.3.4203" name="file0" dev="tmpfs" ino=2591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1026.113166][T21566] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4206'. [ 1026.324626][T15635] m920x_read = error: -19 [ 1026.333335][ T29] audit: type=1400 audit(1740440403.593:3016): avc: denied { open } for pid=21554 comm="syz.3.4203" path="/478/file0" dev="tmpfs" ino=2591 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1026.356170][ C0] vkms_vblank_simulate: vblank timer overrun [ 1026.362613][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1026.381963][ T29] audit: type=1400 audit(1740440403.983:3017): avc: denied { ioctl } for pid=21554 comm="syz.3.4203" path="/478/file0" dev="tmpfs" ino=2591 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1026.406291][ C0] vkms_vblank_simulate: vblank timer overrun [ 1026.407404][ T7296] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1026.521614][ T6342] m920x_read = error: -19 [ 1026.526081][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1026.641535][ T7296] usb 5-1: Using ep0 maxpacket: 16 [ 1026.657345][ T7296] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.672858][ T7296] usb 5-1: config 0 has no interfaces? [ 1026.680576][ T7296] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1026.692567][ T6342] m920x_read = error: -19 [ 1026.697275][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1026.848356][ T7296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.857188][ T7296] usb 5-1: Product: syz [ 1026.861416][ T7296] usb 5-1: Manufacturer: syz [ 1026.866029][ T7296] usb 5-1: SerialNumber: syz [ 1026.873801][ T7296] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1026.880077][ T7296] r8152-cfgselector 5-1: config 0 descriptor?? [ 1026.892032][ T6342] m920x_read = error: -19 [ 1026.896404][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1027.098652][T21586] SELinux: syz.5.4210 (21586) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1027.116769][T21586] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4210'. [ 1027.128317][ T6342] m920x_read = error: -19 [ 1027.132847][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1027.159633][ T29] audit: type=1400 audit(1740440404.583:3018): avc: denied { bind } for pid=21577 comm=6C2586CE36DB0CCF197CC94F7FCE8F scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1027.342826][ T6342] m920x_read = error: -19 [ 1027.438335][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1027.616621][T21583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4211'. [ 1027.964547][ T6342] m920x_read = error: -19 [ 1027.974807][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1028.106805][T21601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4214'. [ 1028.132472][ T29] audit: type=1326 audit(1740440405.734:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21600 comm="syz.0.4214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efe9438d169 code=0x0 [ 1028.141315][ T8] m920x_read = error: -19 [ 1028.174761][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1028.221087][T21608] overlayfs: missing 'lowerdir' [ 1028.229245][T21607] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1028.231395][ T6342] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1028.383095][ T8] m920x_read = error: -19 [ 1028.393122][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1028.520016][ T6342] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1028.531810][ T6342] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1028.542948][ T6342] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1028.552483][ T6342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.658926][T15635] r8152-cfgselector 5-1: USB disconnect, device number 58 [ 1028.831763][ T6343] m920x_read = error: -19 [ 1028.837405][T21594] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1028.852771][ T6342] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1028.870882][ T6343] dvb-usb: error -19 while querying for an remote control event. [ 1029.090267][ T6342] m920x_read = error: -19 [ 1029.094736][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1029.114552][T21594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.181876][T21594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.361673][ T6342] m920x_read = error: -19 [ 1029.404943][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1029.581240][ T6342] m920x_read = error: -19 [ 1029.588065][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1029.937812][T21644] netlink: 'syz.0.4223': attribute type 10 has an invalid length. [ 1030.323960][ T6342] m920x_read = error: -19 [ 1030.332373][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1030.388615][T21644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.398009][T21644] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1030.511081][ T6342] m920x_read = error: -19 [ 1030.515484][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1030.701432][T21645] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 1030.715314][T15635] m920x_read = error: -19 [ 1030.719704][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1030.720963][T21645] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1031.107222][T15635] usb 6-1: USB disconnect, device number 76 [ 1031.151032][ T8] m920x_read = error: -19 [ 1031.155502][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1031.321081][ T8] m920x_read = error: -19 [ 1031.327081][ T29] audit: type=1400 audit(1740440408.924:3020): avc: denied { getopt } for pid=21657 comm="syz.3.4227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1031.329635][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1031.554424][T21663] block device autoloading is deprecated and will be removed. [ 1031.572567][ T29] audit: type=1400 audit(1740440409.004:3021): avc: denied { read } for pid=21660 comm="syz.2.4228" name="file0" dev="tmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1031.775343][ T8] m920x_read = error: -19 [ 1031.780806][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1031.800645][T21678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1031.942052][ T8] m920x_read = error: -19 [ 1031.946662][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1032.171106][ T7296] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1032.375747][ T7296] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.457125][ T7296] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1032.583597][ T7296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.591052][T15635] m920x_read = error: -19 [ 1032.601029][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1032.621690][ T7296] usb 6-1: config 0 descriptor?? [ 1032.637417][ T7296] pwc: Askey VC010 type 2 USB webcam detected. [ 1032.860133][T21683] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1033.152322][ T7296] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1033.261157][T15635] m920x_read = error: -19 [ 1033.261157][ T7296] pwc: recv_control_msg error -32 req 02 val 2700 [ 1033.267371][ T7296] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1033.272911][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1033.307763][ T7296] pwc: recv_control_msg error -32 req 04 val 1000 [ 1033.321514][ T7296] pwc: recv_control_msg error -71 req 04 val 1300 [ 1033.335651][ T7296] pwc: recv_control_msg error -71 req 04 val 1400 [ 1033.349235][ T7296] pwc: recv_control_msg error -71 req 02 val 2000 [ 1033.375189][ T7296] pwc: recv_control_msg error -71 req 02 val 2100 [ 1033.393698][ T7296] pwc: recv_control_msg error -71 req 04 val 1500 [ 1033.408094][ T7296] pwc: recv_control_msg error -71 req 02 val 2500 [ 1033.426799][ T7296] pwc: recv_control_msg error -71 req 02 val 2400 [ 1033.442629][T15635] m920x_read = error: -19 [ 1033.445797][ T7296] pwc: recv_control_msg error -71 req 02 val 2600 [ 1033.447392][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1033.469043][ T7296] pwc: recv_control_msg error -71 req 02 val 2900 [ 1033.478680][ T7296] pwc: recv_control_msg error -71 req 02 val 2800 [ 1033.491106][ T7296] pwc: recv_control_msg error -71 req 04 val 1100 [ 1033.497890][ T7296] pwc: recv_control_msg error -71 req 04 val 1200 [ 1033.621186][T15635] m920x_read = error: -19 [ 1033.641618][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1033.850569][T15635] m920x_read = error: -19 [ 1033.882590][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1034.042960][ T7296] pwc: Registered as video103. [ 1034.054788][ T7296] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input89 [ 1034.077822][ T7296] usb 6-1: USB disconnect, device number 77 [ 1034.100544][T15635] m920x_read = error: -19 [ 1034.113403][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1034.391593][ T8] m920x_read = error: -19 [ 1034.400485][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1034.690485][ T8] m920x_read = error: -19 [ 1034.694999][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1034.874952][ T8] m920x_read = error: -19 [ 1034.883500][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1035.220517][ T8] m920x_read = error: -19 [ 1035.225044][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1035.460507][ T8] m920x_read = error: -19 [ 1035.470055][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1035.670733][ T8] m920x_read = error: -19 [ 1035.789184][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1036.425207][ T8] m920x_read = error: -19 [ 1036.430664][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1036.650245][ T8] m920x_read = error: -19 [ 1036.654665][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1036.820199][ T8] m920x_read = error: -19 [ 1036.833261][ T8] dvb-usb: error -19 while querying for an remote control event. [ 1036.891269][T21021] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1037.014408][ T8] hid-generic 0000:0000:0000.004C: unknown main item tag 0x0 [ 1037.028229][T15635] m920x_read = error: -19 [ 1037.035625][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1037.045125][ T8] hid-generic 0000:0000:0000.004C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1037.210362][T15635] m920x_read = error: -19 [ 1037.214867][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1037.260512][ T6342] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1037.271669][T21021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.316874][T21021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.348607][T21741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4249'. [ 1037.358357][T21021] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1037.380510][T21021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.380712][T15635] m920x_read = error: -19 [ 1037.395415][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1037.410602][ T6342] usb 6-1: Using ep0 maxpacket: 16 [ 1037.411154][T21021] usb 5-1: config 0 descriptor?? [ 1037.419314][ T6342] usb 6-1: config 0 has no interfaces? [ 1037.428624][ T6342] usb 6-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 1037.439301][ T6342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.464145][ T6342] usb 6-1: config 0 descriptor?? [ 1037.561320][T15635] m920x_read = error: -19 [ 1037.570193][T15635] dvb-usb: error -19 while querying for an remote control event. [ 1037.725546][T15635] usb 6-1: USB disconnect, device number 78 [ 1037.745570][ T6342] m920x_read = error: -19 [ 1037.756372][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1037.852223][ T29] audit: type=1400 audit(1740440415.455:3022): avc: denied { mounton } for pid=21736 comm="syz.4.4250" path="/197/file0" dev="ramfs" ino=77955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1037.910663][T21021] hid-retrode 0003:0403:97C1.004D: hidraw0: USB HID v0.00 Device [HID 0403:97c1] on usb-dummy_hcd.4-1/input0 [ 1037.930143][ T6342] m920x_read = error: -19 [ 1037.934504][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1037.982788][T21755] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 1038.040058][T15635] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1038.090849][ T7296] usb 5-1: USB disconnect, device number 59 [ 1038.110090][ T6342] m920x_read = error: -19 [ 1038.114463][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1038.201435][T15635] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1038.210743][T15635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.220096][T15635] usb 6-1: config 0 descriptor?? [ 1038.225307][T21760] UHID_CREATE from different security context by process 460 (syz.0.4257), this is not allowed. [ 1038.260348][T21021] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1038.281012][ T6342] m920x_read = error: -19 [ 1038.285420][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1038.424322][T21021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.435447][T21021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.445599][T21021] usb 3-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1038.452641][ T6342] m920x_read = error: -19 [ 1038.454924][T21021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.459158][ T6342] dvb-usb: error -19 while querying for an remote control event. [ 1038.468471][T21021] usb 3-1: config 0 descriptor?? [ 1143.599837][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1143.606803][ C1] rcu: 0-...!: (0 ticks this GP) idle=299c/1/0x4000000000000000 softirq=99443/99443 fqs=0 [ 1143.618588][ C1] rcu: (detected by 1, t=10506 jiffies, g=93541, q=122 ncpus=2) [ 1143.626309][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1143.626335][ C0] NMI backtrace for cpu 0 [ 1143.626345][ C0] CPU: 0 UID: 0 PID: 6594 Comm: kworker/u8:19 Not tainted 6.14.0-rc4-syzkaller #0 [ 1143.626361][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1143.626372][ C0] Workqueue: bat_events batadv_nc_worker [ 1143.626394][ C0] RIP: 0010:mark_lock+0xfa/0xc60 [ 1143.626414][ C0] Code: a7 09 00 00 4c 89 ee 48 23 70 60 ba 01 00 00 00 0f 84 1a 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 01 f8 48 c7 00 00 00 00 00 40 08 00 00 00 00 48 c7 40 10 00 00 00 00 48 8b 84 24 08 01 00 [ 1143.626426][ C0] RSP: 0000:ffffc900000079a0 EFLAGS: 00000086 [ 1143.626437][ C0] RAX: fffff52000000f3a RBX: ffff888079005410 RCX: 1ffffffff2dd8628 [ 1143.626447][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffffffff96ec3140 [ 1143.626455][ C0] RBP: ffffc90000007ae0 R08: 0000000000000000 R09: fffffbfff2dd8598 [ 1143.626465][ C0] R10: ffffffff96ec2cc7 R11: 0000000000000004 R12: ffff888079004880 [ 1143.626474][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 1ffff92000000f3a [ 1143.626483][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1143.626498][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1143.626507][ C0] CR2: 00007f50fc6c7f98 CR3: 000000005a7f8000 CR4: 00000000003526f0 [ 1143.626516][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1143.626524][ C0] DR3: 0000000000048e5c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1143.626533][ C0] Call Trace: [ 1143.626539][ C0] [ 1143.626545][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1143.626567][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1143.626585][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1143.626604][ C0] ? mark_lock+0xfa/0xc60 [ 1143.626620][ C0] ? default_do_nmi+0x6a/0x160 [ 1143.626639][ C0] ? exc_nmi+0x170/0x1e0 [ 1143.626656][ C0] ? end_repeat_nmi+0xf/0x53 [ 1143.626678][ C0] ? mark_lock+0xfa/0xc60 [ 1143.626694][ C0] ? mark_lock+0xfa/0xc60 [ 1143.626710][ C0] ? mark_lock+0xfa/0xc60 [ 1143.626733][ C0] [ 1143.626737][ C0] [ 1143.626742][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1143.626758][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1143.626777][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1143.626791][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1143.626810][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1143.626826][ C0] ? hlock_class+0x4e/0x130 [ 1143.626840][ C0] ? mark_lock+0xb5/0xc60 [ 1143.626855][ C0] ? hlock_class+0x4e/0x130 [ 1143.626868][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 1143.626886][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1143.626903][ C0] ? hlock_class+0x4e/0x130 [ 1143.626918][ C0] __lock_acquire+0x1390/0x3c40 [ 1143.626937][ C0] ? __pfx___lock_acquire+0x2/0x10 [ 1143.626955][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1143.626973][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 1143.626991][ C0] lock_acquire.part.0+0x11b/0x380 [ 1143.627009][ C0] ? debug_object_deactivate+0x13b/0x370 [ 1143.627025][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1143.627043][ C0] ? rcu_is_watching+0x12/0xc0 [ 1143.627057][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1143.627071][ C0] ? debug_object_activate+0x149/0x4a0 [ 1143.627086][ C0] ? debug_object_deactivate+0x13b/0x370 [ 1143.627101][ C0] ? lock_acquire+0x2f/0xb0 [ 1143.627117][ C0] ? debug_object_deactivate+0x13b/0x370 [ 1143.627132][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1143.627146][ C0] ? debug_object_deactivate+0x13b/0x370 [ 1143.627161][ C0] debug_object_deactivate+0x13b/0x370 [ 1143.627176][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1143.627192][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1143.627207][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1143.627226][ C0] __hrtimer_run_queues+0x47c/0xae0 [ 1143.627242][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1143.627255][ C0] ? read_tsc+0x9/0x20 [ 1143.627271][ C0] hrtimer_interrupt+0x392/0x8e0 [ 1143.627288][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1143.627307][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 1143.627322][ C0] [ 1143.627326][ C0] [ 1143.627331][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1143.627349][ C0] RIP: 0010:rcu_is_watching+0xd/0xc0 [ 1143.627363][ C0] Code: 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 53 65 ff 05 db 54 64 7e 6e c8 b7 09 48 c7 c3 28 7c 03 00 83 f8 07 89 c5 0f 87 82 00 00 [ 1143.627375][ C0] RSP: 0000:ffffc9000cdf7a48 EFLAGS: 00000283 [ 1143.627386][ C0] RAX: 0000000000000001 RBX: 1ffff920019bef4e RCX: ffffffff8196a0d9 [ 1143.627395][ C0] RDX: fffffbfff20c4ac3 RSI: 0000000000000008 RDI: ffffffff90625610 [ 1143.627404][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff20c4ac2 [ 1143.627413][ C0] R10: ffffffff90625617 R11: 0000000000000002 R12: ffffffff8e1bcc80 [ 1143.627422][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 1143.627433][ C0] ? lock_release+0xa9/0x6f0 [ 1143.627452][ C0] lock_release+0x4e2/0x6f0 [ 1143.627469][ C0] ? batadv_nc_worker+0x887/0x1060 [ 1143.627485][ C0] ? __pfx_lock_release+0x10/0x10 [ 1143.627502][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1143.627517][ C0] ? batadv_nc_worker+0x164/0x1060 [ 1143.627533][ C0] ? lock_acquire+0x2f/0xb0 [ 1143.627549][ C0] ? batadv_nc_worker+0x164/0x1060 [ 1143.627567][ C0] batadv_nc_worker+0x88c/0x1060 [ 1143.627586][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1143.627603][ C0] ? rcu_is_watching+0x12/0xc0 [ 1143.627616][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1143.627631][ C0] ? process_one_work+0x921/0x1ba0 [ 1143.627649][ C0] ? lock_acquire+0x2f/0xb0 [ 1143.627665][ C0] ? process_one_work+0x921/0x1ba0 [ 1143.627683][ C0] process_one_work+0x9c5/0x1ba0 [ 1143.627703][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1143.627724][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1143.627743][ C0] ? assign_work+0x1a0/0x250 [ 1143.627759][ C0] worker_thread+0x6c8/0xf00 [ 1143.627779][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1143.627795][ C0] kthread+0x3af/0x750 [ 1143.627811][ C0] ? __pfx_kthread+0x10/0x10 [ 1143.627825][ C0] ? lock_acquire+0x2f/0xb0 [ 1143.627843][ C0] ? __pfx_kthread+0x10/0x10 [ 1143.627859][ C0] ret_from_fork+0x45/0x80 [ 1143.627875][ C0] ? __pfx_kthread+0x10/0x10 [ 1143.627890][ C0] ret_from_fork_asm+0x1a/0x30 [ 1143.627909][ C0] [ 1143.628330][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g93541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1144.249570][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=89184 [ 1144.257451][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g93541 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1144.268809][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1144.278767][ C1] rcu: RCU grace-period kthread stack dump: [ 1144.284643][ C1] task:rcu_preempt state:I stack:28208 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1144.296564][ C1] Call Trace: [ 1144.299836][ C1] [ 1144.302773][ C1] __schedule+0xf43/0x5890 [ 1144.307199][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 1144.312410][ C1] ? __pfx___schedule+0x10/0x10 [ 1144.317258][ C1] ? schedule+0x298/0x350 [ 1144.321593][ C1] ? __pfx_lock_release+0x10/0x10 [ 1144.326622][ C1] ? lock_acquire+0x2f/0xb0 [ 1144.331124][ C1] ? schedule+0x1fd/0x350 [ 1144.335450][ C1] schedule+0xe7/0x350 [ 1144.339514][ C1] schedule_timeout+0x124/0x280 [ 1144.344364][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1144.349738][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1144.355026][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1144.360829][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 1144.366292][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 1144.371057][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1144.376340][ C1] ? rcu_gp_init+0xc82/0x1630 [ 1144.381033][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1144.386247][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1144.392063][ C1] rcu_gp_kthread+0x271/0x380 [ 1144.396752][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1144.401960][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1144.407166][ C1] ? __kthread_parkme+0x148/0x220 [ 1144.412188][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1144.417386][ C1] kthread+0x3af/0x750 [ 1144.421454][ C1] ? __pfx_kthread+0x10/0x10 [ 1144.426046][ C1] ? __pfx_kthread+0x10/0x10 [ 1144.430632][ C1] ret_from_fork+0x45/0x80 [ 1144.435049][ C1] ? __pfx_kthread+0x10/0x10 [ 1144.439654][ C1] ret_from_fork_asm+0x1a/0x30 [ 1144.444527][ C1]