last executing test programs: 1m29.996133758s ago: executing program 1 (id=943): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0xed}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2083, 0x501c6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40050}, 0x4000880) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x18000) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000040)) 1m29.904668969s ago: executing program 1 (id=945): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f00000002c0), 0x0, 0xffff, 0x1bf, 0x1) 1m29.882975176s ago: executing program 1 (id=946): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000580)={0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904", @ANYRES8=0x0, @ANYBLOB="19b87f3d0aea38", @ANYRES16, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="680fd941879161731747a611fc59b5c53c583adb4e11d33e44ffb1a80f717d53bd6d89436584fb8e0687d6f41f93bedaaf86f6dc5c99bf8fc4bae4c64dd4de796ef3413f5ac3c1cb23ad01be6af6069a1b367f226a30e36da3dabaa7bc5caf874c5750f8b588bda2e90bfec2481c991afbb873efd6e40491d45a01d88cd96d7108978e95fcd27169ce82c91c02fe7572ec4a47adf8da8381331cb597d70d0caff643e06d0851359d6c54f3", @ANYRESHEX=r0, @ANYBLOB="6b1b47556fb65897c15d1afbd942bac81e839c30aa897e42f1384a4d87433ff3847b2f7a287ca9efd3904ae4ec519b18739549e580995b741e1004b912fa77651deb05d4", @ANYRES64=r0, @ANYRES16=r0], 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) (async) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000580)={0x0, 0x0}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904", @ANYRES8=0x0, @ANYBLOB="19b87f3d0aea38", @ANYRES16, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="680fd941879161731747a611fc59b5c53c583adb4e11d33e44ffb1a80f717d53bd6d89436584fb8e0687d6f41f93bedaaf86f6dc5c99bf8fc4bae4c64dd4de796ef3413f5ac3c1cb23ad01be6af6069a1b367f226a30e36da3dabaa7bc5caf874c5750f8b588bda2e90bfec2481c991afbb873efd6e40491d45a01d88cd96d7108978e95fcd27169ce82c91c02fe7572ec4a47adf8da8381331cb597d70d0caff643e06d0851359d6c54f3", @ANYRESHEX=r0, @ANYBLOB="6b1b47556fb65897c15d1afbd942bac81e839c30aa897e42f1384a4d87433ff3847b2f7a287ca9efd3904ae4ec519b18739549e580995b741e1004b912fa77651deb05d4", @ANYRES64=r0, @ANYRES16=r0], 0x0) (async) 1m27.534203919s ago: executing program 1 (id=953): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) socket(0x10, 0x803, 0x0) socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x5) accept(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) socket$caif_stream(0x25, 0x1, 0x0) syz_io_uring_setup(0x41e6, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[], [], 0x2f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f000036d000/0x2000)=nil, 0x2000, 0x100000a, 0x12, 0xffffffffffffffff, 0xb3d2d000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x400000000002) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x1002001, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)) socket$igmp(0x2, 0x3, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) 1m26.314218858s ago: executing program 1 (id=955): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') (async) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008}) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000040)={[{0xfffffffa, 0x5, 0xa, 0x1, 0x7, 0x9, 0x7f, 0x7, 0xaa, 0xd3, 0x6, 0xe, 0x1000}, {0xfff, 0xbc8, 0x1, 0x2, 0xcf, 0x6, 0xc3, 0xc6, 0x10, 0x9, 0xb, 0x8, 0x8}, {0x15, 0x45, 0x1, 0x22, 0x3, 0x3, 0x3, 0x5, 0xd, 0x6, 0x4, 0xad, 0x6}], 0x8}) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m26.203943513s ago: executing program 1 (id=957): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0xa826, 0x100, 0x4000000, 0x1a}, &(0x7f0000000000)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x77) r5 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x9, &(0x7f0000000040)=[{&(0x7f0000000280)=""/194, 0xc2}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v1={0x1000000, [{0xfb, 0xb5}]}, 0xc, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000000c0)=@filename='./file0\x00', r8, &(0x7f00000001c0)) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x32263, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 1m10.951358384s ago: executing program 32 (id=957): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xfffffff0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0xa826, 0x100, 0x4000000, 0x1a}, &(0x7f0000000000)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000440)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0x77) r5 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x9, &(0x7f0000000040)=[{&(0x7f0000000280)=""/194, 0xc2}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v1={0x1000000, [{0xfb, 0xb5}]}, 0xc, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f00000000c0)=@filename='./file0\x00', r8, &(0x7f00000001c0)) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x32263, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) 12.411132117s ago: executing program 2 (id=1237): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x10, &(0x7f00000001c0)={0x0, 0x30, 0x6, "cc180147a9ae"}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12.091574754s ago: executing program 5 (id=1240): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x74}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="11072abd7000fcdbdf250500000008000300", @ANYRES32=r3, @ANYBLOB="6a1dfadc247830120286267924c50bc7a10a3b3209343f429124b15ce8b3bf3bb6cd179e6f06122950e4eaa4cffecbf358a95557e98e90a5eded8a772c05000021ca1a6353a0d5d8f30f807fbbe618c0784ba59fe7992110a550f64874cf000afb3488f1f8d6c779ad28e6d696490d9e601ef9b0b690d9bdbdbfb3ba258274e4144f6433eaf184c4898fcc00d423b48d5576b41c90b373a888a525645cd416a86e33cd57c584e0db6fda877bbbc4712e90fdf3c2462f4fcb"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) r4 = socket(0x10, 0x2, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, &(0x7f00000001c0)) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)=0x74000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, 0x0, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) write$dsp(r7, &(0x7f0000002000)='`', 0x88020) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r6], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r9, &(0x7f0000000400)}, 0x20) 9.628974045s ago: executing program 3 (id=1244): r0 = syz_clone(0x80000, &(0x7f0000000000)="32f9264a1fe4cb1b91eedc2cf38fbc33d0a2c6f62609c135d46ad2baffee2df4532dbc5afcfd4b24bc9b74acdaeaf1f7264d97876f2eff7fe9a6415b497326754620bea3b50ac102bbffd066cddb76a3db26800de555f222de0cc4c1c5e7413d9ee5706d259a9fa52ab20e27653cdb3f897127044b71bd174346d8db751eda45f6e94376ca3901fa297125d8e965af00e4b9e7851faa8122f58571c736ee2e66b83adfe1c7bb4d8ef753e4aa1c42d425f7eb5750001bc5610591a79235a04b1e", 0xc0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="bd02c82464f72b") prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) (async) r1 = msgget(0x0, 0x8) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) (rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) (async, rerun: 64) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) (rerun: 64) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000300)={{0x2, r3, r5, 0xee00, r6, 0xaa, 0xf18e}, 0x0, 0x0, 0x0, 0x9, 0xf, 0x5, 0x0, 0x7370, 0x2, 0x5, r0, r0}) shutdown(r2, 0x1) (async) recvfrom$x25(r2, &(0x7f0000000380)=""/195, 0xc3, 0x20000100, &(0x7f0000000480), 0x12) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=@gettaction={0x158, 0x32, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xad27}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async) sendmsg$netlink(r2, &(0x7f0000001900)={&(0x7f0000000700)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc, &(0x7f00000018c0)=[{&(0x7f0000000740)={0x101c, 0x3e, 0x8, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x7d, 0x0, 0x0, @fd=r2}, @typed={0x1004, 0x11f, 0x0, 0x0, @binary="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"}]}, 0x101c}, {&(0x7f0000001780)={0x10c, 0x23, 0x10, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x1e, 0x21, 0x0, 0x1, [@generic="7ab3653641f6", @typed={0x8, 0x78, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0xa4}, @typed={0x8, 0xff, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x78, 0x26, 0x0, 0x1, [@nested={0x4, 0x8e}, @generic="f181209a663e067181a7ef272ef2ead0fc8c0e671da4", @generic="7d16f8ad58f4db19e5194c61f33a1114046e0c191b623a477f5035b81e64b99d90b0674f124b8177fa88449ef6f0fe508b5f2442e00027f2a6b3fc2567170cc910a33339a356554b8449", @nested={0x4, 0x64}, @typed={0x8, 0x120, 0x0, 0x0, @u32=0xc7}, @nested={0x4, 0x9a}]}, @generic="ccec88e9a5f93a1d756d5872e110f1903c11e117fdd0e9b313e8dadda73de2e04fedc6314e2a6e22c1b1ed", @typed={0x14, 0x78, 0x0, 0x0, @ipv6=@mcast1}, @generic="ec1a247b3f5f28dc94e0d31651fd629cc7714d50f65ef04c1e00", @typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@private=0xa010100}]}, 0x10c}], 0x2, 0x0, 0x0, 0x4000}, 0x84) (async) syz_open_dev$admmidi(&(0x7f0000001940), 0x1, 0x400) (async) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x8, &(0x7f0000001a40)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x74, 0x70, 0x33, 0x65]}}, {@uid={'uid', 0x3d, 0xee01}}, {@noswap}, {@huge_never}], [{@hash}, {@appraise_type}, {@func={'func', 0x3d, 'BPRM_CHECK'}}]}) (async) process_vm_readv(r4, &(0x7f0000002bc0)=[{&(0x7f0000001ac0)=""/225, 0xe1}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2, &(0x7f0000003080)=[{&(0x7f0000002c00)=""/210, 0xd2}, {&(0x7f0000002d00)=""/13, 0xd}, {&(0x7f0000002d40)=""/135, 0x87}, {&(0x7f0000002e00)=""/98, 0x62}, {&(0x7f0000002e80)=""/70, 0x46}, {&(0x7f0000002f00)=""/163, 0xa3}, {&(0x7f0000002fc0)=""/134, 0x86}], 0x7, 0x0) (async) ioctl$SNDCTL_DSP_GETOSPACE(r2, 0x8010500c, &(0x7f0000003100)) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000003180)={0x1, &(0x7f0000003140)=[{0x7f, 0x3, 0x5, 0x9}]}) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000031c0)={0x0}) (rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP(r8, 0xd0009412, &(0x7f00000033c0)={r9, 0x8}) (async, rerun: 64) socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) timer_create(0x3, &(0x7f0000004540)={0x0, 0x2a, 0x1, @thr={&(0x7f00000043c0)="d2d9497dffa6146fedb7b58fbd01c8738e4e0f73ed9a4f3255172ae22fbc254b7bace4bb2184bae549e0eca34e2056d353ec63ae3ba6d2ed1e977872d8734dc5432908ff6d4b4de40f091512fd411593faa35fccddb5fc2d5d5d8586fe24e62d22bdcdee4b1ffa47a2d58c23fb160f1277f16a7f8b0b94c7769b38c637753c1dbd2590e80769772ee91ffa7604afb0ee504a3caec156b4d59ab16117ebf1c022cbeaaabb3dec203624084a7597a2e64e3866862a9d1e6135847ade", &(0x7f0000004480)="a8de5f47bfa533898ffd131062f7f490f6063ae8c99957c9170adffdc0907b79e8978c902fa6e5dd18e221f564e34f950828c39ae75d54bf2ac93f443fcb71eda9fe654e2b9ac0c52a4241cc81f870fa2992c2361139725a9487e8863eb4172b847216c485acffc00b9b3dc8efe452dc6327f79cb10b65201a526e9dd1a96ee399ba8d19e3867e11a0218cff999e"}}, &(0x7f0000004580)=0x0) (async) clock_gettime(0x0, &(0x7f00000045c0)={0x0, 0x0}) timer_settime(r10, 0x1, &(0x7f0000004600)={{0x0, 0x3938700}, {r11, r12+60000000}}, &(0x7f0000004640)) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004680)={"82873ab4", 0xfff9, 0xf7, 0x6, 0x1, 0x3, "c6e405232c9d2e79f7d953d5ef49a2", "3eb50a4e", "94442802", "fa98d76c", ["7af0543bea452270d2586982", "aaf76cbde263411e2aef0967", "b9b92891ad6324c6a45755aa", "87f592e8ab9ee272dee44667"]}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000004840)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004800)={&(0x7f0000004740)={0xa4, 0x0, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_LABELS_MASK={0x20, 0x17, [0x0, 0x0, 0x401, 0x3, 0x394, 0x4, 0xfffffffa]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1006}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0xa4}, 0x1, 0x0, 0x0, 0x200280c0}, 0x0) (async, rerun: 64) write$UHID_GET_REPORT_REPLY(r2, &(0x7f0000004880)={0xa, {0x7, 0x0, 0x80}}, 0xa) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000048c0)={0x0, 0xa8, "7535af44cebed884f18b04e8fab7cd4014c624b8357404b77a50059295dda3a820ce3af2e820603cda55a54d5b9fd164a3db430041c45e99fd12abce815dc311dd9bd803ff424c8dec4ef096d39b4cfd2c79e8f9363126f3b3850e1c884672f703786c0132e30a1d0ba81245cc98c8021466cdbe7f8f2bd006a29ededf0f38b3ef5fd92a91684715557326ba09ce51adb28212f7548f827d3f4dd05a9502a879093be7a0f17bf222"}, &(0x7f0000004980)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000049c0)={r13, 0x9, 0x9a, "483eadac5e2d039bca3d409fbc6f210715fe88164b4378c91b6129625b47b295cd4108337a50d6457deca82eac096fdc68b34b7ea3a9360c5a8fbb415eb0eeae668cbd385d71f3207b61229f97d46c5c7b21e4ec7397a2b2bfb675e46419cc7ffc45a6c03b29d3a0d3493c0e9d981e40d75bff6449c61432c2e809f157f96c1dfbd223629a1db6c7834e59ee26fa40afe8b1b00bee0f15267ac8"}, 0xa2) 9.572221798s ago: executing program 3 (id=1245): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280), 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @empty}], 0xffffffffffffff45) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}}, 0x1, 0x4, 0x6, 0xfffffff9, 0x35, 0x1e}, &(0x7f00000002c0)=0x9c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r3, 0x0, 0x0, 0x4040880) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r6) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000240), 0x8) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000029000b0027bd72000008000005000004f8f362d0f0f4e97098b58296bf8a62a43cd9c4d7041e7f8d620c59e6a34c3a394c5b82d9daf65dc664b43bada99fcabe26f1472a067cc5"], 0x14}}, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) accept$phonet_pipe(r3, &(0x7f00000000c0), &(0x7f0000000200)=0x10) pwrite64(r7, 0x0, 0x0, 0x9) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x408d4) 9.079361804s ago: executing program 5 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) (async) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r8, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0xe}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xa395e4b8487822de) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.353961935s ago: executing program 5 (id=1250): syz_usb_connect(0x2, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af00095b0e00230000690009047dbe"], 0x0) 7.916159452s ago: executing program 2 (id=1251): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x19b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x6, &(0x7f0000002200)=0x9) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x1f, "06c4ce00000000006eb5e52829e7cc839300000400"}}) open(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8018000a801400070000000000000000000000000000000001140003006970366772653000"/56], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) chdir(&(0x7f0000000240)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000610803000000000062010c00000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x32, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5}, 0x10}, 0x94) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) r3 = open(&(0x7f0000000140)='./file1\x00', 0x0, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0x0, 0x0, 0x2c43, 0xa00, 0xb000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0x0, 0x8000000000000000}) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r5, 0x0, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5.693599752s ago: executing program 0 (id=1253): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x20000081) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x9, 0x80000000002, 0x1000000081, 0x5, 0x0, 0x1, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) (async) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) process_mrelease(0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x108000) (async) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002b40)={0x2020}, 0x2020) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x8000000, @mcast2={0xff, 0x3}, 0x2}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r4, &(0x7f0000001300)='7', 0x1) 5.545706703s ago: executing program 0 (id=1254): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) syz_usb_connect(0xf4175eb3f2bfb60d, 0x2d, 0x0, 0x0) r0 = syz_create_resource$binfmt(0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r4, 0x40044104, &(0x7f0000000000)=0x9) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a32000000002800048008000240000000000800014000000005140003"], 0xc8}}, 0x0) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5.384062565s ago: executing program 2 (id=1255): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0xc, 0x1, 0x0, "2742528909000000ce0198d719e30000003de82bb8692d47a100", 0x59555956}) r1 = socket(0x10, 0x3, 0xa) r2 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000020c0)='/sys/power/wakeup_count', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x800000000001c8, 0x12) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xe70}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="a232a5921ff909c509aab816ced45adf427081d9c02b0f133375bd70", 0x1c}], 0x1, &(0x7f00000002c0)=[@op={0x18}, @iv={0x20, 0x117, 0x2, 0x8, "db65ebbb2d31508e"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x100, 0x117, 0x2, 0xe6, "9a34b44a33b64999a6e16e161fdc197af84252bbf54f33e21c0f390cab55b1a8ae19ee83c18a6526f7ac4b365103a87f63561e7fd51ab3714cea7239dfaa07c89c5e2028f842d9a4b7a448321c1bfd091b8b5f1ef411d17a420cb71e9a6ea5b9c17e211f609c8c3b7e1fed25ef351766316faff9e2397e2e5229728ef1e3939130a0340f35064ea11859466ee38cc7dc99204220c6467f5f1db563cf3f42752ce59a241932eddb24a14c8290313feaa87ab670c293f949889cbeeae02edc4713e5ea2e54187319504dafb4ecb43be5d2c9565e6ffbf873932220978b7ac825dee6f60dc6c5e9"}], 0x198, 0x4000}, 0x801) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000600)={0x8, &(0x7f0000000500)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}]}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x0, 0x0, 0xf0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) write$P9_ROPEN(r4, &(0x7f00000004c0)={0x18, 0x71, 0x2, {{0x25, 0x2, 0x7}, 0xfffffffc}}, 0x18) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, r5}}, 0x30) syz_usb_disconnect(r2) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406200c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 5.167966537s ago: executing program 3 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000080)='./file0\x00', 0x104) read$FUSE(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004300)="afe28a28263ffd9dbc5af980196765a3c1f82c4a1fae7a322fdf0f6eec50303f6104db417704a701a8d6c5e7f5c99a5cf3eed4e0e1c82545122d6933469933ec605aaf61a5b8b1f8aacbafca498796976da62837e4a0d818ea71474d0412cfe162a7260456c425f2604cbd262e2aef92d09d6d2e105b7e7d377c95ccfe1d0f9af9f7e6a6d85d4a8ebee6fa703efd8c4a106793205a405938d47f97266eaa5fda88f11a03a8305399889ccc48f85c4b6a7747f489dc76c93b06be84635190224018e13954cd2fe714fec88f6aac3c57d5fec99307b8c8327e8854000e81d781e2f5bc37e96bbc3077555f696c6fadd199d9bfbf0997e76925fe17923ac5976e32f52ee407c43070cd8a709a2326ac96b94051cd0cc8f29b43edbc4ed850ae7a30b45db7e72114aeb46bd3a91775582c9206a638456a0e3da847a7be2e21620df89ea7e2da53f77f39cf0eb2d0b601d507d4dd57a534b5c77076052cdb03dd0c241f75f442fdb07624ad9d9fcbba92a4f20b20b424e3c9c92f2831e5efe0be454f3b4dbb9dbe6152bb152206ff0451edeffdbaba54deb39f00e74297c676effb60950dce7a847031ca85a1b3690f573bc31094d6e7d95f5821c0eae6a2685958619d94108eefcbc0dc5dda47ca509878dd8caa875d69af6c88997b5d67e5c67bf9daf89547a55061eb0cc55e2c696b71c7384ba16928fa81f7394a048329c467ef813df172236464f9d1418e5d5386b0eb6d5c4f765d0246ee91ab39c07310b61680788e3a57dab96d1eabe1a0efc2b6c882aed50d993d15f8561bc1f6bde7e79b711bb206685344aae196c1c4b97cd515911341cd60c6ad108e0013f87d063385ea5f057de4315284cb6f8545436981ce1c4bbf13f178e3a504bc0c8b1bead105f7e7622c288aca7206ee18dbb97b1b393d102d9c65e3a765e87f554d98383e4e49ad1c600d8fac4acb970ce04e0c866806bd44b21b5c891c3bccefb87bdf389d6a36992cacfe52b96e7e1014cc58ec29fe0ac221ea6d49f759f2a746e7603272d572515fbbb33d2b6f94eb9c6571118b606e18ef88ff88366aa3ecccd6c845f9b8534f49997c940a930693fcdf742fde3676c6cee9eda06ab856a4dfee75c7c9cda6b11da6441644b62116e6fdcae5b5e0148047028a5842c21fb9637771a5ac84ba9740c9c9b56b58c08730a48e81c05b312449edd27843c173d1875c28aeca43761a06fed193378129243aa514bf74d6b76ccd70807440401948d6f3bd9a352cd432e1289f2d4e78add381e4477dd8ac2f2ccd3b6533121ac51c393dc773b9e120ea8194e51d76749b4f0c4e6e40132ba1535015d5ff224ff77310be5a31a6defa004262918136b9db98a94a1fd244be1f5a7cf6762e7bea536df1d312a72776baa881833d295f1a60f2ac98d54f302d8fc72f135ab3256d065a618b60d2a6982ee89c60bac90dd81e0cfc24118c568e8e3a29a9f29e55f479a8fb5638d6cd724605b69aaacafd440020f4776652537454041acc13cdb0bf1489fbac78c4bfae755b259764756407204b22cfe838ddf82523c03b4bc1eeb55c43b1f50b7d03fd4da448ae51cc4a844fd0240e0d131c2693ed770844bf25e3bbea974a5c2a40ed65f1c3a729ed93ec22b93899aa861ce301e1cc1f3e98846a39a49169cbe3eef35e3595207f1014a8dc89d6b512dc05cd23ed4b4741f6ac778794cd1282f42a72301f37816859cb92d53db6793f294df19d0ef1bb453685f3c666b3941c25c92b204c8307c0e83469032f276cef4ce538a4570d652aa212de6fae8ae4d62399de49f0d4bfc0a47fbd79e7a86e12c9d863dde004f9e9d605dac7d688dc5daff78c27bbe727fbab0cd3058e75544261d5d83468ef23e3a224f0ec460855aad927c5c5b3bfce0a3e3c45abb0ee6dbd04242ec765e324209bdf07f4ed21eb15e2f030476fbc3cd05554f54858232625e9b37ac41b8e354ebc85a0282fbf9ad5d6e0c2d7b093bc1f887646faa1e7622f110b546dadf44eff6bafb2a58631a93e560bd67b42ab96d4a9f044f26a481feb8b3f2018a7236799c2d1877a63e5fe64dd207be729eb1cda7977d59bc139e1d2f6cae1defe90b8f6a99ae4dbac317413745521247f3691e894af33c7484afb11f4d2f858ee87e93ad202f9853c6ceee0a92e052225ebf283a017ae2e7cfcf924ea4e3b319a05a9bfe3f476308aa5039fb8a7d3642043957a2090e0727120a7aea16d16e7a4b15d5676966041f76188fb69d89080b6eb2d4d42bc84e298dedda4db06b78df5c7198230ab439f0c3b4f3f649d531664c59eee2d73fe14f01133776b717f6b7118afdb264ace9e44af5bfdf35bfa7f7ab538004c0085c11da725ed284a34c7f27da78acf488bd0f54e6026efbf81af934558c36473d0fdc85519e11b4f30fa3b7ef757c35f4c88a360549def898cc460557433e44621589e71f3118003b4695f3130dc005d32c0330b950c12e430d2a2a6b9a68995bc9e1345dcfa30585603f09e74296cffe8d758b216de00e8302eed0e06f94e7bdf835cf27fcbe57651f36d6d2de82f179f42fc8e7fed4f5c7f5b691c6e038a76cab3e604e42ceda945e155db89cc0013564726053ccd77cd8e626bac72468ae0998f686450d5e0a17ce88e1b15d05f212c336d7cb5013eb94fa861b588be01ed252b487b4d1918c87a341b5daf74f3083bd49ccc6ee26ff8993b5398145ae7f9505c1398f1bdd2cb90636f9e99da243cedccc97252fe15ee10e886c187e5c614f33bbf630c654b1d87e693b765f3a36b67bd1fb46afcd24c96a0b7784e4cabb8a8a5abca853d51694da85296a430b8856f51173946c9f143db65fd1b51b9534657d3a7953ba7186651ddc6f0a625563c3b43cfbc83330507d399ae87731e1ab1f15320779da21d2000d85155a8c9cbd6f642695a565dec615d7bdf8a47a76005b3607cde6176b8303b7eeb2212179d6f5176e45b1759810fcec418e6c41e7b33da9f92211631a070257cea55e644498466d5fc5744f903e6c4a2d3809eb6e70d50a82f66a1a05079ebe9ae0b756bb2781dafd14b1a06c0eb2c9b77b0d8d005d47aacf5447a104f85df3decb0ef8bf1483b47be9c945b95634c474f9cebdc97a91f85aba7172d05cd7b06afa043b8900ab400770fa270029e34ebab31a69367a18057ce532cd66e52b807b8665475977a56ec5407c778994ce9c85e8b96f1313e468cf83d266f14250acee2a4a52001de174d2208bc2a679916e4231fb30a99263a0398e99e9f8236010f17a5de367d673a95b374158d2baae4612ec6898d0fec2f95b45c6bd760a0cabcac1067470492c5e66c11ea745ae803dd24a5c89cac5a0d64bcc15648b1d812be638d10311d640b3251a8001619d09f138bf04e35c02807c2c87c222a6f54da320f0169cece864f4d37af54f0fdcfd455051c0effe17d2c04b3b67807af05cd8176017cd8e35c1ca1b13112f2dddde84be95ef67a6c8ad8a4ab0e7175fd124bda62656c4afec4dc8c0261a855e75575ddbb375e45a5b635fc7bc528ba387dd24f485ba69a9ba2761c243d359bce078d0ba0cdc13b6ee7d66a8546c49a4429af5866f866ba2e1e0a10ff4a3c3b5e240d918f6a896c35f51ad7b02e6d0747ee80a99c8812577600e359b703e571ec18d6b88866f28aef250de65f39b266f6795237f7d3f741127f3d47cefb255d1b3c06c7d8fec9bb8e5c666d7ca7b803dbabc6cacecbca1ed8e89ddc2140f45c4f8572c146d7ab2be20eb72baaee4b1d371aa9f06833ba1a0cb66b701c1fd90e8bcdcfb9bd57a8cad381e7cb2b99250d21384ebf771833ac6f32f4115fcb0ffa177dcae6673b1ff80cbefbaec2c863b263035ad2a0d0a340fed260d4fbf008745bc1b51e5b011b54584f6c0cf3a401f8cfd23f23e830a311bec365064895cbe8a664184aff212bac6f164f6b619e4d8521ae447abc8f59b284aa2e94061aa15afd9070fef452d4fd644da4b6b716784109d92abd31d3221a76eaf592e6529e70a67bd92cdb431c7af9f658b2ace3d954c4a5208f1edcdb8a04461262ed26b24bb3df41b1c28ec42880590b3685f56a3982250ae96c7e1fcb9aa6a9887639d2209cf190e9ea82d5634513eb36c5c0e0769250948967240e29921da36aa0c07c76c81c7bd8b7f1c1c9063b4b1fcd88f63aaf568a7cc9249fad5c996853dd160d80f5251673643fb5e0067c97b0d2b513c1d22a3c2e73786c3c5c17f14c57c2df7c830216e5c3ef066468069428501e1a78c935f4c520c5cfe9daa89ca4bb4895fec8a328453ff630848eeac719bcc09d7bee73e58f4b7cf90f098bb7019c73912b630af92ed9b309c53c5c4edaa3788f9e6d486bd363619cd2c140d9a7175f6c5f977eb6e6f58f18c8d0ace671570e0dd6ed78ca228782ddb71c6f137cf0e27fa85b52b1c15ddf184a72dab098a8b1c1f6746238a8a92848f2478b690b80c131c85e90b69953f5eb54c0b47d59b7e440190e1c9b2d72fdd94c64296ca33aab32cc8f69091df05aaefd4ea00303a3522672f01b5373abae33d34844831a1af2e51276b61e637a93e02e09c306e5fb9619e82bbcf0e43e2f5e8ec8a458b9f1c612634645eb82051fa34f4b13439c3ba2e016972df37f197d09121bd377b1472a2da64698efb11cc88fa36ac173c83ee155b73716639f5d73a29fb783fb27e5ccbab5f9b95a4dca6a7406cd053a7ac9ff25f42ebddd9afe7df308979c314acaacecea602267c6d57fb5f5222e4ccd4b18573b32d6a19f1798a1d78b36b32f0723f7b33b06c2ca43b22e4cce6cda741b3e68a056a0cd6d51b6929cf4a16fb7b2490cbe87e5612dfa7d26ad40ec412021f9033aa2884ee86c7610623fb64663ac5554e694e84877708e77d243bcdb198714fff672b0f927f9cbe5b2436002f02a559dda5232cc150170d7b32d547a080f852c6838809f8ae1995e7ad4b24c7d1ecdb6b5dabca5da671493a3a1b4da1e7ad13ca4b4dbcf53a71348366cef7ee45cb719a8321205aa70da47104e66f344393e64dcfcd015b9d6bc75ec3dd31551de4b614bdc4d89c8de1254a91c4f33cdddf98d8ddf36e8cdc537a7d11dbf51913ca87ca9f644a2a08905e15c0f2bc58168e425b52055e7878ba468909dbed30815e01720df5a1be196471d30c1525070efa59fe62720960e473dc237d7866d77e8ac69cbaa50cea6205b7ccef9437b132f41e87906f3b9c48e9750e7ed1993597f8e599ab8596f4378853ee10e26289e72b92c425f5f0ad0f94d4694415739ccfc06bc5a49237157071116578df4f8aaa1eb4c123c8ada753e4a631f3f9660fbc9404d8af9ef1af380ccee1f2e520c03615fe7c5d276e917d84061f8cc0e5814caac9ecb0ebdf8bfae551197d66ff22236832a0ac38586b059a4ae9054d1810d361f50da921b33904cb6ea7faf44b811e7f7348d07cd32c8f83da01d4d74092493ef5cd3d2cbb9eeed6986f3e4615b8d341cbe13d6eac3bc1e9217fc2f86dd0cab958a6b4e0f0604501b48d352118611e96a974e3642fa785538e7d5b3bc7a363ca95a98a0816e6179bb438f3c110036770da0978987ebcd241464136b2a8d45bf1c2b499b6dba8e44448c73163ae7df71d7c98b705af886dc195cc918c2552fc1696d6749222a4e83279a14001ccb540a64a713fa1691c30e99ae0bf8fdacaaf4aea9d4f89db7d4f364f7a30c80b782f5cd7af01347d78769902f2ed675b6b859b5467cad1bed59a64f13a4b5a827e029c9a3107b08e5f18b930855f7d85f1d78d45d7d3c909b87213158dbe5cfda90936388885a32a61529ab30bf31fcc1d6df9ead0f49ada899dc8be042d2289383f6d09411aea11e6002359ff2e36345b8454ec5f126db94349666a3666323ca164a0f72873b63c9dcc0c60785a66862655d4ab5749bc00bd98ba9e20325e78a572fc93739ce884f3398218c614f8ea33cdff4b797dc2c2874d20670733f30acf52ae4d14c9e83f54533acd42931ea42fcbf89f7a8e68c3c8ecefa4a1e1c693244d4604f9488df30718c455f719a6d93b30173305264c9bdb21e8a68a74e7310dbecdc27afc7b162466c444ce4bda0d937104e683349828a4f0ca8723d54fe13287286f7a6dbb8ece6a7ece355fbee7424e7e524ec33ed5fed03a1ea964af0830108c5e69a071606d9d28450977245cba4d0e1ed8177752526e218cb5e113dff2236c663808533c580da3d83ad502a3d5d30949ca2cea660ccb613cc7661d6857b3b70588976ac8ceed944f7f738e43101369bea05a26ff31692ab45b6c95f794a5c92d8bd42ce8803162cc730782e0c1e468c9d090488763d9d1f1471c2ab1cd8599e078d81a0e84707ea02a0f91c3d588bb54f1f5ba58845617b80263ab8fb2c6757d72eebe00591c7b6cffddb969f6fee2ef9f016f641aa2ccfd59c839ba40ac1a10bb9d94f96e1c6829dd4d2dcb9d0f71726c31d813fa78af8b7621fa47f4b0ed9d9d98e4209676969728a00a92dd592dfee41c806076f0e4100e371c7427f888ef91f03c5b16d87b2ade294f69b77afb199de38bfebfa3ec9285d1829c7c0714bd100c84efc8eb71146a1d4c7f659d77c42119b738d6bcfede23855780a6627d4a417aab498ec60bf69c44fc1f3fd4f99ed941a1234ad1f3120dcc71275c464be23453749841dc1c36a76b28b3659e809a1216aea67658ff76e99580cb202eedb9d4cab23e879723d11f8d4086362271f8f2e6816d47eaeaa5066c3c4338868fd3c8b832581490b6801278e9d1d59771dcc73eef6b9903ba9b9f5e565eece392568c878662ad9cbb931242a27d883fe7839e7e502c368e736f5dc057ed2e4b5c963c54712c772535e22e94c61a13ed50682c065cad0d861b3888ef332ed0236e2747720f97793b46eb39b51057b44f2b9e05de8c077cff7ef5afb56a5d28754d76161909a05573f8aaee5fdf260d80eda7e1b83539e09362a4f9aa0e8f069e0cf221eca87593457b342de27c99cf14c4bc0d8050aa19c8e4a56b3b5d2c3fcc23633f5ab20ec063270c9922292b645a5523f9bba5c6f66368c227bb4b2ad6c1f4c8927552f6b41a312a4bec49669e2968a7d6bf30cf09f8d3fb473ce5a839ed27fa906dbf504aec3a5a2884bf4c569235202dffa763b14f4501ecb8608e77aeb4fda0e4177fad0bc02da3224f183355ad62f6c50efa3c8f8e02bf3cf47ff31210606bb87ce4acb53ead7eff942d65d9905e9bf6acf5829eed4855da2488e0896ad346da16a5c988e31b0632592a2dc3030d28b6d62a3a4638a0a3736f5103ce5fe72baac7fa23d5295c42cd81075ca9f7a9a7fe3cf418f50f7eccd8a7c3e6fb1e8b30c5d8dbb0772a8b44f44cebd8249ce10eb24d1f668765796b4a56a482580456ac49db677284f3b2deaa9514973ad5c156bb4961b2ad05bcde1bcea522790765208eab6eb27777c2ef643ab0c85e9625d259ae29a3b2e864bf936cefd90b63ba2281f8bf8505ef6040335c258d338c014c31810a324dfe382699ac0b92a2747973a297e94fcd75ec7d156bd61cf848d7144f9a9dd89c72b9c323ed6f37110f722da90396816050ad800fb33a92651b0356fd15c4cf876a3509ab32cca3f5bd6906ce5ec186391effb13fac0a10525622023645bfb9742472695c81461db0298f84af1983b6e5e94ae355e0e790fb51fe558bd70e889744872c9ababf42b930340e192ab4295ee72e1392f2bbb137533a919d72e651cbafa37a88232d0f464bd4531e49c65abd629f3e8b920ae3bde61a3538514866f18a937848f7bd99e4a0fbea506b9ee5ab47e41cad31dc261020f91d65c88bf2251c617cfde3314ec540c8128adf417f1ee716473c3d3c049dc7714a832c128869bb4a9bad6f8be1b0a6bb5c0e40417d594a876a5fb50055e7c67e2519698e5ca89fada7c84032a811b0eb5c67364ea809c6be960c9a7b98afc8e6315e780d8f556b97ea65b7fd27ca6fab61164d60a109d182b9b8f7995ee915eb68be320000db4b0bb821ce13a8d55ff70629a5f2bb89a1c7a4b874b49bcb13105493a9560344f89877e7c5e409a15bcda6d27073c3b744b386b0b82098d307dc3aab1ead4306a73cf8382bd3451c0aaa14a8333c6f34e6b5e5d3b240e01243749b3938840c835e16129ddca5d9439511b4fd22752d904dcd60f9405467918e48fa17547493e51a14ccb47128c7449b51cef63178f32cb06155b9e9cb65dba65f8a6f9a45d8d49852609dd0cf8418f463cb15eaaea77c1c89f530c1f6c6c7820d66957ff2fe731628a328f4e7896d5cf6fcc0782c05c47b8f01d28908913e379334fa90ea01906e865202fc6386fc69fb683a1dfd037ec5bbdb368b3530a3cbbbecf2107faeaf32081c65b48a3bd352998df0a781dd86c7c8112407db1bf1ac6446a0c77e8f2e3374fb8217abd59b3d40c9582a3ab663f278a83b22685914b4b2bacc973ffb2dec5e6eb98d6c16463c1e9a896ca4e65206687ca4423c359b4e1ce06a57ecb083b750026719dff109a1d823b4ccff79e5ce416bf3756d913b31faad8c0bab1c62276a581ba8830da7c59c5224db7dd38b032db7cf7022502a8f3cef31dc8344a2d02af978d6f901b1b0097dc425f4f34b73c6ee02a8b48d7a23299c1c6e5190221f84c2ecfe5bdb67b36c5dc23455ae466722c5e4f52b07aa667a6cb55c6a411225e88cf513c7cdd2065a1e044c0008f8b6a5b28f3f00f14e7da47e944ca666cec951593ac26ce5e75f17ca2d438dd8f926ac57d1761a72024187a2f77ef42a7d246f906166afecdcdcf8db8cef6f8855ecd97185fda05bae717eaf3165b99021fbdcee50384a22c8c025c8f82d4839dcb0a6075642dc453c21a4dcdc997d70315dce9a3ac7eb0185924436965d1376624b5c08772ba59b142a066bcd0ad044628e463921d78f1efcf8e8cd1e0fcf525115ae2b104c31561574003770c21e847ab80b65d3a2b53e6ad4a3d5227e3bc82b58b5feabc9c70b55264b32b658227851518664baa871f8128bd826ce818be1edef708e033155ed69a0bd83b246d83ac85b33d7370dcc7f930c25609e2e5f86f1738ba266b079a3743180b9b84a24e4915b1743834ec319e5b238ba6942e4128348be821b21892477e4c5ad3a2031f0ef11d9d54cc90f87cf093e582b1384c8960c36421969f7ee247001f37c66f10ff6dc3edc7de984acb599e9b8bd3e792855ddc703698578edfe74bd27e967dbe77bd4cd0bcbe08ebfa7c5bf95745e670438097ee29215d3ecbde9e8e50e14ec41a9d746de20230140d854e36e95f7c13446db26715b9a30a3d3afa3a5645e0afd3eaf8457a87c528792241e99a415b8709ae334bfa81fd8508c77b50e3d1f2ecf8f7b6b1d187bbac0bd3d49f00fb5c21836a2bd79ea2839bd3a1d396422699dfe0958479c36964efdb2f602d25f202a534df612f347696de6fecffb673d2162f2572c6d04895fc22b638dbf54dfad4d6058683919ec47cc3d3d1f5e4528bae31632081b9b80770ce0e7d44287e18fde786801e7beda77c0b9ee3965f3a4956496fe8e892b65e137d9e47e8e164f7c6fe9c6ac9ece1b7eead32a5a188df5539537e1b736f1c5d67b604d064eda6b6730c51e182cae81e65290f12f68a7146888e438a799d04931f2a0b9b6c565d47d9d322e7358ccdbc08eafc2470414c44f97e33013b976b995bcf96409789bc2bc97d7add4b6eaaa84c18ea936f0eb332185f9de597d6f7793215df2c0be4b5b4085910adb83d248be16deeac399070ad00a24a67cebef51694726a612ea5763f1bbff03a77357d867ec5461c33d73a47db4a51b496be6960ca7c8cb92a51dd578f99e4b1d2b18ce406b2751aeb065ad0225aeb1eedce3b26e3feec915361cd6b4acc105a2962edcd6547691a557f4deb9ca96d39bd92ebc96e763b6139a0421f42c561a7a20ffebef94bc0b7538466064610134ede0221cde98d085531471c0e9761880904952234f0ae34502b3790aad682fe6e7fd7977816e21aa3f7793ca99312ee07ef9b34a31102710bbaa31dcd57d941e6d5fd6b6607d3449bbffb1434d67edc10727230c3283ab7e212152039e9403bc7ae082cb3934794468dc7549aa35cdf35d3c0f754b7fdf47dbb5bc5047923f6841b9a4054a0eef23de222f0ecc04410fccfe3779820d2ac659b84ea56eeefaae980f1bd43aef8e78705ce1995cee4f88400903f66e6d24307090e23d04387909a62a3394890118549baec01b6f2a5c416f68b71bfc2b7a0bf289587664a2b6194d4eccb51bd4177c9487b724f91d088ce68f20882a8dd633b17ad73584e68382877eba4fae1af839baca07f3adc4c9796e07dc69e90bd5efe3a84d3ca40fa8209c2bc9c9303ff2c7979a9508d925c021cea6c7f1483b5c5b00232c292f302fad79aa5fa4820b04a5aed1f9be4cbf4430bd2b6b559133979e5239f514e87559950808fd098792c0b1bd0b9cb94463b22be92962692dca35a8bd0fe0edc28e7e759d2d753177fc29860d419a29fd89c0a2c11e957483f9c13637e2f66e96bf3454b943b7dd368b71243ef58b0b3d469cdf5572a990a5c998c5796b80031f56bc98f5bf70a717cc5ff4febbfc32b29543548d8862f1ab57fbdbeda2a9901593c0d92d4eca205312c18ce649ed5a3263b66d8ca52734a16035daaa182c24e9ae2851e8dd153d2fe34978e8df50402f133190ada04cfaaac56ca6fa20771a195c76a84651ca4aa9c7c4eb16007ef1e965055ab6cb08a02db6c1a82f8c695ec370095c0afd535ed8abf17ff514451055854a99de69863f393e1679ddf5326e1f4de42220df3839ee71c8fab2c3faee9af0f5e9ee5a3c4c146ae7d36536064a11644a9a195290f3d75f64652050ca8a1ef17eed6f5077a651af1ce5304f2e6fa781a83df2a7c4f5e1c8337d35f93633d684803b7bec4fea60e1f9925580f9199f40f307bfd84de2d51f1df191eeb52a48ed4a19c4f524cc26f7043bbabb1c43c4f20d950e218dbcf09a8bda0e1ca1759466938dd764c85c3d8de92b3534ff5c492d024e6ca87952243fe8b6379ba189032926685afcd3839a4423ba19cb0c5488982ce7cad134c60bc329f855ba4be63475ade6110d6db66613c3c7647e76e3949f8e5299738014743523662fd6b1626bcc0cffdb3b757ddcbeefa2facc49da06d907d21888b9344a3167d143e5f8e022d8c75229fd491145c451ac92f000aeee43219215a8136c7c17327f6e0a3eef7fe1861930d143d92f33aa74984c89f9ba3e9ee887bef4f9b16654cbc739fd6b2eebb255596dfd6639896685b72b0e1ea92019884468f5c78d21a3a69df24a3d8d517cec2122417bad0ac7db0182cc87b8b752e7474a36acb8508d118d44d509cd8594dea3a3a611a6c1c0b3bcf48b4834d8bb5cd18f420ed7aea21810c0303ca2d5fc67b116491f1bbd055221c79ec0dfcfc22c17cba3eb4fea49127615fdcef9cbecba603dd2e01e07af17ab0f4a6179f54edb34db2dc0c937a0aa1151c8a9474afd1af7c0a83174aa1fdd8e4bfb9b10841df5ccf068a5612627c8724b1c68fd3879a57265836409a6d851f1baf0023ca", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x100000000000, 0x0, 0x0, 0x0, 0x4000, 0x3, 0xffffffffffffffff, 0x0, 0xffffffff, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x21, 0xffffffff, 0x58339298, 0x1002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11}}, 0x50) 4.859923996s ago: executing program 5 (id=1258): syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400000212c71c000905a42e7fbb00000009058202"], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="03475a7b0200000018110000", @ANYRES32, @ANYBLOB="5f1135b9c02b4435aa0000000000000000b717000000000000850000f10f620fd8dcc1fe3a22c4a58680000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000faffffff185600000e00000000000000000000007138800000000000186600000100000000000000010000008510000005000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x7e, &(0x7f0000000180)=""/126, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000640)=[{0x5, 0x5, 0x9, 0xa}, {0x2, 0x4, 0x0, 0x2}, {0x0, 0x1, 0xa, 0xa}, {0x3, 0x2, 0xa, 0xb}, {0x1, 0x3, 0x6, 0x8}, {0x4, 0x3, 0x4}, {0x5, 0x1, 0x1, 0x8}, {0x2, 0x1, 0x0, 0x4}], 0x10, 0xfffffff8}, 0x94) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r1, 0x20, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r5, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r5, 0x0, 0x4, &(0x7f00000000c0)='[+-\x00', 0x0}, 0x30) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={r6}, 0x4) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000007c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r8, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004086}, 0x20000014) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="0200"/12, @ANYRES32=r7, @ANYBLOB="35090a290b643b7da4c7fac1002283d2780d21e37520da211ff7b8f1eb09fce6c5b5fe074b12ec372c807c5b14f1b211904020540d3949835f3850272cbb9c6899f6252736b825fef911bcd17ff2d30c02e3758a2b14e7aa74d868969bffa719a17eb4185fa806ae6159392730ec5a0a7c38cbc90a1fb5599361c24cf81f8a255f3de142cc4f1eaa3e30cd2617198416900a2977e4c01ed3f8080000000ba7edf6c8fa18f6939089dad556200b74b89462fb2aba08a3cce020e85cc1acdde501edff012c9bdf41a1728b63e75118f277281e541751f4233959fa091a47c99da4b7faed71383b9b2f5d05", @ANYRES64=r4], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000380)={0x4, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map, r0, 0x2e, 0x2020, 0x0, @void, @void, @value=r9, @void, r4}, 0x20) 4.272628984s ago: executing program 3 (id=1259): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x3, 0x1, 0x9, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x90) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40881) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5}) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r8, &(0x7f00000005c0)={0x2d, 0x0, r10, 0xc}, 0x10) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r5) unshare(0x2c060000) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/cgroup.procs\x00', &(0x7f00000003c0), 0x2000) 3.764024158s ago: executing program 4 (id=1261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x18, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000140)="8ab55f66baf80c66b89816018266efbafc0cb000eeb88c008ee866b8010000000f01c1660f3815162800f30fa7c80fae340f01c566b9800000c00f326635000400000f30f30fae34", 0x48}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x2, 0x2, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) 3.476204645s ago: executing program 4 (id=1262): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) (fail_nth: 1) 3.081200997s ago: executing program 4 (id=1263): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000380)={0x3, 0x2}) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/uevent_helper', 0x149882, 0x60) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c38303231"], 0x20}}, 0x800) recvmmsg(r4, &(0x7f0000000780)=[{{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x1, 0x40012100, 0x0) process_mrelease(0xffffffffffffffff, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 2.975397757s ago: executing program 2 (id=1264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0xe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6cf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000180)={r6}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x2, '\x00', r7, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) 2.592066159s ago: executing program 0 (id=1265): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x400000, 0x80000000}, 0x8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e22, 0x8, @remote, 0x1de}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x10000000000000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000e80)='/sys/kernel/profiling', 0x22042, 0x104) splice(r3, 0x0, r5, 0x0, 0xbfd1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000380)={0x7, 0x55, 0x3, 0x81, 0xab8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r5, 0x80189439, &(0x7f00000000c0)) r6 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x8900) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x5) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000280)={0x0, 0x8, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0}) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'lo\x00'}) r10 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r7, &(0x7f00000001c0)={r8, r10, 0x7}) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000240)=0x8, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r5, 0x29, 0x41, &(0x7f0000000400)={'mangle\x00', 0x8c, "080a9f928a18eb0e86af1ecad608b18253f7395c0b8b9ea04d421d1ca2a3a9ac89260af6ceb3be96a8d9b38d9b1c8c8ad0e952df26cc96a80b3d78c10b8f736831281364c9ce5b576e0c51bd186b3ece3569f87badae6f1cbc35421641dda9471784a18c3fe9dbd5daca140d8588ca81ac391f034d72e1c61ff58afaf94825ba2f750938c449c0671573ffa1"}, &(0x7f00000004c0)=0xb0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000002cc0)=[{{&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/37, 0x25}], 0x1, &(0x7f0000000580)=""/125, 0x7d}, 0x6d8}, {{&(0x7f0000000600)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000500)=""/59, 0x3b}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/83, 0x53}, {&(0x7f0000001700)=""/108, 0x6c}, {&(0x7f0000001780)=""/7, 0x7}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/76, 0x4c}, {&(0x7f00000028c0)=""/14, 0xe}, {&(0x7f0000002900)=""/235, 0xeb}, {&(0x7f0000002a00)=""/47, 0x2f}, {&(0x7f0000002a40)=""/124, 0x7c}], 0x6, &(0x7f0000002b40)=""/33, 0x21}, 0x80}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002b80)=""/66, 0x42}], 0x1, &(0x7f0000002c40)=""/105, 0x69}, 0xe}], 0x4, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x5, 0x0, 0x20, 0x3, 0x800}) (async, rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) (async) ioctl$sock_bt_hci(r4, 0x400448e7, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 32) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[], 0x2c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000002e00)=ANY=[@ANYRES8=r1, @ANYRESHEX=r7, @ANYRESDEC=r4, @ANYRES16=r3, @ANYRES32=r2, @ANYRES16=r6, @ANYRESHEX=r1, @ANYRES8=r7, @ANYBLOB="c99d8ddc723606dbeaff65b119a157f7aef58e5122b13710e9dec76e307bc752672c34423613a3cfa96c642354d2e8bb4334e947880ab4979ffca33b312c0d949b7a467612cbcc44557a083a9a194aebdc4b38644f37f425d0139d9f9a5077fae7262a2119327bc2994e16ee64ff61b254ee2d1356053c349d83f49bf1e490ffc6fcf50dffe02e61da35d974adb72a86557fe2bfc9354434377569d84ca1", @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c0c0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) r8 = open(&(0x7f0000000240)='./file0\x00', 0x606701, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "059c3872ead4e092c146f99405fb9d827cb9ec3726b40e84f6cf31d2aac94c9c5aca1f09a52a70ee3ce1bdef"}, 0xfe48) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1) (async) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) (async) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f00000004c0)={0x7ff, 0x7c4eca9c}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) 2.046798887s ago: executing program 5 (id=1268): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r0, 0x0, 0x5}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x35d}, &(0x7f00000002c0), &(0x7f0000000200)) (async) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x0, 0x35d}, &(0x7f00000002c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40400c0}, 0x40) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, 0x0, 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) (async) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r9 = getpid() syz_open_procfs(r9, &(0x7f0000000080)='stat\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.614413412s ago: executing program 4 (id=1269): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getrlimit(0x1, &(0x7f0000000040)) read$msr(0xffffffffffffffff, &(0x7f0000000080)=""/38, 0x26) r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0xc8000) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000140)={0x0, 0x10, 0x8, '\x00', &(0x7f0000000100)}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x1, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0xc045) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280), 0x200000, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f00000002c0)=""/157, 0x9d}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000540)=""/208, 0xd0}, {&(0x7f0000000640)=""/241, 0xf1}, {&(0x7f0000000740)=""/48, 0x30}, {&(0x7f0000000780)=""/221, 0xdd}, {&(0x7f0000000880)=""/170, 0xaa}, {&(0x7f0000000940)=""/173, 0xad}, {&(0x7f0000000a00)=""/211, 0xd3}], 0xa, 0x3, 0x8, 0x5) r4 = syz_open_dev$audion(&(0x7f0000000bc0), 0x1, 0x60201) r5 = getpgid(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r8 = syz_clone(0xe020d800, &(0x7f0000004d80), 0x0, &(0x7f0000004dc0), &(0x7f0000004e00), &(0x7f0000004e40)="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") statx(0xffffffffffffffff, &(0x7f0000005e40)='./file0\x00', 0x4000, 0x40, &(0x7f0000005e80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000005f80), &(0x7f0000005fc0)=0x0, &(0x7f0000006000)) r11 = getpgrp(0xffffffffffffffff) r12 = getuid() lstat(&(0x7f0000006040)='./file0\x00', &(0x7f0000006080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000006100)={0x0}, &(0x7f0000006140)=0xc) r15 = getegid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000006180)={0xef, 0x4, {0x0}, {0xffffffffffffffff}, 0xffffffff}) r17 = geteuid() newfstatat(0xffffffffffffff9c, &(0x7f00000061c0)='./file0\x00', &(0x7f0000006200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4500) r19 = openat$random(0xffffffffffffff9c, &(0x7f0000006280), 0x400, 0x0) r20 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000087c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008800)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@initdev}}, &(0x7f0000008900)=0xe8) r23 = fcntl$getown(r3, 0x9) sendmmsg$unix(r4, &(0x7f000000bc00)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c00)="bc97cb4e8a2efe232db45af95ba6d88c759f8f819464a7166a13081375454c5423c9550a7301452f50133a6f8ad0875b6520cf8ec584878a3943eefb74fbd304c40025e8c57b8a5c357b399b78bf603eba02fb4b039e4cb50a5f1c4714ec8ada1b04de34e2d5f2d7c960cbc12c954194c5619b498fcb873b49ec7c300573972a53f945460424c40187d305f888ea0beb", 0x90}], 0x1, &(0x7f00000062c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xffffffffffffffff, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x30, 0x1, 0x1, [r0, r19, r0, 0xffffffffffffffff, r1, r1, r2, r0]}}], 0xf0, 0x48004}}, {{&(0x7f00000063c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000008740)=[{&(0x7f0000006440)="aa4017e2ec01e6355dfadc9885dbbeba25bdfc42eba0a17551acf0412c195402c03d512dcdc7c97309d712a09391e54d43d749e3c8e37ac91d15ba1b9b490391ff82a76e1d3f8d04cfb2f73060f275218052f592b8c0a4488a870a5a2ec6e0d94bbfb35dd1b568379c0795ede3f3ad69ca7a40043bfbf236c83bf2626adb761f3386457917fb38b3d3dde5f00649e10f0e25aaa310363763aa03022a908cdb8f088a47849a12f2ed6cf5317961fc0bb225da7ccfb71d1b25", 0xb8}, {&(0x7f0000006500)="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", 0xfa}, {&(0x7f0000006600)="6c79c2d00303aac7d21708c261e1d2a9c605c52222451675fff8be47cbad8fa1c83ffab0205c551614b05e4e427f11b2d4290b1bcdb8a8d4b58040332441023332f9e2057e93773cfbd8464b13344d167687687a8ec80f9317b8336988efe4b2a217b7ccfedd773a84d6", 0x6a}, {&(0x7f0000006680)="0305e6fa932a47030241f949c0e59020d71bbbf7da0eebe70e5cdbfe0e8c9c3334a319f7cf4491864992c25bbbdd98e47cb1c1e2bb91808f41600d8e49be470b2ab36375c751676ceeb71ac2c8313f162d43493eba98d2e74269b8b0dff927f804ec532d1860af4b70c1802ace9f177b3cf8682ce36382d5450439ac705fabd19dc885bced53c2250d4b19b95173a58fca932d8db78f2089e570df7cf79d08deca791d720266a5c4b06d7541131b43bd53179be4b9682ffe986449fc4471d6420361627fae2f01fa016b643bbf546e8479e2bbb5d7549ca8a848b05efc04db45162e6f286472430289469d1778a8fe682e59bc4671d6d266f655471b65736797b5776db8d01dde5d1ef98842fc888e06559ee51d9b37536676e0c6392d6dd01805e22f52e217d3f816780c216ac1de02fa306b78e01d00f634a194c29695c26f6276f6b1f140d02cc30da3200d5d60fb7e0048fc2356617c9ec3152dcea1a50bbe7a197af923b1d3b01626aebb401301c958c0c11bd5adbdc0ec50b9a8c60053fb11a5cf19929e2a389337140679a328d818b33e9e7d83bf1a1316080dc6ff73875c5d8533867e878158feabd628d98128207fdd8ebcf1190104f23190aadd72086b40e3ca44aaa238c22d3a8ad68199f80e5786e0e1c62a9368c845298e7bba287f8ff1a79a58333d668df19525661cc6819ae8ea357547ad5119b41f3a09df3bd720c10c94f9177c6c5540d9ac3f15265740acb2803d3ab3340e39a04bca0d1807720f29b6040c0f4b9546796092111a38152834e896676f5374e568b6d4125010a7f2e05aabc905c8b84df5ff1eb25315180d69be3eaea4fe91791765c6640064fadb266b5964be980cd6135fc27c277a72f488e40bc0308c15353b577347a5e34f9006ad5cf65082480c9640ab7c04bdf461609921e08a462280d34d84cddc3b8e7b9005ea727734d6de3a4cdd2cb7d09b171d066ec1f03a08dda4fe21dd6d7b4e973d3e0762db822ec0d0a725196a719724474c19f0a7716e9e9936a81f627ecb45d9a207d375ac2119b8ce1d464e560c4681c8233da41ce2858f9e033095e4f39c4f90fa26b522932cd062f85df6d6bbd9293b92917cc6699ab1afee427789d6efdbb37a3ea61770cd8d0fcf44efd3bc4a63c65fad54c0aa924a54a5a93f89607a9a78ea1fad0c6aec8d671e036c0c5719c9b3c1a11e4de31ec15d97d429c1cde92a481c5da72d408e01a56c1b02e68295137ad1d04584d13944e377c75f56cc540b5cdc21383cad7ff6195a6e78115b30ad06a39098e544dea259af0ef3fb6fe6a131c5e5ed2e6730de344903ce2437b1d1f28188358c62a480df589ca7d04b943bcfd91ed717e9c31eb700ea362e3d696debfbc74e2b3bd787d0fb212b0f40b0b6e5775284de8675183c5f803816bd69c35d6121e78bb52fe0b842a4a2acdb40ccff50a595a3c8b9ad681f2c5114c2825941aafc2ba75323d7add400c837ba861ed4decb54a900f4703349e651cf0fb7d0a2dd0ea66e5c995c08caf8c37ec564e4bbfa9c14e2b13fb7b0716c2bda724baf10c09771c6c1892697465adb8ccd63adc2cb3d0e748dbcca0073bd2c6a6e80696783cf91b666e1d9ccb2842375f5ac4c1886e01bdbca4b9ad6f491ff757e013ca2c44c74ac221635cb2caa7e20033c8a58cfa95951323adec00b03240c08d8a4e0df6ae37fa77e95a5984968c9ff5e1c2b563f2142627503425c80171ac4d479468f0aaaed4c241a92ffa5cd86be4316c9e24c499738d217334d00df1f71a04ad8c60199a65f5ac39d0a3bbbc6914d6fadcfd856bd6aef7cbde5fa753ec3f9463ac140df9e816db7ce468da89fac00c060a4857e596824cafcc63f71605b01d338c4863cc3489a2a1853ac651c15e959d77652bbc8881568794e184ecfc5462c07f99eb9f76741ddbbe106511f77c2dbaa3775b904f391ec1ef53d309766f79f3f544704770e3f6cb843eb4703594a33e4a62ae70283f4f1a910a257dfbf5872abc6dba0c56d149f3f80341b60ef197927c17259de99b07d54cf98b7d639ccef4bfaeef63c6ff497759535c5f1f53321c03d8697240da92401c19a2feb5f13d8eefc9cc4f27ca7587a0abcd6e46ed0305567c846586c423d750077b629b66b49ba5a7b318e75da2bc74141fb4e0512d210bdb32f00d63e8e0ca0d95ff377633ff0360565b861eacfd45a8ccac1d3ffc820599957c8619f24b7b97cbbe5091aebbc28f3b1ba30eff5c61ef14fb21112e74a8b4965c33860d689988bc22286d847bbf95dde70f768cdab1ef1c4291091467cac8f4281b015a9fde7321b13a1d00485a6621c0d27ca3ec11fbd75eb1d84cb7e0aa8f1046b7f73b69f95bb57ba2aec11f24c99449be0fdbba1d3201d43a3146c48dabd520525c410acab0f8eab9e2939be33391a68bf47c4aeaa25843ae68fba89096284f93af40b33c1a033725f9ba48fcf3cfe06e675d685e4102497ab2b5ece17778e3d167d4d0c0a3155e5ab72f5a1db75696fa20e6a207e98ba6541c41963b3cd64c8549b37cb654d0427aaf2b17aa132d77e6be3265509a25f52938f96305748c82e652d2c5471a68f954c45582a0486a3ec7c31245d8702792820e4ce09728ae98c482242c6fd11c0525beaae4c24efc51dfbfee1c55451546ff5851694501a48607325b2a59430882257cc07bd8c2dc3ee68e3f08a8fd2c7136231a80a24bc8431f2c70401911ed1edf0bd9005476b399f9698c66205b1d04014016263ad152159045a4cd4efa3e56370ab0d0b01d12493e3e0a517fdca8651874960af78372cab55de3c02df418b7cda26e3018e8171c366f338f67bc5f97da64341ce77d1c0f2f7908679ddc3cf7d0a57f23a6fdde5a2dd56fd82286a206e5fd23467faba0e19edf7dd02d755d187548dbf075af03d5960c9306d90574337486a2f3812c64081a36da4c184f401722a818b32f44ac56f87df38e82b551560c6a1ac20715df3e62af1319b14b0b9e572da3e493b00ffc3b70f6484c14b17d3256ca8617b24c603ab079fba2448c9b7afe6bc1cf9097c322f48803f70550387eb7726a115558f62131f9d6c4575dce2ff1f599bbcdeed7426b8e6f651432fe3d53b48d96a0aa49a76203152252738a888d0fbc0421e0c8927af783e9919b477aaed579c4d82823a3de1c8d832116c57550cefc2cb855ff7e916fefa77ca5f0f4858318cf393edf0361c93cdb1d280236ab7358e67bb6ca1f0b3315a99fa07729176a0ccf7c1e30a67ee03a992b716bf98989167a01523cd60b2a688285b8fb7160f17c96adee9774e6bfdf20dc3caa2d2ecfafe7510cc26f77af288d1a98bad9e8950a3aa8387dbedd4ec421a813bc0d3bb438895dacd95f59411b034ce15faaa8b3ef216a0c9535eeedacad2c573c1c5d6e6499453a332e7d15da85d839a5c4745171464c237e1605c9df1e600ea4fcd43a22b27b9420b94377d246fbf9dfcc6cd28cb25a56a3597697fe40712968bcd83876cc92f28a09857e585a479972e2e9e644cda8a7e80afda550d6e223b0b44b2abe4ca1171ea1d2d6b58abfa25cf88fe17147e50b752beee17901848b850ccd85d78f82c328389fd7f987f81139425cd1be2a3881471fb3c8821fd7e5d781d9e82a19e1c54c7ea0d05017418089d08f848099fccc078ac9db485c9b3d869defa11a54adca24f6b866278b8064170e513ba71d03603c3b67df3cf4ca026960490c3bf808f266532eb5715ac3aef9a9307223e43a3f3ba8dd297e90505556a876a9399e253f9291d8f5b6b2115fcbb2bf50ef80fd4d4469f8c93e29c5ef6c5ded2780c5e2931bec19844c847fb60b0f17a6314881aa06cfdc6d391d428a40fd7041764cc25692245fbed40301ee5bbf775e503909033d3a8381209ce6d314714eabb5d5557bdaec82f19c56271a926826a53c1395974840abb9ab1cd87dc24efe29ad3f26bc5dd0ba5e569d4482c8d8b15b2c8839cc7a8a3ba50a4c0b72a9b64218d5d01af113c20737b213ab1f60865753bd024205691a8b3e53812e1705ea9f8bb138ffec4aa8eab982c5029c320c20f86043837cdd86cfe54134a382aab271ba2222c3dd7f377e8d78cc95413b80da55dbb8064998d533594e9ccc3fa8833246fc2536671546d335bbf4595bd6c799e33fe77cccb47951b82682eebb7cfa726f48408dbfbccc09115648c280b944f2f75238fe6051e93adda5e4a82bc336b3402f9ee56b095010f760760ea234f9a16f72d049579c8101fc5bf05a3dfaa92debf795633c21ba505e06f8d68ca788d2bfe1f1f8c381d0a652000c54dc1776a25957a7a7b6408bb87df0a706a84a2f217adc0795da15c468a89ec7b6ad4f91012817cf7ab3d5f00883ff41e57e5583ac96d68e77f2fc0167580e94376bd3aba115a06e1950b74bf130b903337b0f95cc10c3a6446518399a63bb175087990f920877e316aba56d6eb96d3955ecd507843fe45aa41aed230ff09d50b27cc31568f46fcd7d52b849a59360902d46002817b2e0f8f13de1ef222b924731dff9b668b447dda1a1c36cdf7933a6f705c9de36297c4ba0c9fb249b3616205b2be102513eef6b2b54b3709eac287993a1c503b8e72469de2113d6899f87c0cb654abb92eafda81fdbe97576c8ae7d4025e0b9fa1d6ce4e2b7961a738e87dce832ea84b05385d49514bf9b64f2e68fc26fdb2f1ce391e951be862ce8e18b433157a5ca7097c79e6e27fe65834cab90b6026cb6ff515110c2a7ee59712920d61509efa43f526c2bfa42ef7f0303be35bed9d3fa40dd2935f5519152f59c4d818105c9fdbf795fea62a235c287e0f0ff9a19504a5abe80b1bf8125e102690578bc0f9317106a0fff4bc7ece46ab214487012f32a7925f6a1d2e67d438809149ea72320afb3c8fbd0d53be6dc98a4e0a4e363dc1aaec8f7cb5a7f38834210bde729a1c83b88585c40191ff169b213f2ab6186acbb583ce6f5b4c439e6d9ed48f4a93c24f75ab50c6ac0f377e71c3593d12c922ce4aec2c27a64d4453b2dad5b9d38cd206319425dfaa4af739f3bd9c74a6da187dd8c028c8434e70dea791ae78eab95969e6f3c7287445b0e9714596799e566415729f37800f5faa90061df3d05ceb0bb9a92e6f6c45ce4523eb788120762bc92b264115464ff7c2385d113000301c6407653a884c0fc45ed59c0f6335439cb24fb789b70e5c47866ae6b26a8b7acd9ba6162627e0b6585712e7501baeae711833fadf6e887e247d9544c79564ba443cea430198410028a226e74311c5819b6c8fcb0777f3035ed65713043bc412c7c636e2326bc0e670fec974cbf5a13c3fea95c6b6ca3006af643016a4f74b52834ac15bfc7fa64586d1def7a4a7d663ab9643caa3bae0da8b2d2aa02ae8cc5a116589598e6a0641c384124b4614452a2f2ab568c958dfeb49fd41ec551fa12765ea3e91c7b7db7e8e867ac96a1947b2060995f7593a650b858319826ac2a22ff3011d432179b97dcdf702fc9005c8d3baf6ab5a80fdbd97be30ed5bd3f650a3a5d414315e9f5f989bf179888c792d262ece55d59e581e68f7262d63b5c3964abef85a5834039df1db2dde9eb16b76eba0990a9b2c38340b353eef257a5e7dfe4d6b5c2921a22e2dac1c6dc57faaf1525784e1f81695f797193dd280ac1c29d5de3b478660051d1e27bbffd523143565a8cb6be2cb3d86b8f9ce0ef00423816135715c9b67b6bfec847eaadc37e97e4c81b6f154bb679cd4ac5b095e89ee924996b5917f5961c83398f8f6b4ee343602", 0x1000}, {&(0x7f0000007680)="75e90a1fae344cb934562486df46b3e23aee8d5a71eb6098622c7fd6ba9231a0c15f361228c12df4189ef963db74567e404820e6744203f4dcdba7d46c52c14c0a6f492006c221aadcd24ad854a5c1273f8060a7088ff824aaf8489c2abc23add55a26e2ae0879990a360463e68097b5499dc6cd6418e19873fa2e62edafd36bf98fb412fd9c6c33fc9181c861f65a43390b997d0251582a68a79ad5a9c779929e3f68f126efe57a7ef680db0eb65fe91b8063a4bcf5eedae1e4e260c6882df3d03e6f6265a592a1b140ae8e03014fe2920aabf4df100cb65e0cb3d1f27a696c3c0aef35e36919c371719ca3c3896bfaf2ecfc67c577d2424d6f4f6f2db5258098f74d65270aef0bfbf0b247fdc9ceb542e1aaf18facfec08429f760c6cadb7a99051e9409d51c773d5977d25a04538c9d40067b99f99f2599c0755d0e72b82121fb28fa71a16ca41fc4a801e5d1db1ada75768ae38ad46cf0f01774087e5b29f0975f4cf105d0e579ca9a6f0115fab4748c36a47135824304237eb76aef168f0f8302d252e7316302359c5e55efcd178d734832dff59e69c4015a558257a1b4c336c8313c333eb4fd5ef73e7a7edcabf03d9e008c18696d06f723a709dd0c3488749fcb9ce3235290a57b2c1ebfe28527d3dc603d938430531cb69a2f9c0cea0fca3eb6291d003130bd89b21f5dd6938ede381ce100d7df431c63effb476a631088e49381024a53ef6999244e69fdace19e146c8ce20ac52f0f2618f0c934b0817f6863ea5ebaeec5a8ab5996372776e150c40a188880f8ae26d8c45310f6a74704ddda28f403fdaf8752bef3c303377b83c35c926998219254fbaa9ab9e15104e49525bf2f4309c31477f7babb6195187ef1d137529d3312f9a0540132b6bc13aa9e5e669e299be1fe875a2cc16e57d72f6a761456dc0e3fa90909b0163bd787d6934ff4019f7b3b0fdaaefa437fe03423ded1c03557e9ad46fa21fa9d2bb106171f4c0906b173a40a5b0928a19255d24f4103e47d7b964cbf0868dbf12adc15dbe6dafca9c780c2d5e4189089df45f5a8484107814768d8ca92327999f075d2f6d05e0cc77a56d5c3f771a55a3185e4732ca0896fdd2c37d2ca60ac7b5cceeb50007a111e84bb05de9d291a3fabc6bb2c734773f61419fb78799dd4ffa46381d085a874324bf16a4bc99b4dbf0ae994436ba252fa37506dfef7807419449c2fc9e8ea6682759312459bf973686f2332aed525d1bdf0c833bb743dc29636fb9b3612fba754c9db8d89cbfb5855bf53fd1926385705c4c25b565b96cce4e29052ff2adc1881fafbd3e7abefdb8b31154dfd6177d9c96e8f6c5383e32d556d7078946fd0d6911ad0b347b5fc37f5519f3d3cbc91818c4ab69723c2c5f93e30a2d9d42194ea16e07ecbe91d5d58a809b8505e0ec5cf9b138b821c2a6770323ea37cbed98474463645c7cf080cb05545e0b270f75d777535804ef86b004eb28ebafa833fc884acc26ed1b2fee81f8f0183a2c7b13e0d954fd7d8bc78ccc5262aba91f9e29c65742744d6842a99fbaa923241b9ed67a94c118e0dcd3ac5e3b7231b7178d7eca59d4e27ba062245e972c5263b433574cc7047a5a3385e8cc2a819f0a39a11c0838cacb570de140b75e90c174b5f412b83274c7801654e1f0b4ffd0657daf44e2c5b03734aae154f5acf1c5d13155bbc46b0a28d4fce9245a8bddc35fae22321a61dd231a4e44b3e9f8feb86ef6a66a72374c42dc9549bb72eedb1654adc9a232fab272cb41e7dee87679608d2434b36ebc7242028d4f3ce749380908ee3ad02c76e174e9b5dcb25abf01272c65b8f9abacc2fe38cc1f102a9db074bf8d2bd016428e8d98ba90294a1e10861093c862345ff420e2dd91adada4a6c165f88a1aee8d41511acbdd40856a56c2063d93aea1eaddd000f68b7a433eb1f65291218f92e23a2e752053fe01f153d088f9d19605c83c985f98467cfc04540b1763bbd4693502c4d83406178cb6e6fd41c17e285b698a6a72dea7be90a194d8de8d008b65dcf19b7c3cb019bde1638914ac37d474963ab7171412e8a689f6c4b27fb00c23fbb44b5d3ebc806ae17e10fe4d007f4de96e605ec18220dd4d58b86bc01650dfbed4f52b6954ff40ced40ae7f7014f229f36e83830fb549d269f7e808fc1f64b7e6c2f808d3c4ce59a5a9ce8ef05a87cc35fe83a21f40f97b19608b07362c662bd49ce32a41bd28f8fb7b4487b5633f8daede80fd4d6ffbd3d283e1362bd07139267e0ef84b377283e303bc746e4e714afb60982dd625453a9448e8df3c5dae3155f3a4d0177567fa78ccd2d6206f8f6e63a4f0e0be058d92aecf378bce669d0c1ef19b37f86c875fc1c9e378287acbdbe328050afb0d279ff62900ceffb447f9dedd7d2c588476939d4b8f47d538b1026f5d2785fd90e5530231a90a21b023e4978a6578948618fc2ec5a78f5c70cc338761e7ed32778aafc80784a9f5908b818b4c56e3012397f7e1edd7e6fd2de934486551b705b45b4309f4988973bf404d2c66b831985e0f19eec70afe64b965155a7412c79a196c8b36dba4b0b11101a49e66a268ed5edf88679f4ff56ede4fdbf0026638c6f9ec16a960c52022d893eab4db939e7a3bf66369da55258161bc385e47a6e3eb19ab06047392a0227015e0614afbf5f8fcd1354d070f446fd6177b61397f66c11a1e4301c3c4a49321d3b8573d2f9ae252a76e9b0fd97312f1ab9d4f2d1f7552d347d1cbd8296b1ad7629ff1f4d4c2df0463cc0b168cda08e9d3f5d7dfece6e3fcb762b30274a15fcf66d5a556b02cc4deaffa910ac04724810da7ad1d83eadf63475d3ddf3ce34ca3041d60d4e4284fab43f91e9d239c8c7b4724283279415fea2eb1446fd6a8efb38ab84e00291cb9a093717b9a3e5c07bb09a4f99ed8f96023c7ae853aee06fe26f821590f47fe8fa0c8836d45c074b8a6f0988aa453bb8afb32b414ed5b515b7bd93c2a42b8fb88bb05da5658df363514018658385ea353c30e605a51e25145e619a2fb564f7aa7ba7251afd20182fba93d4adee5ec1a36f277ea96d90e4670d502ec174564c124ea121abf454b7a07d2ae8297d73b7c09de257af27c450544842ad21b5d266aacc5562ad5884c97ba8c215eff8a22abe8243ff715f3f5c938b71a28e87caf035b4bf6302e86d89510ef3dca7995376e3152705ecac9968fadc18e2c9849547c5766c209272157645d177fe74565dee035764a39221f6b2251d3742601a55fd1c5d67eccfdd4b6abe0a0b6fa16758527ad9ff495a325a55f0d2a9fa02e5f166c807820f5732dc94b76cb5a7f8340fd7a751a4f918af1efb50544277be4e18855df22f214a2ebd4597e45b022a27cfabdb0e4fe0eceefe153f576622eed106af70163ddfd276550460babfb73160d1de9941346a92d5483b394fd4edcb1814dd978157ade8ae6cf7d24bfb0f2ef7e7d2aba1100bc7a84666d529abc635d2a76b5b8ff418e5548a2c76600bc8919c141118358cc5b9e67286e08cf6c82a8fb801ba8b9598dfe253864a050327c6167e2711e7a8ef7f4f32a6cb7e4a89508a82f1ac1d9c00b6da43ca980585fdd5ab7bea74f9e388ee1508c723bbfb771db1a28bde599435550aef9740c24c84c05ee8b42ce7d3832cf7275167b47755b51c7a14a055d9985a0646cc9e11bd14dbeb249f5d0c7d65dd4af1016ee7ae9ba5468694c25b9136e2eae8e7b304c684fae5e22e83f0dd337837893c30d09fefe22cb99b45e43567aa90c4ce80eff1a5bccc60aca1ac9126337166b4e6d03cd54835e0cac8a5c96b3efedc83c598495d981043cd7d4abca8fcce6372af8fefcdb34a77a06e5bfeb57145abb9b825421159cbbcdca79c7609ce0389ae8ad80a3b8df683be8ccf6aa7b2e9fe92318451a4b689416b60d1fa3ef660d6ba83aa23d4ac1c528075b30944e3c3f6d323f66673f6d432539f8e753b388b2a9812dab2b7b3b80216b6da5c80d162ee746fe5d1db6fbfdc610e2249059494578322b274db1c8b4f1e68dc4ae67b8a7078606b911eff08836d39c76bb644e37f3198b6f476a97122ea05c92d0fd7e2c146d2d6e612f2033489ec26ff2358e9ad0df4fa5736af50d30e8bebedad00b3a247364c3031573a7f2465353d9f9a04e6c5913ae9f48bae3328a433abe85900062e11ac883509580d881c7daed21a5dea3cd8081007aba095a1bfac7bf6c7aa13fb670a9209e582f652aeae4ceb947f6adb112e4820f2506b3cf2e56c48701307fa593a8f3b9c6fd52cffc129fd7d0b1537e216621cbccb56e8ecb88fe2dd5358a9068eb942cc93ef0e3185ced0ed2a3adc0cdfbcac46ae3f9de393a75a9fb2b7a1082ea34443c7d92a5c4390166743e9def166be0c6b27b196ec93cb28f7e81aa18825ea3af18ab2510611cbba25ae314bf6bae4e1a9720a2f8ac5d8228088be17472ea4da12155ba7d3e9421b24e0b9e502de5df3c4948f12e3806c442e4880edd0318f17858804ffe66f6f0a94280509fbada1e54dd15f1f7a3edd9795e0c174d74e5fc5dfb04d903521a989235a017515b0383d8b8ffcdfd3bda491ccf335ad41ae9d1aed9ddf19929cdfe43e40e644dc06ea74269f1e3c46d405f78c693dfbcb02c404fd530d1cd9840b9fc9e6c7feca861fd7718d2aadd2c93c68ec598edac02b63fa2d0088d433a9617cb130d60838e64c6c9d44345d6a203b302698d3f2f14ef11668037ae72a599d656e19513279025a214ad78655f9b6eb52f065e62b53530b6485ac831268d6d2b189dea29e4babfa9647541b28140f56af8e2c8165325d2edbb5ebd599bdf00100adbb20d0e1f9e65892243c1272307a237e036529dad4b9bdb3a0f58d352c85f0d885cba3a0551c9ba2d4a67ddc3145ea9504a075658ccc90fdd13e88e6e5e5128b15226a2bcbc4f93702aa43595231817bf4a0e44bfbd32a30b019d8f6d2e0fd7b6a013a9798e54c6bb09c6af58039e097d0882c910c3841bea5c373618473affc732edf26a5075fb3208ba140757c649fd004e99b52cb193f8f05471b81ab46b6d69666e2d0331f9ac2a24870afa02926c53c4d02cae031ef8396d30ba71bdfbf8163f511497ff366c3307dcc86921d886603aa7d083df6911ff4862713b4685e059dc841b57fc83fec957fdae8c9a014e287a91cf4eeb72a36524cadd2e043d9c8f88e34fef97579f579b92d554a90b3655c28ff954e2a206b5e88560256d17767e2568098d114e56537d220f0458dd8f32743c98a900e265535ac8f97fb6b88d65097204a6e7612f7f0b94ebf0875ab492c6998d0a5e71e82ba8e3cab6d566235d9a3b2a9ffa7cecfd2fd5953171f35fc47e16c26b06ad470b082ca649ace18acea73da32f186131dc54db23f1c0980bdf8062d767ad70ff0c0b0d2fa0e9fbea1452aa9d38046a92c5ee8f4b0137849fc73d8157feb10ad79ec44e55093de7a0d1a0843fd4f06d10dbfedb7119e9838ed7d3ef7d54e6d5673d01a01c8266bf45054de308cefbf73bbbdd75f538ca0c1dce05df3a5bf9cc8c8b0d9193c657ae0fafac08f69618bfb5e93cc7ce91306dcbdcbf9cd36055188f4dc9402babab8aa04a7c52b59c688f1b6b1484f316547475d9335b99c0d56c16887a0b8f3b1df6c8b8162efb410d752417d49bbe64789980a3b82f44f262451e891aea95fbfb620cc1a1e637f39380b4a953cbea6ceeb69c75fb4786c67a348c45d0829ef43ff95019fe83678c2634f7afe8cc4004f2fd2b922400096d3ef574196ac23a751972eb3282", 0x1000}, {&(0x7f0000008680)="fa1e9ba441a13047b7a845f8591167d0dc106b30545bbd5ad8ed25b271b70fabc56d139d4d1c", 0x26}, {&(0x7f00000086c0)="bbf0239bb148c3f0dbc947121722ab18b1b67b", 0x13}, {&(0x7f0000008700)="f35019dd215209f7e2cc63c0939f020fba61f3e88f2c9590aaa43775843c33e26b55a6f7b113188c9658c402d380d8b7fab510f92319f6398b8c29840a2dd3", 0x3f}], 0x8, &(0x7f0000008a80)=[@rights={{0x34, 0x1, 0x1, [r1, r2, r3, r0, r1, r2, r1, r20, r1]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22}}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r23, 0x0, 0xffffffffffffffff}}}], 0xb0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000008e40)=[{&(0x7f0000008b40)="c9342316580c781cc9f465fed49e8998603ee0602421b71d233508e344249036dea1a5ed634f25e92e81a9e1deb678133e3c3b1424f4b9d71f7896c72e43ffb206943294762c44bbff6921ca7df996a358bfada767c5ecf8ff8a10230f1b0057f9ab281aa7feff4d364614100cc93738bef91bd18c40356cd9c3be8a45b903d33298aaac62cf5f43ff19efefd94c1bcb4b417c95a6699a1611b043fa2f6df1e7a55a68", 0xa3}, {&(0x7f0000008c00)="4f65fb489beac9a87b34200637a3a9b1054a2222ca45ccf93d681d77c5ab042a590215f61ca5ee9b8743f351d93add92a35bee3647c3903e231b64491c0936eef8906b4350ad24db8fa5980202dafe4c8d9d0f727946bd4a500228ba492a96d80ddd1ea5dfcd289e52b12631c0494a50bc61e80af958fc0030ae986aac1e56993a21df5dab22552f561273fdc89f0bfff4678b5fc8608a24afd124a50c172490240d33dcd26fb453f6716a1540f7018aca92d8515c35856d1c3154a0839d82300cff0f213629d4c597cb95389e7834851f51562e28e074cd5c", 0xd9}, {&(0x7f0000008d00)="b47dc575d06202696d62c2bb3d40071503ff525980735b8baf48b4db209ca3023b31a69f8cb40d4a3cd023b3771ebbd92dff36407078f7a5951f1cb5836d81f79b3c1e3915d3d0e25c657b9a4c9bb8d00d087f3a98df2cad2059110dded22971388decb8dc850eb8f8e9d8b946aa248325660ad2a81480ab8257dedbaae040d31b987434eabc5100cafdabf20c2e07fd535dfb1fe274bea59cb29b5463a84853992ed4d1a334433302b7d85f3535d83f5b7b8dcc19e876911e7af05ae12122ba7a608256427c73e365763b9104e3", 0xce}, {&(0x7f0000008e00)}], 0x4, &(0x7f000000af00)=[@rights={{0x1c, 0x1, 0x1, [r3, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x58, 0x40000c6}}, {{&(0x7f000000af80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000b180)=[{&(0x7f000000b000)="968e6da21f7f6e7f33637c6fd8de7d97f81b9cf9a62dd82a13a507def687cfed3652b22756c9a1ec058cf81a3f5937a35c1c954cff5a10cbe77777c54a797e0dde1b4597f7e95b2aa6cda957885422f76bda4a8b4d239757fa228e76c1772d916a8bf792f5fb7b9a7ef4489169855c852cc63f435680ff7923249578ad0ff351eeec2a23c08b932c9e9e009e32ec0f4ad0d88d33c0fa181ef065d676eac1db8f9e80964b3104be9ee61c535741fa5a2e8de03a5baaa4776f7236d93101bdc2f9ae9b60992b47bd0540208d0668968c80ccad07e6f09c33d8591531ab04f629edd138b2db9b5e7cd219dfef2dd30392", 0xef}, {&(0x7f000000b100)="47421182efa0aa695c29591e88e3d5e7ec2b70452a29101b1b8d9d4eb6a85904f1305d5cbf76943762cfc85952d923a86351d5c7c97b2c4fd7ad7e833bdc377222d6dbcee85cc6328c2f5aafd22e49f23cb20183c792c283b495ff604c4ef03b81c032438413fbb3d6289220334ea58c335c982bf5", 0x75}], 0x2, &(0x7f000000b600)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, r0, r1, r3, r0, r3, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90, 0x40000}}, {{&(0x7f000000b6c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000bb00)=[{&(0x7f000000b740)="a54fe3dd5edda03fa1c2b7767723ae070fb72c694286da8970560966cf11a601fd8a338dfc8aca9aec28ab2c16be9aac9ab5f6f9c6fa1e782fcc49b7c40508822ba6aa609751e1bf70f86168d3498351df0dcda83af8d84d1e7a9d8300005523751e5faaba332c6b2501b78b25d3016681e00f97ffefb1abb505e9bebf65446c7b9527220737d227be5dcab0dce6ad5a47df935dce0a8faa66054c3d3cfc98f701392930c26c9b8aaa3fc1095b72caa9c250c1a7f90f9a391e7d6a93b4016de246c21bf6427e1acbd556215f2ef95c24986a0a3f4871913425a3faaae1eab5868fcbab670855710318", 0xe9}, {&(0x7f000000b840)="bc05c6d1d3", 0x5}, {&(0x7f000000b880)="42e8cf91eb86e91c9de461a8edca2b78272b046b3119d54a4b1849809f4da9e8ce8e3bfdff1757eed946ec0859e9dbd5cd935ca153ec82583d7d8f2a3ddac2a5b0d366988249eedeb845184a7fc9ffe83578fba140c28fcc6b590468cf7996e5e25883244384f3153efcdca3852db25adb96900342de43d0337a2ff320b168c21e8b7f6811c51f5ce7783613005e10beb61d0eb20cf552297cc811dd38c0e6e10cdd4c9fe25a88bcacd8a3c2bc15ce00e7f891b34dc777d6d1e74425ec20fccb68311702c4411c03a23c96258c93106d0224c526ffb7a7562a1189b11b7b9f2f08dea94bf7e7326ad99b32f1e61dabe1", 0xf0}, {&(0x7f000000b980)="7890fe098058171060113ff7ccd18f4112de052e738e6b6ce8059b7c71e0d78fdd894861b987c268291549ad1067ab42554c6fb9c83dd82533be318e34886680079e94c795a068accae2883f54ab732fb0e179b95a4a0bbea639b8d56864bfce4cd83589a9e543aaffa11004ff7c5a7eeb666ef21a779d42a9b8b356f4c3829825e7fbfb6a38ed03ec5bb197f4e1b620015a4b4412e1d97c2d7e543f654de9256c91bdf1351a8225d1c9f657d7b8d4953d7f56ad162e844b3c83e2217e32", 0xbe}, {&(0x7f000000ba40)="9844c25c062f2a83cf8abd09f9bf45af2eeb4b77d7270bb9444ccbb7fe959c3d037bcd42d7a4a217069c2b105db3d07b2ce97666bc6e7d0546439ea766db0668a8c1980f5086f679d0797a7aec9ea3257edd3c457cf10f119a3b70b9396d1aeb51a00e89e658142e39c64276807b11ae5af3db16bbf5a5aeeb3140ef8f817718ac6dcee8c29afcbd9ec870d7a51a9ba6aa983ea98055ee3c968ef048a91c7748d73a7f765f10dc9264f7a918513450b9d3c252268d46ec98cacd882b2a", 0xbd}], 0x5, &(0x7f000000bbc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r0, 0xffffffffffffffff, r1]}}], 0x28, 0x20004080}}], 0x5, 0x4000000) 1.564153343s ago: executing program 0 (id=1270): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x24046051) setresgid(0x0, 0xee01, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048484}, 0x5) statx(0xffffffffffffff9c, 0x0, 0x100, 0x0, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x480c0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x20, r5, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x34}}}}}, 0x20}}, 0x40) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 907.895235ms ago: executing program 4 (id=1271): r0 = syz_pidfd_open(0x0, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x4c, 0x2e, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x7b29851f92fa5c4a, 0xffe0}, {0xb, 0x6}, {0xfff1, 0xffff}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x3ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1cc, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x105cea42}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff6902}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6d78}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x27}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd3f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r3 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000540), &(0x7f0000000580)=0x10, 0x81000) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000005c0)={0x41, 0x3, 0x2}, 0x10) (async) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14, 0x80000) recvfrom$packet(r4, &(0x7f0000000680)=""/50, 0x32, 0x10040, &(0x7f00000006c0)={0x11, 0x1a, r1, 0x1, 0x1, 0x6, @remote}, 0x14) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000700)={0x0, 0x9, 0x1c}, &(0x7f0000000740)=0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pi6 \x00'}, 0x20) (async, rerun: 32) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@enum64={0x5, 0x2, 0x0, 0x13, 0x0, 0x3, [{0x1, 0x8, 0x3ff}, {0x3, 0x7}]}]}, {0x0, [0x30]}}, &(0x7f0000000880)=""/113, 0x3f, 0x71, 0x1, 0x9}, 0x28) (rerun: 32) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x80, '\x00', 0x0, r7, 0x3, 0x4, 0x4}, 0x50) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x2, 0xb, 0x3, 0x6, 0xa, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbf, 0xfff, {0x6, 0xff, 0xa, 0x5, 0x0, 0x7, 0x0, @in=@broadcast, @in=@private=0xa010100}}]}, 0x50}}, 0x4000000) lsetxattr$trusted_overlay_redirect(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0x8, 0x2) (async, rerun: 64) getpeername$packet(r4, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000bc0)=0x14) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000c40)={0x2, 0x200, 0x7c6ea48a, 0x6, r5}, 0x10) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001200)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000cc0)={0x4c8, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x18}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x7, 0x8, 0x80, 0xa, 0x0, 0x9, 0x8, 0x1]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x0, 0x2, 0xe73]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x473, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x4}, @device_b, @device_b, @initial, {0x2, 0xb76}}, 0x9, @random=0xd0, 0x4, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb7}, @val={0x4, 0x6, {0x4, 0x7, 0xc, 0xfbc}}, @val={0x6, 0x2, 0x4}, @val={0x5, 0xe1, {0x6, 0x60, 0xf, "85f87d4b8d94084258d90f496c388d81cae729241e1e3c7e9648b77965f4eebb73c403f5860f211eb7b8762b590036b7b486e9f7544da88e7d15299b030e578555447faf3938ba3d4d57e518e2b3e1a07839be9513349669b4574d08522210d34b274b5ec2e501d8c454cff807fe80680420d9df07cd466621bd3d9e290d493495388c6e469f3b9b5bc6f6a5aaa6299dd4ba5ffb8e1e0f89323689d9ee4a92dc947cf43a9f3ff38ad7a3bf88ee007d6198668314b6bdd8ecba9c06c487e6bdc1379c351d602aa7ee43a2b2002cf12793d3d1f450d84d23d7e5474690d357"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xa, "cca5bb5f24bbfa94849e"}, {0xdd, 0x91, "fdb76335fefd5a54aabb1f411ed6286ffa946c01bf8b9eacde6faa4ac8c2e3bcac5b68fa3b586f6ca97e0755bfa6b13dded8352ecdcc19701eae2d59d3597b35b95203e6d614db97023c4e71f0344ccde2ea06fd379bc35c92cf987ab49e2bf75b81d48f473d337785ce0dbcd0d5cc5488354b536410ac05001d98b6bda3f54329cbfc76a4ba66d1aab2803ad02c2cd10b"}, {0xdd, 0xcb, "cb83384266300c2a18c7014e00f5668ba4914310a9c415bf71884956805ff9a95a8a63fe842e27f869ecaabef77c0bb3dbc9ba1577cfc35573409d79cff4646620b5696a7294e5b922d610c496fd6596cad7addd50586e41abc8e7ce7ce23a2cef70134e6bd9b7d880ed9c73b3f32187d068e2dda66eddc381f5db3acc4fac1350c6fe310df2785eb71fae0d9a87a72e0cd27f54ae716dc4fa16b937df89c5c30da31ebbb9f8ac840c96e1a323cc8908c2b4039f689bf9baeedc9bd40ec89b6f1e6495a57f2c606c902cb2"}, {0xdd, 0x71, "646cf12656372195c51f89d6bce2afd2ac2d907ef5e7fe6ec5610979634969b1d14f61bb95024a7fccd2ef78e1429b0fe3df29865bde0a6948946e6795e02958648b16db578369b18ece1019a0c5a2cfee6e8a24fa483183a31c8cb7ee6b13bdfd23b6a3bff836119c6e98a5870684ee21"}, {0xdd, 0xc9, "668fcfd6cb527383cacfaf58cd52b0b292fee667cf84f91561e7675586539748384543d36c25ff84b5a26a83a7c112ac314beba0f6180228dcdf1666f34e79f7fbb5ae9bbeb611a4ccc08113e0806bf748c3d7cd3e7a2ceaa55f98d1b835eb9dd1f8df9436cfa4f265e5fd97e705f9ed6bf8cc78f931fc83a9ae210d982fc322d8bf99fc2097bddfcc998b72fe9a6c79b940619f6d7f42b89bac77829a23f78fd335a6cbdf8de16d92693e17cde786ffea9e6506c38508bab742229edf9f1b7b2bb4b078d9a02c6bad"}, {0xdd, 0x9a, "f5b9f3041e5e1a59db39c8bb3477cb2f569b27d938e953022c436c3b11fc47765f35abbd9c80163e3f74f2590c77a05f10613363a9c016cfc85a128de8b0d18164c670bfd6104250119c7e9f54d52be84c99d6e8f5f82ff391e74cfa6461ddcee12ae5da59e20a5892dead48da3501632c014b76aab67912996004ace7d45b211acf17340d728472f032f6ae1d9bb5e5790035d462bb57bd8761"}]}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x4094}, 0x44890) (rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.net/syz1\x00', 0x1ff) (async) r10 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r10, 0x8982, &(0x7f0000001280)={0x7, 'dvmrp0\x00', {}, 0x4}) (async, rerun: 32) fcntl$setlease(r0, 0x400, 0x2) (rerun: 32) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r9) sendmsg$NL80211_CMD_FLUSH_PMKSA(r9, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x20, r11, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3e}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x42002}, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x7c, &(0x7f0000001400)={r5, 0x3ff, 0x800}, &(0x7f0000001440)=0x8) (async, rerun: 64) ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000001480)=0x0) (rerun: 64) quotactl_fd$Q_QUOTAON(r8, 0xffffffff80000201, r12, &(0x7f00000014c0)='./file0\x00') (async, rerun: 32) removexattr(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)=@known='trusted.overlay.nlink\x00') (rerun: 32) 876.169224ms ago: executing program 3 (id=1272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000540001002abd7000ffffffff07000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="0000000186dd00"/16], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4008cc0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 872.525982ms ago: executing program 2 (id=1273): socket(0x18, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) r2 = gettid() ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000002c0)={0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=@updpolicy={0xf7c, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0xc}}, [@algo_aead={0xd69, 0x12, {{'morus640-sse2\x00'}, 0x68e8, 0x200, "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"}}, @user_kmaddress={0x2c, 0x13, {@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x2}}, @offload={0xc, 0x1c, {0x0, 0x1}}, @migrate={0x9c, 0x11, [{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast1, @in=@broadcast, @in6=@remote, 0x3c, 0x1, 0x0, 0x3507, 0xa}, {@in6=@mcast1, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x2, 0x0, 0x3505, 0x2, 0x2}]}, @lastused={0xc, 0xf, 0x4}, @etimer_thresh={0x8, 0xc, 0xffff}, @lastused={0xc, 0xf, 0x2}, @replay_esn_val={0x30, 0x17, {0x5, 0x70bd2b, 0x70bd26, 0x70bd2d, 0x70bd26, 0xa, [0x5, 0xae8, 0x3, 0x5, 0x1000]}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@rand_addr=0x64010102, 0x0, 0xa}}]}, 0xf7c}}, 0x40000) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x48090) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYRES16=r7, @ANYRESHEX], 0x0) 811.85538ms ago: executing program 5 (id=1274): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r0, &(0x7f0000000480)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setgroups(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone3(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000000)=""/4105, 0x1009, 0x0, 0x0}, 0x56) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) 642.698148ms ago: executing program 4 (id=1275): fsopen(&(0x7f0000000280)='cpuset\x00', 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000), 0x4800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = io_uring_setup(0x773c, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x3bc}) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) close_range(r4, r5, 0x0) r6 = syz_io_uring_setup(0x7531, &(0x7f00000000c0)={0x0, 0x11e, 0x4000, 0x0, 0x3d9}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) r9 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @remote}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7f, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r10, &(0x7f0000000400)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}, {0x0}], 0x2) r11 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r11, 0x0, 0x0, 0x0, 0x80800}) sendmsg$AUDIT_ADD_RULE(r10, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16=r2], 0x42c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008088) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 101.473279ms ago: executing program 0 (id=1276): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1277): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='0\x00', 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r4, &(0x7f0000000300)="ca0e808bb35b", 0x6) io_setup(0x8, &(0x7f0000004200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x18) request_key(0x0, &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='#:#*-+((-}%$#\x00', 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x40000023, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) kernel console output (not intermixed with test programs): jammed and I can't clear it. [ 315.239917][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 315.240940][ T6878] usb 5-1: device descriptor read/8, error -71 [ 315.362629][ T6878] usb usb5-port1: unable to enumerate USB device [ 316.308369][ T6878] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 316.406347][ T5927] usb 3-1: USB disconnect, device number 29 [ 316.490996][ T6878] usb 4-1: Using ep0 maxpacket: 32 [ 316.498766][ T6878] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 316.514579][ T6878] usb 4-1: config 0 has no interface number 0 [ 316.537055][ T6878] usb 4-1: config 0 interface 182 has no altsetting 0 [ 316.637857][ T6880] usbhid 1-1:0.0: can't add hid device: -71 [ 316.650845][ T6880] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 316.662471][ T6878] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=ec.e3 [ 316.675799][ T6878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.709817][ T6878] usb 4-1: Product: syz [ 316.719241][ T6878] usb 4-1: Manufacturer: syz [ 316.730018][ T6880] usb 1-1: USB disconnect, device number 36 [ 316.739924][ T6878] usb 4-1: SerialNumber: syz [ 316.766180][ T9107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.779896][ T6878] usb 4-1: config 0 descriptor?? [ 316.875799][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.879638][ T6878] imon_raw 4-1:0.182: IR endpoint missing [ 316.882288][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.534842][ T9135] netlink: 72 bytes leftover after parsing attributes in process `syz.1.759'. [ 318.423603][ T9142] overlayfs: conflicting lowerdir path [ 318.664667][ T6877] usb 4-1: USB disconnect, device number 29 [ 318.829405][ T6878] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 318.995346][ T6878] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 319.013983][ T6878] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 319.056924][ T6878] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 319.088430][ T6878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 319.118092][ T6878] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 319.164720][ T6878] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 319.179763][ T6878] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 319.221162][ T6878] usb 1-1: Product: syz [ 319.230424][ T6878] usb 1-1: Manufacturer: syz [ 319.296571][ T6878] cdc_wdm 1-1:1.0: skipping garbage [ 319.310660][ T6878] cdc_wdm 1-1:1.0: skipping garbage [ 319.339291][ T6878] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 319.366177][ T6878] cdc_wdm 1-1:1.0: Unknown control protocol [ 319.742405][ T9147] netlink: 'syz.0.762': attribute type 2 has an invalid length. [ 319.987456][ T6880] usb 1-1: USB disconnect, device number 37 [ 320.507431][ T9188] siw: device registration error -23 [ 320.821857][ T30] audit: type=1400 audit(1757525547.016:571): avc: denied { mounton } for pid=9179 comm="syz.3.770" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 321.313422][ T6878] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 322.080312][ T6878] usb 2-1: Using ep0 maxpacket: 32 [ 322.087043][ T6878] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 322.095157][ T6878] usb 2-1: config 0 has no interface number 0 [ 322.107637][ T6878] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 322.130348][ T6878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.149256][ T6878] usb 2-1: Product: syz [ 322.158922][ T6878] usb 2-1: Manufacturer: syz [ 322.176224][ T6878] usb 2-1: SerialNumber: syz [ 322.400829][ T6878] usb 2-1: config 0 descriptor?? [ 322.468560][ T6878] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 322.484626][ T6878] usb 2-1: selecting invalid altsetting 1 [ 322.491691][ T6878] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 322.508777][ T6878] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 322.519573][ T6878] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 322.533573][ T9199] block device autoloading is deprecated and will be removed. [ 322.695646][ T9182] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 322.724422][ T6878] usb 2-1: media controller created [ 323.065668][ T6878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 323.122478][ T6878] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 323.182553][ T6878] zl10353_read_register: readreg error (reg=127, ret==-71) [ 323.303951][ T6878] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 323.334558][ T6878] usb 2-1: USB disconnect, device number 24 [ 323.415505][ T9226] fuse: Unknown parameter '' [ 323.680750][ T975] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 324.252814][ T30] audit: type=1326 audit(1757525550.856:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 324.680344][ T975] usb 1-1: Using ep0 maxpacket: 8 [ 324.687236][ T975] usb 1-1: unable to get BOS descriptor or descriptor too short [ 324.706922][ T975] usb 1-1: config 247 has an invalid interface number: 145 but max is 0 [ 324.727894][ T975] usb 1-1: config 247 has no interface number 0 [ 324.753770][ T30] audit: type=1326 audit(1757525550.856:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 324.769277][ T975] usb 1-1: config 247 interface 145 has no altsetting 0 [ 324.832890][ T975] usb 1-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 324.870676][ T30] audit: type=1326 audit(1757525550.856:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 324.884700][ T9238] fuse: Bad value for 'user_id' [ 324.894407][ T30] audit: type=1326 audit(1757525550.856:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9227 comm="syz.2.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 324.922512][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.950632][ T9238] fuse: Bad value for 'user_id' [ 324.964468][ T975] usb 1-1: Product: syz [ 324.968647][ T975] usb 1-1: Manufacturer: syz [ 324.980304][ T975] usb 1-1: SerialNumber: syz [ 326.260429][ T5927] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 326.261181][ T975] upd78f0730 1-1:247.145: upd78f0730 converter detected [ 326.329309][ T975] usb 1-1: upd78f0730 converter now attached to ttyUSB0 [ 326.339038][ T975] usb 1-1: USB disconnect, device number 38 [ 326.348606][ T975] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 326.360683][ T975] upd78f0730 1-1:247.145: device disconnected [ 326.414580][ T9259] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 327.118293][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 327.131493][ T5927] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 327.140831][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.151089][ T5927] usb 2-1: config 0 has no interface number 0 [ 327.182774][ T9268] fuse: Unknown parameter 'grou00000000000000000000' [ 327.196873][ T5927] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice=81.28 [ 327.342077][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=27, SerialNumber=3 [ 328.029991][ T5927] usb 2-1: Product: syz [ 328.038646][ T5927] usb 2-1: SerialNumber: syz [ 328.046724][ T5927] usb 2-1: config 0 descriptor?? [ 328.247459][ T5927] usb 2-1: can't set config #0, error -71 [ 328.278572][ T5927] usb 2-1: USB disconnect, device number 25 [ 328.776060][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.795'. [ 328.785239][ T9279] chnl_net:caif_netlink_parms(): no params data found [ 328.870086][ T9281] input: syz0 as /devices/virtual/input/input34 [ 329.108485][ T9293] input: syz0 as /devices/virtual/input/input35 [ 329.359720][ T30] audit: type=1326 audit(1757525555.946:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9278 comm="syz.3.797" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f073af8eba9 code=0x0 [ 330.002741][ T9305] netlink: 'syz.4.801': attribute type 6 has an invalid length. [ 330.421909][ T30] audit: type=1400 audit(1757525557.026:577): avc: denied { bind } for pid=9302 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 330.501327][ T30] audit: type=1400 audit(1757525557.036:578): avc: denied { create } for pid=9302 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 330.522448][ T30] audit: type=1400 audit(1757525557.036:579): avc: denied { bind } for pid=9302 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 330.755473][ T9317] fuse: Unknown parameter 'grou00000000000000000000' [ 330.909821][ T9319] input: syz0 as /devices/virtual/input/input36 [ 332.305628][ T30] audit: type=1400 audit(1757525558.906:580): avc: denied { mount } for pid=9341 comm="syz.4.811" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 332.353306][ T9342] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(17) [ 332.359911][ T9342] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 332.367602][ T9342] vhci_hcd vhci_hcd.0: Device attached [ 332.543969][ T5927] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 332.749817][ T9353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 332.820310][ T975] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 332.832900][ T9358] mkiss: ax0: crc mode is auto. [ 332.844522][ T30] audit: type=1400 audit(1757525559.446:581): avc: denied { map } for pid=9354 comm="syz.0.814" path="/dev/ttyprintk" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 332.906008][ T30] audit: type=1400 audit(1757525559.446:582): avc: denied { execute } for pid=9354 comm="syz.0.814" path="/dev/ttyprintk" dev="devtmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 332.942924][ T9340] netlink: 32 bytes leftover after parsing attributes in process `syz.1.809'. [ 333.008654][ T9350] vhci_hcd: connection reset by peer [ 333.016694][ T5962] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 333.038819][ T2910] vhci_hcd: stop threads [ 333.054290][ T2910] vhci_hcd: release socket [ 333.078634][ T2910] vhci_hcd: disconnect device [ 333.079562][ T30] audit: type=1400 audit(1757525559.686:583): avc: denied { create } for pid=9361 comm="syz.0.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 333.100461][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 333.111428][ T30] audit: type=1400 audit(1757525559.716:584): avc: denied { sys_admin } for pid=9361 comm="syz.0.815" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 333.148562][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.163433][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.175004][ T5927] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 333.184602][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.202430][ T5927] usb 3-1: config 0 descriptor?? [ 333.213253][ T9360] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 333.241933][ T5962] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 333.252114][ T5962] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 333.261864][ T5962] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.278336][ T5962] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 333.288290][ T5962] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.296392][ T5962] usb 4-1: Product: syz [ 333.300659][ T5962] usb 4-1: Manufacturer: syz [ 333.305253][ T5962] usb 4-1: SerialNumber: syz [ 333.315821][ T5962] hub 4-1:1.0: bad descriptor, ignoring hub [ 333.321860][ T5962] hub 4-1:1.0: probe with driver hub failed with error -5 [ 333.410621][ T6880] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 333.560582][ T6880] usb 1-1: Using ep0 maxpacket: 8 [ 333.778929][ T6880] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 333.834261][ T6880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.844450][ T30] audit: type=1400 audit(1757525560.446:585): avc: denied { unmount } for pid=5862 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 333.878202][ T6880] pvrusb2: Hardware description: Terratec Grabster AV400 [ 333.894920][ T6880] pvrusb2: ********** [ 333.905023][ T6880] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 333.930450][ T6880] pvrusb2: Important functionality might not be entirely working. [ 333.967095][ T6880] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 334.010407][ T6880] pvrusb2: ********** [ 334.033163][ T5962] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 334.049662][ T5927] usbhid 3-1:0.0: can't add hid device: -71 [ 334.056081][ T9371] fuse: Unknown parameter 'group_i00000000000000000000' [ 334.068149][ T5927] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 334.086984][ T5927] usb 3-1: USB disconnect, device number 30 [ 334.095142][ T2340] pvrusb2: Invalid write control endpoint [ 334.186211][ T2340] pvrusb2: Invalid write control endpoint [ 334.200370][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 334.221149][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 334.265583][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 334.285429][ T2340] pvrusb2: Device being rendered inoperable [ 334.296525][ T9366] pvrusb2: Attempted to execute control transfer when device not ok [ 334.310951][ T9366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.324160][ T9366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.354639][ T5962] usb 1-1: USB disconnect, device number 39 [ 334.363231][ T2340] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 334.371412][ T2340] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 334.379642][ T2340] pvrusb2: Attached sub-driver cx25840 [ 334.383340][ T5927] usb 4-1: USB disconnect, device number 30 [ 334.385301][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 334.408169][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 334.408229][ T5927] usblp0: removed [ 334.531529][ T9374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.534990][ T30] audit: type=1400 audit(1757525561.136:586): avc: denied { accept } for pid=9392 comm="syz.0.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 334.740321][ T5927] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 334.970315][ T6877] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 335.297981][ T5927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 335.309879][ T5927] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 335.350371][ T5927] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.382552][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 335.392284][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.444280][ T5927] usb 4-1: Product: syz [ 335.450467][ T5927] usb 4-1: Manufacturer: syz [ 335.465339][ T5927] usb 4-1: SerialNumber: syz [ 335.490446][ T6877] usb 3-1: Using ep0 maxpacket: 8 [ 335.566065][ T6877] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 335.579522][ T6877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 335.602205][ T6877] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 335.611888][ T6877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.685175][ T6877] usb 3-1: Product: syz [ 335.701461][ T6877] usb 3-1: Manufacturer: syz [ 335.708729][ T6877] usb 3-1: SerialNumber: syz [ 335.730182][ T6877] usb 3-1: config 0 descriptor?? [ 335.744646][ T6877] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 335.759725][ T5962] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 335.773882][ T30] audit: type=1400 audit(1757525562.386:587): avc: denied { ioctl } for pid=9413 comm="syz.0.827" path="socket:[24822]" dev="sockfs" ino=24822 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 335.890558][ T5927] usb 4-1: can't set config #1, error -71 [ 335.936105][ T5927] usb 4-1: USB disconnect, device number 31 [ 335.950416][ T5962] usb 2-1: Using ep0 maxpacket: 32 [ 335.961176][ T5962] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 335.979795][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.988514][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.998252][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.028823][ T5962] usb 2-1: Product: syz [ 336.044299][ T5962] usb 2-1: Manufacturer: syz [ 336.062530][ T5962] usb 2-1: SerialNumber: syz [ 336.087173][ T5962] usb 2-1: config 0 descriptor?? [ 336.139646][ T6877] usb 3-1: USB disconnect, device number 31 [ 336.336731][ T5962] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 336.346616][ T5962] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 336.669160][ T5962] usb 2-1: USB disconnect, device number 26 [ 338.074240][ T9454] sp0: Synchronizing with TNC [ 338.093577][ T9454] netlink: 'syz.0.834': attribute type 33 has an invalid length. [ 338.101459][ T9454] netlink: 152 bytes leftover after parsing attributes in process `syz.0.834'. [ 338.176259][ T30] audit: type=1400 audit(1757525564.786:588): avc: denied { map } for pid=9455 comm="syz.4.836" path="socket:[24911]" dev="sockfs" ino=24911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 338.212266][ T9438] block nbd1: shutting down sockets [ 338.265856][ T30] audit: type=1400 audit(1757525564.786:589): avc: denied { read } for pid=9455 comm="syz.4.836" path="socket:[24911]" dev="sockfs" ino=24911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 338.340465][ T975] vhci_hcd: vhci_device speed not set [ 339.752357][ T5927] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 339.782944][ T30] audit: type=1400 audit(1757525566.186:590): avc: denied { firmware_load } for pid=9463 comm="syz.4.839" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 340.071305][ T5927] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 340.079508][ T5927] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 340.089916][ T5927] usb 2-1: config 0 has no interface number 0 [ 340.098186][ T5927] usb 2-1: New USB device found, idVendor=20c9, idProduct=0001, bcdDevice=97.6d [ 340.107571][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.115713][ T5927] usb 2-1: Product: syz [ 340.125850][ T5927] usb 2-1: Manufacturer: syz [ 340.145531][ T9467] syz.4.839 (9467) used greatest stack depth: 19336 bytes left [ 340.282375][ T9481] input: syz0 as /devices/virtual/input/input38 [ 340.484554][ T5927] usb 2-1: SerialNumber: syz [ 340.503258][ T5927] usb 2-1: config 0 descriptor?? [ 340.507979][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 340.782362][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.899456][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.914199][ T5927] usb 2-1: USB disconnect, device number 27 [ 342.072548][ T30] audit: type=1400 audit(1757525568.676:591): avc: denied { ioctl } for pid=9503 comm="syz.4.849" path="socket:[24043]" dev="sockfs" ino=24043 ioctlcmd=0x6720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 342.097231][ T9508] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 342.103729][ T9508] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 342.139802][ T9508] vhci_hcd vhci_hcd.0: Device attached [ 342.232749][ T9514] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 342.553079][ T975] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 342.714917][ T9504] "syz.4.849" (9504) uses obsolete ecb(arc4) skcipher [ 343.013686][ T9509] vhci_hcd: connection reset by peer [ 343.038974][ T2910] vhci_hcd: stop threads [ 343.055356][ T2910] vhci_hcd: release socket [ 343.071470][ T2910] vhci_hcd: disconnect device [ 343.906121][ T9527] block nbd2: Attempted send on invalid socket [ 343.912786][ T9527] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 343.925369][ T9527] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 344.331240][ T9537] sp0: Synchronizing with TNC [ 344.372048][ T9537] netlink: 'syz.3.855': attribute type 33 has an invalid length. [ 344.379796][ T9537] netlink: 152 bytes leftover after parsing attributes in process `syz.3.855'. [ 345.781623][ T9548] netlink: 'syz.4.858': attribute type 1 has an invalid length. [ 345.907864][ T9548] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.085960][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 347.269821][ T9548] bond2: (slave veth3): Enslaving as an active interface with a down link [ 347.372218][ T30] audit: type=1800 audit(1757525573.966:592): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.859" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 347.463696][ T9571] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 347.531659][ T9573] block nbd3: Attempted send on invalid socket [ 347.538029][ T9573] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 347.547325][ T9573] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 347.778901][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 347.791358][ T9575] chnl_net:caif_netlink_parms(): no params data found [ 347.886504][ T30] audit: type=1400 audit(1757525574.026:593): avc: denied { create } for pid=9566 comm="syz.4.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 348.121952][ T30] audit: type=1400 audit(1757525574.036:594): avc: denied { execmem } for pid=9566 comm="syz.4.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 348.141650][ T30] audit: type=1400 audit(1757525574.136:595): avc: denied { listen } for pid=9558 comm="syz.3.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.236011][ T975] vhci_hcd: vhci_device speed not set [ 348.248285][ T9578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.865'. [ 348.553040][ T30] audit: type=1400 audit(1757525575.166:596): avc: denied { watch } for pid=9581 comm="syz.2.866" path="/175/bus" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 348.580140][ T9584] netlink: 72 bytes leftover after parsing attributes in process `syz.0.864'. [ 348.659839][ T30] audit: type=1400 audit(1757525575.166:597): avc: denied { watch_sb watch_reads } for pid=9581 comm="syz.2.866" path="/175/bus" dev="tmpfs" ino=945 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 349.185335][ T9591] fuse: Bad value for 'user_id' [ 349.296110][ T9591] fuse: Bad value for 'user_id' [ 349.315235][ T6880] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 349.476426][ T9595] fuse: Unknown parameter 'group_id00000000000000000000' [ 349.545588][ T6880] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 349.554091][ T6880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.601021][ T6880] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 349.617489][ T6880] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 349.628871][ T6880] usb 3-1: Manufacturer: syz [ 349.634980][ T30] audit: type=1400 audit(1757525576.246:598): avc: denied { name_bind } for pid=9596 comm="syz.1.870" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 349.722131][ T6880] usb 3-1: config 0 descriptor?? [ 349.739423][ T6880] igorplugusb 3-1:0.0: incorrect number of endpoints [ 349.944373][ T30] audit: type=1400 audit(1757525576.536:599): avc: denied { create } for pid=9600 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 349.966894][ T5927] usb 3-1: USB disconnect, device number 32 [ 350.182990][ T9614] sp0: Synchronizing with TNC [ 351.174923][ T9624] input: syz0 as /devices/virtual/input/input40 [ 351.329754][ T9626] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 351.396708][ T9628] input: syz0 as /devices/virtual/input/input41 [ 351.861734][ T9635] fuse: Bad value for 'user_id' [ 351.869317][ T9635] fuse: Bad value for 'user_id' [ 352.125963][ T30] audit: type=1400 audit(1757525578.726:600): avc: denied { setopt } for pid=9639 comm="syz.4.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 352.370389][ T30] audit: type=1400 audit(1757525578.806:601): avc: denied { read append } for pid=9639 comm="syz.4.883" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 352.530558][ T30] audit: type=1400 audit(1757525578.836:602): avc: denied { open } for pid=9639 comm="syz.4.883" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 352.578632][ T30] audit: type=1400 audit(1757525578.886:603): avc: denied { ioctl } for pid=9639 comm="syz.4.883" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 352.920306][ T5927] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 353.072030][ T5927] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 353.115902][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.147189][ T9660] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 353.155915][ T9660] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 353.301564][ T5927] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 353.311361][ T5927] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 353.319354][ T5927] usb 4-1: Manufacturer: syz [ 353.361814][ T5927] usb 4-1: config 0 descriptor?? [ 353.783400][ T975] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 353.796948][ T9660] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 353.817863][ T9660] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 353.864816][ T5927] igorplugusb 4-1:0.0: incorrect number of endpoints [ 353.998689][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 354.010152][ T975] usb 2-1: unable to get BOS descriptor or descriptor too short [ 354.024286][ T975] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 354.032680][ T975] usb 2-1: config 0 has no interface number 0 [ 354.050959][ T975] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 354.061296][ T975] usb 2-1: config 0 interface 88 has no altsetting 0 [ 354.072014][ T975] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 354.086240][ T975] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 354.102197][ T975] usb 2-1: Product: syz [ 354.121887][ T975] usb 2-1: Manufacturer: syz [ 354.126575][ T975] usb 2-1: SerialNumber: syz [ 354.144798][ T975] usb 2-1: config 0 descriptor?? [ 354.238126][ T30] audit: type=1400 audit(1757525580.846:604): avc: denied { read } for pid=9668 comm="syz.0.891" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 354.278951][ T5927] usb 4-1: USB disconnect, device number 32 [ 354.381421][ T975] usb 2-1: USB disconnect, device number 28 [ 355.729338][ T9692] netlink: 96 bytes leftover after parsing attributes in process `syz.4.896'. [ 355.820401][ T9690] netlink: 72 bytes leftover after parsing attributes in process `syz.1.895'. [ 355.910963][ T9698] input: syz0 as /devices/virtual/input/input42 [ 356.257959][ T9703] ubi7: attaching mtd0 [ 356.280966][ T9703] ubi7 error: ubi_attach_mtd_dev: bad VID header (3) or data offsets (67) [ 356.712402][ T30] audit: type=1400 audit(1757525583.306:605): avc: denied { read write } for pid=9712 comm="syz.4.901" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 356.871408][ T30] audit: type=1400 audit(1757525583.306:606): avc: denied { open } for pid=9712 comm="syz.4.901" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 356.962248][ T30] audit: type=1400 audit(1757525583.306:607): avc: denied { map } for pid=9712 comm="syz.4.901" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 357.045321][ T30] audit: type=1400 audit(1757525583.306:608): avc: denied { execute } for pid=9712 comm="syz.4.901" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 357.860513][ T975] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 358.108220][ T975] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 358.118716][ T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.333144][ T975] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 358.342793][ T975] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 358.360315][ T975] usb 4-1: Manufacturer: syz [ 358.370397][ T6877] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 358.393393][ T975] usb 4-1: config 0 descriptor?? [ 358.402797][ T975] igorplugusb 4-1:0.0: incorrect number of endpoints [ 358.609854][ T975] usb 4-1: USB disconnect, device number 33 [ 358.663124][ T6877] usb 2-1: unable to get BOS descriptor or descriptor too short [ 358.715626][ T6877] usb 2-1: not running at top speed; connect to a high speed hub [ 358.746046][ T6877] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.787756][ T6877] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 358.856949][ T9745] ALSA: mixer_oss: invalid OSS volume 'ؤnh{%OBeb' [ 358.904233][ T6877] usb 2-1: config 1 has no interface number 1 [ 358.911800][ T6877] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 358.942099][ T6877] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 358.975095][ T6877] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 359.166037][ T6877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.176546][ T6877] usb 2-1: Product: syz [ 359.193543][ T6877] usb 2-1: Manufacturer: syz [ 359.227636][ T6877] usb 2-1: SerialNumber: syz [ 359.353253][ T30] audit: type=1400 audit(1757525585.956:609): avc: denied { watch } for pid=9752 comm="syz.3.910" path="/189/file1" dev="tmpfs" ino=1022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 359.493150][ T6877] hub 2-1:1.0: Invalid hub with more than one config or interface [ 359.523786][ T6877] hub 2-1:1.0: probe with driver hub failed with error -22 [ 359.576254][ T6877] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 359.620920][ T6877] usb 2-1: USB disconnect, device number 29 [ 360.752737][ T975] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 360.914533][ T975] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.970123][ T975] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 360.993376][ T30] audit: type=1400 audit(1757525587.596:610): avc: denied { write } for pid=9785 comm="syz.1.917" name="cgroup.subtree_control" dev="cgroup2" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.001226][ T975] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.048511][ T975] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.077889][ T975] usb 1-1: Product: syz [ 361.082190][ T975] usb 1-1: Manufacturer: syz [ 361.135004][ T30] audit: type=1400 audit(1757525587.646:611): avc: denied { open } for pid=9785 comm="syz.1.917" path="" dev="cgroup2" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.140328][ T975] usb 1-1: SerialNumber: syz [ 361.370461][ T9781] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 361.583673][ T6877] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 361.942610][ T6877] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 361.974622][ T6877] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.005934][ T30] audit: type=1400 audit(1757525588.616:612): avc: denied { create } for pid=9820 comm="syz.1.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 362.069298][ T9781] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 362.087349][ T6877] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 362.099444][ T30] audit: type=1400 audit(1757525588.616:613): avc: denied { ioctl } for pid=9820 comm="syz.1.925" path="socket:[25743]" dev="sockfs" ino=25743 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 362.207386][ T6877] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 362.283217][ T6877] usb 4-1: Manufacturer: syz [ 362.295096][ T30] audit: type=1400 audit(1757525588.906:614): avc: denied { accept } for pid=9825 comm="syz.2.926" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 362.321935][ T6877] usb 4-1: config 0 descriptor?? [ 362.323166][ T975] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 362.471469][ T6877] igorplugusb 4-1:0.0: incorrect number of endpoints [ 362.476190][ T975] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 362.485818][ T30] audit: type=1400 audit(1757525588.906:615): avc: denied { ioctl } for pid=9825 comm="syz.2.926" path="socket:[26823]" dev="sockfs" ino=26823 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 362.511866][ T975] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 363.213590][ T30] audit: type=1326 audit(1757525589.826:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30218eba9 code=0x7ffc0000 [ 363.246604][ T30] audit: type=1326 audit(1757525589.826:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30218eba9 code=0x7ffc0000 [ 363.300772][ T6877] usb 4-1: USB disconnect, device number 34 [ 363.332603][ T30] audit: type=1326 audit(1757525589.836:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9780 comm="syz.0.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa30218eba9 code=0x7ffc0000 [ 363.375411][ T975] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 363.423556][ T975] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 363.720741][ T975] usb 1-1: USB disconnect, device number 40 [ 363.742522][ T975] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 365.170389][ T6877] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 365.895821][ T9874] overlayfs: upper fs does not support file handles, falling back to index=off. [ 365.920808][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 365.920824][ T30] audit: type=1400 audit(1757525592.496:636): avc: denied { getopt } for pid=9873 comm="syz.2.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 365.989497][ T6877] usb 5-1: Using ep0 maxpacket: 8 [ 366.055853][ T6877] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 366.064257][ T6877] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.074269][ T6877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.085446][ T6877] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.095893][ T6877] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.109105][ T6877] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 366.119517][ T6877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.620507][ T6877] usb 5-1: GET_CAPABILITIES returned 0 [ 366.626639][ T6877] usbtmc 5-1:16.0: can't read capabilities [ 366.843319][ T975] usb 5-1: USB disconnect, device number 30 [ 367.030264][ T9884] netlink: 72 bytes leftover after parsing attributes in process `syz.1.940'. [ 367.071868][ T9879] input: syz0 as /devices/virtual/input/input43 [ 367.276703][ T9872] syz.3.937 (9872): drop_caches: 2 [ 367.385542][ T9893] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9893 comm=syz.1.943 [ 368.510526][ T6877] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 368.768823][ T30] audit: type=1400 audit(1757525595.376:637): avc: denied { bind } for pid=9892 comm="syz.3.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 368.788105][ T6877] usb 2-1: Using ep0 maxpacket: 8 [ 368.794551][ T6877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 368.803933][ T6877] usb 2-1: too many endpoints for config 1 interface 0 altsetting 25: 184, using maximum allowed: 30 [ 368.821433][ T975] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 368.822678][ T6877] usb 2-1: config 1 interface 0 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 184 [ 368.842485][ T30] audit: type=1400 audit(1757525595.436:638): avc: denied { listen } for pid=9909 comm="syz.0.949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 368.871006][ T6877] usb 2-1: config 1 interface 0 has no altsetting 0 [ 368.879751][ T6877] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 368.893633][ T6877] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 368.901924][ T6877] usb 2-1: Product: syz [ 368.906178][ T6877] usb 2-1: Manufacturer: syz [ 368.913942][ T6877] usb 2-1: SerialNumber: syz [ 368.950486][ T5927] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 369.010389][ T975] usb 3-1: Using ep0 maxpacket: 16 [ 369.017359][ T975] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 369.025772][ T975] usb 3-1: config 0 has no interface number 0 [ 369.032045][ T975] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 369.060421][ T975] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 369.070520][ T975] usb 3-1: config 0 interface 41 has no altsetting 0 [ 369.086489][ T975] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 369.095795][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.104073][ T975] usb 3-1: Product: syz [ 369.108680][ T975] usb 3-1: Manufacturer: syz [ 369.113567][ T975] usb 3-1: SerialNumber: syz [ 369.115654][ T5927] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 369.168879][ T975] usb 3-1: config 0 descriptor?? [ 369.172537][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.174901][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.184193][ T5913] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 369.193148][ T9906] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 369.207446][ T9906] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 369.216966][ T5927] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 369.216975][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.216997][ T5927] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 369.263961][ T6877] usb 2-1: palm_os_3_probe - error -71 getting connection information [ 369.274317][ T6877] visor 2-1:1.0: probe with driver visor failed with error -71 [ 369.284683][ T5927] usb 5-1: Manufacturer: syz [ 369.291872][ T6877] usb 2-1: USB disconnect, device number 30 [ 369.339086][ T5927] usb 5-1: config 0 descriptor?? [ 369.361463][ T5913] usb 1-1: config index 0 descriptor too short (expected 58130, got 18) [ 369.416640][ T5913] usb 1-1: config 107 has too many interfaces: 120, using maximum allowed: 32 [ 369.651175][ T5927] igorplugusb 5-1:0.0: incorrect number of endpoints [ 369.662793][ T9906] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 369.670028][ T9906] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 369.679110][ T5913] usb 1-1: config 107 has an invalid descriptor of length 195, skipping remainder of the config [ 369.694769][ T5913] usb 1-1: config 107 has 0 interfaces, different from the descriptor's value: 120 [ 369.711097][ T5913] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 369.720731][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.728717][ T5913] usb 1-1: Product: syz [ 369.733016][ T5913] usb 1-1: Manufacturer: syz [ 369.737609][ T5913] usb 1-1: SerialNumber: syz [ 369.876962][ T6877] usb 5-1: USB disconnect, device number 31 [ 370.062385][ T9915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.075649][ T9915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.093123][ T5913] usb 1-1: USB disconnect, device number 41 [ 370.093572][ T9928] overlay: Unknown parameter '/' [ 371.415738][ T9937] netlink: 'syz.0.956': attribute type 11 has an invalid length. [ 371.586021][ T975] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 371.658134][ T975] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 371.707359][ T975] usb 3-1: USB disconnect, device number 33 [ 372.070520][ T5913] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 372.232380][ T5913] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 372.278169][ T5913] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 372.299257][ T5913] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 372.322989][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.355574][ T9947] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 372.372605][ T9954] input: syz0 as /devices/virtual/input/input44 [ 372.595644][ T5913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 372.902949][ T9947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.911463][ T30] audit: type=1400 audit(1757525599.516:639): avc: denied { read write } for pid=9943 comm="syz.4.959" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 372.936666][ T9947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.127498][ T30] audit: type=1400 audit(1757525599.516:640): avc: denied { open } for pid=9943 comm="syz.4.959" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 373.326698][ T30] audit: type=1326 audit(1757525599.666:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9d8eba9 code=0x7ffc0000 [ 373.369863][ T30] audit: type=1326 audit(1757525599.666:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f5fd9d8eba9 code=0x7ffc0000 [ 373.393532][ T30] audit: type=1326 audit(1757525599.666:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9d8eba9 code=0x7ffc0000 [ 373.418338][ T30] audit: type=1326 audit(1757525599.666:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f5fd9d8eba9 code=0x7ffc0000 [ 373.443954][ T30] audit: type=1326 audit(1757525599.666:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9d8eba9 code=0x7ffc0000 [ 373.447051][ T975] usb 5-1: USB disconnect, device number 32 [ 373.534643][ T9960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.962'. [ 373.560408][ T30] audit: type=1326 audit(1757525599.666:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5fd9d8eba9 code=0x7ffc0000 [ 373.641819][ T30] audit: type=1326 audit(1757525599.666:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fd9d8eba9 code=0x7ffc0000 [ 373.672006][ T30] audit: type=1326 audit(1757525599.676:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9943 comm="syz.4.959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5fd9d8eba9 code=0x7ffc0000 [ 373.924968][ T9969] support for the xor transformation has been removed. [ 374.041765][ T9971] binder: 9965:9971 ioctl c018620b 200000000200 returned -14 [ 374.733459][ T9982] input: syz0 as /devices/virtual/input/input45 [ 374.773247][ T975] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 374.967224][ T975] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 374.980470][ T5913] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 374.989716][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.999382][ T975] usb 5-1: Product: syz [ 375.093190][ T975] usb 5-1: Manufacturer: syz [ 375.100297][ T975] usb 5-1: SerialNumber: syz [ 375.123499][ T9992] block nbd3: Attempted send on invalid socket [ 375.132113][ T975] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 375.178221][ T5913] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 375.185311][ T6880] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 375.196965][ T9985] 9pnet: Could not find request transport: fd0x00000000000000000xffffffffffffffff [ 375.209365][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.222903][ T9992] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 375.312567][ T5913] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 375.330934][ T5913] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 375.339159][ T9992] EXT4-fs (nbd3): unable to read superblock [ 375.359460][ T5913] usb 1-1: Manufacturer: syz [ 375.391460][ T5913] usb 1-1: config 0 descriptor?? [ 375.403753][ T5913] igorplugusb 1-1:0.0: incorrect number of endpoints [ 375.626861][ T5913] usb 1-1: USB disconnect, device number 42 [ 375.851413][ T975] usb 5-1: USB disconnect, device number 33 [ 376.300407][ T6880] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 376.307854][ T6880] ath9k_htc: Failed to initialize the device [ 376.449441][ T975] usb 5-1: ath9k_htc: USB layer deinitialized [ 376.898896][T10020] sp0: Synchronizing with TNC [ 376.906517][T10020] netlink: 'syz.2.975': attribute type 33 has an invalid length. [ 376.914510][T10020] netlink: 152 bytes leftover after parsing attributes in process `syz.2.975'. [ 377.320404][ T975] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 377.490411][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 377.509569][ T975] usb 5-1: config 2 has an invalid interface number: 18 but max is 0 [ 377.519391][ T975] usb 5-1: config 2 has no interface number 0 [ 377.537225][ T975] usb 5-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=57.db [ 377.546473][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.570366][ T975] usb 5-1: Product: syz [ 377.574560][ T975] usb 5-1: Manufacturer: syz [ 377.615286][T10030] input: syz0 as /devices/virtual/input/input47 [ 377.666364][ T975] usb 5-1: SerialNumber: syz [ 377.794584][ T975] cypress_m8 5-1:2.18: HID->COM RS232 Adapter converter detected [ 377.810564][ T975] cyphidcom ttyUSB0: required endpoint is missing [ 377.989187][T10023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.000105][T10023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.028055][ T975] usb 5-1: USB disconnect, device number 34 [ 378.046250][ T975] cypress_m8 5-1:2.18: device disconnected [ 378.316958][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.324606][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.558138][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 378.558154][ T30] audit: type=1326 audit(1757525605.166:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30218eba9 code=0x7ffc0000 [ 378.641076][ T30] audit: type=1326 audit(1757525605.166:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30218eba9 code=0x7ffc0000 [ 378.697376][ T30] audit: type=1326 audit(1757525605.206:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fa30218eba9 code=0x7ffc0000 [ 378.768145][ T30] audit: type=1400 audit(1757525605.206:690): avc: denied { getattr } for pid=10038 comm="syz.0.983" name="/" dev="dmabuf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 378.791101][ T30] audit: type=1326 audit(1757525605.206:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30218eba9 code=0x7ffc0000 [ 378.820862][T10041] pimreg: entered allmulticast mode [ 378.841948][T10043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.875782][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'. [ 378.904036][ T30] audit: type=1326 audit(1757525605.206:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30218eba9 code=0x7ffc0000 [ 379.320047][ T30] audit: type=1326 audit(1757525605.216:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa30218d510 code=0x7ffc0000 [ 379.355170][ T30] audit: type=1326 audit(1757525605.216:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30218eba9 code=0x7ffc0000 [ 379.411715][ T30] audit: type=1326 audit(1757525605.216:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30218eba9 code=0x7ffc0000 [ 379.840430][ T30] audit: type=1326 audit(1757525605.216:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10038 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa30218eba9 code=0x7ffc0000 [ 380.096834][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.989'. [ 380.109786][T10063] chnl_net:caif_netlink_parms(): no params data found [ 381.004152][T10075] netlink: 'syz.4.990': attribute type 32 has an invalid length. [ 383.057640][T10103] netlink: 72 bytes leftover after parsing attributes in process `syz.2.998'. [ 383.095707][T10106] affs: No valid root block on device nullb0 [ 384.093677][T10079] syz.4.990 (10079): drop_caches: 2 [ 384.172535][T10113] Bluetooth: MGMT ver 1.23 [ 384.324171][T10118] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 384.964504][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1002'. [ 384.985413][T10126] chnl_net:caif_netlink_parms(): no params data found [ 386.556617][T10140] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1007'. [ 388.113459][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.123649][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.132136][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.140588][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.149648][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.163846][ T5171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 388.172395][ T5171] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 388.181485][ T5171] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 388.189145][ T5171] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 388.242222][ T5171] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 388.273265][T10161] SELinux: failed to load policy [ 388.329301][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 388.329316][ T30] audit: type=1400 audit(1757525614.936:705): avc: denied { mounton } for pid=10158 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 388.575829][T10164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.670290][ T5913] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 389.809555][T10158] lo speed is unknown, defaulting to 1000 [ 390.068180][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 390.396200][ T5171] Bluetooth: hci1: command tx timeout [ 390.917535][ T5913] usb 3-1: device descriptor read/all, error -71 [ 392.170103][T10158] chnl_net:caif_netlink_parms(): no params data found [ 392.474860][ T5171] Bluetooth: hci1: command tx timeout [ 392.835088][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1017'. [ 392.969094][T10158] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.985559][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.998615][T10158] bridge_slave_0: entered allmulticast mode [ 393.010327][T10158] bridge_slave_0: entered promiscuous mode [ 393.018608][T10158] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.027902][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.037742][T10158] bridge_slave_1: entered allmulticast mode [ 393.046889][T10158] bridge_slave_1: entered promiscuous mode [ 393.080936][T10191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1014'. [ 393.242836][T10158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.257195][T10158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.369766][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 393.716029][T10213] chnl_net:caif_netlink_parms(): no params data found [ 393.816829][T10158] team0: Port device team_slave_0 added [ 393.826675][T10158] team0: Port device team_slave_1 added [ 393.862152][T10216] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1020'. [ 394.112175][T10158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.139544][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.210229][T10158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.240052][T10158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.268280][T10158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.329129][T10158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.329558][ T30] audit: type=1400 audit(1757525620.936:706): avc: denied { ioctl } for pid=10220 comm="syz.2.1023" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 394.520697][ T6880] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 394.551839][T10158] hsr_slave_0: entered promiscuous mode [ 394.553013][ T5171] Bluetooth: hci1: command tx timeout [ 394.564790][T10158] hsr_slave_1: entered promiscuous mode [ 394.574267][T10158] debugfs: 'hsr0' already exists in 'hsr' [ 394.582201][T10158] Cannot create hsr debugfs directory [ 394.670628][ T6880] usb 5-1: Using ep0 maxpacket: 32 [ 394.677555][ T6880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.689115][ T6880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.705464][ T6880] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 394.716939][ T6880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.731177][T10229] qrtr: Invalid version 0 [ 395.136700][ T6880] usb 5-1: config 0 descriptor?? [ 395.208920][ T6880] hub 5-1:0.0: USB hub found [ 395.377746][ T30] audit: type=1400 audit(1757525621.976:707): avc: denied { append } for pid=10233 comm="syz.2.1026" name="video0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 395.826633][ T6880] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 396.138303][ T6880] usbhid 5-1:0.0: can't add hid device: -71 [ 396.149771][ T6880] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 396.329368][ T6880] usb 5-1: USB disconnect, device number 35 [ 396.631832][ T5171] Bluetooth: hci1: command tx timeout [ 396.665022][ T6877] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 396.830541][ T6877] usb 1-1: Using ep0 maxpacket: 32 [ 396.867144][ T6877] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 396.882410][ T6877] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 396.906607][ T6877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 396.918860][ T6877] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 396.936691][ T6877] usb 1-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 396.950491][ T6877] usb 1-1: Product: syz [ 396.954730][ T6877] usb 1-1: Manufacturer: syz [ 396.973737][ T6877] usb 1-1: SerialNumber: syz [ 396.996830][ T6877] usb 1-1: config 0 descriptor?? [ 397.303083][ T6877] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 397.311772][ T5927] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 397.320444][ T6877] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 397.347094][ T6877] usb 1-1: USB disconnect, device number 43 [ 397.459352][T10257] input: syz0 as /devices/virtual/input/input48 [ 397.483691][ T5927] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 397.502025][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.525792][ T5927] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 397.545097][ T5927] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 397.560493][ T5927] usb 3-1: Manufacturer: syz [ 397.569857][ T5927] usb 3-1: config 0 descriptor?? [ 397.589798][ T5927] igorplugusb 3-1:0.0: incorrect number of endpoints [ 398.572195][T10247] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1030'. [ 398.586813][ T6877] usb 3-1: USB disconnect, device number 36 [ 398.713693][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 398.784421][T10158] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 398.820117][T10158] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 398.929201][T10158] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 398.939815][T10158] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 399.093343][T10271] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 399.593009][T10158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.631497][ T30] audit: type=1400 audit(1757525626.246:708): avc: denied { read } for pid=10273 comm="syz.4.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 399.664971][T10158] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.683223][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.691275][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.705637][T10275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 399.763905][T10274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 399.832607][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.839776][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.245041][T10285] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1036'. [ 400.267845][T10293] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 401.017058][T10302] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 401.036996][T10304] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1042'. [ 401.287611][ T5913] kernel write not supported for file /input/mouse0 (pid: 5913 comm: kworker/0:4) [ 401.298444][T10309] nfs: Unknown parameter 'aller' [ 401.317543][T10310] 9p: Unknown access argument 18446744073709551615: -34 [ 401.329191][T10315] fuse: Unknown parameter 'user_id00000000000000000000' [ 401.366772][T10158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.915037][ T6880] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 402.032869][T10335] FAULT_INJECTION: forcing a failure. [ 402.032869][T10335] name failslab, interval 1, probability 0, space 0, times 0 [ 402.046167][T10335] CPU: 0 UID: 0 PID: 10335 Comm: syz.2.1049 Not tainted syzkaller #0 PREEMPT(full) [ 402.046197][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.046219][T10335] Call Trace: [ 402.046226][T10335] [ 402.046234][T10335] dump_stack_lvl+0x16c/0x1f0 [ 402.046266][T10335] should_fail_ex+0x512/0x640 [ 402.046291][T10335] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 402.046319][T10335] should_failslab+0xc2/0x120 [ 402.046343][T10335] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 402.046368][T10335] ? posix_acl_clone+0x5d/0xe0 [ 402.046402][T10335] kmemdup_noprof+0x29/0x60 [ 402.046425][T10335] posix_acl_clone+0x5d/0xe0 [ 402.046452][T10335] __posix_acl_chmod+0x4a/0x460 [ 402.046488][T10335] posix_acl_chmod+0x1b2/0x350 [ 402.046518][T10335] ? __pfx_posix_acl_chmod+0x10/0x10 [ 402.046551][T10335] ? setattr_copy+0x85b/0xb40 [ 402.046586][T10335] shmem_setattr+0x9f6/0x1120 [ 402.046612][T10335] ? __pfx_shmem_setattr+0x10/0x10 [ 402.046633][T10335] notify_change+0x6a6/0x1230 [ 402.046673][T10335] chmod_common+0x224/0x480 [ 402.046699][T10335] ? rcu_is_watching+0x12/0xc0 [ 402.046726][T10335] ? __pfx_chmod_common+0x10/0x10 [ 402.046765][T10335] ? putname+0x154/0x1a0 [ 402.046796][T10335] __x64_sys_fchmodat+0x12b/0x1f0 [ 402.046822][T10335] ? __pfx___x64_sys_fchmodat+0x10/0x10 [ 402.046850][T10335] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 402.046881][T10335] do_syscall_64+0xcd/0x4c0 [ 402.046909][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.046930][T10335] RIP: 0033:0x7f313b98eba9 [ 402.046947][T10335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.046972][T10335] RSP: 002b:00007f313c7d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 402.046991][T10335] RAX: ffffffffffffffda RBX: 00007f313bbd6180 RCX: 00007f313b98eba9 [ 402.047005][T10335] RDX: 00000000ffffffd3 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 402.047019][T10335] RBP: 00007f313c7d4090 R08: 0000000000000000 R09: 0000000000000000 [ 402.047032][T10335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.047044][T10335] R13: 00007f313bbd6218 R14: 00007f313bbd6180 R15: 00007ffe8c613d88 [ 402.047078][T10335] [ 402.327442][ T6880] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 402.332448][T10158] veth0_vlan: entered promiscuous mode [ 402.352521][T10158] veth1_vlan: entered promiscuous mode [ 402.354760][ T6880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.377735][T10158] veth0_macvtap: entered promiscuous mode [ 402.400901][T10158] veth1_macvtap: entered promiscuous mode [ 402.404705][ T6880] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 402.418932][T10158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.423057][ T6880] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 402.442415][T10158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.456745][T10298] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.569581][ T1091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.579058][T10298] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.588044][ T6880] usb 1-1: Manufacturer: syz [ 402.589024][T10298] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.721469][ T6880] usb 1-1: config 0 descriptor?? [ 402.739154][ T6880] igorplugusb 1-1:0.0: incorrect number of endpoints [ 402.845510][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.864517][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.926053][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.008326][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.022262][ T6880] usb 1-1: USB disconnect, device number 44 [ 403.091119][T10343] fuse: Unknown parameter 'use00000000000000000000' [ 403.380266][ T975] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 403.692136][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 403.704068][ T975] usb 6-1: unable to get BOS descriptor or descriptor too short [ 403.718154][ T975] usb 6-1: config 6 has an invalid interface number: 150 but max is 1 [ 403.734564][ T975] usb 6-1: config 6 has an invalid interface number: 48 but max is 1 [ 403.756945][ T975] usb 6-1: config 6 has no interface number 0 [ 403.766038][T10358] fuse: Unknown parameter 'user_id00000000000000000000' [ 403.773792][ T975] usb 6-1: config 6 has no interface number 1 [ 403.828846][ T975] usb 6-1: config 6 interface 150 has no altsetting 0 [ 403.843759][ T975] usb 6-1: config 6 interface 48 has no altsetting 0 [ 403.864407][ T975] usb 6-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=87.08 [ 403.884528][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.923885][ T975] usb 6-1: Product: syz [ 403.959828][ T975] usb 6-1: Manufacturer: syz [ 404.141532][ T30] audit: type=1400 audit(1757525630.746:709): avc: denied { mounton } for pid=10363 comm="syz.0.1058" path="/200/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 404.160617][ T975] usb 6-1: SerialNumber: syz [ 404.208122][ T30] audit: type=1400 audit(1757525630.776:710): avc: denied { remount } for pid=10363 comm="syz.0.1058" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 404.551506][ T975] usb 6-1: unknown interface protocol 0x25, assuming v1 [ 404.559896][ T975] usb 6-1: cannot find UAC_HEADER [ 404.662192][ T975] snd-usb-audio 6-1:6.150: probe with driver snd-usb-audio failed with error -22 [ 404.726892][ T975] usb 6-1: USB disconnect, device number 2 [ 404.891977][ T30] audit: type=1400 audit(1757525631.496:711): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 404.956548][T10377] fuse: Unknown parameter 'use00000000000000000000' [ 404.969965][ T30] audit: type=1400 audit(1757525631.526:712): avc: denied { read } for pid=10378 comm="syz.0.1062" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 405.657007][ T30] audit: type=1400 audit(1757525632.156:713): avc: denied { checkpoint_restore } for pid=10373 comm="syz.4.1061" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 405.860507][T10391] sp0: Synchronizing with TNC [ 406.406913][T10391] netlink: 'syz.0.1065': attribute type 33 has an invalid length. [ 406.460221][T10391] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1065'. [ 406.592347][T10407] fuse: Bad value for 'fd' [ 407.543306][ T30] audit: type=1400 audit(1757525634.136:714): avc: denied { ioctl } for pid=10409 comm="syz.3.1070" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0xaebd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 408.355475][ T30] audit: type=1400 audit(1757525634.946:715): avc: denied { write } for pid=10412 comm="syz.2.1071" path="socket:[28180]" dev="sockfs" ino=28180 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 408.400299][ T6877] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 408.448408][ T30] audit: type=1400 audit(1757525635.056:716): avc: denied { bind } for pid=10426 comm="syz.4.1074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 408.850934][ T6877] usb 4-1: Using ep0 maxpacket: 32 [ 408.872179][ T6877] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 408.906893][ T30] audit: type=1400 audit(1757525635.516:717): avc: denied { shutdown } for pid=10431 comm="syz.0.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 408.927188][ T6877] usb 4-1: config 0 has no interface number 0 [ 408.933545][ T6877] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.954774][ T6877] usb 4-1: config 0 interface 85 has no altsetting 0 [ 408.989911][ T6877] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 409.020520][ T6877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.080397][ T6877] usb 4-1: Product: syz [ 409.084591][ T6877] usb 4-1: Manufacturer: syz [ 409.093645][ T6877] usb 4-1: SerialNumber: syz [ 409.164512][ T6877] usb 4-1: config 0 descriptor?? [ 409.306786][T10452] fuse: Bad value for 'fd' [ 409.800388][ T6877] appletouch 4-1:0.85: Geyser mode initialized. [ 409.815911][ T6877] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input49 [ 409.892422][T10461] input: syz0 as /devices/virtual/input/input50 [ 410.030432][ T30] audit: type=1400 audit(1757525636.616:718): avc: denied { write } for pid=10416 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 410.125139][ T6877] usb 4-1: USB disconnect, device number 35 [ 410.145977][ T6877] appletouch 4-1:0.85: input: appletouch disconnected [ 410.711824][T10464] netlink: 'syz.4.1082': attribute type 10 has an invalid length. [ 410.719751][T10464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1082'. [ 411.271006][T10478] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.279017][T10478] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.294960][T10478] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.329095][T10479] misc userio: No port type given on /dev/userio [ 411.404316][T10478] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 411.564973][T10478] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.573028][T10478] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.581113][T10478] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.588473][T10478] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.596021][T10478] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.603442][T10478] virt_wifi0 speed is unknown, defaulting to 1000 [ 411.934835][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1087'. [ 412.022058][T10483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 412.086873][T10483] macvlan2: entered promiscuous mode [ 412.110819][T10483] macvlan2: entered allmulticast mode [ 412.201286][T10490] fuse: Bad value for 'fd' [ 412.238837][T10492] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1091'. [ 412.668676][T10500] input: syz0 as /devices/virtual/input/input51 [ 412.783613][ T6877] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 412.987627][ T6877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.041378][ T6877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.059301][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1093'. [ 413.101357][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1093'. [ 413.110482][ T6877] usb 3-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 413.110511][ T6877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.112677][ T6877] usb 3-1: config 0 descriptor?? [ 413.552782][ T6877] wacom 0003:056A:0217.0006: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 413.661104][ T30] audit: type=1400 audit(1757525640.266:719): avc: denied { bind } for pid=10514 comm="syz.3.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 413.699944][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1098'. [ 413.778594][ T30] audit: type=1400 audit(1757525640.346:720): avc: denied { map } for pid=10514 comm="syz.3.1098" path="socket:[29993]" dev="sockfs" ino=29993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 413.812643][ T6877] usb 3-1: USB disconnect, device number 37 [ 413.859216][ T30] audit: type=1400 audit(1757525640.346:721): avc: denied { read } for pid=10514 comm="syz.3.1098" path="socket:[29993]" dev="sockfs" ino=29993 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 414.423862][ T30] audit: type=1400 audit(1757525641.036:722): avc: denied { mount } for pid=10538 comm="syz.3.1103" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 414.454646][T10545] fuse: Unknown parameter '0x0000000000000003' [ 414.707275][ T30] audit: type=1400 audit(1757525641.306:723): avc: denied { read append } for pid=10526 comm="syz.0.1100" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 414.760071][ T975] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 414.973832][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 414.995498][ T975] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 415.034818][ T975] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 415.051331][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.066703][ T975] usb 5-1: Product: syz [ 415.075901][ T975] usb 5-1: Manufacturer: syz [ 415.102065][ T975] usb 5-1: SerialNumber: syz [ 415.132972][ T975] usb 5-1: config 0 descriptor?? [ 415.219762][ T975] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 415.401306][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.415671][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.427415][ T73] usb 5-1: Failed to submit usb control message: -71 [ 415.428140][ T975] usb 5-1: USB disconnect, device number 36 [ 415.457363][ T73] usb 5-1: unable to send the bmi data to the device: -71 [ 415.486440][ T30] audit: type=1400 audit(1757525642.096:724): avc: denied { unmount } for pid=5850 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 415.510302][ T73] usb 5-1: unable to get target info from device [ 415.531349][ T73] usb 5-1: could not get target info (-71) [ 415.547486][ T73] usb 5-1: could not probe fw (-71) [ 415.946939][T10569] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1109'. [ 416.668817][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1113'. [ 416.738375][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1113'. [ 416.850536][T10584] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1113'. [ 416.877239][T10586] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 416.895872][T10586] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 417.648331][T10602] fuse: Unknown parameter '0x0000000000000003' [ 418.130278][ T5927] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 418.267890][T10625] sctp: [Deprecated]: syz.3.1120 (pid 10625) Use of int in maxseg socket option. [ 418.267890][T10625] Use struct sctp_assoc_value instead [ 418.332095][T10622] input: syz0 as /devices/virtual/input/input56 [ 418.492008][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 418.498841][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.516562][ T5927] usb 5-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 418.538007][T10619] lo speed is unknown, defaulting to 1000 [ 418.566062][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.579373][T10619] virt_wifi0 speed is unknown, defaulting to 1000 [ 418.603256][ T5927] usb 5-1: config 0 descriptor?? [ 418.698011][T10600] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 419.031995][ T5927] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 419.051075][ T5927] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 419.078238][ T5927] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 419.110002][ T5927] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 419.163405][ T5927] asus 0003:0B05:1A30.0007: unknown main item tag 0x0 [ 419.230607][ T5927] asus 0003:0B05:1A30.0007: hidraw0: USB HID v2.03 Device [HID 0b05:1a30] on usb-dummy_hcd.4-1/input0 [ 419.266556][ T5927] asus 0003:0B05:1A30.0007: Asus input not registered [ 419.283173][ T5927] asus 0003:0B05:1A30.0007: probe with driver asus failed with error -12 [ 419.329121][ T5927] usb 5-1: USB disconnect, device number 37 [ 419.346691][T10646] 9pnet_fd: Insufficient options for proto=fd [ 419.599611][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 419.650289][ T6877] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 419.710096][T10656] veth0_macvtap: left promiscuous mode [ 419.815024][ T30] audit: type=1400 audit(1757525646.426:725): avc: denied { read write } for pid=10666 comm="syz.2.1132" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 419.848286][ T30] audit: type=1400 audit(1757525646.456:726): avc: denied { open } for pid=10666 comm="syz.2.1132" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 419.878023][ T6877] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 419.911692][ T6877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.924312][ T6877] usb 1-1: config 0 descriptor?? [ 420.012520][T10672] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1133'. [ 420.271018][ T6877] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 420.334355][T10673] can: request_module (can-proto-0) failed. [ 420.378073][T10678] input: syz0 as /devices/virtual/input/input58 [ 420.654344][ T6877] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 420.680479][ T6877] [drm] Initialized udl on minor 2 [ 420.820603][ T6877] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 420.845795][ T6877] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 421.498277][ T30] audit: type=1400 audit(1757525647.766:727): avc: denied { map } for pid=10691 comm="syz.4.1139" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 421.521879][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.546918][ T30] audit: type=1400 audit(1757525647.766:728): avc: denied { execute } for pid=10691 comm="syz.4.1139" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 421.571498][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.612766][T10649] lo speed is unknown, defaulting to 1000 [ 421.672285][T10649] virt_wifi0 speed is unknown, defaulting to 1000 [ 422.158453][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 422.181151][T10703] netlink: 'syz.4.1141': attribute type 5 has an invalid length. [ 422.271869][T10703] netlink: 'syz.4.1141': attribute type 9 has an invalid length. [ 422.390412][ T6877] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 422.440440][ T3495] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.451983][ T3495] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.468873][ T3495] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.479256][ T1091] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.680252][ T6877] usb 5-1: Using ep0 maxpacket: 8 [ 422.691458][ T6877] usb 5-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 422.702215][ T6877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.738717][ T6877] usb 5-1: config 0 descriptor?? [ 422.762479][ T6877] usblcd 5-1:0.0: USBLCD model not supported. [ 422.972481][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.981502][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.991960][ T975] usb 5-1: USB disconnect, device number 38 [ 423.020622][T10720] debugfs: '!' already exists in 'ieee80211' [ 423.127635][ T30] audit: type=1326 audit(1757525649.736:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10718 comm="syz.5.1144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f839938eba9 code=0x0 [ 423.850473][ T6877] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 424.103580][ T6877] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 424.190724][ T6877] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.203128][T10727] input: syz0 as /devices/virtual/input/input59 [ 424.230530][ T6877] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.245791][ T6877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 424.245938][ T6878] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 424.246164][ T6880] usb 1-1: USB disconnect, device number 45 [ 424.267433][ T6878] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 424.277287][T10732] CIFS: VFS: Malformed UNC in devname [ 424.392254][ T6877] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.411964][ T6877] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.430212][ T6877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 424.449215][ T6877] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.486255][ T6877] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.511742][ T6877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 424.555395][ T6877] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.574546][ T6877] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.629786][ T6877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 424.658413][ T6877] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.700517][ T6877] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.768824][ T6877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 424.871429][ T6877] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 424.964015][ T6877] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 424.989344][ T6877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 425.012590][ T6877] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.021578][ T6877] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.109748][ T6877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 425.137960][ T6877] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.147403][ T6877] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 425.188802][ T6877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 425.199032][T10749] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1151'. [ 425.227241][ T6877] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 425.257324][ T6877] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 425.273017][ T6877] usb 4-1: Product: syz [ 425.299348][ T6877] usb 4-1: Manufacturer: syz [ 425.321398][ T6877] usb 4-1: SerialNumber: syz [ 425.345613][ T6877] usb 4-1: config 0 descriptor?? [ 425.366114][ T6877] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 425.480386][ T6878] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 425.595012][ T6877] usb 4-1: USB disconnect, device number 36 [ 425.606097][ T6877] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 425.690295][ T6878] usb 6-1: Using ep0 maxpacket: 16 [ 425.698773][ T6878] usb 6-1: unable to get BOS descriptor or descriptor too short [ 425.713020][ T6878] usb 6-1: config 13 has an invalid interface number: 50 but max is 0 [ 425.727642][ T6878] usb 6-1: config 13 has no interface number 0 [ 425.738685][ T6878] usb 6-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 425.749061][ T6878] usb 6-1: config 13 interface 50 has no altsetting 0 [ 425.761072][ T6878] usb 6-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 425.774408][ T6878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.790476][ T6878] usb 6-1: Product: syz [ 425.799980][ T6878] usb 6-1: Manufacturer: syz [ 425.807011][ T6878] usb 6-1: SerialNumber: syz [ 425.815195][T10751] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 425.855666][T10760] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1146'. [ 426.257849][ T6878] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.283335][ T6878] usb 6-1: MIDIStreaming interface descriptor not found [ 426.975048][ T6878] usb 6-1: USB disconnect, device number 3 [ 427.549497][T10783] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1160'. [ 427.750309][ T6878] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 427.867877][T10791] fuse: Unknown parameter '0x0000000000000003' [ 427.880395][ T6880] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 427.900294][ T6878] usb 1-1: Using ep0 maxpacket: 32 [ 427.907529][ T6878] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 427.936265][ T6878] usb 1-1: config 0 has no interface number 0 [ 427.960064][ T6878] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 427.984688][ T6878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.008404][ T6878] usb 1-1: Product: syz [ 428.020156][ T6878] usb 1-1: Manufacturer: syz [ 428.032682][ T6878] usb 1-1: SerialNumber: syz [ 428.043881][ T6880] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 428.067808][ T6878] usb 1-1: config 0 descriptor?? [ 428.072897][ T6880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.102324][ T6878] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 428.110339][ T6880] usb 6-1: Product: syz [ 428.148098][ T6880] usb 6-1: Manufacturer: syz [ 428.156787][ T6880] usb 6-1: SerialNumber: syz [ 428.190708][ T6880] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 428.208620][ T30] audit: type=1400 audit(1757525654.816:730): avc: denied { firmware_load } for pid=5969 comm="kworker/1:6" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 428.263644][ T5969] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 428.337180][ T6878] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 428.504593][ T6878] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 428.519808][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.529367][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 428.540328][ T6878] usb 1-1: USB disconnect, device number 46 [ 428.551833][ T6878] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 428.575019][ T6878] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 428.576196][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.602045][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.619640][ T6878] quatech2 1-1:0.51: device disconnected [ 428.658379][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.701703][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.710942][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.720542][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.765371][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.792275][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.801348][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.873953][ T6878] usb 6-1: USB disconnect, device number 4 [ 429.032237][ T5913] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 429.454957][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 429.481212][ T5913] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 429.490123][ T5913] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 429.502479][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.537084][ T5913] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 429.547354][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.557729][ T5913] usb 4-1: Product: 뭹슐硛ⴀ恽깻吆纤ﯳ㼟썈⸀熳ⷝ慖벗难쨀例諮閈揜呋ᤑ⦿ࡵꈛ큞衐⑋↍ⶊ俭먆䵁旕訲鬽꼧⃫뚑茺᫻鵔灇ᵻꖬ껈䕉馏뱷孜⑧ᖣ缮伓過䭞᫧퉰텞씟ב瘉ㅒ⩼⯦姓郟흋滱⛡銐듣㹰梮荟꽞㱿仝龽棩邇਋肐湲糅ヌ爻䫱畡竻묈뫰篭ॱ誤 [ 429.597344][ T5969] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 429.608568][ T5913] usb 4-1: Manufacturer: 퐋撸躃১쥦噉鐓⪇믖걝툑ꈘ䂥扟䴟잕춻瀯陕재멻팇⿖괯儌뮀흠㳀ᑜ跜발ើ䦮὇臩ㇷ㩴빬⽸ᷝ൙穠⒉๳湼䬴垼傞젼墤綆䆂嘘ᗎ鰳钦 [ 429.676784][ T30] audit: type=1400 audit(1757525656.256:731): avc: denied { write } for pid=10817 comm="syz.2.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 429.732049][ T5969] ath9k_htc: Failed to initialize the device [ 429.742509][ T6878] usb 6-1: ath9k_htc: USB layer deinitialized [ 430.110213][ T5913] usb 4-1: SerialNumber: 롊䣽栄࠳䷌鴖梵僲鋻Ꚃ拍쉉᧵씶녞뤜擕⾳銫㒕靲䫖ࠆ┥䠝꓂䋐礉◤荟뾢꘻ꦛЏ㧼橳䷵檅ꐓ샸ῒ眚욞㖺萟鬍ㄭ瘟㭓গ፣빅牀䷏퀎⣠㥅톃ऊ谂㶸ᰑᶶ眠讉窹⧩淳뒎߆㎤➩⡤䓵굈䏿飜캰辚鍚셦焌烁഼똧琍 [ 430.207658][T10836] fuse: Unknown parameter '0x0000000000000003' [ 430.397251][ T5913] usb 4-1: 0:2 : does not exist [ 430.409641][ T5913] usb 4-1: USB disconnect, device number 37 [ 431.294689][T10860] input: syz0 as /devices/virtual/input/input61 [ 431.303366][ T6878] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 431.480319][ T5913] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 431.584528][ T6878] usb 4-1: Using ep0 maxpacket: 8 [ 431.597271][ T6878] usb 4-1: config index 0 descriptor too short (expected 29970, got 18) [ 431.615130][ T6878] usb 4-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 431.636967][ T6878] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 431.655376][ T6878] usb 4-1: config 0 has no interface number 0 [ 431.665126][ T6878] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 431.687140][ T6878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.710776][ T6878] usb 4-1: Product: syz [ 431.716932][ T5913] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.727897][ T6878] usb 4-1: Manufacturer: syz [ 431.732666][ T5913] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 431.741866][ T6878] usb 4-1: SerialNumber: syz [ 431.752770][ T6878] usb 4-1: config 0 descriptor?? [ 431.757804][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.779003][ T5913] usb 6-1: config 0 descriptor?? [ 431.788946][ T5913] usbhid 6-1:0.0: can't add hid device: -22 [ 431.795918][ T5913] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 431.918584][ T30] audit: type=1326 audit(1757525658.526:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10880 comm="syz.4.1188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fd9d8eba9 code=0x0 [ 432.084466][T10886] netlink: 'syz.0.1189': attribute type 33 has an invalid length. [ 432.100551][T10886] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1189'. [ 432.201888][T10818] delete_channel: no stack [ 432.426698][ T5847] Bluetooth: hci1: command 0x0405 tx timeout [ 433.689863][T10894] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 434.000745][ T5969] usb 4-1: USB disconnect, device number 38 [ 434.297970][T10903] input: syz0 as /devices/virtual/input/input63 [ 434.424600][T10909] fuse: Bad value for 'fd' [ 434.869721][ T5913] usb 6-1: USB disconnect, device number 5 [ 434.960543][ T6878] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 435.145399][ T6878] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.154597][ T6878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.162844][ T6878] usb 3-1: Product: syz [ 435.167026][ T6878] usb 3-1: Manufacturer: syz [ 435.171653][ T6878] usb 3-1: SerialNumber: syz [ 435.177789][ T6878] usb 3-1: config 0 descriptor?? [ 435.230848][ T5969] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 435.394550][ T6878] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 435.413170][ T6880] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 435.500359][ T5969] usb 5-1: Using ep0 maxpacket: 8 [ 435.544503][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1200'. [ 435.565034][ T5969] usb 5-1: unable to get BOS descriptor or descriptor too short [ 435.592349][ T6880] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.808338][ T5969] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 435.868373][ T6880] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.904091][ T5969] usb 5-1: config 0 has no interface number 0 [ 435.920777][ T5969] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 435.934760][ T6880] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 435.944502][ T5969] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 435.954971][ T6880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.963125][ T5969] usb 5-1: config 0 interface 88 has no altsetting 0 [ 435.973912][ T6880] usb 4-1: config 0 descriptor?? [ 435.982577][ T5969] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 435.996271][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 436.009465][ T5969] usb 5-1: Product: syz [ 436.009562][T10929] loop8: detected capacity change from 0 to 7 [ 436.013698][ T5969] usb 5-1: SerialNumber: syz [ 436.024606][ T5969] usb 5-1: config 0 descriptor?? [ 436.036129][T10929] Dev loop8: unable to read RDB block 7 [ 436.043212][T10929] loop8: AHDI p1 p2 p3 [ 436.047548][T10929] loop8: partition table partially beyond EOD, truncated [ 436.054853][T10929] loop8: p1 start 1601398130 is beyond EOD, truncated [ 436.061820][T10929] loop8: p2 start 1702059890 is beyond EOD, truncated [ 436.107126][T10930] Dev loop8: unable to read RDB block 7 [ 436.114028][T10930] loop8: AHDI p1 p2 p3 [ 436.118405][T10930] loop8: partition table partially beyond EOD, truncated [ 436.125781][T10930] loop8: p1 start 1601398130 is beyond EOD, truncated [ 436.135771][T10930] loop8: p2 start 1702059890 is beyond EOD, truncated [ 436.234598][ T5969] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input64 [ 436.423502][ T6880] ortek 0003:1223:3F07.0008: unknown main item tag 0x3 [ 436.431745][ T5969] usb 5-1: USB disconnect, device number 39 [ 436.440677][ T6880] ortek 0003:1223:3F07.0008: item fetching failed at offset 48/69 [ 436.457424][ T6880] ortek 0003:1223:3F07.0008: probe with driver ortek failed with error -22 [ 436.598539][T10941] fuse: Bad value for 'fd' [ 436.775993][T10922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.901799][T10922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.990125][ T6880] usb 4-1: USB disconnect, device number 39 [ 437.065775][T10950] input: syz0 as /devices/virtual/input/input65 [ 437.120525][T10952] netlink: 'syz.5.1204': attribute type 33 has an invalid length. [ 437.128871][T10952] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1204'. [ 437.459688][ T30] audit: type=1400 audit(1757525664.056:733): avc: denied { watch watch_reads } for pid=10953 comm="syz.3.1206" path="/240/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 437.830596][ T6878] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 437.856437][ T6878] usb 3-1: USB disconnect, device number 38 [ 439.497742][T10983] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1213'. [ 439.802013][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.830731][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.620284][ T6878] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 440.953433][ T6878] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 441.080206][ T6878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.119861][ T6878] usb 4-1: config 0 descriptor?? [ 441.140760][ T6878] cp210x 4-1:0.0: cp210x converter detected [ 441.500635][ T5913] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 442.420306][ T5913] usb 1-1: device descriptor read/64, error -71 [ 442.670305][ T5913] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 442.688435][ T30] audit: type=1326 audit(1757525669.296:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 442.725156][ T30] audit: type=1326 audit(1757525669.296:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 442.762078][ T30] audit: type=1326 audit(1757525669.336:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 442.789199][ T30] audit: type=1326 audit(1757525669.336:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 442.815520][ T30] audit: type=1326 audit(1757525669.346:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 442.842918][ T30] audit: type=1326 audit(1757525669.366:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 442.870480][ T5913] usb 1-1: device descriptor read/64, error -71 [ 442.879021][ T30] audit: type=1326 audit(1757525669.366:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 442.969237][T11036] netlink: 'syz.5.1222': attribute type 33 has an invalid length. [ 442.977327][T11036] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1222'. [ 443.048220][ T30] audit: type=1326 audit(1757525669.366:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 443.073068][ T5913] usb usb1-port1: attempt power cycle [ 443.080706][ T30] audit: type=1326 audit(1757525669.366:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f313b92ada9 code=0x7ffc0000 [ 443.104533][ T30] audit: type=1326 audit(1757525669.366:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11022 comm="syz.2.1221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 443.104709][T11035] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1224'. [ 443.434352][ T5913] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 443.442496][ T6878] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 443.456097][ T6878] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 443.466164][ T6878] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 443.473727][ T5913] usb 1-1: device descriptor read/8, error -71 [ 443.486602][ T6878] usb 4-1: cp210x converter now attached to ttyUSB0 [ 443.497275][ T6878] usb 4-1: USB disconnect, device number 40 [ 443.510264][ T6880] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 443.524141][ T6878] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 443.556224][ T6878] cp210x 4-1:0.0: device disconnected [ 443.668686][ T6880] usb 3-1: Using ep0 maxpacket: 8 [ 443.815603][ T6880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 443.862462][ T6880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 443.874363][ T6880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 443.886012][ T6880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 443.895874][ T6880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 443.914529][ T6880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 443.925525][ T6880] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 443.935612][ T6880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 443.950253][ T6880] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 443.982086][ T6880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 443.996265][ T6880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 444.017443][ T6880] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 444.036818][ T6880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.044898][ T6880] usb 3-1: Product: syz [ 444.049203][ T6880] usb 3-1: Manufacturer: syz [ 444.085372][ T6880] usb 3-1: SerialNumber: syz [ 444.113978][ T6880] usb 3-1: config 0 descriptor?? [ 444.135812][ T6880] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 444.366194][ T6880] usb 3-1: USB disconnect, device number 39 [ 444.370980][T11067] 8021q: VLANs not supported on ipvlan1 [ 444.411109][T11065] 8021q: VLANs not supported on ipvlan1 [ 444.624577][T11065] netlink: 'syz.5.1232': attribute type 10 has an invalid length. [ 444.677426][T11065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.689217][T11065] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 444.830400][ T6880] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 444.990359][ T6880] usb 4-1: Using ep0 maxpacket: 8 [ 444.996756][ T6880] usb 4-1: config index 0 descriptor too short (expected 26, got 10) [ 445.005313][ T6880] usb 4-1: config 5 descriptor has 1 excess byte, ignoring [ 445.013885][ T6880] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 445.025309][ T6880] usb 4-1: New USB device found, idVendor=0403, idProduct=e0f0, bcdDevice=d5.e2 [ 445.040364][ T6880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.049413][ T6880] usb 4-1: Product: syz [ 445.060399][ T6880] usb 4-1: Manufacturer: syz [ 445.079694][ T6880] usb 4-1: SerialNumber: syz [ 445.200406][ T5913] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 445.236726][T11090] netlink: 'syz.5.1240': attribute type 4 has an invalid length. [ 445.299629][T11076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.309729][T11076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.347649][T11076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.364613][ T5913] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 445.380301][T11076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.397508][ T5913] usb 3-1: config 0 has no interface number 0 [ 445.401247][T11093] netlink: 'syz.5.1240': attribute type 4 has an invalid length. [ 445.407377][ T6878] usb 4-1: USB disconnect, device number 41 [ 445.420129][ T5913] usb 3-1: config 0 interface 41 has no altsetting 0 [ 445.440327][ T6880] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 445.444919][ T5913] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 445.475168][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.490000][ T5913] usb 3-1: Product: syz [ 445.494490][ T5913] usb 3-1: Manufacturer: syz [ 445.499121][ T5913] usb 3-1: SerialNumber: syz [ 445.517449][ T5913] usb 3-1: config 0 descriptor?? [ 445.620376][ T6880] usb 5-1: Using ep0 maxpacket: 8 [ 445.652338][ T6880] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 445.664235][ T6880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.672522][ T6880] usb 5-1: Product: syz [ 445.676878][ T6880] usb 5-1: Manufacturer: syz [ 445.684295][ T6880] usb 5-1: SerialNumber: syz [ 445.710523][ T6880] usb 5-1: config 0 descriptor?? [ 445.720110][ T6880] gspca_main: se401-2.14.0 probing 047d:5003 [ 446.366098][T11098] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1241'. [ 447.106455][ T5913] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 447.115911][ T6880] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 447.136305][ T6880] se401 5-1:0.0: probe with driver se401 failed with error -110 [ 448.446214][T11126] tipc: Started in network mode [ 448.451243][ T6880] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 448.469790][T11126] tipc: Node identity a6d1ce490b3b, cluster identity 4711 [ 448.492471][T11126] tipc: Enabled bearer , priority 0 [ 448.578271][ T6878] usb 5-1: USB disconnect, device number 40 [ 448.672211][T11126] tipc: Disabling bearer [ 448.679001][ T5913] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 448.700546][ T5913] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 448.761490][ T5913] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 448.977386][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.019683][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 449.019698][ T30] audit: type=1400 audit(1757525675.626:879): avc: denied { create } for pid=11134 comm="syz.0.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 449.064903][ T6880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.076916][ T6880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 449.168824][ T5913] usb 3-1: USB disconnect, device number 40 [ 449.177784][ T6880] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 449.181990][ T30] audit: type=1400 audit(1757525675.626:880): avc: denied { ioctl } for pid=11134 comm="syz.0.1249" path="socket:[33043]" dev="sockfs" ino=33043 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 449.265860][ T6880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.326870][ T6880] usb 4-1: config 0 descriptor?? [ 449.395903][ T6878] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 449.510232][ T5927] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 449.570370][ T6880] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 449.577016][ T6880] dvb-usb: bulk message failed: -22 (3/0) [ 449.604695][ T6880] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 449.607156][T11144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1251'. [ 449.649866][ T6880] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 449.699842][ T6880] usb 4-1: media controller created [ 449.748032][ T6880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.794331][ T5927] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 449.803682][ T6880] dvb-usb: bulk message failed: -22 (6/0) [ 449.820442][ T6878] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 449.854747][ T5927] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 449.872094][ T6880] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 449.873740][T11145] tmpfs: Unknown parameter 'quotaT' [ 449.898141][ T5927] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 449.918611][ T6880] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input69 [ 449.956484][ T6880] dvb-usb: schedule remote query interval to 150 msecs. [ 450.028936][ T5927] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 450.054386][ T6880] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 450.087212][ T5927] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 450.204588][ T6878] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 450.224395][ T5927] usb 6-1: config 0 has no interface number 0 [ 450.478196][ T6878] usb 5-1: can't read configurations, error -61 [ 450.498556][ T5962] dvb-usb: bulk message failed: -22 (1/0) [ 450.512014][ T5962] dvb-usb: error while querying for an remote control event. [ 450.590404][ T5927] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 450.632657][ T5927] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 450.674202][T11144] overlayfs: missing 'lowerdir' [ 450.712276][ T6880] dvb-usb: bulk message failed: -22 (1/0) [ 450.719694][ T5927] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 450.719753][ T6880] dvb-usb: error while querying for an remote control event. [ 450.760261][ T6878] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 450.785718][ T5927] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 450.895090][ T30] audit: type=1326 audit(1757525677.436:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 450.961948][T11149] input: syz0 as /devices/virtual/input/input70 [ 451.126745][ T5962] dvb-usb: bulk message failed: -22 (1/0) [ 451.284338][ T5927] usb 6-1: config 0 interface 125 has no altsetting 0 [ 451.291277][ T5962] dvb-usb: error while querying for an remote control event. [ 451.291348][ T5927] usb 6-1: config 0 interface 125 has no altsetting 2 [ 451.306251][ T30] audit: type=1326 audit(1757525677.506:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 451.344028][ T5927] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 451.364876][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.381780][ T6878] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 451.439737][ T6878] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 451.441622][ T30] audit: type=1326 audit(1757525677.506:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 451.452623][ T6878] usb 5-1: can't read configurations, error -61 [ 451.470636][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.522354][ T5927] usb 6-1: Product: syz [ 451.526551][ T5927] usb 6-1: Manufacturer: syz [ 451.536651][ T5927] usb 6-1: SerialNumber: syz [ 451.546722][ T5927] usb 6-1: config 0 descriptor?? [ 451.555735][ T6880] dvb-usb: bulk message failed: -22 (1/0) [ 451.562572][ T5927] usb 6-1: selecting invalid altsetting 2 [ 451.590655][ T6880] dvb-usb: error while querying for an remote control event. [ 451.663461][ T30] audit: type=1326 audit(1757525677.506:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11142 comm="syz.2.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313b98eba9 code=0x7ffc0000 [ 451.686890][ C1] vkms_vblank_simulate: vblank timer overrun [ 451.711203][ T6878] usb usb5-port1: attempt power cycle [ 451.755130][ C0] usb 6-1: async_complete: urb error -71 [ 451.760884][ C0] usb 6-1: async_complete: urb error -71 [ 451.766560][ C0] usb 6-1: async_complete: urb error -71 [ 451.772235][ C0] usb 6-1: async_complete: urb error -71 [ 451.816521][ T5927] get_1284_register: usb error -71 [ 451.833973][ T5927] uss720 6-1:0.125: probe with driver uss720 failed with error -71 [ 451.862176][ T5927] usb 6-1: USB disconnect, device number 6 [ 451.910307][ T5962] dvb-usb: bulk message failed: -22 (1/0) [ 451.945080][ T5962] dvb-usb: error while querying for an remote control event. [ 452.060930][ T6878] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 452.130490][ T5927] usb 4-1: USB disconnect, device number 42 [ 452.197283][ T5927] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 452.208656][ T6878] usb 5-1: device descriptor read/8, error -71 [ 452.395318][ T5962] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 452.969759][ T5962] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 452.981741][ T5962] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.990080][ T5962] usb 3-1: Product: syz [ 452.994459][ T5962] usb 3-1: Manufacturer: syz [ 452.999459][ T5962] usb 3-1: SerialNumber: syz [ 453.146245][ T6880] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 453.207679][ T30] audit: type=1400 audit(1757526447.925:885): avc: denied { ioctl } for pid=11175 comm="syz.4.1260" path="socket:[33085]" dev="sockfs" ino=33085 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 453.424682][ T6880] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 453.424838][T11160] binder: 11159:11160 unknown command 745882175 [ 453.451806][ T6880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 453.465048][ T6880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.467145][T11160] binder: 11159:11160 ioctl c0306201 200000000080 returned -22 [ 453.481559][ T6880] usb 6-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 453.497235][ T30] audit: type=1400 audit(1757526448.229:886): avc: denied { call } for pid=11159 comm="syz.2.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 453.498442][ T6880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.548560][ T6880] usb 6-1: Product: syz [ 453.553490][ T6880] usb 6-1: Manufacturer: syz [ 453.563555][ T6880] usb 6-1: SerialNumber: syz [ 453.580480][T11183] syzkaller1: entered promiscuous mode [ 453.586158][T11183] syzkaller1: entered allmulticast mode [ 453.690736][ T5962] rtl8150 3-1:1.0: couldn't reset the device [ 453.696972][ T5962] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 453.714035][ T6880] usb 6-1: config 0 descriptor?? [ 453.727868][T11172] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 453.739151][ T6880] option 6-1:0.0: GSM modem (1-port) converter detected [ 453.753450][ T5962] usb 3-1: USB disconnect, device number 41 [ 453.888282][T11187] FAULT_INJECTION: forcing a failure. [ 453.888282][T11187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.908614][T11187] CPU: 1 UID: 0 PID: 11187 Comm: syz.4.1262 Not tainted syzkaller #0 PREEMPT(full) [ 453.908645][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.908657][T11187] Call Trace: [ 453.908663][T11187] [ 453.908671][T11187] dump_stack_lvl+0x16c/0x1f0 [ 453.908701][T11187] should_fail_ex+0x512/0x640 [ 453.908730][T11187] _copy_to_user+0x32/0xd0 [ 453.908762][T11187] simple_read_from_buffer+0xcb/0x170 [ 453.908785][T11187] proc_fail_nth_read+0x197/0x240 [ 453.908800][T11187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.908814][T11187] ? rw_verify_area+0xcf/0x6c0 [ 453.908831][T11187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.908843][T11187] vfs_read+0x1e1/0xcf0 [ 453.908856][T11187] ? __pfx___mutex_lock+0x10/0x10 [ 453.908871][T11187] ? __pfx_vfs_read+0x10/0x10 [ 453.908886][T11187] ? __fget_files+0x20e/0x3c0 [ 453.908902][T11187] ksys_read+0x12a/0x250 [ 453.908913][T11187] ? __pfx_ksys_read+0x10/0x10 [ 453.908928][T11187] do_syscall_64+0xcd/0x4c0 [ 453.908944][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.908955][T11187] RIP: 0033:0x7f5fd9d8d5bc [ 453.908965][T11187] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 453.908975][T11187] RSP: 002b:00007f5fdaca1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.908986][T11187] RAX: ffffffffffffffda RBX: 00007f5fd9fd5fa0 RCX: 00007f5fd9d8d5bc [ 453.908993][T11187] RDX: 000000000000000f RSI: 00007f5fdaca10a0 RDI: 0000000000000004 [ 453.909000][T11187] RBP: 00007f5fdaca1090 R08: 0000000000000000 R09: 0000000000000000 [ 453.909006][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.909018][T11187] R13: 00007f5fd9fd6038 R14: 00007f5fd9fd5fa0 R15: 00007ffe9c6699c8 [ 453.909033][T11187] [ 454.228035][ T6878] usb 6-1: USB disconnect, device number 7 [ 454.237312][ T6878] option 6-1:0.0: device disconnected [ 454.421128][T11191] input: syz0 as /devices/virtual/input/input71 [ 455.481254][T11204] input: syz0 as /devices/virtual/input/input72 [ 455.946292][ T30] audit: type=1400 audit(1757526450.791:887): avc: denied { append } for pid=11216 comm="syz.4.1269" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 457.312560][T11247] [ 457.314917][T11247] ============================================ [ 457.321048][T11247] WARNING: possible recursive locking detected [ 457.327173][T11247] syzkaller #0 Not tainted [ 457.331567][T11247] -------------------------------------------- [ 457.337691][T11247] syz.2.1273/11247 is trying to acquire lock: [ 457.343745][T11247] ffff88805c038d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0x915/0x1da0 [ 457.354716][T11247] [ 457.354716][T11247] but task is already holding lock: [ 457.362065][T11247] ffff88805c038d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x37b/0x5bc0 [ 457.371895][T11247] and the lock comparison function returns 0: [ 457.377938][T11247] [ 457.377938][T11247] other info that might help us debug this: [ 457.385978][T11247] Possible unsafe locking scenario: [ 457.385978][T11247] [ 457.393408][T11247] CPU0 [ 457.396668][T11247] ---- [ 457.399925][T11247] lock(&dev_instance_lock_key#20); [ 457.405205][T11247] lock(&dev_instance_lock_key#20); [ 457.410478][T11247] [ 457.410478][T11247] *** DEADLOCK *** [ 457.410478][T11247] [ 457.418594][T11247] May be due to missing lock nesting notation [ 457.418594][T11247] [ 457.426888][T11247] 2 locks held by syz.2.1273/11247: [ 457.432060][T11247] #0: ffffffff90384ac8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x253/0x5bc0 [ 457.441016][T11247] #1: ffff88805c038d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x37b/0x5bc0 [ 457.451281][T11247] [ 457.451281][T11247] stack backtrace: [ 457.457149][T11247] CPU: 1 UID: 0 PID: 11247 Comm: syz.2.1273 Not tainted syzkaller #0 PREEMPT(full) [ 457.457175][T11247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.457187][T11247] Call Trace: [ 457.457195][T11247] [ 457.457202][T11247] dump_stack_lvl+0x116/0x1f0 [ 457.457230][T11247] print_deadlock_bug+0x1e9/0x240 [ 457.457257][T11247] __lock_acquire+0x1133/0x1ce0 [ 457.457289][T11247] lock_acquire+0x179/0x350 [ 457.457315][T11247] ? __netdev_update_features+0x915/0x1da0 [ 457.457341][T11247] ? __pfx___might_resched+0x10/0x10 [ 457.457366][T11247] ? __netdev_update_features+0x915/0x1da0 [ 457.457388][T11247] __mutex_lock+0x193/0x1060 [ 457.457411][T11247] ? __netdev_update_features+0x915/0x1da0 [ 457.457436][T11247] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 457.457458][T11247] ? __pfx___mutex_lock+0x10/0x10 [ 457.457480][T11247] ? __wake_up+0x3f/0x60 [ 457.457509][T11247] ? __netdev_update_features+0x915/0x1da0 [ 457.457532][T11247] __netdev_update_features+0x915/0x1da0 [ 457.457558][T11247] ? __pfx___netdev_update_features+0x10/0x10 [ 457.457585][T11247] ? __lock_acquire+0xb97/0x1ce0 [ 457.457616][T11247] netdev_update_features+0x66/0xe0 [ 457.457639][T11247] ? __pfx_netdev_update_features+0x10/0x10 [ 457.457664][T11247] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.457685][T11247] macsec_notify+0x1a3/0x680 [ 457.457705][T11247] ? ipvtap_device_event+0xcd/0x3e0 [ 457.457729][T11247] ? __pfx_macsec_notify+0x10/0x10 [ 457.457750][T11247] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 457.457769][T11247] ? ipmr_device_event+0x1bc/0x230 [ 457.457791][T11247] ? bond_netdev_event+0xe7/0xd30 [ 457.457814][T11247] notifier_call_chain+0xb9/0x410 [ 457.457840][T11247] ? __pfx_macsec_notify+0x10/0x10 [ 457.457861][T11247] call_netdevice_notifiers_info+0xbe/0x140 [ 457.457889][T11247] netdev_features_change+0x79/0xa0 [ 457.457916][T11247] ? __pfx_netdev_features_change+0x10/0x10 [ 457.457945][T11247] dev_ethtool+0x9b8/0x5bc0 [ 457.457970][T11247] ? lock_acquire+0x179/0x350 [ 457.458003][T11247] ? __pfx_dev_ethtool+0x10/0x10 [ 457.458020][T11247] ? finish_task_switch.isra.0+0x221/0xc10 [ 457.458045][T11247] ? lockdep_hardirqs_on+0x7c/0x110 [ 457.458069][T11247] ? rcu_is_watching+0x12/0xc0 [ 457.458094][T11247] ? trace_sched_exit_tp+0xd1/0x120 [ 457.458113][T11247] ? __schedule+0x11a3/0x5de0 [ 457.458147][T11247] ? __lock_acquire+0x62e/0x1ce0 [ 457.458180][T11247] ? find_held_lock+0x2b/0x80 [ 457.458201][T11247] ? dev_load+0x8e/0x240 [ 457.458222][T11247] dev_ioctl+0x290/0x10e0 [ 457.458243][T11247] sock_do_ioctl+0x19d/0x280 [ 457.458270][T11247] ? __pfx_sock_do_ioctl+0x10/0x10 [ 457.458298][T11247] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 457.458325][T11247] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 457.458356][T11247] sock_ioctl+0x227/0x6b0 [ 457.458372][T11247] ? __pfx_sock_ioctl+0x10/0x10 [ 457.458390][T11247] ? selinux_file_ioctl+0x180/0x270 [ 457.458414][T11247] ? selinux_file_ioctl+0xb4/0x270 [ 457.458441][T11247] ? __pfx_sock_ioctl+0x10/0x10 [ 457.458457][T11247] __x64_sys_ioctl+0x18b/0x210 [ 457.458484][T11247] do_syscall_64+0xcd/0x4c0 [ 457.458508][T11247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.458527][T11247] RIP: 0033:0x7f313b98eba9 [ 457.458543][T11247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.458563][T11247] RSP: 002b:00007f313c792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.458581][T11247] RAX: ffffffffffffffda RBX: 00007f313bbd6360 RCX: 00007f313b98eba9 [ 457.458595][T11247] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000c [ 457.458606][T11247] RBP: 00007f313ba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 457.458618][T11247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.458628][T11247] R13: 00007f313bbd63f8 R14: 00007f313bbd6360 R15: 00007ffe8c613d88 [ 457.458647][T11247] [ 458.075065][T11253] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1273'. [ 458.088412][ T30] audit: type=1400 audit(1757526453.049:888): avc: denied { getopt } for pid=11228 comm="syz.2.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.508491][ T30] audit: type=1400 audit(1757526453.458:889): avc: denied { ioctl } for pid=11228 comm="syz.2.1273" path="socket:[33263]" dev="sockfs" ino=33263 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 458.679777][T11262] netlink: 'syz.4.1275': attribute type 4 has an invalid length. [ 458.739021][T11263] netlink: 'syz.4.1275': attribute type 4 has an invalid length. [ 458.765964][ T5969] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 459.141785][ T5969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.152131][ T5969] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.165094][ T5969] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.175260][ T5969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.183922][ T5969] usb 3-1: Product: syz [ 459.188471][ T5969] usb 3-1: Manufacturer: syz [ 459.193071][ T5969] usb 3-1: SerialNumber: syz [ 463.991278][ T5969] usb 3-1: 0:2 : does not exist [ 464.000607][ T5969] usb 3-1: 5:0: failed to get current value for ch 0 (-22)