last executing test programs: 11m58.424167967s ago: executing program 3 (id=499): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) r5 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x0, 0x9, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xff7ffffc, 0x80000000000000, 0xb63, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000480)=ANY=[@ANYBLOB="ddf963", @ANYBLOB="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"]) ioctl$TCSBRKP(r4, 0x5425, 0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000000)=0x6ab8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='cpuhp_exit\x00', r1, 0x0, 0x6}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x2c1}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) (async) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async) syz_usb_control_io$hid(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x0, 0x0, 0x9, 0x0, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xfffffffc, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xff7ffffc, 0x80000000000000, 0xb63, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) (async) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000480)=ANY=[@ANYBLOB="ddf963", @ANYBLOB="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"]) (async) ioctl$TCSBRKP(r4, 0x5425, 0x6) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000000)=0x6ab8, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='cpuhp_exit\x00', r1, 0x0, 0x6}, 0x18) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 11m55.666823966s ago: executing program 3 (id=509): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000026c0), 0x2, 0x0) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000002700)={0x0, 0x5, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x20, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300009785522984f560af489b4de7d069f293cd51d5e8839653166a8c1ea7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20048810) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x2000018c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) write$binfmt_script(r5, &(0x7f0000000ac0)={'#! ', './file0/file0', [{0x20, ')-'}, {0x20, '&\x00'}, {0x20, ']'}, {}, {0x20, '/dev/net/tun\x00'}, {0x20, ']{$&!'}, {0x20, 'syz1\x00'}, {0x20, '}%\\'}, {0x20, ','}, {0x20, '&'}], 0xa, "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"}, 0x103c) close(r6) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x6a, 0x30, 0x92, 0x8, 0x17ef, 0xa387, 0x8c64, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x9, 0xb0, 0xd, [{{0x9, 0x4, 0x26, 0xe, 0x0, 0x20, 0x24, 0x9f, 0x5}}]}}]}}, 0x0) ioctl$TUNSETNOCSUM(r6, 0xff02, 0x0) ioctl(r5, 0x2285, &(0x7f0000000000)) r7 = syz_clone(0x2c251100, &(0x7f0000000380)="0f564a1590261ce682c46b7833e65bee06dec8deeb3e0842c7dff5f32817ac4c223b1566a5adc194d6e9615eed229770adb95767479aaa081fd9a0b1b45dbfba53af33a5034968704528e5e12ddd1efa9d832a833139de857ecc6b45e524b97d533635170b331d697584bb8dbabd9b613f95c180bffa0d9d363f4fbf8374ce98422c4c8d5dd866c18a0b9b56dffaa158f96d4a80fc1fdb0d25b702440587", 0x9e, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300)="e874d5cf1ac7") ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000004c0)={{0x7, 0x0, 0x7, 0x2b598000, 'syz1\x00', 0x5b}, 0x3, 0x10, 0xfffffff9, r7, 0x5, 0xc, 'syz1\x00', &(0x7f0000000440)=['P!\'/\x00', '/dev/video37\x00', '\x00', '&\x00', '))/!^^:\x00'], 0x1d}) sendmmsg(r2, &(0x7f0000000180), 0x3ef, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001"], 0xfc}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 11m53.876858072s ago: executing program 3 (id=519): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe9d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x48, 0xc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, 0x0, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 11m49.628936435s ago: executing program 3 (id=536): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x2, 0x5}}, 0x20) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x3) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000d600000008000300000000000000", @ANYRES32=r5, @ANYBLOB='\b\x00*\x00\b\x00\x00\x00'], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000100)={@private2}, &(0x7f0000000140)=0x14) 11m49.470919706s ago: executing program 3 (id=537): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) (async) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005840)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x2, 0xf}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x59}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x800) 11m49.381197002s ago: executing program 3 (id=538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500fffffffe2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 11m33.337479901s ago: executing program 32 (id=538): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500fffffffe2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 2m45.0740902s ago: executing program 1 (id=2570): ioperm(0x6, 0x88, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x208, 0x1) 2m44.882805003s ago: executing program 1 (id=2572): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x20, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000040)='syzkaller0\x00', 0xa, 0x3, 0x9491}) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000180)=@v2={0x2000000, [{0x50000000, 0xf}, {0xffffffff, 0x88f}]}, 0x14, 0x2) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010102}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_VERSION={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x8000) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x45e, 0xb4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x80, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x1, {0x9, 0x21, 0x0, 0xb, 0x1, {0x22, 0x135}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x98, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xe8, 0x40, 0x5}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0x80, 0x3, 0xd, 0x20, 0x8}, 0x31, &(0x7f0000000400)={0x5, 0xf, 0x31, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "1132f137406fabaaf6110bc72e4aa6e3"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x5, 0x5, 0x3ba}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x9, 0xfffe, 0x7f}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x140c}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2801}}, {0x100, &(0x7f0000000500)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x810}}, {0x42, &(0x7f0000000640)=@string={0x42, 0x3, "6f5b521b85ad2dd58af37ac8faa3251857c6a98ccbfeab31465089b86602caef59a45397404c96618aca326efe7548f7ed05d8d09127d30478996238ad5ca8e3"}}]}) syz_usb_control_io$hid(r5, &(0x7f0000000900)={0x24, &(0x7f0000000740)={0x40, 0x1, 0x15, {0x15, 0xb, "84a8cc177da8418567c0b72124c6c7f0f69edb"}}, &(0x7f0000000780)={0x0, 0x3, 0xc4, @string={0xc4, 0x3, "d649b6f797b62711c3a84dd069a4128238d5571b39c2926281b95fe82848626f55ae79cd23f34f8cabdda1f7815324d6cf835391a35a1213a5bee51bd4e89f3adf456d9e04e22ce69934be8521bf6de4274d93fe5507e8d0d1938a685b5db41a5d6fa6296af0b81e9b09e20b19c7e2f04af127409f493be42205d964d2d2b9caa6574e981a8b0422ab1d5828db7c718aec082f6e24d70afcd6989238b5e43c1c57134fe9e8a5d35e2f277504eb27ef946efd9240a3872ec9e9550fe67899ebd5bc36"}}, &(0x7f0000000880)={0x0, 0x22, 0x1d, {[@local=@item_012={0x2, 0x2, 0x2, "ac39"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_012={0x2, 0x0, 0x8, "153d"}, @local=@item_012={0x1, 0x2, 0x3, "dd"}, @global=@item_012={0x2, 0x1, 0xa, "1e24"}, @global=@item_012={0x2, 0x1, 0x4, "1988"}, @global=@item_4={0x3, 0x1, 0x6, "8e1b61ca"}, @global=@item_012={0x0, 0x1, 0x5}, @global=@item_012={0x2, 0x1, 0x8, "c5e0"}, @global=@item_4={0x3, 0x1, 0x7, '{=3~'}]}}, &(0x7f00000008c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x10, 0x2, 0x1, {0x22, 0xc2e}}}}, &(0x7f0000000b00)={0x2c, &(0x7f0000000940)={0x40, 0x9, 0x22, "7df3889932c0c9bdf90806b48a96b72d955951e8755cd996956d7007e53aa351ddc7"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x1c}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000a00)={0x20, 0x1, 0x91, "6522682ed5b2181a928d48ac30c2163473a9a3aec93de9e31ed72c87eb91d5c8e232f95805bd2c102ea2cec05de5c148a0020c93635d2aa92a279cfc5899bed01207939a4ec49685d022bbda3982c496a661ab551c2affd489f138c26b8663e71da55dcf2bde35ae58fc18b4a963e443a7dceec8e00c1624a210fc651f8199d9b41fc307e02b093c64495878611fda640b"}, &(0x7f0000000ac0)={0x20, 0x3, 0x1, 0x9a}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000b40)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000c40)=0xe8) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r6, &(0x7f0000000c80)='./file0\x00') process_madvise(r0, &(0x7f00000010c0)=[{&(0x7f0000000cc0)="d00341ce804323b06edc48e062de48ac8eedb14994b1922b8e3980ba30216cc8ee7cf0a78015c6ca5677397d028b3cf6c6fb0eb28a297ac02a343e9b0f22b2b66784dc9be8ec", 0x46}, {&(0x7f0000000d40)="078e773192e250cd18baf5077e27b938a1b373c613d35a3af74ff91032347c32932f9e8beff850a5aeef624c554780c5d7d50a48bd1a3701bf25ce935c68b4f38f1dbee0edbab0943ec1fd5e04b1673dad9376f7551a389e73b30cfe98ad0cfe2c434fba00dec579c2155954436ee335a5cbbabca30d1ffee68b18d96b3cf9d86edd89d26cb8ad33aff571e3eac71444a4b4ddd0848ad6722f8189c9175b7ba6306f8c46b0c7c0e035e778bea88c642f", 0xb0}, {&(0x7f0000000e00)="85206c23f8ab536d5761f740b28c223ab10951db9d26b55095d3ed0809299d65db12c8da53a58ed21d3b2c91f06edb1aa43c78af2c6c776ce5b4941f4f29d53dbe1023c2227d84f2bbd48369ac5d2b94cdfed67c35a4a19e053872da182efb17116452ab0dc720c0aa9115dee7cdfb055c3b6fadf1cf65bf01f66dd7cd105adb96", 0x81}, {&(0x7f0000000ec0)="7c2b527fa84efa5afff303d0706b26490cb4d7406120a515e4b6a652328a91687ad227a51b36313853ce835b582a4f723d5b9fc33aa1676e69e4ed8cefbc0d7229d7edbe837bdf6b3bcf649ccdc436a86dc27c11e8fb2716335a32742f33170eca5dafcafad5238980ca079cfa75e15a01506430e1c62f0f250915b334239f90a1ed4b0b1bcea4f284b001da35a4e4730423b48fd2a0b970a1d266874656457058d734ec026c67b9c8441dbec3aabf19722dff58789bb0be0e5f90031b4e00f11656b164dec1c3ec114dfe301748d4b2df055b1e996c6baec23ea2a422d545a680767321e228e9e1b6610e5ef55910", 0xef}, {&(0x7f0000000fc0)="10b4713dbda31768882b26c8045d29e276e5d5c7c1c34f078d5c66d20adeeb8bdddda9220e258e3d8f13f222218dcde94fbf2c8638551d732dd7e414da5e8134c82f2442ef69da0642496f2c84896a8c54b0f66f1d99029983787be70db320183a3914cbfca44311d9ac59e7fc38679391106e51b01ba651191361eae4ac4c8c5b0dceab3d60371340fff215ad7fcdb55c63c98fd22d3b6858cfb412e91952b646a04e8ab1da974f6abe7e43c4e259903b8efb0e9a92de7f5b39f3fe037920", 0xbf}, {&(0x7f0000001080)="d7ca81ab5e7d21ed424d813149f4b6c86fd31656ee7eebd7", 0x18}], 0x6, 0x16, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000001300)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0xfc, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xd0, 0x8, "912ef09dcfae12f3822c679f7831caa14e5b9a69e611ec24444b6c8a942d5b6f7e99b12c8bbb83b9d15d12c99e56326e8854f89f605184188a3e3b37c0e825a1f472c03a20d737d50c9e85dfda7658cf4c55a76346ebaa5c75198c93d78ade7398e2880f25fb9746e14917803108ed3ed3f230136695d24ca34b9df2535e7e73317643ffe4902fba6f992a4187ebdb6d78970430fd3c1128f4488cc18412f13f75ca1b2df6eda9fbec3782b5eb32a4d6a2248a2325cdec10f38b6d0a0ccdd7cf1843edfb53017665191c6224"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x124}, 0x1, 0x0, 0x0, 0x8050}, 0x20000000) (async) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001340)={0x0, 0x90, "857f09c9a05bdd0da3f79e7b68908e887b052d1d5e55f85feb545b94413d7332b78e17061cdb4ef9265ef43257701fcda5906a7de18117b392777f984c1858a8355666b07edd383fbf0033678a3d0358cfb5211d692695f237b9dceb9671c215bc5041059634b338275ad46c390efff23cfe007869698308ff2488607851d49346a256b93368bf977203dfc6afcaf277"}, &(0x7f0000001400)=0x98) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000001440)={0xd000000, 0xe, 0x5, 0x7}) (async) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000001480)={r1}, 0x1) (async) connect$inet6(r0, &(0x7f00000014c0)={0xa, 0x4e22, 0x5, @empty, 0x6}, 0x1c) (async) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000001500)={0x1, 0x0, {0x8, 0xb, 0x2022, 0x8, 0x0, 0x4, 0x1, 0x4}}) r7 = accept$inet(r0, &(0x7f0000001580)={0x2, 0x0, @multicast2}, &(0x7f00000015c0)=0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000001640)={0x0, &(0x7f0000001600)}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_ECHOREQ(r8, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x28, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000017c0)={&(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000001800)={0xfffffffffffffffe, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "4a13f809d46296"}) ioctl$BTRFS_IOC_TREE_SEARCH(r9, 0xd0009411, &(0x7f0000002800)={{r10, 0x6, 0x8, 0x20d4, 0x6, 0x34, 0x1, 0x6e94, 0x7, 0x1, 0x9, 0x7, 0x3ff, 0x7, 0x7e927f08}}) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003800), 0x40000, 0x0) setsockopt$IP_VS_SO_SET_DEL(r11, 0x0, 0x484, &(0x7f0000003840)={0x6, @rand_addr=0x64010101, 0x4e22, 0x4, 'fo\x00', 0x8, 0x5, 0x24}, 0x2c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 2m42.783948324s ago: executing program 1 (id=2576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x3f7, 0x4) (async) r6 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m42.519145968s ago: executing program 1 (id=2578): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f0000000580)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh\x0e\xcf)\x0fG\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x00\x00\x00\x00\x00\x00\x00\x02p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5\xa7q,\x0e\x988\xa6\x10\xdb\xcc\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x83\x90@\xd1\xbd`^\xfa\xb6/\xc5\\W\x04\br\x17X\xe8\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\x00\x00\x00\x00\x00\x00', 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x400005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x31}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$netlink(r0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9b, 0x9}, 0x9, 0xda, 0x2af, 0x0, r2, r2, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100e1ff040000000401b7580400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r7, &(0x7f0000000100)='./file0\x00') 2m42.369946679s ago: executing program 1 (id=2579): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f0000000180)=[{0x9, 0x1, 0xfd, 0x401}, {0x6, 0x9, 0xfd, 0x5}, {0x3, 0xa6, 0xf, 0x200}, {0xe1d, 0xff, 0x2, 0x2f}]}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1, 0x2000000}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x210}}, 0x0) 2m40.527961312s ago: executing program 1 (id=2583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1c1400) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xec10}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044095}, 0x4000000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300), 0x650543, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) msgctl$IPC_RMID(0x0, 0xc00) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c7bec01", @ANYRES16=r1, @ANYBLOB="01000000000000000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}}, 0x0) 2m30.414115676s ago: executing program 4 (id=2612): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000340)=0x1, &(0x7f0000000380)=0x4) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, 0x0, 0x0) fchmodat(r6, &(0x7f0000000240)='./file0\x00', 0x24) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="cc00000000000000ddd8a0f0ff0000007301c20000000000950d2e1983ae1a25"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = add_key$keyring(&(0x7f0000002280), &(0x7f00000022c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r7, 0xffffffffffffffff, 0x6f) r8 = add_key$fscrypt_provisioning(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x2}, &(0x7f0000002ac0)={0x2, 0x0, @b}, 0x48, r7) keyctl$KEYCTL_MOVE(0x1e, r8, r7, 0xfffffffffffffffb, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) 2m29.487470925s ago: executing program 4 (id=2615): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES32=r0], 0xe0}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a031700000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a30000000030a010400000000000000000a0000080900010073797a310000000008000b40000000008818d579fffffffd140000001100010000000000000000000100000a"], 0x58}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 2m28.212772777s ago: executing program 4 (id=2617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x2, 0x1, @in={0x2, 0xffff, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x100, r2, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x95, 0xa8, @random="8a43108eb9b67520a66de3a70e486a2c00ba13f657e41e79c5ba334030c971473261088b11af54c590c4a745e84ab58f78dc9bc4b9f0dde9a7b628413d85a84d18cc0e1294d96bb056ce83e7226c943e7ffedca21c63753069d45f0af4caab8a580752234280493917bbcb215c062768b66a50d05c69820354c66a3c949332a1cd07416d6765eb02531b9e1e54b08443bd"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x402c0, 0x0) 2m27.727289314s ago: executing program 4 (id=2622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x7) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xda01}) (async) ioctl$int_in(r0, 0x5452, &(0x7f00000002c0)=0x7) (async) socket$inet6(0xa, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r2) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) (async) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501"], 0x0) (async) 2m26.205068661s ago: executing program 4 (id=2628): semctl$SETALL(0x0, 0x0, 0x11, 0x0) r0 = semget$private(0x0, 0x4, 0x718) semop(r0, &(0x7f0000000000)=[{0x1, 0xb, 0x1000}, {0x0, 0x7fff, 0x1000}, {0x3, 0x8}, {0x0, 0x674a, 0x1000}], 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x20, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x4}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r7, 0xc0884113, &(0x7f0000000680)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r7, 0xc06c4124, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r8 = accept4$alg(r4, 0x0, 0x0, 0x80800) sendmsg$sock(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x5) io_setup(0x95, &(0x7f0000000040)=0x0) io_submit(r9, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r8, &(0x7f0000000080)="ac30", 0x2}]) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a8018000580140006800800010000000000080002"], 0x3c}}, 0x0) 2m25.040016611s ago: executing program 33 (id=2583): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r3, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x1c1400) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={0x0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xec10}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044095}, 0x4000000) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000300), 0x650543, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x10) msgctl$IPC_RMID(0x0, 0xc00) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c7bec01", @ANYRES16=r1, @ANYBLOB="01000000000000000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}}, 0x0) 2m25.021259606s ago: executing program 4 (id=2635): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x2}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sync() sync() sync() sync() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24008881) socket(0x10, 0x3, 0x0) sync() sync() sync() sync() sync() sync() sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000008, &(0x7f0000000240), 0x2, 0x1}}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 2m9.9412287s ago: executing program 34 (id=2635): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x2}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sync() sync() sync() sync() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24008881) socket(0x10, 0x3, 0x0) sync() sync() sync() sync() sync() sync() sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) shutdown(0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x5, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000008, &(0x7f0000000240), 0x2, 0x1}}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) 17.170513658s ago: executing program 2 (id=3039): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_switch\x00'}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="f7ffffff00"/20, @ANYRES32, @ANYRES32=r0, @ANYBLOB="05000000020000000000000000000000000000000000000000000000e73bd78a788601f686a2b5e0fb1efecedb285c0237e110964f147856e99c7aad3f57f27fb4254387f323592b"], 0x50) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x80800) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000004000000c15febc602"], 0x50) (async) syz_open_dev$dri(&(0x7f0000000340), 0x1, 0xd8981) (async) syz_usb_connect(0x0, 0x1bb, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES8=r2, @ANYRES16=r5], 0x0) (async) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r6, 0x0, 0x0) (async) memfd_secret(0x0) pipe2$9p(&(0x7f0000000140), 0x80000) (async) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x200000, 0x10100, 0xfffffffc, 0xffffffff}, &(0x7f0000000140), &(0x7f0000000100)) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x1, 0x0, 0x2b, @dev={0xfe, 0x80, '\x00', 0x13}, @empty, 0x0, 0x700, 0x6, 0x7}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[@ANYRES64=r7], 0x118) 15.057917236s ago: executing program 5 (id=3045): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3a091}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xfff7}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7f}]}}}]}, 0x4c}}, 0x10) 14.87881591s ago: executing program 5 (id=3048): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) 14.017760219s ago: executing program 2 (id=3052): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e22, @remote}}, 0x0, 0x2, 0x35, 0x0, "00000000ffffffffffffffff000000000000000080000000350d0000000000000000000083c0d5576000d13d00f4ffe3a1168000000000262aff200f82ea818000"}, 0xd8) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a800000000000000080000000"], 0x26}, 0x1, 0x0, 0x0, 0x300}, 0x4004) 12.074542436s ago: executing program 7 (id=3060): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000480)=ANY=[@ANYBLOB="38010000", @ANYRES16=r2, @ANYBLOB="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"], 0x138}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f30"], 0xd4}}, 0x4000010) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "72067615774f0e456eb86cc800"}, @window={0x3, 0x3, 0x5}]}}}}}}}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000340)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x80800}) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000440)={0x0, {{0xa, 0x4e24, 0xa242, @remote, 0x1}}, 0x1, 0x9, [{{0xa, 0x4e24, 0xfffffffa, @local, 0x5}}, {{0xa, 0x4e22, 0x0, @empty, 0x1}}, {{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, {{0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10000}}, {{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {{0xa, 0x4e23, 0x24, @mcast2, 0xd}}, {{0xa, 0x4e24, 0xffffffff, @remote, 0x4}}, {{0xa, 0x4e23, 0x0, @mcast1, 0x8}}, {{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}]}, 0x510) 10.992951873s ago: executing program 7 (id=3064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) read$char_usb(r5, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) close_range(r8, 0xffffffffffffffff, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000140)=""/76, &(0x7f00000001c0)=0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 10.793754206s ago: executing program 2 (id=3065): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8be7d28fc6479063) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockname(r5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) get_robust_list(0x0, &(0x7f0000000440)=0x0, 0x0) read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r7, &(0x7f0000000040)=""/148, 0xffffff96) 10.036830477s ago: executing program 7 (id=3067): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800a00010072616e676500000024000280080002400000000004000480555804be20688ee97d000000080001400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a2f2a38f803116885dca9427960a8467f58dbde9f4ad7dfe9c8f2f3f75f987ecce95aff959535d3b5f29f0bd19462ae460bf9c233a00feb443fd1f4a3691920f969c0b05c78e09a4ca4821f8b93d675b84f0e793c74eb5b81c64dc7072fd6ea53d9814d1b008f425c17cd3044b693fc8455d21fbeabd8117349c8e3850fd0da34cc01eaaaa7fd246248725ea7728c3a6664c4d9ee780b90b2e610e6fb86c8"], 0x8c}}, 0x0) r1 = syz_io_uring_setup(0x24f8, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x1, 0xfffffffd}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$kcm(0x29, 0x5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$unix(0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x2}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xc}, {0x3, 0xb}, {0xa, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x400c0d0) sendmmsg$inet(r5, &(0x7f00000017c0), 0x0, 0x8000004) socket$kcm(0x29, 0x2, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r12, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/250, 0xfa}], 0x1, 0x185, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) shutdown(r4, 0x1) 9.893369867s ago: executing program 5 (id=3068): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x4}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, 0x0, 0x30, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x2, 0x0, &(0x7f0000000300)=[0x3, 0x1]}}, 0x30) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r9, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x82) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 8.528344157s ago: executing program 5 (id=3070): r0 = socket$netlink(0x10, 0x3, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002911ad080a1110115dab010203010902240001010000000904000002c688ff0009050f020000000000090506"], 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000340), &(0x7f00000000c0)=""/109}, 0x20) (async) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) (async, rerun: 32) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (rerun: 32) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r6, 0x104, 0x5, 0x0, &(0x7f0000000280)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400dfff0f000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200318800001c0012800b0001006d616373656300000c000280080005000100000008000500", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 8.15087596s ago: executing program 7 (id=3072): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 7.12718433s ago: executing program 2 (id=3078): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@xattr}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0), 0x161) unshare(0x40020000) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) 7.012943261s ago: executing program 5 (id=3079): r0 = getpgrp(0x0) (async) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, "003e66796ecf9a2f", "352bfc0f38345beb42380beb8a9b6220f956db553fc75817f69b4e4047aaa9e1", '\x00', '\x00\x00\x00@\x00'}, 0x38) (async, rerun: 32) shutdown(r1, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (rerun: 64) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r4 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8, 0x77}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.754032071s ago: executing program 6 (id=3080): socket(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x5a401bc6e64b987a, 0x4) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) accept4$ax25(r0, &(0x7f00000003c0)={{0x3, @default}, [@remote, @remote, @remote, @netrom, @default, @default, @remote, @netrom]}, &(0x7f00000001c0)=0x48, 0x80800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x6c7e, &(0x7f0000000140)={0x0, 0x0, 0x3000}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @p_u32=0x0}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000200)={0x50, 0xffffffffffffffda, r9, {0x7, 0x1f, 0xffffc000, 0x8004}}, 0x50) 5.707100743s ago: executing program 7 (id=3081): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000640)={0x2b, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) fchdir(r1) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r5 = openat$cgroup_freezer_state(r1, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r5, r5, 0x0, 0x8000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r2) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040014}, 0xdd243343601450bc) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000000000000060000000000000005000000c40000009500000000000000c2440a56b19f29fe89c30c4c7b44256468300e8f3c3a0e34d3d48641a15fd7e6ccbede8342667814283fb9f4ef269cab11e3787bc9f4c4c428a35e1e31ff67c6dbe755412476809cd2ac41047f8852b654e02fec5549ffaad3772750b0dbe4aff222db73387c077a0438261f8b8fe81e22c5fb98615ce1df9cba85e7fb676f88b3e5708603816f92a6d297f6b481999ab138de85422b0560cf8c02c67bf3a4"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x44302, 0x0) 4.317524898s ago: executing program 6 (id=3082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000340)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x1c0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000040)=@assoc_value, 0x8) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b6a, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000200), 0x1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) 3.98312558s ago: executing program 2 (id=3084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180800001bc81a000000000002000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100090000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) 3.226882321s ago: executing program 6 (id=3085): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="7401000003010103000000000000000001000003b8040d8014000400fe8000000000000000000000000000aa08000100ac1414aa14000500fe8000000000000000000000000000aa08000200e000000114000500fc00000000000000000000000000000114000500fe8000000000000000000000000000bb54000380060002004e230000060001004e210000060002004e200000060002004e22aabbaf44f7e50000060001004e220000060002004e240000060002004e230000060001004e200011e10001004e220000060001004e240000480002800c00028005000100af0000000c000280050001006b0000002c00018014000300ff01000000000000000000040000000114000400fe8000000000000000000000000000aa140018800800014000000e9f0800014000000084080003400000040406001240000100002c0018800800034000000048080001408000000600000040ffffd25708000340ffffffff080001400000000708001a400000000a08000c4000000000"], 0x174}, 0x1, 0x0, 0x0, 0x5}, 0x40088d5) (async, rerun: 32) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)}}], 0x1, 0x4000841) (rerun: 32) openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000008b40)={0x2c, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_STREAMON(r8, 0x40045612, &(0x7f0000000040)=0x5) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r7}]}}}]}, 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xfc, 0x0, 0x0, 0x102}, 0x9c) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) bind$inet6(r6, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xffff, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) (rerun: 64) 3.069037122s ago: executing program 5 (id=3086): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000) madvise(&(0x7f000084c000/0x3000)=nil, 0x3000, 0x3) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="fd35581c84d5f67e1d0479ef3f90e4785a984c6fdd97a9b5869a10ec365aa395415f7933cb927ab352fd9a81c747171536e0b66cd1e46c09af6cde97392687395238fe8e81329da7bdee709475137e47", @ANYRES8=0x0], 0x0) 2.93130975s ago: executing program 0 (id=3087): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.823637416s ago: executing program 0 (id=3088): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x2, r1, r2, 0x0, 0x0, 0x0, 0xe7, &(0x7f0000000100)="2c7b76d2b323429793a25fe96b3b550b6265d74c0653ed9aebbca33dd8c3be4fba86a7301ad16e610075fcf0d3fb6d4799986f511b65612522f9783c1d93e6f4c90d5360d2a1c38c8da901631cfad341186224e382b8a889886d1f150e6e61ef306d3a6e0f3840f319d3e7d85739eca9445ef8ee2b07df15ac2989d117088fcb5340b27bc568eb0b8b911216822fb7a102353680cbc8562de8eec1e7deebc94b46514bae0e94748df54655b8bae262d349654cdce05c2922bde7e4f43915f0fc984338aa69c529568d62cfd9ef48ff75b2cf239add1e28f430a80872bcec8e402c38c8ad50256e"}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000240)={{r0}, 0x0, 0x18, @unused=[0xdfb, 0x8, 0x1, 0xd41], @devid}) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000001240)={0x6, 0x7fff, 0x7e2, 0xc53b}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x3, [@fwd={0xc}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @union={0x7, 0x2, 0x0, 0x5, 0x1, 0xfffffffc, [{0xb, 0x3, 0x6}, {0xd, 0x2, 0x8001}]}, @fwd={0x8}]}, {0x0, [0x2e]}}, &(0x7f0000001300)=""/208, 0x63, 0xd0, 0x0, 0x7fffffff}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001600)={r3, 0x20, &(0x7f00000015c0)={&(0x7f0000001440)=""/246, 0xf6, 0x0, &(0x7f0000001540)=""/119, 0x77}}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000001640), &(0x7f0000001680)=0x40) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x111012, r3, 0x29961000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r5, 0x29, 0x13, &(0x7f00000016c0)=0xb75, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f0000001700)='./file0\x00', &(0x7f0000001740), 0x4000) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r3, {0x10}}, './file0\x00'}) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000001800)=0x6, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$SEG6(&(0x7f0000001840), r6) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000001880)={0x2, 0x0, 0x10002}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f00000018c0)={0x0, 0x1, 0x2, 0x19}, &(0x7f0000001900)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000001940)={r8, @in={{0x2, 0x4e22, @rand_addr=0x64010100}}}, &(0x7f0000001a00)=0x84) recvmsg(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=""/51, 0x33}, 0x0) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f0000001b00), &(0x7f0000001b40)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000001b80)={r8, 0xb5ed}, &(0x7f0000001bc0)=0x8) r10 = fcntl$dupfd(r4, 0x406, r7) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000001c00)={0xaa, 0x10}) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r10, 0x84, 0x70, &(0x7f0000001c40)={r9, @in={{0x2, 0x4e24, @empty}}, [0x432, 0x8, 0x100000001, 0xffff, 0x80, 0x2, 0x7, 0x6, 0x0, 0x6, 0x6cef, 0x15, 0x4, 0x98]}, &(0x7f0000001d40)=0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000001d80)=@assoc_value={r11, 0x2}, &(0x7f0000001dc0)=0x8) 2.361522137s ago: executing program 7 (id=3089): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000480)=@v2={0x6, 0x3, 0x12, 0x5}, 0x9, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r1, @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000808000500", @ANYRES16=r1, @ANYRESOCT=r6], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x30, '\x00', r7, 0x2}, 0x94) syz_open_dev$hidraw(&(0x7f0000000600), 0x0, 0x202) 2.23069525s ago: executing program 6 (id=3090): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x8) read$char_usb(r5, 0x0, 0x0) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) close_range(r8, 0xffffffffffffffff, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000140)=""/76, &(0x7f00000001c0)=0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f0ffb00000006926000000000000bf67100000000000560602000fff00006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffbd35010000000000840400000000000014000000100000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b848b00ea6553f304000000815dcf00c3ee7b042d1937ba52037fdedb2150e1918c30b6301f0212feb0cff9fc67357d81b2cc1a9e37d7b75c020b070000003eb22062bafaca036d9ec7db6671573e202e0a92ee4ba12b064981cc32d1ac0b9ecc8f604dca20563e1c1e7624cc3b88b330ad416c4c1d8c60589b6445a4ffff50df4d34bc5847bebb943a84cb56956931ba9cc39c4a9deea5d77aa843240000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 1.691412729s ago: executing program 0 (id=3091): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000180)="ed9a9c09453936e07f707a0947e1f9a0ec4958e5176b80c73e0d95b62d7707fa0becd04fbf57ad39d23f3d681b91c17c534942d78c4151f95f07d23eb5ed14a9e206b12227d87e29ca4f6ee9db3d4115410f757a46016058a4fea3b23fdacfed907fea873a0b08f023c70b1559e562b06f2deda5d58f28c18e6f2734fb874cef472b1bac5c13fd4f010effa792a866cf9d71925e68dbf0c88a9d90feaf8f3078166b17ffba7ff945b52d025cdd3dc3ce23785b76a0d0ee318f63aea8b18f1b8e30814685868cff7e8ca0", 0xca) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) lsm_list_modules(0x0, &(0x7f0000000140), 0x0) 1.598165562s ago: executing program 0 (id=3092): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x30, 0x43e, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @uid=0xee00}]}, @nested={0x9, 0x2, 0x0, 0x1, [@generic="725eb862ce"]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socket$inet_tcp(0x2, 0x1, 0x0) (async) eventfd2(0x800, 0x800) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000f800800020010000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) cachestat(r4, &(0x7f0000000040), 0x0, 0x0) (async) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSCTTY(r5, 0x540e, 0x8) (async) connect(0xffffffffffffffff, 0x0, 0x0) (async) r6 = syz_io_uring_setup(0x3c, &(0x7f0000000140)={0x0, 0xa57d1, 0x1800, 0x4, 0xd0}, &(0x7f0000000240), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x6c, 0x47, 0x8, 0x1a0a, 0x102, 0x7cce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0xc1, 0x0, 0x0, 0x3a, 0xaf, 0xbd}}]}}]}}, 0x0) r7 = getpid() ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r7, &(0x7f0000000080), 0x4003) (async) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="40031a00000006060d06c29f2be9b970db549fd39f7f1d529745d00b00ecae8a9aeda16547dd7d10e2e8c26d2fc5892559b0cacad0025adf8b7ea2210e8e80e0fa462ed257f8ba8ec54d16a0496ff2f81b13ba2f9ff9516b17f3ccc54cccbe4cb3a59d7120895abaee443e44a1833ca3e39d00d04123c2e3360214a1641d73a9edccc117a28cefbc9bd12e2739cb114a94531c0b1a07a8eab31457216eda6d068dd73c1ce04e490a8a2271b16c2935ab3558"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r8, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) (async) ptrace$poke(0x4, r7, &(0x7f0000000540), 0x7) 1.29037209s ago: executing program 6 (id=3093): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x109042, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000001c0), &(0x7f00000002c0)=0xe) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0x40) (async) write$P9_RSTATu(r0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) sendmmsg(r7, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="f0", 0x1}, {&(0x7f0000000580)="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", 0x115}], 0x2}}], 0x1, 0x24048015) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100030000000800fc00005200000016000300", @ANYRES32=r9, @ANYBLOB="06004800420000000500880000000000"], 0x2c}}, 0x0) getpeername$netlink(r8, 0x0, 0x0) 1.212422769s ago: executing program 0 (id=3094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x2000000022, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r3 = socket(0x2c, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000002c0)=0x67c9, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000040)=0x9, 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x25, 0x109, 0x70bd1f, 0xfffffffc, {0xe}, [@typed={0x4, 0x14e, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r7}}, './file0\x00'}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r3}, 0x20) 338.461881ms ago: executing program 6 (id=3095): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78) close(r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000340)={0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x1c0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000040)=@assoc_value, 0x8) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b6a, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000200), 0x1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9e54f29ff072a93b, 0x0, 0xfffffffd, {}, [{0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) 46.633603ms ago: executing program 0 (id=3096): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x6}, 0x90) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x6a, "abbf50cb762f5585c193ba75048262dfbbef57d012378a90db6fc3f44fd5726316574b0c28a78dfc498aa7ceb4d1804952f5386c7244a2ec8ab4959e7d1b1c828b116670858ca3fe00bdb23815feb48012d53ee08b9f2c3850054f78975a4efaba1405da8e2e507c838f"}, &(0x7f0000000140)=0x72) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000180)={0x6, 0x3}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x1, 0x10, 0x4, 0x2, {{0x30, 0x4, 0x0, 0x21, 0xc0, 0x65, 0x0, 0xf2, 0x4, 0x0, @broadcast, @remote, {[@rr={0x7, 0xf, 0xca, [@rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x16, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @empty, @loopback]}, @cipso={0x86, 0x34, 0x1, [{0x0, 0xe, "478b4d8a36f6488c870324f2"}, {0x5, 0x3, "f1"}, {0x3, 0x9, "61bc4529d4ccc8"}, {0x2, 0x5, "31c828"}, {0x1, 0xc, "bd7bcf9e066ff2fe6e95"}, {0x7, 0x3, '%'}]}, @generic={0x7, 0x6, "0c5aa76e"}, @timestamp_prespec={0x44, 0x44, 0xbf, 0x3, 0x9, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x55}, {@broadcast, 0xffff}, {@private=0xa010100, 0x1}, {@multicast2, 0x8}, {@loopback, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x19}}, {@broadcast, 0x7f}]}, @generic={0x0, 0x4, '!E'}]}}}}}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', r3, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000440)={0x7, "1beaceda57e34bf151bf33d8c5035f4fbeddcf0947cc2aef22131ee77917bcd8", 0x2, 0x1}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000580)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e21, 0x2, 0xfff, 0xfffa, 0xa, 0x10, 0x80, 0x32, r3, r6}, {0x4, 0xffffffffffffff53, 0xc, 0x1, 0x0, 0x9, 0x54, 0xffffffffffff0a5b}, {0x7603, 0xfff, 0xee4b, 0x7}, 0x7, 0x6e6bb5, 0xbb83a4cc40a45ff4, 0x1, 0x1, 0x3}, {{@in=@multicast1, 0x4d3, 0x32}, 0x2, @in=@broadcast, 0x3501, 0x3, 0x1, 0x9, 0x6, 0x0, 0x4}}, 0xe8) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000006c0)={0x2, 0x7, 0x3, 0xffffffc0, 0x7}) r7 = getpgrp(0xffffffffffffffff) migrate_pages(r7, 0x9, &(0x7f0000000700)=0x9, &(0x7f0000000740)=0x3) setsockopt$inet6_int(r0, 0x29, 0x34, &(0x7f0000000780)=0x8, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000800), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000a80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xb8, r9, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000ac0)={@empty, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd8, 0xf, 0x3, 0x480, 0xffffffffffffffff, 0x20, r3}) timer_create(0x3, &(0x7f0000000d00)={0x0, 0x1e, 0x1, @thr={&(0x7f0000000b40)="6fb022a267650be4cb4320763db1b3ea9528e5b5f0b31fa47fba3746ddc83e5492e8c96a2969071ba70bc9552bf8fc3d69c1f3e2a2fe55beaf06a5cc38fb38f5bd3a2faa68f516d7f5ff57a72b95562272f7a9ca48e5ecb0356f5ddf45411172016414c9c6536e5c40f1a9981adc741ad3990bb0cec81b257c7b33021246c33427085236ab458b13190c9c1f2c01a38b41bd83e02268602487b8bce0d06c27c078a200129550e2547cdbb8fa00f0765613cc49ae1415e46c44b42c70c5ddddde94b0d8781aa5d890ff89a8cba3112b1d3f987a9ee0b622ecb470", &(0x7f0000000c40)="e04b58b68fa5cf57890d5de8413e89eec7e4f3fac8e179ea1e4c2c4289ce04b2ab11cd769c69d52203fc8e62c0a1379a83b2333206ba9031475e2b9d86eff925d332212eaf4a22c2d27f6eec5b0736e2963613179120d7b3e62352b91473711cfecdf79ec839f812d2ed32bfd4106ca16b9dacce10f6712b196b0d2d2d47b981661bf6a678378d27e4bd9f9c668267"}}, &(0x7f0000000d40)) socket$can_raw(0x1d, 0x3, 0x1) r15 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000d80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r15) sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x5c, r9, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 2 (id=3097): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000440)=""/200, 0x200000, 0x1000, 0x0, 0x3}, 0x20) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010029bd7000ffdbdf25e0f00000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d300000000000000500110006000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r5 = msgget$private(0x0, 0x4a0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_STAT(r5, 0x2, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r8 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r8) kernel console output (not intermixed with test programs): tman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.165698][ T5821] Bluetooth: hci1: command tx timeout [ 803.220852][T16787] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2644'. [ 803.433325][ T30] audit: type=1400 audit(2000000359.359:2134): avc: denied { setopt } for pid=16783 comm="syz.0.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 803.675456][T16747] hsr_slave_0: entered promiscuous mode [ 803.682808][T16747] hsr_slave_1: entered promiscuous mode [ 803.688924][T16747] debugfs: 'hsr0' already exists in 'hsr' [ 803.695204][T16747] Cannot create hsr debugfs directory [ 803.827562][T16747] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 803.837447][T16747] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 803.849095][T16747] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 803.858723][T16747] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 803.935748][T16747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.973045][T16747] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.990648][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.997814][ T9894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.018330][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.025441][ T9894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.181840][T16800] netlink: 'syz.0.2647': attribute type 1 has an invalid length. [ 804.590880][T16798] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 804.645948][T16747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.965102][T16747] veth0_vlan: entered promiscuous mode [ 804.980267][T16747] veth1_vlan: entered promiscuous mode [ 805.211600][ T5821] Bluetooth: hci1: command tx timeout [ 805.379531][T16747] veth0_macvtap: entered promiscuous mode [ 805.390319][T16747] veth1_macvtap: entered promiscuous mode [ 805.419566][T16747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.438278][T16747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.450632][ T6012] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.463219][ T6012] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.474937][ T6012] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.484181][ T6012] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.558601][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.572336][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.602105][ T5961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.625867][ T5961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.051359][ T6238] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 806.204478][ T6238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.224649][ T6238] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 806.234319][ T6238] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 806.243870][ T6238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.255757][ T6238] usb 1-1: config 0 descriptor?? [ 806.591290][T14768] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 806.743454][T14768] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.755220][T14768] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 806.766093][T14768] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 806.779330][T14768] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 806.788440][T14768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.798097][T14768] usb 7-1: config 0 descriptor?? [ 807.002794][ T30] audit: type=1326 audit(2000000363.149:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61018f749 code=0x7ffc0000 [ 807.027144][ T30] audit: type=1326 audit(2000000363.149:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ff61018f749 code=0x7ffc0000 [ 807.063645][T16855] nbd: device at index 6 is going down [ 807.292497][ T5821] Bluetooth: hci1: command tx timeout [ 807.350301][ T30] audit: type=1326 audit(2000000363.499:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61018f749 code=0x7ffc0000 [ 807.411282][ T30] audit: type=1326 audit(2000000363.499:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16836 comm="syz.0.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61018f749 code=0x7ffc0000 [ 807.572162][T14768] usb 7-1: string descriptor 0 read error: -71 [ 807.582856][T14768] gspca_main: spca501-2.14.0 probing 0000:0000 [ 807.599959][T14768] gspca_spca501: reg write: error -71 [ 807.606567][T14768] spca501 7-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 807.614431][T14768] spca501 7-1:0.0: probe with driver spca501 failed with error -22 [ 807.624952][T14768] usb 7-1: USB disconnect, device number 2 [ 808.441344][ T5815] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 808.503272][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.509657][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.595633][ T5815] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 808.604832][ T5815] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.613038][ T5815] usb 7-1: Product: syz [ 808.617221][ T5815] usb 7-1: Manufacturer: syz [ 808.621991][ T5815] usb 7-1: SerialNumber: syz [ 808.630285][ T5815] hub 7-1:24.0: bad descriptor, ignoring hub [ 808.636706][ T5815] hub 7-1:24.0: probe with driver hub failed with error -5 [ 808.832215][ T5815] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 808.854160][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 808.864552][ T6238] usb 1-1: USB disconnect, device number 49 [ 808.865193][ T5815] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 808.885290][ T5815] usb 7-1: media controller created [ 808.912729][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 809.025377][ T5815] DVB: Unable to find symbol dib7000p_attach() [ 809.039637][ T5815] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 809.155352][ T5815] rc_core: IR keymap rc-dib0700-rc5 not found [ 809.168616][ T5815] Registered IR keymap rc-empty [ 809.177520][ T5815] dvb-usb: could not initialize remote control. [ 809.184087][ T30] audit: type=1400 audit(2000000365.329:2139): avc: denied { write } for pid=16878 comm="syz.0.2664" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 809.210099][ T5815] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 809.226255][ T5815] usb 7-1: USB disconnect, device number 3 [ 809.286397][ T5815] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 809.382540][ T5821] Bluetooth: hci1: command tx timeout [ 809.649361][T16884] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2665'. [ 810.054534][T16886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.063679][T16886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.971873][T14768] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 811.011276][ T5815] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 811.132830][T14768] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 811.144162][T14768] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 811.156277][T14768] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 811.165467][T14768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.174899][ T5815] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.186745][T16905] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 811.191247][ T5815] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 811.194644][T16905] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 811.207220][ T5815] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 811.221051][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.232109][T14768] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 811.251527][ T5815] usb 7-1: config 0 descriptor?? [ 811.462769][ T117] usb 1-1: USB disconnect, device number 50 [ 811.991243][ T30] audit: type=1326 audit(2000000368.129:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16906 comm="syz.6.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 812.029838][ T30] audit: type=1326 audit(2000000368.129:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16906 comm="syz.6.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 812.055663][ T30] audit: type=1326 audit(2000000368.149:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16906 comm="syz.6.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 812.083149][ T30] audit: type=1326 audit(2000000368.149:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16906 comm="syz.6.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 812.108186][ T30] audit: type=1326 audit(2000000368.149:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16906 comm="syz.6.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 812.132939][ T30] audit: type=1326 audit(2000000368.149:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16906 comm="syz.6.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 812.307676][ T30] audit: type=1326 audit(2000000368.149:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16906 comm="syz.6.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 812.969588][ T30] audit: type=1326 audit(2000000368.149:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16906 comm="syz.6.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 812.998932][ T30] audit: type=1326 audit(2000000368.149:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16906 comm="syz.6.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 813.331300][ T5815] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 813.484297][ T5815] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 813.493565][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.501599][ T5815] usb 1-1: Product: syz [ 813.505762][ T5815] usb 1-1: Manufacturer: syz [ 813.512998][ T5815] usb 1-1: SerialNumber: syz [ 813.522144][ T5815] hub 1-1:24.0: bad descriptor, ignoring hub [ 813.528153][ T5815] hub 1-1:24.0: probe with driver hub failed with error -5 [ 813.721876][ T5815] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 813.733398][ T5815] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 813.743561][ T5815] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 813.752068][ T5815] usb 1-1: media controller created [ 813.763009][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 813.795592][ T5815] DVB: Unable to find symbol dib7000p_attach() [ 813.801796][ T5815] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 813.854044][ T5815] rc_core: IR keymap rc-dib0700-rc5 not found [ 813.860121][ T5815] Registered IR keymap rc-empty [ 813.865364][ T5815] dvb-usb: could not initialize remote control. [ 813.871634][ T5815] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 813.930301][ T5815] usb 1-1: USB disconnect, device number 51 [ 814.120030][ T117] usb 7-1: USB disconnect, device number 4 [ 814.157526][ T5815] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 814.288779][T16931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20240 sclass=netlink_route_socket pid=16931 comm=syz.6.2678 [ 814.680879][T16938] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2677'. [ 815.214009][T16949] misc userio: Invalid payload size [ 815.801549][ T117] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 815.952431][ T117] usb 1-1: device descriptor read/64, error -71 [ 816.136885][T16609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 816.147192][T16609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 816.156905][T16609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 816.164730][T16609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 816.178952][T16609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 816.189596][ T56] block nbd1: Possible stuck request ffff8880266d0000: control (read@0,4096B). Runtime 30 seconds [ 816.191345][ T117] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 816.412008][ T117] usb 1-1: device descriptor read/64, error -71 [ 816.609645][ T117] usb usb1-port1: attempt power cycle [ 817.376811][T16955] chnl_net:caif_netlink_parms(): no params data found [ 817.391898][ T117] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 817.422054][ T117] usb 1-1: device descriptor read/8, error -71 [ 817.691375][ T117] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 817.706042][T16955] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.714125][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.721520][T16955] bridge_slave_0: entered allmulticast mode [ 817.729183][T16955] bridge_slave_0: entered promiscuous mode [ 817.735762][ T117] usb 1-1: device descriptor read/8, error -71 [ 817.744746][T16955] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.752619][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.759915][T16955] bridge_slave_1: entered allmulticast mode [ 817.767690][T16955] bridge_slave_1: entered promiscuous mode [ 817.807321][T16955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.820038][T16955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.853272][ T117] usb usb1-port1: unable to enumerate USB device [ 817.900033][T16955] team0: Port device team_slave_0 added [ 817.914669][T16955] team0: Port device team_slave_1 added [ 817.958825][T16955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.965994][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.039028][T16955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.256973][T16609] Bluetooth: hci6: command tx timeout [ 818.341913][T16955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.352013][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.594670][T16955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.195013][T16955] hsr_slave_0: entered promiscuous mode [ 819.209293][T16955] hsr_slave_1: entered promiscuous mode [ 819.223500][T16955] debugfs: 'hsr0' already exists in 'hsr' [ 819.231400][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 819.239000][T16955] Cannot create hsr debugfs directory [ 819.335344][T16989] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2692'. [ 819.421457][T16990] netlink: 'syz.5.2692': attribute type 1 has an invalid length. [ 819.630253][T16990] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 819.742663][ T9] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 819.754660][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.771653][ T9] usb 7-1: Product: syz [ 819.785139][ T9] usb 7-1: Manufacturer: syz [ 819.789765][ T9] usb 7-1: SerialNumber: syz [ 819.823856][ T9] hub 7-1:24.0: bad descriptor, ignoring hub [ 819.840006][ T9] hub 7-1:24.0: probe with driver hub failed with error -5 [ 819.962398][T16995] block nbd0: shutting down sockets [ 819.993747][T16955] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 820.005276][T16955] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 820.017389][T16955] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 820.027116][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 820.039475][T16955] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 820.138331][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 820.148284][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 820.191506][ T9] usb 7-1: media controller created [ 820.217224][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 820.355569][T16609] Bluetooth: hci6: command tx timeout [ 820.409861][ T9] DVB: Unable to find symbol dib7000p_attach() [ 820.419272][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 820.584278][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 820.590431][ T9] Registered IR keymap rc-empty [ 820.599545][ T9] dvb-usb: could not initialize remote control. [ 820.611347][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 820.622776][T16955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.650195][ T9] usb 7-1: USB disconnect, device number 5 [ 820.651578][ T117] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 820.686828][T16955] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.714529][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 820.715383][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.731451][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.779817][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.787001][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.824764][ T117] usb 1-1: config 159 has an invalid interface number: 151 but max is 3 [ 820.835217][ T117] usb 1-1: config 159 has an invalid interface number: 99 but max is 3 [ 820.838821][T16955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 820.857990][ T117] usb 1-1: config 159 contains an unexpected descriptor of type 0x2, skipping [ 820.867213][ T117] usb 1-1: config 159 has an invalid interface number: 210 but max is 3 [ 820.877339][ T117] usb 1-1: config 159 contains an unexpected descriptor of type 0x1, skipping [ 820.881285][T16955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 820.887269][ T117] usb 1-1: config 159 has an invalid interface number: 12 but max is 3 [ 820.922987][ T117] usb 1-1: config 159 has no interface number 0 [ 820.980888][ T117] usb 1-1: config 159 has no interface number 1 [ 820.992581][ T117] usb 1-1: config 159 has no interface number 2 [ 821.013962][ T117] usb 1-1: config 159 has no interface number 3 [ 821.040594][ T117] usb 1-1: config 159 interface 151 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 821.066733][ T117] usb 1-1: config 159 interface 151 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 821.086058][ T117] usb 1-1: config 159 interface 151 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 8 [ 821.151727][ T117] usb 1-1: config 159 interface 151 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 821.186778][ T117] usb 1-1: config 159 interface 151 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 821.228944][ T117] usb 1-1: config 159 interface 151 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 821.249369][ T117] usb 1-1: config 159 interface 151 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 821.249645][T16955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.273602][ T117] usb 1-1: config 159 interface 151 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 821.312261][ T117] usb 1-1: config 159 interface 151 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 821.341566][ T117] usb 1-1: config 159 interface 99 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 821.354872][ T117] usb 1-1: config 159 interface 99 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 821.397892][ T117] usb 1-1: config 159 interface 99 altsetting 3 endpoint 0xF has invalid maxpacket 80, setting to 64 [ 821.419071][ T117] usb 1-1: config 159 interface 99 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 821.455441][ T117] usb 1-1: config 159 interface 99 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 821.467581][ T117] usb 1-1: config 159 interface 99 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 821.481256][ T117] usb 1-1: config 159 interface 210 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 821.492544][ T117] usb 1-1: config 159 interface 210 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 821.521347][ T117] usb 1-1: config 159 interface 210 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 821.541378][ T117] usb 1-1: config 159 interface 210 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 821.557178][ T117] usb 1-1: config 159 interface 210 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 821.570696][ T117] usb 1-1: config 159 interface 12 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 821.582273][ T117] usb 1-1: config 159 interface 12 altsetting 5 has a duplicate endpoint with address 0x2, skipping [ 821.593502][ T117] usb 1-1: config 159 interface 12 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 821.605627][ T117] usb 1-1: config 159 interface 12 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 821.617934][ T117] usb 1-1: config 159 interface 151 has no altsetting 0 [ 821.627288][ T117] usb 1-1: config 159 interface 99 has no altsetting 0 [ 821.635135][ T117] usb 1-1: config 159 interface 210 has no altsetting 0 [ 821.642501][ T117] usb 1-1: config 159 interface 12 has no altsetting 0 [ 821.653619][ T117] usb 1-1: New USB device found, idVendor=045e, idProduct=0475, bcdDevice=7c.0f [ 821.663044][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.671040][ T117] usb 1-1: Product: ခ [ 821.676225][ T117] usb 1-1: Manufacturer: ᐇ [ 821.680958][ T117] usb 1-1: SerialNumber: 㞜ﱨ踩踸ꂭ⹊낻 [ 821.690972][T17010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 821.699499][ T6263] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 821.708857][T17010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 821.716712][T17010] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 821.755908][T16955] veth0_vlan: entered promiscuous mode [ 821.777131][T16955] veth1_vlan: entered promiscuous mode [ 821.830185][T16955] veth0_macvtap: entered promiscuous mode [ 821.844665][T16955] veth1_macvtap: entered promiscuous mode [ 821.851824][ T6263] usb 7-1: Using ep0 maxpacket: 32 [ 821.866829][ T6263] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 821.877879][ T6263] usb 7-1: can't read configurations, error -61 [ 821.880671][T16955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.912143][T16955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.929163][ T5993] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.943431][ T5993] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.964398][ T5993] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.980226][ T5993] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.113087][ T6263] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 822.136512][ T117] usb 1-1: USB disconnect, device number 56 [ 822.275005][T17043] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2702'. [ 822.312722][ T6263] usb 7-1: Using ep0 maxpacket: 32 [ 822.357600][T17044] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2702'. [ 822.461445][T16609] Bluetooth: hci6: command tx timeout [ 822.598523][ T6263] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 822.607012][ T6289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.628647][ T6263] usb 7-1: can't read configurations, error -61 [ 822.635714][ T6289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.643836][ T6263] usb usb7-port1: attempt power cycle [ 822.672820][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 822.680860][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.768310][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 822.768326][ T30] audit: type=1400 audit(2000000378.909:2156): avc: denied { transfer } for pid=17045 comm="syz.7.2685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 822.799998][T17046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 823.060255][ T6263] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 823.081929][ T6263] usb 7-1: Using ep0 maxpacket: 32 [ 823.089006][ T6263] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 823.110234][ T6263] usb 7-1: can't read configurations, error -61 [ 823.116446][ T30] audit: type=1400 audit(2000000379.249:2157): avc: denied { read } for pid=17059 comm="syz.0.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 823.426416][ T5815] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 823.581318][ T6263] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 823.602092][ T6263] usb 7-1: Using ep0 maxpacket: 32 [ 823.608966][ T6263] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 823.619986][ T6263] usb 7-1: can't read configurations, error -61 [ 823.625513][ T5815] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 823.627049][ T6263] usb usb7-port1: unable to enumerate USB device [ 823.637679][ T9] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 823.653544][ T5815] usb 1-1: can't read configurations, error -71 [ 823.814394][ T9] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 823.823561][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.831727][ T9] usb 6-1: Product: syz [ 823.835960][ T9] usb 6-1: Manufacturer: syz [ 823.840532][ T9] usb 6-1: SerialNumber: syz [ 823.853631][ T9] hub 6-1:24.0: bad descriptor, ignoring hub [ 823.859652][ T9] hub 6-1:24.0: probe with driver hub failed with error -5 [ 824.050110][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 824.061870][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 824.071877][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 824.080317][ T9] usb 6-1: media controller created [ 824.093147][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 824.128222][ T9] DVB: Unable to find symbol dib7000p_attach() [ 824.134574][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 824.211613][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 824.217781][ T9] Registered IR keymap rc-empty [ 824.223520][ T9] dvb-usb: could not initialize remote control. [ 824.229747][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 824.268345][ T9] usb 6-1: USB disconnect, device number 112 [ 824.281295][ T89] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 824.466732][ T89] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 824.481621][ T89] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 824.494462][T16609] Bluetooth: hci6: command tx timeout [ 824.514790][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 824.524845][ T89] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 109, changing to 10 [ 824.538129][ T89] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 26467, setting to 1024 [ 824.549786][ T89] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 824.564346][ T89] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 824.574993][ T89] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.576166][T17073] overlay: ./file0 is not a directory [ 824.589628][ T89] usb 8-1: config 0 descriptor?? [ 824.596685][T17066] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 824.805684][T17077] xfrm0: entered promiscuous mode [ 824.875984][T17079] Option ' ' to dns_resolver key: bad/missing value [ 825.021827][ T89] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 825.039911][ T89] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 825.087294][T17082] bond1: (slave lo): Releasing backup interface [ 825.096701][T17082] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 825.108090][T17082] bridge0: port 3(batadv0) entered disabled state [ 825.117807][T17082] bridge_slave_0: left allmulticast mode [ 825.123923][T17082] bridge_slave_0: left promiscuous mode [ 825.129887][T17082] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.142147][T17082] bridge_slave_1: left allmulticast mode [ 825.147881][T17082] bridge_slave_1: left promiscuous mode [ 825.154894][T17082] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.166528][T17082] team0: Port device team_slave_0 removed [ 825.174427][T17082] team0: Port device team_slave_1 removed [ 825.182172][T17082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.190051][T17082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.198217][T17082] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 825.214734][T17083] team0: No ports can be present during mode change [ 825.244888][ T30] audit: type=1400 audit(2000000381.389:2158): avc: denied { setattr } for pid=17081 comm="syz.5.2713" name="ALG" dev="sockfs" ino=57375 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 825.392906][T17066] 9p: Bad value for 'source' [ 825.468245][T17090] netlink: 'syz.6.2715': attribute type 1 has an invalid length. [ 825.496545][T17090] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 825.571564][ T6263] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 825.731430][ T6263] usb 6-1: Using ep0 maxpacket: 8 [ 825.777733][ T6263] usb 6-1: config index 0 descriptor too short (expected 15131, got 27) [ 825.801109][ T6263] usb 6-1: config 203 has too many interfaces: 174, using maximum allowed: 32 [ 825.825824][ T6263] usb 6-1: config 203 has an invalid descriptor of length 0, skipping remainder of the config [ 825.841284][ T6263] usb 6-1: config 203 has 0 interfaces, different from the descriptor's value: 174 [ 825.857207][ T6263] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 825.871791][ T6263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.880127][ T6263] usb 6-1: Product: syz [ 825.886571][ T6263] usb 6-1: Manufacturer: syz [ 825.892393][ T6263] usb 6-1: SerialNumber: syz [ 826.052331][T17100] netlink: 'syz.0.2719': attribute type 1 has an invalid length. [ 826.114559][T17086] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2714'. [ 826.125021][T17100] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 826.129826][T17102] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 826.561673][T13713] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 826.713640][ T6263] usb 6-1: USB disconnect, device number 113 [ 827.242518][ T6263] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 827.505398][ T6263] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 827.574496][ T6263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.602216][ T6263] usb 7-1: Product: syz [ 827.607545][ T6263] usb 7-1: Manufacturer: syz [ 827.620762][ T6263] usb 7-1: SerialNumber: syz [ 827.635855][ T6263] usb 7-1: config 0 descriptor?? [ 827.653802][ T6263] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 827.765712][ T5816] usb 8-1: USB disconnect, device number 2 [ 828.049117][T17042] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 828.173091][ T6263] gspca_sunplus: reg_r err -110 [ 828.284901][ T6263] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 828.377555][T17042] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 828.456456][T17042] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 828.490852][T17042] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 828.503452][T13713] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 828.540142][T17133] netlink: 'syz.7.2726': attribute type 1 has an invalid length. [ 828.585069][T17042] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.590059][ T89] usb 7-1: USB disconnect, device number 10 [ 828.671821][T17133] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 828.693643][T13713] usb 1-1: Using ep0 maxpacket: 8 [ 828.718477][T17122] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 828.731478][T17122] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 828.824141][T13713] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 828.932481][T13713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.978540][T17042] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 828.997143][T13713] usb 1-1: Product: syz [ 829.024962][T13713] usb 1-1: Manufacturer: syz [ 829.062227][T13713] usb 1-1: SerialNumber: syz [ 829.078122][T13713] usb 1-1: config 0 descriptor?? [ 829.127472][ T30] audit: type=1400 audit(2000000385.269:2159): avc: denied { create } for pid=17121 comm="syz.5.2724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 829.127556][T13713] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 829.156908][ T30] audit: type=1400 audit(2000000385.269:2160): avc: denied { write } for pid=17121 comm="syz.5.2724" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 829.598019][ T89] usb 6-1: USB disconnect, device number 114 [ 830.298191][T13713] gspca_sonixj: reg_r err -110 [ 830.307367][T13713] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 831.597743][ T6238] usb 1-1: USB disconnect, device number 59 [ 831.642277][T13713] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 831.824154][T13713] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 831.833933][T13713] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 831.843807][T13713] usb 8-1: config 1 has no interface number 1 [ 831.850101][T13713] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 831.864743][T13713] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 831.880021][T13713] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 831.890496][T13713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.899667][T13713] usb 8-1: Product: syz [ 831.905790][T13713] usb 8-1: Manufacturer: syz [ 831.910398][T13713] usb 8-1: SerialNumber: syz [ 832.031301][ T6238] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 832.142223][T13713] usb 8-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 832.203511][ T6238] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.223650][T13713] usb 8-1: USB disconnect, device number 3 [ 832.231747][ T6238] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 832.272251][ T6238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.419962][ T30] audit: type=1400 audit(2000000388.559:2161): avc: denied { setattr } for pid=17168 comm="syz.5.2739" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 832.476160][ T6238] usb 1-1: config 0 descriptor?? [ 832.638817][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2740'. [ 832.726410][T17173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2740'. [ 833.309053][ T6238] usbhid 1-1:0.0: can't add hid device: -71 [ 833.316026][ T6238] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 833.327414][ T6238] usb 1-1: USB disconnect, device number 60 [ 833.429330][T17191] sg_write: data in/out 16845027/88 bytes for SCSI command 0x0-- guessing data in; [ 833.429330][T17191] program syz.5.2744 not setting count and/or reply_len properly [ 833.463344][ T30] audit: type=1400 audit(2000000389.569:2162): avc: denied { write } for pid=17190 comm="syz.5.2744" name="sg0" dev="devtmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 833.592216][T13713] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 833.733230][ T6263] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 833.755616][T13713] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 833.772362][T13713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.794110][T13713] usb 8-1: config 0 descriptor?? [ 833.804259][T13713] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 833.876162][T16367] kernel write not supported for file /dsp (pid: 16367 comm: kworker/0:4) [ 833.913844][ T6263] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 834.043911][ T6263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.102523][ T6263] usb 6-1: Product: syz [ 834.106780][ T6263] usb 6-1: Manufacturer: syz [ 834.112451][ T6263] usb 6-1: SerialNumber: syz [ 834.225713][T17179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 834.274972][T17179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 834.493632][T17204] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2745'. [ 834.506394][T17204] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2745'. [ 834.526486][T17204] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2745'. [ 834.593261][ T6263] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 834.617651][ T6263] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 834.664947][ T6263] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 834.668368][T17204] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2745'. [ 834.686081][T17204] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2745'. [ 834.706050][T17204] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2745'. [ 834.769259][ T6263] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 834.804700][ T6263] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 834.836002][ T6263] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 834.885765][ T6263] usb 6-1: USB disconnect, device number 115 [ 834.939182][T17204] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2745'. [ 834.948601][T17204] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2745'. [ 835.251939][ T6263] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 835.328090][T17216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.369874][T17179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.408136][T17179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.410805][T17216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.443710][ T6263] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 835.455327][ T6263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.480698][ T6263] usb 6-1: Product: syz [ 835.496087][ T6263] usb 6-1: Manufacturer: syz [ 835.502798][T13713] usb 8-1: USB disconnect, device number 4 [ 835.513474][ T6263] usb 6-1: SerialNumber: syz [ 835.559454][ T6263] hub 6-1:24.0: bad descriptor, ignoring hub [ 835.581127][ T6263] hub 6-1:24.0: probe with driver hub failed with error -5 [ 835.757225][ T6263] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 835.767751][ T6263] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 835.780717][ T6263] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 835.789916][ T6263] usb 6-1: media controller created [ 835.802420][ T6263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 835.837956][ T6263] DVB: Unable to find symbol dib7000p_attach() [ 835.844799][ T6263] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 835.902195][ T6263] rc_core: IR keymap rc-dib0700-rc5 not found [ 835.908429][ T6263] Registered IR keymap rc-empty [ 835.915035][ T6263] dvb-usb: could not initialize remote control. [ 835.922515][ T6263] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 835.979268][ T6263] usb 6-1: USB disconnect, device number 116 [ 836.034084][T17226] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 836.168696][ T6263] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 837.070424][ T6238] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 837.596521][T17239] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 837.602584][T17239] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 837.664830][T17239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 837.670750][T17239] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 837.703683][T17239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 837.709593][T17239] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 837.737976][ T6238] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.752303][ T6238] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 837.763617][ T6238] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 837.785962][ T6238] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.798053][ T6238] usb 6-1: config 0 descriptor?? [ 837.851901][T17239] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 837.857804][T17239] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 838.803246][ T6238] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 838.973771][ T6238] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 839.001304][ T6238] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 839.014655][ T6238] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 839.095795][T17042] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 839.113088][ T6238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.134961][ T6238] usb 8-1: config 0 descriptor?? [ 839.238239][ T30] audit: type=1326 audit(2000000395.379:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17249 comm="syz.5.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 839.265186][ T30] audit: type=1326 audit(2000000395.409:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17249 comm="syz.5.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 839.296345][T17042] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 839.311870][T17042] usb 1-1: config 0 has no interface number 0 [ 839.356904][T17042] usb 1-1: config 0 interface 168 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 839.368902][ T6238] ath6kl: Failed to submit usb control message: -71 [ 839.377346][ T30] audit: type=1326 audit(2000000395.529:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17249 comm="syz.5.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 839.382226][ T6238] ath6kl: unable to send the bmi data to the device: -71 [ 839.412043][T17042] usb 1-1: config 0 interface 168 has no altsetting 0 [ 839.431321][ T5815] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 839.432986][T17042] usb 1-1: New USB device found, idVendor=0b05, idProduct=d98f, bcdDevice=48.a5 [ 839.452403][ T30] audit: type=1326 audit(2000000395.549:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17249 comm="syz.5.2757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 839.455564][ T6238] ath6kl: Unable to send get target info: -71 [ 839.621383][ T5815] usb 7-1: Using ep0 maxpacket: 16 [ 839.628380][ T5815] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.649443][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 839.649497][T17042] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.670202][T17042] usb 1-1: Product: syz [ 839.675394][T17042] usb 1-1: Manufacturer: syz [ 839.680803][T17042] usb 1-1: SerialNumber: syz [ 839.690418][ T5815] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 839.693536][ T6238] ath6kl: Failed to init ath6kl core: -71 [ 839.708575][ T6238] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 839.719519][T17042] usb 1-1: config 0 descriptor?? [ 839.729084][ T5815] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 839.737743][ T6238] usb 8-1: USB disconnect, device number 5 [ 839.773496][ T5815] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 839.814275][ T5815] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 839.824727][ T5815] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 839.832820][ T5815] usb 7-1: Manufacturer: syz [ 839.844397][ T5815] usb 7-1: config 0 descriptor?? [ 839.965599][T17318] __nla_validate_parse: 1 callbacks suppressed [ 839.965616][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2764'. [ 839.965627][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2764'. [ 840.000870][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2764'. [ 840.001068][T17321] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2764'. [ 840.141576][ T5815] rc_core: IR keymap rc-hauppauge not found [ 840.154766][ T5815] Registered IR keymap rc-empty [ 840.162601][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.181418][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.212047][ T5815] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 840.250902][ T5815] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input58 [ 840.276097][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.310420][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.353360][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.371346][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.401488][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.431363][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.453381][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.472405][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.503796][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.522115][ T5815] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 840.544157][ T5815] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 840.553911][ T5815] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 840.612613][ T6238] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 840.752959][ T5815] usb 6-1: USB disconnect, device number 117 [ 840.839712][ T6238] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 840.850442][ T6238] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.866528][ T6238] usb 8-1: Product: syz [ 840.886313][ T6238] usb 8-1: Manufacturer: syz [ 840.894392][ T6238] usb 8-1: SerialNumber: syz [ 840.920230][ T6238] hub 8-1:24.0: bad descriptor, ignoring hub [ 840.950652][ T6238] hub 8-1:24.0: probe with driver hub failed with error -5 [ 841.160059][ T6238] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 841.647173][T17175] usb 1-1: USB disconnect, device number 61 [ 841.708244][ T6238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 841.730398][ T6238] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 841.772468][ T6238] usb 8-1: media controller created [ 841.867888][ T6238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 842.026028][ T6238] DVB: Unable to find symbol dib7000p_attach() [ 842.045534][ T6238] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 842.164176][ T6238] rc_core: IR keymap rc-dib0700-rc5 not found [ 842.176292][ T6238] Registered IR keymap rc-empty [ 842.190736][ T6238] dvb-usb: could not initialize remote control. [ 842.209658][ T6238] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 842.248504][ T6238] usb 8-1: USB disconnect, device number 6 [ 842.325947][ T6238] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 842.413114][T17042] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 842.531749][T17391] netlink: 'syz.7.2774': attribute type 1 has an invalid length. [ 842.573832][T17042] usb 1-1: Using ep0 maxpacket: 32 [ 842.748684][ T6263] usb 7-1: USB disconnect, device number 11 [ 842.761051][T17392] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 842.849904][ T5815] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 842.854998][T17042] usb 1-1: config 0 has an invalid interface number: 249 but max is 0 [ 842.902247][T17042] usb 1-1: config 0 has no interface number 0 [ 842.943758][T17042] usb 1-1: config 0 interface 249 has no altsetting 0 [ 842.988444][T17042] usb 1-1: New USB device found, idVendor=106c, idProduct=3714, bcdDevice=b1.ec [ 843.002972][T17042] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.016287][T17042] usb 1-1: Product: syz [ 843.020752][T17042] usb 1-1: Manufacturer: syz [ 843.036539][T17042] usb 1-1: SerialNumber: syz [ 843.049115][T17042] usb 1-1: config 0 descriptor?? [ 843.062704][T17042] qcaux 1-1:0.249: qcaux converter detected [ 843.063858][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 843.080957][T17042] usb 1-1: qcaux converter now attached to ttyUSB0 [ 843.130608][ T5815] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.158867][ T5815] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 843.174043][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.279682][T17380] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 843.287843][ T5815] usb 6-1: config 0 descriptor?? [ 843.305076][T17380] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 843.315200][ T6263] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 843.474102][ T6263] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 843.488837][ T6263] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 843.499379][ T6263] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.508732][ T6263] usb 7-1: Product: syz [ 843.514263][ T6263] usb 7-1: Manufacturer: syz [ 843.518872][ T6263] usb 7-1: SerialNumber: syz [ 843.543703][ T6263] usb 7-1: config 0 descriptor?? [ 843.558466][ T6263] gspca_main: spca501-2.14.0 probing 0000:0000 [ 843.606836][T17175] usb 1-1: USB disconnect, device number 62 [ 843.618379][T17175] qcaux ttyUSB0: qcaux converter now disconnected from ttyUSB0 [ 843.636340][T17175] qcaux 1-1:0.249: device disconnected [ 843.758047][ T6263] gspca_spca501: reg write: error -71 [ 843.760668][ T5815] hid-steam 0003:28DE:1102.0021: unknown main item tag 0x0 [ 843.768522][ T6263] spca501 7-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 843.776664][ T5815] hid-steam 0003:28DE:1102.0021: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 843.782573][ T6263] spca501 7-1:0.0: probe with driver spca501 failed with error -22 [ 843.797798][ T6263] uvcvideo 7-1:0.0: probe with driver uvcvideo failed with error -22 [ 843.811485][ T6263] usb 7-1: USB disconnect, device number 12 [ 843.854331][ T5815] hid-steam 0003:28DE:1102.0021: Steam Controller 'XXXXXXXXXX' connected [ 843.865507][ T5815] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.0021/input/input60 [ 843.896461][ T5815] hid-steam 0003:28DE:1102.0022: unknown main item tag 0x0 [ 843.927407][ T5815] hid-steam 0003:28DE:1102.0022: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 843.939682][T17211] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 843.970869][ T5815] usb 6-1: USB disconnect, device number 118 [ 844.007453][ T5815] hid-steam 0003:28DE:1102.0021: Steam Controller 'XXXXXXXXXX' disconnected [ 844.025614][T17407] fido_id[17407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 844.132920][T17211] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 844.143151][T17211] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 844.152247][T17211] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 844.161660][T17211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.172930][T17211] usb 8-1: config 0 descriptor?? [ 844.350615][T17412] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2780'. [ 844.588799][T17414] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2779'. [ 846.120028][T17426] sd 0:0:1:0: PR command failed: 1026 [ 846.127976][T17426] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 846.146267][T17426] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 846.272974][ T56] block nbd1: Possible stuck request ffff8880266d0000: control (read@0,4096B). Runtime 60 seconds [ 846.334728][T17433] netlink: 'syz.5.2785': attribute type 3 has an invalid length. [ 846.441276][T17175] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 846.701361][T17436] netlink: 'syz.6.2786': attribute type 1 has an invalid length. [ 846.719571][T17175] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 846.774863][T17175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.783567][T17175] usb 1-1: Product: syz [ 846.792231][T17175] usb 1-1: Manufacturer: syz [ 846.806494][T17175] usb 1-1: SerialNumber: syz [ 846.822699][ T30] audit: type=1326 audit(2000000402.949:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17405 comm="syz.7.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 847.026308][T17436] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 847.052197][T17175] hub 1-1:24.0: bad descriptor, ignoring hub [ 847.058249][T17175] hub 1-1:24.0: probe with driver hub failed with error -5 [ 848.154823][ T30] audit: type=1326 audit(2000000402.949:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17405 comm="syz.7.2778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 848.184623][T17419] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nullb0": -EINTR [ 848.197999][T17175] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 848.237331][T17175] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 848.282535][T17175] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 848.294946][T17175] usb 1-1: media controller created [ 848.337691][T17175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 848.442631][T17452] binder: 17450:17452 ioctl c0306201 0 returned -14 [ 848.477188][T17175] DVB: Unable to find symbol dib7000p_attach() [ 848.502170][T17175] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 848.661858][T17175] rc_core: IR keymap rc-dib0700-rc5 not found [ 848.668042][T17175] Registered IR keymap rc-empty [ 848.678365][T17175] dvb-usb: could not initialize remote control. [ 848.705571][T17175] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 848.725439][T17175] usb 1-1: USB disconnect, device number 63 [ 848.822667][T17175] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 849.335548][T17461] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2791'. [ 849.608822][T17463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17463 comm=syz.0.2793 [ 850.721236][T17472] netlink: set zone limit has 4 unknown bytes [ 851.248544][T17475] input: syz0 as /devices/virtual/input/input62 [ 853.059467][T17492] 8021q: VLANs not supported on vcan0 [ 853.087705][ T6263] usb 8-1: USB disconnect, device number 7 [ 853.541292][T14768] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 853.701471][T17175] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 853.717223][T14768] usb 8-1: Using ep0 maxpacket: 32 [ 853.726153][T14768] usb 8-1: config 252 has an invalid interface number: 121 but max is 0 [ 853.741936][T14768] usb 8-1: config 252 has no interface number 0 [ 853.752819][T14768] usb 8-1: config 252 interface 121 has no altsetting 0 [ 853.766666][T14768] usb 8-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=a2.1e [ 853.781375][T14768] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.799354][T14768] usb 8-1: Product: syz [ 853.805898][T14768] usb 8-1: Manufacturer: syz [ 853.813561][T14768] usb 8-1: SerialNumber: syz [ 853.860387][T14768] em28xx 8-1:252.121: New device syz syz @ 480 Mbps (2040:651b, interface 121, class 121) [ 853.872639][T14768] em28xx 8-1:252.121: Video interface 121 found: bulk [ 853.878018][T17175] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 853.911481][T17175] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.919631][T17175] usb 6-1: Product: syz [ 853.924041][T17175] usb 6-1: Manufacturer: syz [ 853.928629][T17175] usb 6-1: SerialNumber: syz [ 853.946344][T17175] hub 6-1:24.0: bad descriptor, ignoring hub [ 853.956961][T17175] hub 6-1:24.0: probe with driver hub failed with error -5 [ 854.233592][T17175] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 854.261681][T17175] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 854.471543][T13713] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 854.711121][T17175] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 854.719750][T17175] usb 6-1: media controller created [ 854.728070][T17510] SELinux: Context system_u:object_r:audisp_remote_exec_t:s0 is not valid (left unmapped). [ 854.736359][T17175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 854.764212][ T30] audit: type=1400 audit(2000000410.909:2169): avc: denied { relabelto } for pid=17509 comm="syz.6.2806" name="41" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 854.795653][T17175] DVB: Unable to find symbol dib7000p_attach() [ 854.802319][T17175] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 854.810905][ T30] audit: type=1400 audit(2000000410.939:2170): avc: denied { associate } for pid=17509 comm="syz.6.2806" name="41" dev="tmpfs" ino=245 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 855.049534][T14768] em28xx 8-1:252.121: unknown em28xx chip ID (0) [ 855.141932][T17175] rc_core: IR keymap rc-dib0700-rc5 not found [ 855.150117][T17175] Registered IR keymap rc-empty [ 855.179060][T17175] dvb-usb: could not initialize remote control. [ 855.194487][T17175] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 855.256659][T17175] usb 6-1: USB disconnect, device number 119 [ 855.302230][T13713] usb 1-1: device descriptor read/64, error -71 [ 855.346556][T14768] em28xx 8-1:252.121: reading from i2c device at 0xa0 failed (error=-5) [ 855.561061][T14768] em28xx 8-1:252.121: board has no eeprom [ 855.628188][T17175] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 855.653297][T14768] em28xx 8-1:252.121: Identified as Hauppauge WinTV HVR 950 (card=16) [ 855.764286][ T30] audit: type=1400 audit(2000000411.789:2171): avc: denied { remove_name } for pid=16747 comm="syz-executor" name="file1" dev="tmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 855.809306][T14768] em28xx 8-1:252.121: analog set to bulk mode. [ 855.837723][T17211] em28xx 8-1:252.121: Registering V4L2 extension [ 855.945870][T17523] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2809'. [ 855.968482][T13713] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 856.143199][T13713] usb 1-1: Using ep0 maxpacket: 16 [ 856.232949][T13713] usb 1-1: config 3 has an invalid interface number: 152 but max is 0 [ 856.250661][ T30] audit: type=1400 audit(2000000411.939:2172): avc: denied { rmdir } for pid=16747 comm="syz-executor" name="41" dev="tmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:audisp_remote_exec_t:s0" [ 856.429393][ T6263] usb 8-1: USB disconnect, device number 8 [ 856.436613][T13713] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 856.447881][ T6263] em28xx 8-1:252.121: Disconnecting em28xx [ 856.454967][T13713] usb 1-1: config 3 has no interface number 0 [ 856.461138][T13713] usb 1-1: config 3 interface 152 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 856.552151][ T30] audit: type=1400 audit(2000000412.689:2173): avc: denied { map } for pid=17522 comm="syz.6.2810" path="socket:[58332]" dev="sockfs" ino=58332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 856.688458][T17211] em28xx 8-1:252.121: Config register raw data: 0xffffffed [ 856.702475][ T30] audit: type=1400 audit(2000000412.689:2174): avc: denied { accept } for pid=17522 comm="syz.6.2810" path="socket:[58332]" dev="sockfs" ino=58332 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 856.742535][T17211] em28xx 8-1:252.121: AC97 chip type couldn't be determined [ 856.786783][T17211] em28xx 8-1:252.121: No AC97 audio processor [ 856.816408][T17211] em28xx 8-1:252.121: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 856.885822][T17211] em28xx 8-1:252.121: Binding DVB extension [ 856.905269][T17211] em28xx 8-1:252.121: no endpoint for DVB mode and transfer type 0 [ 856.922678][T17211] em28xx 8-1:252.121: failed to pre-allocate USB transfer buffers for DVB. [ 856.940809][T17211] em28xx 8-1:252.121: Registering input extension [ 856.958887][T13713] usb 1-1: config 3 interface 152 has no altsetting 0 [ 856.968022][ T6263] em28xx 8-1:252.121: Closing input extension [ 856.983764][T13713] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a8c, bcdDevice= 1.8b [ 857.002266][T13713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.010281][T13713] usb 1-1: Product: syz [ 857.023319][ T6263] em28xx 8-1:252.121: Freeing device [ 857.030066][T13713] usb 1-1: Manufacturer: syz [ 857.038669][T13713] usb 1-1: SerialNumber: syz [ 857.207983][ T30] audit: type=1400 audit(2000000413.349:2175): avc: denied { bind } for pid=17532 comm="syz.5.2813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 857.372949][T13713] usb 1-1: USB disconnect, device number 65 [ 857.441795][ T6263] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 857.595651][ T6263] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 857.606459][ T6263] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 857.616583][ T6263] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 857.626433][ T6263] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.636799][ T6263] usb 8-1: config 0 descriptor?? [ 859.335057][T17554] sctp: [Deprecated]: syz.5.2816 (pid 17554) Use of struct sctp_assoc_value in delayed_ack socket option. [ 859.335057][T17554] Use struct sctp_sack_info instead [ 859.512534][ T6238] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 859.737580][ T6238] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 859.748856][ T6238] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.762109][ T6238] usb 7-1: Product: syz [ 859.766390][ T6238] usb 7-1: Manufacturer: syz [ 859.770987][ T6238] usb 7-1: SerialNumber: syz [ 859.798045][ T6238] hub 7-1:24.0: bad descriptor, ignoring hub [ 859.804613][ T6238] hub 7-1:24.0: probe with driver hub failed with error -5 [ 859.813671][ T30] audit: type=1326 audit(2000000415.959:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17533 comm="syz.7.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 859.858333][ T30] audit: type=1326 audit(2000000415.959:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17533 comm="syz.7.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 860.004508][ T30] audit: type=1326 audit(2000000416.149:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17533 comm="syz.7.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 860.033642][ T30] audit: type=1326 audit(2000000416.179:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17533 comm="syz.7.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 860.069119][ T6238] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 860.113859][ T6238] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 860.289876][ T6238] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 860.299722][ T6238] usb 7-1: media controller created [ 860.350404][ T6238] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 860.425596][T17570] IPv6: NLM_F_CREATE should be specified when creating new route [ 860.492366][ T6238] DVB: Unable to find symbol dib7000p_attach() [ 860.507430][ T6238] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 860.773342][ T6238] rc_core: IR keymap rc-dib0700-rc5 not found [ 860.779961][ T6238] Registered IR keymap rc-empty [ 860.786662][ T6238] dvb-usb: could not initialize remote control. [ 860.794251][ T6238] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 860.825843][ T30] audit: type=1400 audit(2000000416.969:2180): avc: denied { ioctl } for pid=17576 comm="syz.0.2823" path="socket:[59448]" dev="sockfs" ino=59448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 860.876846][ T6238] usb 7-1: USB disconnect, device number 13 [ 860.960624][T17579] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2822'. [ 861.263680][ T30] audit: type=1400 audit(2000000416.969:2181): avc: denied { listen } for pid=17576 comm="syz.0.2823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 861.332969][ T6238] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 861.414939][ T9] usb 8-1: USB disconnect, device number 9 [ 861.558984][T17588] syz.6.2826 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 861.949193][ T30] audit: type=1400 audit(2000000418.079:2182): avc: denied { write } for pid=17589 comm="syz.5.2827" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 862.388393][ T30] audit: type=1400 audit(2000000418.529:2183): avc: denied { nosuid_transition } for pid=17595 comm="syz.7.2828" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 862.528800][ T30] audit: type=1400 audit(2000000418.549:2184): avc: denied { transition } for pid=17595 comm="syz.7.2828" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 862.869224][T17605] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2826'. [ 862.901328][ T30] audit: type=1400 audit(2000000418.549:2185): avc: denied { entrypoint } for pid=17595 comm="syz.7.2828" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=426 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 862.922183][T17042] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 862.967844][T17607] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2826'. [ 863.266826][T17611] sctp: [Deprecated]: syz.5.2830 (pid 17611) Use of struct sctp_assoc_value in delayed_ack socket option. [ 863.266826][T17611] Use struct sctp_sack_info instead [ 863.291797][T17611] Invalid argument reading file caps for ./file0 [ 863.636573][T17042] usb 1-1: Using ep0 maxpacket: 32 [ 863.652859][T17042] usb 1-1: config index 0 descriptor too short (expected 6683, got 27) [ 863.676287][T17042] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 863.708053][T17042] usb 1-1: config 0 has no interface number 0 [ 863.736536][T17042] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 863.783815][T17042] usb 1-1: config 0 interface 85 has no altsetting 0 [ 863.818321][T17042] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 863.827723][T17042] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.835987][T17042] usb 1-1: Product: syz [ 863.846768][T17042] usb 1-1: Manufacturer: syz [ 863.923818][T17042] usb 1-1: SerialNumber: syz [ 863.957678][T17042] usb 1-1: config 0 descriptor?? [ 864.341282][ T9] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 864.348993][ T5895] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 864.429083][T17624] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 864.439865][T17624] block device autoloading is deprecated and will be removed. [ 864.521396][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 864.528855][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 864.545055][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.558310][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 864.574574][ T5895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.592654][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 864.612277][ T5895] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 864.622706][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.631295][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.643307][T17615] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 864.650588][T17615] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 864.678771][ T5895] usb 6-1: config 0 descriptor?? [ 864.684061][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 864.707390][T17042] appletouch 1-1:0.85: Geyser mode initialized. [ 864.717064][T17042] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input66 [ 865.282171][ T5895] usbhid 6-1:0.0: can't add hid device: -71 [ 865.288220][ T5895] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 865.335937][T17042] usb 1-1: USB disconnect, device number 66 [ 865.335957][ C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 865.389280][ T5895] usb 6-1: USB disconnect, device number 120 [ 865.755539][T17042] appletouch 1-1:0.85: input: appletouch disconnected [ 865.804893][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 865.804908][ T30] audit: type=1400 audit(2000000421.949:2188): avc: denied { ioctl } for pid=17631 comm="syz.5.2836" path="socket:[59571]" dev="sockfs" ino=59571 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 865.858984][ T5895] usb 7-1: USB disconnect, device number 14 [ 866.301875][T17638] netlink: 'syz.5.2838': attribute type 1 has an invalid length. [ 866.329122][T17638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.605407][T17645] xt_cgroup: xt_cgroup: no path or classid specified [ 866.711540][T17646] bridge0: port 1(gretap0) entered blocking state [ 866.718519][T17646] bridge0: port 1(gretap0) entered disabled state [ 866.726139][T17646] gretap0: entered allmulticast mode [ 866.739100][T17646] gretap0: entered promiscuous mode [ 868.801308][ T5895] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 868.981504][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 868.988698][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.020497][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 869.051021][ T5895] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 869.082126][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.111887][ T5895] usb 7-1: config 0 descriptor?? [ 869.205192][T17660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2845'. [ 869.673385][ T5895] ft260 0003:0403:6030.0023: unknown main item tag 0x7 [ 870.304382][T17673] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2847'. [ 870.593160][ T5895] ft260 0003:0403:6030.0023: chip code: 0000 0000 [ 870.600345][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.607619][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.748322][ T30] audit: type=1400 audit(2000000426.889:2189): avc: denied { create } for pid=17679 comm="syz.0.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 870.897376][ T5895] ft260 0003:0403:6030.0023: failed to retrieve system status [ 870.905562][ T5895] ft260 0003:0403:6030.0023: probe with driver ft260 failed with error -32 [ 870.972085][ T6263] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 871.061300][ T9] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 871.088297][T17684] team_slave_0: entered promiscuous mode [ 871.094391][T17684] team_slave_1: entered promiscuous mode [ 871.102203][T17684] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 871.122335][ T5816] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 871.142134][ T6263] usb 8-1: Using ep0 maxpacket: 16 [ 871.149552][ T6263] usb 8-1: config index 0 descriptor too short (expected 12324, got 36) [ 871.162301][ T6263] usb 8-1: config 102 has too many interfaces: 120, using maximum allowed: 32 [ 871.179016][ T6263] usb 8-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 871.192596][ T30] audit: type=1400 audit(2000000427.339:2190): avc: denied { write } for pid=17679 comm="syz.0.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 871.192617][ T6263] usb 8-1: config 102 has 0 interfaces, different from the descriptor's value: 120 [ 871.237530][ T6263] usb 8-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 871.252109][ T6263] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.303634][ T5816] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 871.313956][ T5816] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.343897][ T5816] usb 6-1: config 0 descriptor?? [ 871.513965][ T6263] usb 8-1: string descriptor 0 read error: -71 [ 871.545312][ T6263] usb 8-1: USB disconnect, device number 10 [ 871.617919][ T5816] ath6kl: Failed to submit usb control message: -71 [ 871.633895][ T5816] ath6kl: unable to send the bmi data to the device: -71 [ 871.649423][ T5816] ath6kl: Unable to send get target info: -71 [ 871.758098][ T5816] ath6kl: Failed to init ath6kl core: -71 [ 871.766012][ T5816] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 871.808411][ T5816] usb 6-1: USB disconnect, device number 121 [ 872.270000][T17691] netlink: 'syz.7.2853': attribute type 4 has an invalid length. [ 872.531740][ T30] audit: type=1400 audit(2000000428.459:2191): avc: denied { mounton } for pid=17689 comm="syz.7.2853" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 872.842971][T17704] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2857'. [ 872.897278][T17705] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2857'. [ 872.907189][T17708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.920077][T17708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.179709][T14768] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 873.190888][T17716] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 873.756665][ T9] usb 7-1: device descriptor read/64, error -71 [ 873.832526][T14768] usb 8-1: Using ep0 maxpacket: 16 [ 873.840199][T14768] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.856456][T14768] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 873.872286][T14768] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.150293][T14768] usb 8-1: Product: syz [ 874.178242][T14768] usb 8-1: Manufacturer: syz [ 874.251280][ T9] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 874.332438][T14768] usb 8-1: SerialNumber: syz [ 874.356129][ T9] usb 7-1: device reset changed ep0 maxpacket size! [ 874.913315][T14768] usb 8-1: config 0 descriptor?? [ 874.926017][ T5895] usb 7-1: USB disconnect, device number 15 [ 875.149200][ T5895] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 875.157117][T14768] usb 8-1: Invalid number of CPorts: 0 [ 875.379293][T17732] sctp: [Deprecated]: syz.5.2864 (pid 17732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 875.379293][T17732] Use struct sctp_sack_info instead [ 875.408539][T17732] Invalid argument reading file caps for ./file0 [ 875.818756][T14768] es2_ap_driver 8-1:0.0: probe with driver es2_ap_driver failed with error -22 [ 875.835259][T14768] usb 8-1: USB disconnect, device number 11 [ 876.158000][ T5895] usb 7-1: device not accepting address 16, error -71 [ 876.275325][T17740] sctp: [Deprecated]: syz.5.2867 (pid 17740) Use of struct sctp_assoc_value in delayed_ack socket option. [ 876.275325][T17740] Use struct sctp_sack_info instead [ 876.299451][T17740] Invalid argument reading file caps for ./file0 [ 876.582626][ T56] block nbd1: Possible stuck request ffff8880266d0000: control (read@0,4096B). Runtime 90 seconds [ 877.012196][ T48] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 877.184044][ T48] usb 8-1: not running at top speed; connect to a high speed hub [ 877.225343][ T48] usb 8-1: config 1 interface 0 has no altsetting 0 [ 877.248810][ T48] usb 8-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 877.406595][ T48] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.419655][ T48] usb 8-1: Product: syz [ 877.424940][ T48] usb 8-1: Manufacturer: syz [ 877.429784][ T48] usb 8-1: SerialNumber: syz [ 877.614511][T17760] netlink: 80 bytes leftover after parsing attributes in process `syz.5.2872'. [ 878.552275][ T48] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input68 [ 878.583625][ T48] usb 8-1: USB disconnect, device number 12 [ 878.589620][ C1] appletouch 8-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 878.665212][ T48] appletouch 8-1:1.0: input: appletouch disconnected [ 878.838971][T17771] binder: BINDER_SET_CONTEXT_MGR already set [ 878.868409][T17771] binder: 17770:17771 ioctl 4018620d 200000004a80 returned -16 [ 878.902533][T17773] sctp: [Deprecated]: syz.5.2875 (pid 17773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 878.902533][T17773] Use struct sctp_sack_info instead [ 878.927637][T17773] Invalid argument reading file caps for ./file0 [ 879.403166][ T30] audit: type=1326 audit(2000000435.549:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17778 comm="syz.7.2878" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecf2f8f749 code=0x0 [ 880.127035][T17790] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 880.523516][T17797] openvswitch: netlink: IP tunnel dst address not specified [ 880.735198][T17790] bond1 (unregistering): Released all slaves [ 881.519788][T17810] sctp: [Deprecated]: syz.0.2884 (pid 17810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 881.519788][T17810] Use struct sctp_sack_info instead [ 881.655983][T17810] Invalid argument reading file caps for ./file0 [ 882.004618][ T30] audit: type=1400 audit(2000000438.149:2193): avc: denied { listen } for pid=17813 comm="syz.5.2886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 882.080329][ T30] audit: type=1400 audit(2000000438.219:2194): avc: denied { write } for pid=17820 comm="syz.5.2887" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 882.207191][T17824] xt_NFQUEUE: number of total queues is 0 [ 882.762950][ T5816] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 882.923668][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.938510][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.954361][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 883.005341][ T5816] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 883.040697][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.072827][ T5816] usb 1-1: config 0 descriptor?? [ 883.467907][T17842] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2892'. [ 884.211993][T17833] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2890'. [ 884.234559][T17841] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2893'. [ 884.496748][T17851] overlayfs: failed to resolve './file2': -2 [ 884.532268][T17767] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 884.701295][T17767] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.712892][T17767] usb 6-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 884.827267][T17767] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.463082][T17767] usb 6-1: config 0 descriptor?? [ 885.510952][T17833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 885.537790][T17833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 885.550483][T17833] bond0 (unregistering): Released all slaves [ 885.665476][ T5816] usbhid 1-1:0.0: can't add hid device: -71 [ 885.687943][ T5816] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 885.718576][ T5816] usb 1-1: USB disconnect, device number 67 [ 885.898145][T17845] netlink: zone id is out of range [ 885.949936][T17767] apple 0003:05AC:8102.0024: hidraw0: USB HID v0.00 Device [HID 05ac:8102] on usb-dummy_hcd.5-1/input0 [ 886.048966][T17870] sctp: [Deprecated]: syz.0.2899 (pid 17870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 886.048966][T17870] Use struct sctp_sack_info instead [ 886.071974][T17870] Invalid argument reading file caps for ./file0 [ 886.241572][ T5895] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 886.360144][ T9] usb 6-1: USB disconnect, device number 122 [ 886.425842][T17868] fido_id[17868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 886.442494][ T5895] usb 7-1: device descriptor read/64, error -71 [ 886.731836][ T5895] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 886.937963][ T5895] usb 7-1: device descriptor read/64, error -71 [ 887.051667][ T5895] usb usb7-port1: attempt power cycle [ 887.077050][ T30] audit: type=1400 audit(2000000443.219:2195): avc: denied { append } for pid=17894 comm="syz.5.2905" name="video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 887.391283][ T5895] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 887.401982][T17767] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 887.411843][ T5895] usb 7-1: device descriptor read/8, error -71 [ 887.551724][T17767] usb 6-1: Using ep0 maxpacket: 16 [ 887.560889][T17767] usb 6-1: config 1 interface 0 has no altsetting 0 [ 887.575450][T17767] usb 6-1: language id specifier not provided by device, defaulting to English [ 887.588536][T17767] usb 6-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=18.5e [ 887.599240][T17767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.609144][T17767] usb 6-1: Product: 㫉ﭘ멜剜៿섄᧿붲頎ꂊ宯埭眔藮얃䣡붔覂矎㒟歴๫ঞ这㰙陹⠴ᡞ뫋鳳韲ᯩ뒠赉⌞⁀붺뱏쉓讴닩␮ጰ欍熈탊⧎Ḽ欻䅚硰䟛卻뙫﴾耰攙恿䍐벍⯀溢嬸ૈ맥ᵅ蚽봅謹폈㔣郏ቾᰙ줫닼ᨁ㎖絟좄䪞׀児鱝轅譕⏂薈﷌貖尭蒙宎嵚膄ḳ믡쮻冰稛퉑ㄴ臹 [ 887.643771][T17767] usb 6-1: SerialNumber: ᐌ [ 887.652326][ T5895] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 887.682182][ T5895] usb 7-1: device descriptor read/8, error -71 [ 887.791569][ T5895] usb usb7-port1: unable to enumerate USB device [ 889.721331][ T5895] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 889.841662][T17211] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 889.881416][ T5895] usb 7-1: Using ep0 maxpacket: 8 [ 889.888548][ T5895] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.899328][ T5895] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 889.916117][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.927609][ T5895] usb 7-1: config 0 descriptor?? [ 889.944712][ T5895] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 889.991833][T17211] usb 8-1: Using ep0 maxpacket: 32 [ 889.998667][T17211] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.010081][T17211] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.024849][T17211] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 890.034097][T17211] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.235400][ T30] audit: type=1400 audit(2000000446.269:2196): avc: denied { map } for pid=17951 comm="syz.0.2912" path="socket:[59308]" dev="sockfs" ino=59308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 890.402487][T17211] usb 8-1: config 0 descriptor?? [ 890.415285][T17767] usb 6-1: USB disconnect, device number 123 [ 890.416535][T17211] hub 8-1:0.0: USB hub found [ 890.528291][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2914'. [ 890.540991][T17961] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2914'. [ 890.637558][T17211] hub 8-1:0.0: 1 port detected [ 890.928246][ T5895] gspca_vc032x: reg_r err -71 [ 890.953392][ T5895] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 891.085480][ T5895] usb 7-1: USB disconnect, device number 22 [ 891.316160][T17211] hub 8-1:0.0: activate --> -90 [ 891.423323][T17975] netlink: ct family unspecified [ 891.428434][T17975] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.756689][T17211] hub 8-1:0.0: hub_ext_port_status failed (err = 0) [ 892.704954][T17986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.729247][T17986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.988115][T17211] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 893.174312][T17211] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 893.185015][T17211] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 893.209241][T17211] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 893.234234][T17211] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 893.297757][T17211] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 893.321524][T17211] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 893.330873][T17211] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 893.341024][T17211] usb 7-1: Product: syz [ 893.347553][T17211] usb 7-1: Manufacturer: syz [ 893.387482][T17211] cdc_wdm 7-1:1.0: skipping garbage [ 893.412990][T17211] cdc_wdm 7-1:1.0: skipping garbage [ 893.436704][T17211] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 893.456762][T17211] cdc_wdm 7-1:1.0: Unknown control protocol [ 893.471356][ T30] audit: type=1400 audit(2000000449.609:2197): avc: denied { accept } for pid=17996 comm="syz.0.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 893.677464][T17997] macvtap1: entered promiscuous mode [ 893.686295][ T30] audit: type=1400 audit(2000000449.709:2198): avc: denied { create } for pid=17996 comm="syz.0.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 893.687545][T17997] macvtap1: entered allmulticast mode [ 894.006810][T17767] usb 7-1: USB disconnect, device number 23 [ 894.102250][ T5816] usb 8-1: USB disconnect, device number 13 [ 894.222049][ T30] audit: type=1400 audit(2000000450.369:2199): avc: denied { getopt } for pid=17996 comm="syz.0.2924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 895.283025][ T30] audit: type=1400 audit(2000000451.379:2200): avc: denied { ioctl } for pid=18011 comm="syz.7.2928" path="socket:[60528]" dev="sockfs" ino=60528 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 895.841627][ T9] usb 6-1: new full-speed USB device number 124 using dummy_hcd [ 896.005102][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 896.040480][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 896.079185][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 896.097275][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.122221][T18017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 896.139273][T18017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 896.172706][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 896.353011][ T6263] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 896.472676][T18045] netlink: 'syz.0.2934': attribute type 21 has an invalid length. [ 896.480560][T18045] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2934'. [ 896.490073][T18045] netlink: 'syz.0.2934': attribute type 4 has an invalid length. [ 896.498051][T18045] netlink: 'syz.0.2934': attribute type 5 has an invalid length. [ 896.505869][T18045] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2934'. [ 896.884213][ T6263] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 896.897888][ T6263] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 896.913086][ T6263] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 896.924981][ T6263] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.978571][T18030] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 897.061307][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 897.129157][ T6263] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 897.310431][ T9] usb 7-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 897.319894][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.422780][T17211] usb 6-1: USB disconnect, device number 124 [ 897.443328][ T9] usb 7-1: Product: syz [ 897.447014][T18051] binder: 18050:18051 ioctl c0306201 0 returned -14 [ 897.447513][ T9] usb 7-1: Manufacturer: syz [ 897.593126][ T9] usb 7-1: SerialNumber: syz [ 897.877463][ T9] hub 7-1:24.0: bad descriptor, ignoring hub [ 897.897275][ T9] hub 7-1:24.0: probe with driver hub failed with error -5 [ 898.078141][ T9] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 898.260400][T18058] Invalid argument reading file caps for ./file0 [ 898.583160][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 898.595607][ T9] dib0700: firmware download failed at 7 with -22 [ 898.626976][ T9] usb 7-1: USB disconnect, device number 24 [ 899.363427][ T9] usb 8-1: USB disconnect, device number 14 [ 899.506712][T18070] geneve2: entered promiscuous mode [ 899.548736][T18070] netlink: 'syz.7.2942': attribute type 11 has an invalid length. [ 899.633492][T18076] netlink: 1424 bytes leftover after parsing attributes in process `syz.6.2943'. [ 899.736030][T18081] netlink: 'syz.0.2945': attribute type 1 has an invalid length. [ 900.375831][T18087] netlink: 'syz.6.2947': attribute type 1 has an invalid length. [ 900.392477][T18087] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 901.041811][ T5816] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 901.201784][ T5816] usb 6-1: Using ep0 maxpacket: 32 [ 901.208463][ T5816] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 901.217612][ T5816] usb 6-1: config 0 has no interface number 0 [ 901.224700][ T5816] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 901.237172][ T5816] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 901.246966][ T5816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.255689][ T5816] usb 6-1: Product: syz [ 901.259869][ T5816] usb 6-1: Manufacturer: syz [ 901.265177][ T5816] usb 6-1: SerialNumber: syz [ 901.274409][ T5816] usb 6-1: config 0 descriptor?? [ 901.283760][ T5816] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 901.294603][ T5816] em28xx 6-1:0.132: Video interface 132 found: [ 901.311316][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 901.371264][ T5895] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 901.465353][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 901.477212][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.488258][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 901.498224][ T9] usb 8-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 901.508926][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.518864][ T9] usb 8-1: config 0 descriptor?? [ 901.541679][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 901.549554][ T5895] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 901.559683][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.570251][ T5895] usb 7-1: config 0 descriptor?? [ 902.674773][ T5816] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 902.733133][ T5895] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 902.755144][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 902.766335][ T5895] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 902.776886][ T5895] usb 7-1: media controller created [ 902.807169][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 902.826258][T18111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 903.837751][ T5816] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 903.847794][ T5816] em28xx 6-1:0.132: board has no eeprom [ 903.912047][ T5816] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 903.919984][ T5816] em28xx 6-1:0.132: analog set to bulk mode. [ 903.927811][T17860] em28xx 6-1:0.132: Registering V4L2 extension [ 903.939684][ T5816] usb 6-1: USB disconnect, device number 125 [ 903.954235][ T5816] em28xx 6-1:0.132: Disconnecting em28xx [ 904.068159][T17860] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 904.077701][T17860] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 904.095685][T17860] em28xx 6-1:0.132: No AC97 audio processor [ 904.126949][T17860] usb 6-1: Decoder not found [ 904.132292][T17860] em28xx 6-1:0.132: failed to create media graph [ 904.139946][T17860] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 904.141369][T14768] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 904.157687][T17860] em28xx 6-1:0.132: Remote control support is not available for this card. [ 904.166671][ T5816] em28xx 6-1:0.132: Closing input extension [ 904.184813][ T5816] em28xx 6-1:0.132: Freeing device [ 904.303047][T14768] usb 1-1: device descriptor read/64, error -71 [ 904.450142][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 904.479883][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 904.517743][ T9] usb 8-1: USB disconnect, device number 15 [ 904.523891][ T5895] az6027: usb out operation failed. (-71) [ 904.558296][ T5895] az6027: usb out operation failed. (-71) [ 904.570173][ T5895] stb0899_attach: Driver disabled by Kconfig [ 904.583915][ T5895] az6027: no front-end attached [ 904.583915][ T5895] [ 904.611792][ T5895] az6027: usb out operation failed. (-71) [ 904.618286][ T5895] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 904.637282][ T5895] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input69 [ 904.702285][T14768] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 905.007335][ T5895] dvb-usb: schedule remote query interval to 400 msecs. [ 905.033412][ T5895] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 905.071516][ T5895] usb 7-1: USB disconnect, device number 25 [ 905.119937][T18158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.131831][T14768] usb 1-1: device descriptor read/64, error -71 [ 905.187456][T18158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.233511][ T5895] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 905.307263][T14768] usb usb1-port1: attempt power cycle [ 906.041195][T14768] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 906.062140][T14768] usb 1-1: device descriptor read/8, error -71 [ 906.312302][T14768] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 906.331851][T14768] usb 1-1: device descriptor read/8, error -71 [ 906.451620][T14768] usb usb1-port1: unable to enumerate USB device [ 906.531946][T17860] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 907.071349][ T56] block nbd1: Possible stuck request ffff8880266d0000: control (read@0,4096B). Runtime 120 seconds [ 907.668435][T18204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.717723][T18204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.881988][T18204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.926253][T18204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.114498][T18207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65529 sclass=netlink_route_socket pid=18207 comm=syz.7.2975 [ 908.455598][ T30] audit: type=1400 audit(2000000464.599:2201): avc: denied { watch } for pid=18195 comm="syz.7.2975" path="/53/file0" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 908.512350][ T30] audit: type=1326 audit(2000000464.629:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18196 comm="syz.0.2977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61018f749 code=0x7fc00000 [ 908.805358][T18217] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2979'. [ 910.040582][T18235] sctp: [Deprecated]: syz.0.2985 (pid 18235) Use of struct sctp_assoc_value in delayed_ack socket option. [ 910.040582][T18235] Use struct sctp_sack_info instead [ 910.066795][T18235] Invalid argument reading file caps for ./file0 [ 910.462484][T18238] gfs2: gfs2 mount does not exist [ 910.848924][T18243] Invalid argument reading file caps for ./file0 [ 911.349308][T18247] overlayfs: missing 'workdir' [ 912.244110][ T5184] udevd[5184]: worker [13075] /devices/virtual/block/nbd1 is taking a long time [ 913.277449][ T30] audit: type=1400 audit(2000000469.419:2203): avc: denied { watch_sb } for pid=18244 comm="syz.0.2989" path="/99/bus/file0" dev="tmpfs" ino=557 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 914.891873][T18292] Invalid argument reading file caps for ./file0 [ 915.141241][ T89] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 915.423199][ T89] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.433936][ T89] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 915.449807][ T89] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 915.562267][ T89] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.712835][ T89] usb 7-1: config 0 descriptor?? [ 917.530156][T18322] binder_alloc: 18321: pid 18321 spamming oneway? 1 buffers allocated for a total size of 4096 [ 917.666130][ T30] audit: type=1326 audit(2000000473.809:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 917.939165][ T30] audit: type=1326 audit(2000000473.839:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 918.091688][ T30] audit: type=1326 audit(2000000473.839:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 918.134009][ T30] audit: type=1326 audit(2000000474.139:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 918.195096][ T30] audit: type=1326 audit(2000000474.139:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18287 comm="syz.6.3002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f418f749 code=0x7ffc0000 [ 919.394336][T18343] tun0: tun_chr_ioctl cmd 1074025675 [ 919.406280][T18343] tun0: persist enabled [ 919.415261][T18343] tun0: tun_chr_ioctl cmd 1074025675 [ 919.564083][T17860] usb 7-1: USB disconnect, device number 26 [ 919.567384][T18343] tun0: persist disabled [ 919.674721][T18350] Invalid argument reading file caps for ./file0 [ 920.311869][ T30] audit: type=1400 audit(2000000476.349:2209): avc: denied { ioctl } for pid=18351 comm="syz.6.3016" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 920.763609][T18367] macsec1: entered promiscuous mode [ 920.768859][T18367] bridge0: entered promiscuous mode [ 920.774358][ T89] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 921.078135][ T89] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.088392][ T89] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 921.097986][ T89] usb 8-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 921.142337][ T89] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.195403][ T89] usb 8-1: config 0 descriptor?? [ 922.146554][T18377] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3021'. [ 922.289693][ T30] audit: type=1326 audit(2000000478.429:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 922.355218][ T30] audit: type=1326 audit(2000000478.429:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 922.412382][ T30] audit: type=1326 audit(2000000478.429:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 922.491243][ T30] audit: type=1326 audit(2000000478.489:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 922.694510][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 922.694522][ T30] audit: type=1326 audit(2000000478.839:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 922.751564][ T30] audit: type=1326 audit(2000000478.869:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 922.805098][ T30] audit: type=1326 audit(2000000478.869:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 922.839020][ T30] audit: type=1326 audit(2000000478.869:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 922.962598][ T30] audit: type=1326 audit(2000000478.869:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 922.986741][ T30] audit: type=1326 audit(2000000478.869:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 923.140038][T18403] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3025'. [ 923.155974][ T30] audit: type=1326 audit(2000000478.879:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 923.196815][T18405] x_tables: duplicate underflow at hook 1 [ 923.210321][ T30] audit: type=1326 audit(2000000478.879:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 923.264555][ T30] audit: type=1326 audit(2000000478.889:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 923.320792][ T30] audit: type=1326 audit(2000000478.889:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.7.3018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fecf2f8f749 code=0x7ffc0000 [ 923.634784][ T89] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 923.813839][ T89] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.827602][ T89] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 923.846470][ T89] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 923.870843][ T89] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.889636][ T89] usb 7-1: config 0 descriptor?? [ 924.248397][ T89] usb 8-1: USB disconnect, device number 17 [ 926.885880][T13713] usb 7-1: USB disconnect, device number 27 [ 928.871836][T13713] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 929.052545][T18474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3043'. [ 929.063121][T13713] usb 7-1: Using ep0 maxpacket: 8 [ 929.073525][T13713] usb 7-1: config 0 has no interfaces? [ 929.079113][T13713] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 929.090912][T18475] sctp: [Deprecated]: syz.0.3042 (pid 18475) Use of int in maxseg socket option. [ 929.090912][T18475] Use struct sctp_assoc_value instead [ 929.099369][T13713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.227689][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 929.227704][ T30] audit: type=1400 audit(2000000485.369:2244): avc: denied { ioctl } for pid=18473 comm="syz.5.3043" path="socket:[62379]" dev="sockfs" ino=62379 ioctlcmd=0x500c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 929.352416][T13713] usb 7-1: config 0 descriptor?? [ 929.451944][T18479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3042'. [ 930.762941][T18465] overlay: Unknown parameter '/' [ 930.850185][T18463] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 930.926442][ T89] usb 7-1: USB disconnect, device number 28 [ 931.402933][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.409387][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.677953][ T5939] usb 6-1: new full-speed USB device number 126 using dummy_hcd [ 931.750130][ T30] audit: type=1400 audit(2000000487.889:2245): avc: denied { unmount } for pid=16747 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 931.892898][ T5939] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.911612][ T5939] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 931.930880][ T5939] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 931.971115][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.044046][ T5939] usb 6-1: config 0 descriptor?? [ 932.120326][ T30] audit: type=1400 audit(2000000488.259:2246): avc: denied { bind } for pid=18513 comm="syz.6.3051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 932.631309][ T5816] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 932.782329][ T5816] usb 8-1: Using ep0 maxpacket: 8 [ 932.789655][ T5816] usb 8-1: config 0 has an invalid interface number: 246 but max is 0 [ 932.799180][ T5816] usb 8-1: config 0 has no interface number 0 [ 932.812080][ T5816] usb 8-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 932.822705][ T5816] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.833033][ T5816] usb 8-1: Product: syz [ 932.847071][ T5816] usb 8-1: Manufacturer: syz [ 932.864563][ T5816] usb 8-1: SerialNumber: syz [ 932.967395][ T5816] usb 8-1: config 0 descriptor?? [ 933.162490][ T5816] msi2500 8-1:0.246: Registered as swradio24 [ 933.212842][ T5816] msi2500 8-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 933.287468][ T5816] usb 8-1: USB disconnect, device number 18 [ 933.414455][T12877] udevd[12877]: 'v4l_id /dev/swradio24' [18541] terminated by signal 33 (Unknown signal 33) [ 933.442186][T18540] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3058'. [ 933.527769][ T30] audit: type=1326 audit(2000000489.669:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18497 comm="syz.5.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 933.560808][ T30] audit: type=1326 audit(2000000489.699:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18497 comm="syz.5.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 933.785675][T18554] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 933.792254][ T30] audit: type=1326 audit(2000000489.699:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18497 comm="syz.5.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 934.222999][ T30] audit: type=1326 audit(2000000490.079:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18497 comm="syz.5.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 934.255513][ T30] audit: type=1326 audit(2000000490.079:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18497 comm="syz.5.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 935.506903][ T5939] usb 6-1: USB disconnect, device number 126 [ 935.863124][T18583] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3067'. [ 937.219533][T18585] syzkaller0: entered promiscuous mode [ 937.241830][ T56] block nbd1: Possible stuck request ffff8880266d0000: control (read@0,4096B). Runtime 150 seconds [ 937.243271][T18585] syzkaller0: entered allmulticast mode [ 937.612418][T17767] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 937.773323][T17767] usb 6-1: Using ep0 maxpacket: 8 [ 937.783444][T17767] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 937.800375][T17767] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 937.823801][T17767] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 937.836663][T17767] usb 6-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 937.845967][T17767] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.854378][T17767] usb 6-1: Product: syz [ 937.858658][T17767] usb 6-1: Manufacturer: syz [ 937.865802][T17767] usb 6-1: SerialNumber: syz [ 937.884517][T17767] ti_usb_3410_5052 6-1:1.0: TI USB 3410 1 port adapter converter detected [ 938.079671][ T30] audit: type=1326 audit(2000000494.219:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 938.118966][T13713] usb 6-1: USB disconnect, device number 127 [ 938.191700][ T30] audit: type=1326 audit(2000000494.259:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 938.219303][ T30] audit: type=1326 audit(2000000494.259:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 938.319071][ T30] audit: type=1326 audit(2000000494.259:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 938.391280][ T30] audit: type=1326 audit(2000000494.259:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 938.471351][ T30] audit: type=1326 audit(2000000494.259:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 938.571447][ T30] audit: type=1326 audit(2000000494.259:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 938.604708][ T30] audit: type=1326 audit(2000000494.259:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 938.629206][ T30] audit: type=1326 audit(2000000494.259:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18598 comm="syz.5.3070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f769538f749 code=0x7ffc0000 [ 941.704664][T18637] sctp: [Deprecated]: syz.6.3082 (pid 18637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 941.704664][T18637] Use struct sctp_sack_info instead [ 941.725288][T18637] Invalid argument reading file caps for ./file0 [ 942.994308][T18633] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 943.031432][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 943.031447][ T30] audit: type=1400 audit(2000000499.179:2309): avc: denied { getopt } for pid=18651 comm="syz.0.3088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 943.682294][T13713] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 943.941380][T13713] usb 8-1: Using ep0 maxpacket: 16 [ 943.990066][T13713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.042515][T13713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.063433][T13713] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 944.078507][T13713] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 944.093406][T13713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.110007][T13713] usb 8-1: config 0 descriptor?? [ 944.278544][T18666] openvswitch: netlink: IP tunnel TTL not specified. [ 944.301278][ T5939] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 944.514897][ T5939] usb 6-1: device descriptor read/64, error -71 [ 944.843095][ T5939] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 944.923033][T18655] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 945.031958][ T5939] usb 6-1: device descriptor read/64, error -71 [ 945.163502][ T5939] usb usb6-port1: attempt power cycle [ 945.501285][ T5939] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 945.622698][ T5939] usb 6-1: device descriptor read/8, error -71 [ 945.643699][T18684] sctp: [Deprecated]: syz.6.3095 (pid 18684) Use of struct sctp_assoc_value in delayed_ack socket option. [ 945.643699][T18684] Use struct sctp_sack_info instead [ 945.663152][T18684] Invalid argument reading file caps for ./file0 [ 945.861263][ T5939] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 945.881907][ T5939] usb 6-1: device descriptor read/8, error -71 [ 945.981812][T17860] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 945.991839][ T5939] usb usb6-port1: unable to enumerate USB device [ 946.091486][ T31] INFO: task syz.1.2583:16537 blocked for more than 143 seconds. [ 946.099960][ T31] Tainted: G L syzkaller #0 [ 946.106778][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 946.115762][ T31] task:syz.1.2583 state:D stack:26664 pid:16537 tgid:16537 ppid:5810 task_flags:0x400040 flags:0x00080002 [ 946.127927][ T31] Call Trace: [ 946.134337][ T31] [ 946.137547][ T31] ? __schedule+0x10b9/0x6150 [ 946.140207][T17860] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 946.142528][ T31] __schedule+0x1139/0x6150 [ 946.142574][ T31] ? __pfx___schedule+0x10/0x10 [ 946.142594][ T31] ? find_held_lock+0x2b/0x80 [ 946.142631][ T31] ? schedule+0x2d7/0x3a0 [ 946.142657][ T31] schedule+0xe7/0x3a0 [ 946.142680][ T31] schedule_preempt_disabled+0x13/0x30 [ 946.142701][ T31] __mutex_lock+0xc69/0x1ca0 [ 946.142729][ T31] ? bdev_release+0x15a/0x6d0 [ 946.142762][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 946.142792][ T31] ? find_held_lock+0x2b/0x80 [ 946.142823][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 946.142855][ T31] ? bdev_release+0x15a/0x6d0 [ 946.142880][ T31] bdev_release+0x15a/0x6d0 [ 946.142911][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 946.142938][ T31] blkdev_release+0x15/0x20 [ 946.142964][ T31] __fput+0x402/0xb70 [ 946.142991][ T31] task_work_run+0x150/0x240 [ 946.143017][ T31] ? __pfx_task_work_run+0x10/0x10 [ 946.143039][ T31] ? __do_sys_close_range+0x278/0x730 [ 946.143076][ T31] exit_to_user_mode_loop+0xfb/0x540 [ 946.143107][ T31] do_syscall_64+0x4ee/0xf80 [ 946.143133][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.143154][ T31] RIP: 0033:0x7f323d18f749 [ 946.143171][ T31] RSP: 002b:00007ffc506629f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 946.143193][ T31] RAX: 0000000000000000 RBX: 00007f323d3e7da0 RCX: 00007f323d18f749 [ 946.143206][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 946.143219][ T31] RBP: 00007f323d3e7da0 R08: 0000000000034d50 R09: 0000001c50662cef [ 946.143232][ T31] R10: 00007f323d3e7cb0 R11: 0000000000000246 R12: 00000000000bfeb7 [ 946.143244][ T31] R13: 00007f323d3e6360 R14: ffffffffffffffff R15: 00007ffc50662b10 [ 946.143271][ T31] [ 946.143288][ T31] INFO: task syz.4.2635:16745 blocked for more than 143 seconds. [ 946.143303][ T31] Tainted: G L syzkaller #0 [ 946.143313][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 946.154709][T17860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.157533][ T31] task:syz.4.2635 state:D [ 946.163296][T17860] usb 1-1: Product: syz [ 946.168810][ T31] stack:27400 pid:16745 tgid:16740 ppid:16157 task_flags:0x400140 flags:0x00080002 [ 946.173079][T17860] usb 1-1: Manufacturer: syz [ 946.176345][ T31] Call Trace: [ 946.180750][T17860] usb 1-1: SerialNumber: syz [ 946.185619][ T31] [ 946.185635][ T31] ? __schedule+0x10b9/0x6150 [ 946.185661][ T31] __schedule+0x1139/0x6150 [ 946.185701][ T31] ? __pfx___schedule+0x10/0x10 [ 946.185721][ T31] ? find_held_lock+0x2b/0x80 [ 946.185750][ T31] ? schedule+0x2d7/0x3a0 [ 946.185776][ T31] schedule+0xe7/0x3a0 [ 946.185799][ T31] schedule_preempt_disabled+0x13/0x30 [ 946.185821][ T31] __mutex_lock+0xc69/0x1ca0 [ 946.185845][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 946.185869][ T31] ? sync_bdevs+0x153/0x480 [ 946.185894][ T31] ? __lock_acquire+0x436/0x2890 [ 946.185920][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 946.185958][ T31] ? iput.part.0+0x192/0x1190 [ 946.185984][ T31] ? sync_bdevs+0x153/0x480 [ 946.186008][ T31] sync_bdevs+0x153/0x480 [ 946.186039][ T31] ksys_sync+0xb2/0x150 [ 946.186058][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 946.186075][ T31] ? __sys_setsockopt+0x1c0/0x230 [ 946.186099][ T31] ? rcu_is_watching+0x12/0xc0 [ 946.186118][ T31] ? do_syscall_64+0x91/0xf80 [ 946.186142][ T31] __do_sys_sync+0xe/0x20 [ 946.186159][ T31] do_syscall_64+0xcd/0xf80 [ 946.186185][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.186206][ T31] RIP: 0033:0x7f005778f749 [ 946.186222][ T31] RSP: 002b:00007f00559f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 946.186242][ T31] RAX: ffffffffffffffda RBX: 00007f00579e6090 RCX: 00007f005778f749 [ 946.186254][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 946.186265][ T31] RBP: 00007f00579e6090 R08: 0000000000000000 R09: 0000000000000000 [ 946.186277][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.186288][ T31] R13: 00007f00579e6128 R14: 00007f00579e6090 R15: 00007ffcf3d01058 [ 946.447317][T17860] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 946.474445][ T31] [ 946.487313][T17860] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 946.512675][ T31] INFO: task syz.4.2635:16746 blocked for more than 143 seconds. [ 946.517455][T17860] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 946.556044][ T31] Tainted: G L syzkaller #0 [ 946.690248][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 946.699239][ T31] task:syz.4.2635 state:D stack:28504 pid:16746 tgid:16740 ppid:16157 task_flags:0x400040 flags:0x00080002 [ 946.711265][ T31] Call Trace: [ 946.714559][ T31] [ 946.717493][ T31] ? __schedule+0x10b9/0x6150 [ 946.722217][ T31] __schedule+0x1139/0x6150 [ 946.726734][ T31] ? __pfx___schedule+0x10/0x10 [ 946.736771][ T31] ? find_held_lock+0x2b/0x80 [ 946.741526][ T31] ? schedule+0x2d7/0x3a0 [ 946.745867][ T31] schedule+0xe7/0x3a0 [ 946.749931][ T31] schedule_preempt_disabled+0x13/0x30 [ 946.755698][ T31] __mutex_lock+0xc69/0x1ca0 [ 946.760424][ T31] ? sync_bdevs+0x153/0x480 [ 946.765659][ T31] ? __lock_acquire+0x436/0x2890 [ 946.770664][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 946.776395][ T31] ? iput.part.0+0x192/0x1190 [ 946.781121][ T31] ? sync_bdevs+0x153/0x480 [ 946.787466][ T31] sync_bdevs+0x153/0x480 [ 946.792583][ T31] ksys_sync+0xb2/0x150 [ 946.796766][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 946.802533][ T31] ? do_user_addr_fault+0x843/0x1370 [ 946.807876][ T31] ? rcu_is_watching+0x12/0xc0 [ 946.813379][ T31] ? do_syscall_64+0x91/0xf80 [ 946.818112][ T31] __do_sys_sync+0xe/0x20 [ 946.822589][ T31] do_syscall_64+0xcd/0xf80 [ 946.827113][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.833690][ T31] RIP: 0033:0x7f005778f749 [ 946.838104][ T31] RSP: 002b:00007f00559d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 946.847280][ T31] RAX: ffffffffffffffda RBX: 00007f00579e6180 RCX: 00007f005778f749 [ 946.855529][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 946.863761][ T31] RBP: 00007f00579e6180 R08: 0000000000000000 R09: 0000000000000000 [ 946.871973][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.879962][ T31] R13: 00007f00579e6218 R14: 00007f00579e6180 R15: 00007ffcf3d01058 [ 946.888022][ T31] [ 946.891054][ T31] INFO: task syz.4.2635:16751 blocked for more than 144 seconds. [ 946.894421][T17860] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 946.902811][ T31] Tainted: G L syzkaller #0 [ 946.913750][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 946.923645][ T31] task:syz.4.2635 state:D stack:28264 pid:16751 tgid:16740 ppid:16157 task_flags:0x400040 flags:0x00080002 [ 946.933826][T17860] usb 1-1: USB disconnect, device number 72 [ 946.936264][ T31] Call Trace: [ 946.944932][ T31] [ 946.947873][ T31] ? __schedule+0x10b9/0x6150 [ 946.952935][ T31] __schedule+0x1139/0x6150 [ 946.957473][ T31] ? __pfx___schedule+0x10/0x10 [ 946.962530][ T31] ? find_held_lock+0x2b/0x80 [ 946.967230][ T31] ? schedule+0x2d7/0x3a0 [ 946.977197][ T31] schedule+0xe7/0x3a0 [ 946.981357][ T31] schedule_preempt_disabled+0x13/0x30 [ 946.986825][ T31] __mutex_lock+0xc69/0x1ca0 [ 946.991535][ T31] ? sync_bdevs+0x153/0x480 [ 946.996056][ T31] ? __lock_acquire+0x436/0x2890 [ 947.001009][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 947.009349][ T31] ? irqentry_exit+0x1dd/0x8c0 [ 947.014239][ T31] ? iput.part.0+0x192/0x1190 [ 947.018935][ T31] ? sync_bdevs+0x153/0x480 [ 947.024868][ T31] sync_bdevs+0x153/0x480 [ 947.029236][ T31] ksys_sync+0xb2/0x150 [ 947.034723][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 947.039509][ T31] ? do_user_addr_fault+0x843/0x1370 [ 947.044866][ T31] ? rcu_is_watching+0x12/0xc0 [ 947.049636][ T31] ? do_syscall_64+0x91/0xf80 [ 947.054383][ T31] __do_sys_sync+0xe/0x20 [ 947.058721][ T31] do_syscall_64+0xcd/0xf80 [ 947.063286][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.069187][ T31] RIP: 0033:0x7f005778f749 [ 947.073713][ T31] RSP: 002b:00007f00555b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 947.082164][ T31] RAX: ffffffffffffffda RBX: 00007f00579e6270 RCX: 00007f005778f749 [ 947.090140][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.098163][ T31] RBP: 00007f00579e6270 R08: 0000000000000000 R09: 0000000000000000 [ 947.106162][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.117110][ T31] R13: 00007f00579e6308 R14: 00007f00579e6270 R15: 00007ffcf3d01058 [ 947.125279][ T31] [ 947.128317][ T31] INFO: task syz.4.2635:16752 blocked for more than 144 seconds. [ 947.142562][T13713] usbhid 8-1:0.0: can't add hid device: -71 [ 947.143262][ T31] Tainted: G L syzkaller #0 [ 947.155090][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 947.160614][T13713] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 947.167141][ T31] task:syz.4.2635 state:D stack:28504 pid:16752 tgid:16740 ppid:16157 task_flags:0x400040 flags:0x00080002 [ 947.184882][ T31] Call Trace: [ 947.185822][T13713] usb 8-1: USB disconnect, device number 19 [ 947.188172][ T31] [ 947.188187][ T31] ? __schedule+0x10b9/0x6150 [ 947.202179][ T31] __schedule+0x1139/0x6150 [ 947.206746][ T31] ? __pfx___schedule+0x10/0x10 [ 947.212068][ T31] ? find_held_lock+0x2b/0x80 [ 947.216836][ T31] ? schedule+0x2d7/0x3a0 [ 947.221214][ T31] schedule+0xe7/0x3a0 [ 947.225340][ T31] schedule_preempt_disabled+0x13/0x30 [ 947.230814][ T31] __mutex_lock+0xc69/0x1ca0 [ 947.237457][ T31] ? sync_bdevs+0x153/0x480 [ 947.243111][ T31] ? __lock_acquire+0x436/0x2890 [ 947.248049][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 947.253975][ T31] ? iput.part.0+0x192/0x1190 [ 947.258649][ T31] ? sync_bdevs+0x153/0x480 [ 947.263178][ T31] sync_bdevs+0x153/0x480 [ 947.267708][ T31] ksys_sync+0xb2/0x150 [ 947.271958][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 947.276729][ T31] ? do_user_addr_fault+0x843/0x1370 [ 947.282095][ T31] ? rcu_is_watching+0x12/0xc0 [ 947.286860][ T31] ? do_syscall_64+0x91/0xf80 [ 947.291865][ T31] __do_sys_sync+0xe/0x20 [ 947.296205][ T31] do_syscall_64+0xcd/0xf80 [ 947.300717][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.306658][ T31] RIP: 0033:0x7f005778f749 [ 947.311064][ T31] RSP: 002b:00007f005518f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 947.319568][ T31] RAX: ffffffffffffffda RBX: 00007f00579e6360 RCX: 00007f005778f749 [ 947.327563][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.335704][ T31] RBP: 00007f00579e6360 R08: 0000000000000000 R09: 0000000000000000 [ 947.344624][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.352864][ T31] R13: 00007f00579e63f8 R14: 00007f00579e6360 R15: 00007ffcf3d01058 [ 947.360866][ T31] [ 947.364060][ T31] INFO: task syz.4.2635:16753 blocked for more than 144 seconds. [ 947.373417][ T31] Tainted: G L syzkaller #0 [ 947.379946][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 947.392593][ T31] task:syz.4.2635 state:D stack:28152 pid:16753 tgid:16740 ppid:16157 task_flags:0x400040 flags:0x00080002 [ 947.404594][ T31] Call Trace: [ 947.407874][ T31] [ 947.410790][ T31] ? __schedule+0x10b9/0x6150 [ 947.415498][ T31] __schedule+0x1139/0x6150 [ 947.420011][ T31] ? __pfx___schedule+0x10/0x10 [ 947.424887][ T31] ? find_held_lock+0x2b/0x80 [ 947.429572][ T31] ? schedule+0x2d7/0x3a0 [ 947.434002][ T31] schedule+0xe7/0x3a0 [ 947.438076][ T31] schedule_preempt_disabled+0x13/0x30 [ 947.443769][ T31] __mutex_lock+0xc69/0x1ca0 [ 947.448371][ T31] ? sync_bdevs+0x153/0x480 [ 947.454200][ T31] ? __lock_acquire+0x436/0x2890 [ 947.459133][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 947.464299][ T31] ? iput.part.0+0x192/0x1190 [ 947.468981][ T31] ? sync_bdevs+0x153/0x480 [ 947.473607][ T31] sync_bdevs+0x153/0x480 [ 947.477944][ T31] ksys_sync+0xb2/0x150 [ 947.483124][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 947.487905][ T31] ? rcu_is_watching+0x12/0xc0 [ 947.492701][ T31] ? do_syscall_64+0x91/0xf80 [ 947.497382][ T31] __do_sys_sync+0xe/0x20 [ 947.501930][ T31] do_syscall_64+0xcd/0xf80 [ 947.506434][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.512409][ T31] RIP: 0033:0x7f005778f749 [ 947.516816][ T31] RSP: 002b:00007f0054d6c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 947.525267][ T31] RAX: ffffffffffffffda RBX: 00007f00579e6450 RCX: 00007f005778f749 [ 947.533766][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.541783][ T31] RBP: 00007f00579e6450 R08: 0000000000000000 R09: 0000000000000000 [ 947.549756][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.557815][ T31] R13: 00007f00579e64e8 R14: 00007f00579e6450 R15: 00007ffcf3d01058 [ 947.567659][ T31] [ 947.570688][ T31] INFO: task syz.4.2635:16754 blocked for more than 144 seconds. [ 947.579108][ T31] Tainted: G L syzkaller #0 [ 947.585692][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 947.594523][ T31] task:syz.4.2635 state:D stack:28504 pid:16754 tgid:16740 ppid:16157 task_flags:0x400040 flags:0x00080002 [ 947.606496][ T31] Call Trace: [ 947.609768][ T31] [ 947.612741][ T31] ? __schedule+0x10b9/0x6150 [ 947.617414][ T31] __schedule+0x1139/0x6150 [ 947.621960][ T31] ? __pfx___schedule+0x10/0x10 [ 947.626822][ T31] ? find_held_lock+0x2b/0x80 [ 947.631634][ T31] ? schedule+0x2d7/0x3a0 [ 947.635983][ T31] schedule+0xe7/0x3a0 [ 947.640054][ T31] schedule_preempt_disabled+0x13/0x30 [ 947.645565][ T31] __mutex_lock+0xc69/0x1ca0 [ 947.650173][ T31] ? sync_bdevs+0x153/0x480 [ 947.654721][ T31] ? __lock_acquire+0x436/0x2890 [ 947.659663][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 947.664733][ T31] ? irqentry_exit+0x1dd/0x8c0 [ 947.669508][ T31] ? iput.part.0+0x192/0x1190 [ 947.675839][ T31] ? sync_bdevs+0x153/0x480 [ 947.680365][ T31] sync_bdevs+0x153/0x480 [ 947.684817][ T31] ksys_sync+0xb2/0x150 [ 947.688975][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 947.694171][ T31] ? do_user_addr_fault+0x843/0x1370 [ 947.699509][ T31] ? rcu_is_watching+0x12/0xc0 [ 947.704335][ T31] ? do_syscall_64+0x91/0xf80 [ 947.709017][ T31] __do_sys_sync+0xe/0x20 [ 947.713428][ T31] do_syscall_64+0xcd/0xf80 [ 947.717936][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.723858][ T31] RIP: 0033:0x7f005778f749 [ 947.728275][ T31] RSP: 002b:00007f0054949038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 947.736769][ T31] RAX: ffffffffffffffda RBX: 00007f00579e6540 RCX: 00007f005778f749 [ 947.744940][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.753034][ T31] RBP: 00007f00579e6540 R08: 0000000000000000 R09: 0000000000000000 [ 947.761204][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.769203][ T31] R13: 00007f00579e65d8 R14: 00007f00579e6540 R15: 00007ffcf3d01058 [ 947.778010][ T31] [ 947.781052][ T31] INFO: task syz.4.2635:16756 blocked for more than 144 seconds. [ 947.789728][ T31] Tainted: G L syzkaller #0 [ 947.796405][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 947.805104][ T31] task:syz.4.2635 state:D stack:28504 pid:16756 tgid:16740 ppid:16157 task_flags:0x400040 flags:0x00080002 [ 947.817079][ T31] Call Trace: [ 947.820359][ T31] [ 947.823344][ T31] ? __schedule+0x10b9/0x6150 [ 947.828028][ T31] __schedule+0x1139/0x6150 [ 947.832638][ T31] ? __pfx___schedule+0x10/0x10 [ 947.837491][ T31] ? find_held_lock+0x2b/0x80 [ 947.842223][ T31] ? schedule+0x2d7/0x3a0 [ 947.846559][ T31] schedule+0xe7/0x3a0 [ 947.850621][ T31] schedule_preempt_disabled+0x13/0x30 [ 947.856182][ T31] __mutex_lock+0xc69/0x1ca0 [ 947.860791][ T31] ? sync_bdevs+0x153/0x480 [ 947.865532][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 947.870737][ T31] ? irqentry_exit+0x1dd/0x8c0 [ 947.875610][ T31] ? iput.part.0+0x192/0x1190 [ 947.880295][ T31] ? sync_bdevs+0x153/0x480 [ 947.884915][ T31] sync_bdevs+0x153/0x480 [ 947.889258][ T31] ksys_sync+0xb2/0x150 [ 947.894255][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 947.899028][ T31] ? do_user_addr_fault+0x843/0x1370 [ 947.904423][ T31] ? rcu_is_watching+0x12/0xc0 [ 947.909199][ T31] ? do_syscall_64+0x91/0xf80 [ 947.913978][ T31] __do_sys_sync+0xe/0x20 [ 947.918308][ T31] do_syscall_64+0xcd/0xf80 [ 947.923579][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.929480][ T31] RIP: 0033:0x7f005778f749 [ 947.934818][ T31] RSP: 002b:00007f0054526038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 947.943293][ T31] RAX: ffffffffffffffda RBX: 00007f00579e6630 RCX: 00007f005778f749 [ 947.951371][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 947.959340][ T31] RBP: 00007f00579e6630 R08: 0000000000000000 R09: 0000000000000000 [ 947.967352][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 947.975421][ T31] R13: 00007f00579e66c8 R14: 00007f00579e6630 R15: 00007ffcf3d01058 [ 947.983459][ T31] [ 947.986533][ T31] [ 947.986533][ T31] Showing all locks held in the system: [ 947.994531][ T31] 1 lock held by khungtaskd/31: [ 947.999389][ T31] #0: ffffffff8e3c96a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 948.009359][ T31] 2 locks held by kworker/u9:0/52: [ 948.015155][ T31] #0: ffff888141fe8148 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 948.025944][ T31] #1: ffffc90000bd7c90 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 948.037826][ T31] 2 locks held by getty/5573: [ 948.042551][ T31] #0: ffff888036e5a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 948.052336][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 948.062481][ T31] 1 lock held by udevd/13075: [ 948.067171][ T31] #0: ffff8880265cd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 948.076577][ T31] 1 lock held by syz.1.2583/16537: [ 948.081712][ T31] #0: ffff8880265cd358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 948.091456][ T31] 1 lock held by syz.4.2635/16745: [ 948.096566][ T31] #0: ffff8880265cd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 948.106050][ T31] 1 lock held by syz.4.2635/16746: [ 948.111190][ T31] #0: ffff8880265cd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 948.121635][ T31] 1 lock held by syz.4.2635/16751: [ 948.126768][ T31] #0: ffff8880265cd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 948.136496][ T31] 1 lock held by syz.4.2635/16752: [ 948.142487][ T31] #0: ffff8880265cd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 948.152001][ T31] 1 lock held by syz.4.2635/16753: [ 948.157104][ T31] #0: ffff8880265cd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 948.166517][ T31] 1 lock held by syz.4.2635/16754: [ 948.171669][ T31] #0: ffff8880265cd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 948.181094][ T31] 1 lock held by syz.4.2635/16756: [ 948.186260][ T31] #0: ffff8880265cd358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 948.195743][ T31] [ 948.198065][ T31] ============================================= [ 948.198065][ T31] [ 948.206545][ T31] NMI backtrace for cpu 0 [ 948.206562][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 948.206591][ T31] Tainted: [L]=SOFTLOCKUP [ 948.206597][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 948.206608][ T31] Call Trace: [ 948.206614][ T31] [ 948.206621][ T31] dump_stack_lvl+0x116/0x1f0 [ 948.206647][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 948.206672][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 948.206692][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 948.206720][ T31] sys_info+0x133/0x180 [ 948.206744][ T31] watchdog+0xe66/0x1180 [ 948.206770][ T31] ? rcu_is_watching+0x12/0xc0 [ 948.206788][ T31] ? __pfx_watchdog+0x10/0x10 [ 948.206806][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 948.206829][ T31] ? __kthread_parkme+0x19e/0x250 [ 948.206850][ T31] ? __pfx_watchdog+0x10/0x10 [ 948.206869][ T31] kthread+0x3c5/0x780 [ 948.206890][ T31] ? __pfx_kthread+0x10/0x10 [ 948.206912][ T31] ? rcu_is_watching+0x12/0xc0 [ 948.206929][ T31] ? __pfx_kthread+0x10/0x10 [ 948.206952][ T31] ret_from_fork+0x983/0xb10 [ 948.206973][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 948.206996][ T31] ? __switch_to+0x7af/0x10d0 [ 948.207020][ T31] ? __pfx_kthread+0x10/0x10 [ 948.207042][ T31] ret_from_fork_asm+0x1a/0x30 [ 948.207082][ T31] [ 948.207089][ T31] Sending NMI from CPU 0 to CPUs 1: [ 948.347068][ C1] NMI backtrace for cpu 1 [ 948.347087][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 948.347113][ C1] Tainted: [L]=SOFTLOCKUP [ 948.347120][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 948.347132][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 948.347159][ C1] Code: c6 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 49 12 00 fb f4 cc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 948.347178][ C1] RSP: 0018:ffffc90000197de8 EFLAGS: 000002c6 [ 948.347194][ C1] RAX: 0000000002dd8f75 RBX: 0000000000000001 RCX: ffffffff8b7816d9 [ 948.347207][ C1] RDX: 0000000000000000 RSI: ffffffff8dacdf79 RDI: ffffffff8bf2b400 [ 948.347219][ C1] RBP: ffffed1003b56498 R08: 0000000000000001 R09: ffffed10170a673d [ 948.347232][ C1] R10: ffff8880b85339eb R11: ffff88801dab2ff0 R12: 0000000000000001 [ 948.347245][ C1] R13: ffff88801dab24c0 R14: ffffffff9088b6d0 R15: 0000000000000000 [ 948.347258][ C1] FS: 0000000000000000(0000) GS:ffff8881249f5000(0000) knlGS:0000000000000000 [ 948.347275][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 948.347288][ C1] CR2: 000055b5b85d8168 CR3: 000000007556e000 CR4: 00000000003526f0 [ 948.347301][ C1] Call Trace: [ 948.347307][ C1] [ 948.347317][ C1] default_idle+0x13/0x20 [ 948.347342][ C1] default_idle_call+0x6c/0xb0 [ 948.347368][ C1] do_idle+0x38d/0x510 [ 948.347397][ C1] ? __pfx_do_idle+0x10/0x10 [ 948.347430][ C1] cpu_startup_entry+0x4f/0x60 [ 948.347457][ C1] start_secondary+0x21d/0x2d0 [ 948.347479][ C1] ? __pfx_start_secondary+0x10/0x10 [ 948.347500][ C1] common_startup_64+0x13e/0x148 [ 948.347529][ C1] [ 948.518535][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 948.525370][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 948.536028][ T31] Tainted: [L]=SOFTLOCKUP [ 948.540329][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 948.550373][ T31] Call Trace: [ 948.553636][ T31] [ 948.556550][ T31] dump_stack_lvl+0x3d/0x1f0 [ 948.561139][ T31] vpanic+0x640/0x6f0 [ 948.565107][ T31] panic+0xca/0xd0 [ 948.568812][ T31] ? __pfx_panic+0x10/0x10 [ 948.573204][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 948.579164][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 948.585300][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 948.591443][ T31] ? watchdog+0xe83/0x1180 [ 948.595851][ T31] ? watchdog+0xe76/0x1180 [ 948.600245][ T31] watchdog+0xe94/0x1180 [ 948.604470][ T31] ? rcu_is_watching+0x12/0xc0 [ 948.609210][ T31] ? __pfx_watchdog+0x10/0x10 [ 948.613865][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 948.619043][ T31] ? __kthread_parkme+0x19e/0x250 [ 948.624046][ T31] ? __pfx_watchdog+0x10/0x10 [ 948.628704][ T31] kthread+0x3c5/0x780 [ 948.632766][ T31] ? __pfx_kthread+0x10/0x10 [ 948.637336][ T31] ? rcu_is_watching+0x12/0xc0 [ 948.642080][ T31] ? __pfx_kthread+0x10/0x10 [ 948.646661][ T31] ret_from_fork+0x983/0xb10 [ 948.651243][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 948.656350][ T31] ? __switch_to+0x7af/0x10d0 [ 948.661009][ T31] ? __pfx_kthread+0x10/0x10 [ 948.665585][ T31] ret_from_fork_asm+0x1a/0x30 [ 948.670338][ T31] [ 948.673663][ T31] Kernel Offset: disabled [ 948.677969][ T31] Rebooting in 86400 seconds..