last executing test programs: 4m6.915798684s ago: executing program 1 (id=48): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/proc/meminfo\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000001040)={0x0, 0x8, 0x7, '\x00', &(0x7f0000001000)=0x8}) r1 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) getpid() r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x10d0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00', @ANYRES16, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f0000000400000007020000020000004000", @ANYBLOB="80378e8deb77cf5309000000000000", @ANYRES32, @ANYBLOB='\b\x00'/28], 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f028, 0x1}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r4, 0x11, 0x64, 0x0, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xe0000000}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x0) 4m6.205474332s ago: executing program 1 (id=50): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000002ac0)={'sit0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x7, 0x4, {{0xf, 0x4, 0x2, 0x4, 0x3c, 0x65, 0x0, 0x12, 0x4, 0x0, @empty, @multicast1, {[@rr={0x7, 0x23, 0x47, [@rand_addr=0x64010102, @rand_addr=0x64010101, @private=0xa010101, @rand_addr=0x64010101, @broadcast, @private=0xa010100, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000e00)=ANY=[@ANYBLOB="03"], 0x4) shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffa000/0x4000)=nil) 4m5.895807764s ago: executing program 1 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$incfs(0xffffffffffffffff, 0x0, 0x585140, 0x6b) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000040)={0x0, 0x1, 0x0, &(0x7f0000000300)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @local, 0x0, "30a47ddacd92b91948edfc1219b5a8dee1db5ac45f22dc62a97af67dd1a76755"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffffffffffff, "e0537de438ef77f023e3413e3abe373d94982339c6e6a8ad384091de9345cda3", 0xfffffffd, 0x3f249d4a, 0x0, 0x2}, 0x3c) 4m4.949299734s ago: executing program 1 (id=58): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) socket$kcm(0x11, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000004000000040000000100000000000000"], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) socket(0xa, 0x3, 0xff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 4m4.535516431s ago: executing program 1 (id=60): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000180)=0xfff, 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="5c00000014006b030231a6080c000af32c00009d31fc00003197250f03000f00e5aa000017d34460bc24ea08000000251e6182949a2756f475ce36c2d1000000000000ecb8f6ece6652894fda67ac7b7630a6e09e61cd53f2fdf2eed", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x0, &(0x7f0000000340)=0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x4e22, 0x865, @private2, 0xfffffffe}}}, 0x108) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 4m4.243924663s ago: executing program 1 (id=61): inotify_add_watch(0xffffffffffffffff, 0x0, 0x2800047e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) syz_usb_connect(0x5, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0xd4, 0xe4, 0xc8, 0x8, 0xd46, 0x78, 0xcc70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x80, 0x0, 0xf8, [{{0x9, 0x4, 0x3b, 0x40, 0x1, 0xe4, 0xf7, 0x8, 0x6, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x3, 0x7b, 0x9}}]}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xb4b4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 4m4.165706584s ago: executing program 32 (id=61): inotify_add_watch(0xffffffffffffffff, 0x0, 0x2800047e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000000) syz_usb_connect(0x5, 0x2d, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0xd4, 0xe4, 0xc8, 0x8, 0xd46, 0x78, 0xcc70, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x80, 0x0, 0xf8, [{{0x9, 0x4, 0x3b, 0x40, 0x1, 0xe4, 0xf7, 0x8, 0x6, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x3, 0x7b, 0x9}}]}}]}}]}}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xb4b4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 2m5.83261484s ago: executing program 0 (id=484): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x10) 2m5.709021216s ago: executing program 0 (id=486): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x1000800, 0x0, 0x9, 0x1ff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r3, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0xffef, r4, &(0x7f0000000180)='\x00', 0xfdfe}]) dup3(r0, r1, 0x6700000000000000) 2m4.955894359s ago: executing program 0 (id=488): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) memfd_secret(0x0) open(0x0, 0x2a4c0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) poll(0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket(0x25, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r3 = socket$inet6(0x10, 0xa, 0xffffff81) sendto$inet6(r3, &(0x7f0000000140)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd80000801a68386738dea680e50a07988fa8731fc8796cb1c592c95544066b0938f09fef264c8d8bc1eaf1", 0x73, 0x0, 0x0, 0x0) 2m1.191761751s ago: executing program 0 (id=501): syz_open_dev$MSR(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) chdir(0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x2) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x5e, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c, 0x1, 0x1, 0x6, 0x30, 0x10, [{{0x9, 0x4, 0x0, 0xa0, 0x3, 0x2, 0x6, 0x0, 0xf, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xffff, 0x7, 0x77}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0xf, 0x401}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x5, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x80, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x5ff, 0xf0, 0x7}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x40, 0x3, 0x9, 0x10, 0xe}, 0x123, &(0x7f0000000100)={0x5, 0xf, 0x123, 0x4, [@generic={0xfc, 0x10, 0x2, "5997d13645f58e6c22980582beb1ae2274e643c98cb8dab8675ebc8c10e86fecfe3dff90111513d199f9f36e1c761705a608011ea6ed55751755e8e6050064cc2ed2f49daed0877a4770c98383ec99f888d84f155263685cfba73418985e989a876e78dd3d55f7b8468b568a4dbfa087adf1b9721a6f2779f54cde5587e92bb83a3ab22dbe4ba671d13e52923b585a3230d75b2057ba23cd17a9474dd24f3bbd14a12e7de4b8ee8d827b2919c8e0261c05a0187e92c2ba0cde504e2731129255f37d779552e1508a5c9aa80898edf44f74b4f115d579f63223f22bf835fc99559a161d9a33c59f8c21c5ce4f4570bb792639855ec70af5f5b3"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x99768977e13fe0aa, 0x0, 0x4, 0xfffa, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "a7919edbfe379ca51b235dc3f88bb961"}, @ptm_cap={0x3}]}, 0x3, [{0xf4, &(0x7f0000000240)=@string={0xf4, 0x3, "91585550b72a0ee002c9d715b07e31300fe86dca0d6973d7880421e48b1bcde1c49bd56639b6984ca226da8fdf41de805a53e8e0d3039383f710cb85e2bdbdcb6ae0683f6b0b31c0ca6e0ffba7b121a47fcd134b4a229799ad90d912895612dcc277aff4c973a434fb7e92a8f50f4ef88e15b272abd5d3156d95f57390e81519e317813d2666bdfdbf6f72b8772b8b6c3bef6a0f0c353c45e9e2a617cb1e3453947955724072685524db75fa938b909194d196269b7a95bf52310711304f16295455de50085be2082ce1c6fed0b8c894ce8aa4bf610ad7f5b28c3734d40e51a2a48e68b6eea5d88075a3c03fa93d34a00f96"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x300a}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="0400b4f1", 0x4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) 1m58.993023397s ago: executing program 0 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000480), 0x18}, 0x20) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) utimes(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x10c, 0x10, 0x7, 0x0, 0x25dfdbfb, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0={0xfc, 0x0, '\x00', 0x4}, {0x5, 0x0, 0x2, 0x0, 0x80000000, 0x0, 0x2}, {0x0, 0xffffffff, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e21, @in=@private=0xa010101}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x400c810}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) getegid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xc4062, &(0x7f00000000c0)={[{}]}) 1m58.085764084s ago: executing program 0 (id=513): io_uring_setup(0x2623, &(0x7f00000001c0)={0x0, 0x45f8, 0x21, 0x0, 0x192}) socket(0x1f, 0x80000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = syz_io_uring_setup(0x47d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r1, 0x0, &(0x7f0000000480)="01337fb6e4d13e8156d967bb59bdb6c0a2eb176b9f5b1c518645c8aaaa871cd0efd7c92fe869565b9c6e9785b01aef7d9f33be52b44f9eefaca1147111c40419c7b60b3e1a1bab2b27af9b54f9721e57578888c6435c333d5dfebf54b865c23e381b6f446ff2ca3d60e9b4f67bdb370622a57e916bd0a2b3b62dbf2c188f2092dbd103f1d15ed964f3b5e1f45c2566f07c66e48617dfab010458d1edc41b6e07", 0xa0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x1f, 0x3fffe, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8005}}, 0x50) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) write$FUSE_GETXATTR(r7, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r8, {0x2d0}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 1m42.92819794s ago: executing program 33 (id=513): io_uring_setup(0x2623, &(0x7f00000001c0)={0x0, 0x45f8, 0x21, 0x0, 0x192}) socket(0x1f, 0x80000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = syz_io_uring_setup(0x47d1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r1, 0x0, &(0x7f0000000480)="01337fb6e4d13e8156d967bb59bdb6c0a2eb176b9f5b1c518645c8aaaa871cd0efd7c92fe869565b9c6e9785b01aef7d9f33be52b44f9eefaca1147111c40419c7b60b3e1a1bab2b27af9b54f9721e57578888c6435c333d5dfebf54b865c23e381b6f446ff2ca3d60e9b4f67bdb370622a57e916bd0a2b3b62dbf2c188f2092dbd103f1d15ed964f3b5e1f45c2566f07c66e48617dfab010458d1edc41b6e07", 0xa0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f000000a280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0xfffffffffffffff5, r8, {0x7, 0x1f, 0x3fffe, 0x1, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8005}}, 0x50) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) write$FUSE_GETXATTR(r7, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, r8, {0x2d0}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) 11.068407455s ago: executing program 3 (id=852): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000580)={0x0, 0xd446, 0x10000, 0x3, 0x286}, &(0x7f0000000340), &(0x7f0000000280)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_to_bridge\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000020601088fed00001d0000000000000005000400000000002600020073797a31000000001400078005001500020000000900124000000000fb0005000af1ff00050001000625450073970e81aaa65ac33f72daa8a0f64a5e2459"], 0x64}}, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000200)=[0x8eb, 0x81], 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 10.62694107s ago: executing program 6 (id=854): set_mempolicy(0x2, 0x0, 0xf5) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x22402, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) syz_clone(0x42280280, 0x0, 0x0, 0x0, 0x0, 0x0) read(r2, &(0x7f0000019080)=""/211, 0xd3) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$sndctrl(0x0, 0x2, 0x141240) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480)=0x40003, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000019180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES32=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000002000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006c617374000000000c00028008000140000000060900010073797a30000000000900020073797a320000000014000000110001c98c8254a599c1000000000000"], 0x74}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d80)=""/166, 0xa6}], 0x1}, 0x1}], 0x1, 0x40002122, 0x0) socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4000000}, 0xc) getsockopt$netlink(r6, 0x10e, 0x9, &(0x7f0000001100)=""/4096, &(0x7f0000000040)=0x1000) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 10.581174095s ago: executing program 3 (id=856): r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0xc) socket$kcm(0x29, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/zoneinfo\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006140)={0x2020}, 0x2020) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="000000002000020005000000"], 0x24}}, 0x20000010) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 9.107953495s ago: executing program 6 (id=864): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000c1c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, &(0x7f00000003c0)={0x0, 0x2, 0x2, {0x2, 0x38}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000004618000000000001090224000100000064090400000103000300092100000001220700090581030004200004"], 0x0) r2 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x69, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0x80, {0x9, 0x21, 0xd, 0x2, 0x1, {0x22, 0xba}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xb, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xf9, 0xff, 0xfe}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xf9, 0x0, 0x7f, 0x8, 0x7}, 0x59, &(0x7f0000000100)={0x5, 0xf, 0x59, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x6, 0x9, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x400, 0x1e000, 0x0, [0x3f00]}, @generic={0x1c, 0x10, 0x2, "418e7b9fa7ceb9e0cc3eefadc3646d76dcfd47b93a5bd44701"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "e5c069eaceae8a11d279263d040cad7b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x7, 0x1a}]}, 0x2, [{0xd5, &(0x7f00000001c0)=@string={0xd5, 0x3, "41425748564ba2ecd559c5b7fbc7b9be33d93d683d5a9e5812df061f2990c98f9d7f5a503053486bfb3b9e86b8650ca7f9e0f36b68b7ae558ce465cddc22850e4e299f865e9c33ee828ee0b174a0fbdc887b0cc3c2062bf107d5df7733c95da17bcc3054d7ee72bb139eb2b42867cf50470deedce94409c8454906bdf8dd727f054b3ba2409b937be4ab199c391901078b39988a5d65f01be2a68f0d893f691343f3cbf619b3037128b51dac4af1339d155b7a0af6f823e8b3ec4bee5c3ac3b501fe99816d8c4988fbc9936cd36444e5664956"}}, {0xa6, &(0x7f00000002c0)=@string={0xa6, 0x3, "5e32a5d2b3526619e31a980e56820fd932bbd430227c8c11ddf759120a6ff6459e90ef55e366b11ca75429fab458daa6e8726dd73622e05db0d0000d9cab2e6f21437101f85a14e00ce5aae73a9bd7237deb767cac132fa074a9ba2041a02fc01615960d3ebaed208093207294fa12a99b2ad6182f7f9c0d0e971aab96da38bd6e8c56c31f90f7feecf6882a0f6e3f8b5c6f5fc08aa89c9485a4e99dedf275b951cf5fc5"}}]}) syz_usb_control_io$hid(r2, &(0x7f0000000600)={0x24, &(0x7f00000003c0)={0x20, 0x7, 0xe9, {0xe9, 0x23, "b6d438fda21776299fca1de8d0993e61fc5abbc4c11982ba675922fa9adb40bc13b17a68a0ac1a34eea002e6043ccdb3456823f24cfbf7e81983177db1f267f77f04627ffc357d06c4edcf8b9bcc2da8094bb4a17a081abf5d5f741211dacf9c9254724edf98b82aac41bcb5dfa0b3959502cfc1670148144f1976d4ac568a95b87553ffa85fc93eabc6e4e544cb26adfd5556e689446945f85c19afbf36a3dc90a8a386a5d207fd49f5d35033ac22244d93d19091429997e252da4a3c53d54eae992dd2614d83cfc201d01b5a4f51ef6301e17c2492c7510dbee649b631c534f168690d989e3b"}}, &(0x7f00000004c0)={0x0, 0x3, 0x9d, @string={0x9d, 0x3, "2b3204ff3ace403be0b48c6de57eddb03ed33d2c9f6ab8d600e1cc5ef4ab2eb5df22ebb5b114706cec25a656db136a19c559154a24be61e7b5c9ef61329b227f9c16a77011eba0ed24b34bcce91607d2364c49bc8f2fac2cbb9244fea6116189fcb73ea399bf9ff6fbe1e197a2fe07d1922605c63366b1a5bd5cafa9cce69fde2555ce9b93ab0775c0074ed5d6f733ef53f4fb2da08bfbf3aa1aed"}}, &(0x7f0000000580)={0x0, 0x22, 0x12, {[@global=@item_012={0x2, 0x1, 0x1, "029c"}, @local=@item_012={0x0, 0x2, 0x7}, @local=@item_012={0x2, 0x2, 0xa, "e93b"}, @local, @main=@item_4={0x3, 0x0, 0x9, "1fc682e5"}, @local=@item_4={0x3, 0x2, 0x0, "2131ee7a"}]}}, &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x100, 0x6, 0x1, {0x22, 0x858}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000640)={0x40, 0x15, 0x92, "c94967d3c7559bdcad6e8c3f8d8a8315b8229219bbe6d4ec2540dafe0151f64b9aaca06cfe30d2f4b0c09a7d61712bb8e48e73483bc4763d964c8b4c2dda787b69756b0a6905bce23f5a93feed432428b0ebda37b7044000445d0361593ef31310458eade1306f804cbdb7da0114b3b91309d6e2354b12e2f477d2bd420d710b8061c0e7d86ad0870220ee2a72bf3f171703"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000740)={0x0, 0x8, 0x1}, &(0x7f0000000780)={0x20, 0x1, 0x2e, "3c76d9dd382b21a74196c37e47eea20307171929062df1a5d42879a5ffd206aaed4a7a09c6f5f8531dc8a1e4d995"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x9}}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000180)={0x40, 0x6, 0x8, {0x8, 0xd, "3d91419da546"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 8.009898008s ago: executing program 5 (id=865): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000180)={0x2000000008, 0x100000b}, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000340)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x4, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x7dc05000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 7.879893606s ago: executing program 2 (id=867): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0x700}, 0x0) 7.861430207s ago: executing program 4 (id=868): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x300, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x2, 0x1}]}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r3, 0x10e, 0x9, 0x0, &(0x7f0000000040)=0xd) pread64(r2, &(0x7f0000000200)=""/102400, 0x19000, 0x8000000000000000) write$snddsp(r2, &(0x7f00000003c0)="c942bde4bef5843809351af4f2cbb6555fa01a66edfc6e6f4dfe5025604f005c5c675944dfc7a254a549cb8d4a9de47bee28f544945b47331060f98b5cc8086dc24b12db4412c45e4ca6c95e73bd111e39723f9168f5dc92f9e7ece872f50891efa8e71a46a192ffa463b921f9e59c1880b26bb2575dea9fd274ab5cefd59bc3abd22efe4062ed61bfe14487c61d40491f474cbf0fefda8015ee6944e9a92eda4a6c5f5060254bc76b9d2c7acbc4722e5d77091c05933932cfc230283108820168d3c84307bc2f3b09a773b03f9e1764f606e93a1f61f1512bd5751367a2551b48d6f8971b1f2e69750f1ca23f465921f6c479719172", 0xf6) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x10201, 0x1, 0xd000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, &(0x7f0000000080), 0x0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800600060090390000100002800c0003000800"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) 7.79608558s ago: executing program 3 (id=869): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) getpid() write$P9_RGETLOCK(r1, &(0x7f0000000300)=ANY=[], 0x22) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) 6.829334221s ago: executing program 2 (id=870): mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000480)={0x15, 0x110, 0xfa00, {r3, 0x4, 0x0, 0x0, 0x0, @ib={0x1b, 0x48a3, 0xf5, {"123e6b09b8fc7db28d1b5c7c790e9851"}, 0xe2d6, 0x708, 0xfffffffffffffffa}, @in={0x2, 0x4e24, @loopback}}}, 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x7, &(0x7f0000000280)={0x21, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000005c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@getchain={0x5c, 0x66, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3, 0xa}, {0xfff3, 0xc}, {0xb, 0xfff1}}, [{0x8, 0xb, 0x80}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x80}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xd09}, {0x8, 0xb, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004805}, 0x10) ioctl$TCSETA(r4, 0x8925, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000000180)={0x8000000}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/../file0\x00', &(0x7f0000000200)={0x642, 0x10, 0x4}, 0x18) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r9, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) r10 = socket(0x23, 0x2, 0x0) sendto$isdn(r10, 0x0, 0x0, 0x80, &(0x7f0000000700)={0x22, 0x9, 0x3, 0x7f, 0x4}, 0x6) 6.66938169s ago: executing program 4 (id=871): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000180)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x14, &(0x7f0000000300)={0x23, 0x5, 0x7}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="850b010000000000140003006d6163736563300000000000000000000a000100aaaaaaaaaaaa0000d2ddf2b8b5b127"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 6.425702516s ago: executing program 5 (id=872): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') socket$kcm(0x10, 0x2, 0x0) pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb0300050000000000"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000700)={0x0, 0x65}, &(0x7f0000000740)=0x8) r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r4, 0x400, 0x0) mq_open(&(0x7f00000005c0)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xbb\r\xf1\xc7\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85\xd1\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xc3V\x88\xd1\x1f\xc8\x94\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) mq_open(&(0x7f0000000180)='$@\x00', 0x842, 0x121, 0x0) setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000080)=0x7, 0x4) r5 = socket$inet(0x2, 0x3, 0x6) dup3(r3, r5, 0x0) unshare(0x28000600) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='#(:.', 0x0) unshare(0x26020400) 6.425052748s ago: executing program 3 (id=873): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x3) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLCREATE(r1, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0x2, 0x2, 0x4}}}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000001c00010029bd7000fedbdf250a020000", @ANYRES16, @ANYBLOB="0000420305000c0001"], 0x90}, 0x1, 0x0, 0x0, 0xc051}, 0x44040) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000240), 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r3, 0x80047458, &(0x7f00000019c0)) 5.775492827s ago: executing program 3 (id=874): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="50020000", @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed0000040008"], 0x250}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1, 0x8c0}}}, 0x88) write(r0, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) 5.647857133s ago: executing program 4 (id=875): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000300)=""/224, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1184, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r3, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x80) 5.317523506s ago: executing program 2 (id=876): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000200)=0x8001100) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) 4.305808802s ago: executing program 2 (id=877): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) (async) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) (async) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) (async) read$qrtrtun(r3, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) (async) setxattr$incfs_metadata(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x4, &(0x7f0000000c00)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) (async) lsm_get_self_attr(0x66, &(0x7f0000000240)={0x0, 0x0, 0xab, 0x8b, ""/139}, &(0x7f0000000040)=0xab, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%pS \x00'}, 0x20) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r6], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"/307], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r7}, 0x4) (async, rerun: 32) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={&(0x7f0000000780)="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", &(0x7f0000000700)=""/83, &(0x7f0000000600), &(0x7f0000000400)="c9e14e4abdfeb5e71ad623e84919ed528d34b06fce16d7e0146f211e69364d", 0x4, 0xffffffffffffffff, 0x4}, 0x38) (rerun: 32) 3.671607851s ago: executing program 6 (id=878): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000580)={0x0, 0xd446, 0x10000, 0x3, 0x286}, &(0x7f0000000340), &(0x7f0000000280)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_to_bridge\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000020601088fed00001d0000000000000005000400000000002600020073797a31000000001400078005001500020000000900124000000000fb0005000af1ff00050001000625450073970e81aaa65ac33f72daa8a0f64a5e2459"], 0x64}}, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000200)=[0x8eb, 0x81], 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.340234447s ago: executing program 2 (id=879): syz_io_uring_setup(0x53b3, &(0x7f0000000440)={0x0, 0x7ed8, 0x2100, 0x0, 0xa00000}, &(0x7f00000003c0), &(0x7f0000000080)) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1000) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x3000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeefa000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x5, 0xc5]}) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x96}, {0xf6, "763581a0f46f9c3c"}}}}, 0xf) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00222200000096010004c93e03031b4208530000000000000000006ce708e9e9ecc6f2a76f606114b95d997726974a58243df64cad798f4449b75068a95f1ff0f797feb47a7cdcb009405c"], 0x0}, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000000200002808"]) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x8c400, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0x0, 0x0, 0xffffffffffffff88) io_setup(0xffff0bc2, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, 0x0) syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x26, 0x0, @fd_index, 0x0, &(0x7f0000000040)}) 3.230557463s ago: executing program 6 (id=880): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f9471633078", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = dup(r1) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}], 0x1, 0x0, 0x0, 0xf5}}], 0x1, 0x0) 2.955767439s ago: executing program 6 (id=881): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000040), &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x38, r1, 0xeeeeeeee}) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000001140)={0x1000, &(0x7f00000011c0)="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"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r3 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x37}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 2.888808436s ago: executing program 5 (id=882): socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) getpid() mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bdev\x00', 0x1a0408, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)=""/163, 0xa3) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = accept4$rose(r1, &(0x7f0000000240)=@full={0xb, @dev, @netrom, 0x0, [@remote, @rose, @bcast, @null, @netrom, @rose]}, &(0x7f0000000280)=0x40, 0x400) bind$rose(r2, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000), 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) socket(0x200000000000011, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89ff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 2.784691999s ago: executing program 6 (id=883): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pselect6(0x40, &(0x7f0000001780)={0x4, 0x8000000000000001, 0x6, 0x1, 0x5, 0x1, 0x3, 0xfbad}, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x8000, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) chdir(0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000400), 0xd, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000000c0)=0x2) r4 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r4, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x101000) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000140)={0x10}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2000000fc) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.819241972s ago: executing program 4 (id=884): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0x3) pipe2(&(0x7f0000001040), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="900000001c00010029bd7000fedbdf250a020000", @ANYRES16=r1, @ANYBLOB="0000420305000c0001"], 0x90}, 0x1, 0x0, 0x0, 0xc051}, 0x44040) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000240), 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCGFLAGS1(r3, 0x80047458, &(0x7f00000019c0)) 1.743818399s ago: executing program 5 (id=885): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) (async) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) (async) creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket(0x10, 0x3, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x41) (async) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x4080, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{}], {0x4, 0x5}, [{0x8, 0x5}, {0x8, 0x5}], {0x10, 0x6}, {0x20, 0x1}}, 0x3c, 0x0) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="40012e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.652031502s ago: executing program 4 (id=886): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$evdev(&(0x7f0000000140), 0xffffffffffffff81, 0x20080) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f00000055c0)=0x4) 1.552981796s ago: executing program 3 (id=887): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000180)={0xc, r1}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x3) ioctl$VT_ACTIVATE(r5, 0x5606, 0x4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r6, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, 0x0) keyctl$clear(0x7, r7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x6}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x5b20}]}}]}, 0x50}}, 0x4000810) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x8000000000000400}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r1, r1, 0x7fffffffffffffff, 0xfffffffffffffffe}) 1.499925115s ago: executing program 5 (id=888): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40102) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x40e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x280, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x254, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x234, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x4009, 0x7, 0x40, 0x80}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x7fffffff}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x9, 0x10, 0x5, 0x5}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x8, 0xfffffffd, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x10001, 0x7, 0xc841, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x6, 0x0, 0x8, 0x7}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x7, 0x7ff, 0x5, 0xc7}, {0x6, 0x8, 0x2, 0x1}, {0x7, 0x2, 0x5, 0x2}, {0xaa4, 0x406, 0x2, 0x127c}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x10, 0xb, 0xfff, 0x9}, {0x3, 0x7, 0x200, 0x1}, {0x4, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x5, 0x7fff, 0x3, 0x438}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0xfffffffc, 0x9, 0x40, 0x7}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x2, 0xfffffffb}]}}]}}]}, 0x280}}, 0x24040084) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f00000009c0)={0xf, {"a2e3ad214fc752f90b5e09094bf70e0dd038e7ff7fc6e5539b1b48078b089b3b0838721a0890e0878f0e1ac6e7049b3d6c959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d07420736cd3b78130daa61d8e809ea889b5807ff7f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e2c5070000179c6f30e065cd5b91cd0ae17d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3bb469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918070000003f0000000c558cdc0a3621c56cea8d20fa911afe40db6ebe8cac64289fd3da232f1b5dbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860421c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2f09000000000000007747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847354b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d483d4675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516ab68032f88c042ffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d95f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9d1a3d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdfa1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442748af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000001c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500", 0x1009}}, 0x1006) 324.312773ms ago: executing program 5 (id=889): socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) getpid() write$P9_RGETLOCK(r1, &(0x7f0000000300)=ANY=[], 0x22) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) 285.304598ms ago: executing program 4 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000004340)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_emit_ethernet(0xca, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000bc0000000000019078ac1e0001ac1414bb0800907800000000480000000000000000110000ac1414aaac1414aa00000dee0dd9de36ed4bcc5b4e23440c00030000000000000000890f00e0000001ffffffffffffffff444c0001ac1e00010000000000000000000000000000000000000000ac1414aa000000007f000001000000000000000000000000ac1e000100000000ffffffff00000000ffffffff00000000441400"/202], 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r1, 0x30d, 0x70bd28}, 0x14}}, 0x0) 0s ago: executing program 2 (id=891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r3, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) (fail_nth: 8) kernel console output (not intermixed with test programs): b 5-1: USB disconnect, device number 10 [ 189.954789][ T30] audit: type=1400 audit(1755039308.822:485): avc: denied { unmount } for pid=5842 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 190.120837][ T1207] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 190.209472][ T7696] delete_channel: no stack [ 190.399893][ T1207] usb 3-1: device descriptor read/8, error -71 [ 190.435199][ T6584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.464451][ T6584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.485017][ T6584] bond0 (unregistering): Released all slaves [ 190.514890][ T1207] usb usb3-port1: unable to enumerate USB device [ 190.521280][ T5892] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 190.752112][ T7701] trusted_key: syz.0.445 sent an empty control message without MSG_MORE. [ 190.772791][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 190.787279][ T5892] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 190.826574][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.891773][ T5892] pvrusb2: Hardware description: Terratec Grabster AV400 [ 190.911999][ T5892] pvrusb2: ********** [ 190.918817][ T5892] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 190.929767][ T5892] pvrusb2: Important functionality might not be entirely working. [ 190.937869][ T5892] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 190.950194][ T5892] pvrusb2: ********** [ 191.122007][ T2336] pvrusb2: Invalid write control endpoint [ 191.246011][ T6584] hsr_slave_0: left promiscuous mode [ 191.269281][ T2336] pvrusb2: Invalid write control endpoint [ 191.281119][ T6584] hsr_slave_1: left promiscuous mode [ 191.287413][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.299360][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 191.315648][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.327915][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 191.335701][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 191.345811][ T2336] pvrusb2: Device being rendered inoperable [ 191.352240][ T7694] pvrusb2: Attempted to execute control transfer when device not ok [ 191.365480][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 191.366659][ T5892] usb 5-1: USB disconnect, device number 11 [ 191.437223][ T6584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.460871][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 191.503113][ T2336] pvrusb2: Attached sub-driver cx25840 [ 191.517004][ T6584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.531583][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 191.595002][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 191.607686][ T6584] veth1_macvtap: left promiscuous mode [ 191.613843][ T6584] veth0_macvtap: left promiscuous mode [ 191.619550][ T6584] veth1_vlan: left promiscuous mode [ 191.626789][ T6584] veth0_vlan: left promiscuous mode [ 191.693062][ T30] audit: type=1400 audit(1755039310.552:486): avc: denied { bind } for pid=7716 comm="syz.2.447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 192.499382][ T7733] IPVS: length: 37 != 8 [ 193.239952][ T6584] team0 (unregistering): Port device team_slave_1 removed [ 193.395149][ T6584] team0 (unregistering): Port device team_slave_0 removed [ 193.455898][ T5912] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 193.610773][ T5912] usb 5-1: device descriptor read/64, error -71 [ 193.663110][ T7729] geneve1: entered allmulticast mode [ 193.833605][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.839926][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.843134][ T30] audit: type=1400 audit(1755039312.712:487): avc: denied { write } for pid=7748 comm="syz.5.453" lport=43129 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 193.871054][ T5912] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 194.090901][ T5912] usb 5-1: device descriptor read/64, error -71 [ 194.367422][ T5912] usb usb5-port1: attempt power cycle [ 194.782850][ T7762] evm: overlay not supported [ 194.850728][ T5912] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 195.492248][ T5912] usb 5-1: device descriptor read/8, error -71 [ 195.716331][ T30] audit: type=1400 audit(1755039314.582:488): avc: denied { mount } for pid=7784 comm="syz.2.459" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 195.744060][ T5912] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 195.755683][ T30] audit: type=1400 audit(1755039314.622:489): avc: denied { mounton } for pid=7784 comm="syz.2.459" path="/89/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 195.780564][ T30] audit: type=1400 audit(1755039314.622:490): avc: denied { read } for pid=7784 comm="syz.2.459" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 195.781478][ T5912] usb 5-1: device descriptor read/8, error -71 [ 195.804798][ T30] audit: type=1400 audit(1755039314.622:491): avc: denied { open } for pid=7784 comm="syz.2.459" path="/89/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 195.836580][ T30] audit: type=1400 audit(1755039314.622:492): avc: denied { read } for pid=7784 comm="syz.2.459" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 195.881954][ T30] audit: type=1400 audit(1755039314.622:493): avc: denied { read } for pid=7784 comm="syz.2.459" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 195.984487][ T5912] usb usb5-port1: unable to enumerate USB device [ 196.189054][ T30] audit: type=1400 audit(1755039314.962:494): avc: denied { accept } for pid=7784 comm="syz.2.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 196.389728][ T5856] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 196.618046][ T30] audit: type=1400 audit(1755039315.482:495): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 196.732498][ T30] audit: type=1400 audit(1755039315.602:496): avc: denied { block_suspend } for pid=7811 comm="syz.0.465" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 197.010788][ T5912] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 197.291207][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 197.366758][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12288, setting to 1024 [ 197.368069][ T30] audit: type=1326 audit(1755039316.192:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7822 comm="syz.4.469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f288678ebe9 code=0x7ffc0000 [ 197.497597][ T5912] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 197.642378][ T5912] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 197.654218][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 197.667768][ T5912] usb 3-1: Product: syz [ 197.672886][ T5912] usb 3-1: Manufacturer: syz [ 197.677602][ T5912] usb 3-1: SerialNumber: syz [ 197.693910][ T7832] netlink: 48 bytes leftover after parsing attributes in process `syz.4.470'. [ 197.734629][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.783034][ T5912] usb 3-1: config 0 descriptor?? [ 198.139907][ T5939] usb 3-1: USB disconnect, device number 28 [ 198.480330][ T7863] netlink: 332 bytes leftover after parsing attributes in process `syz.4.475'. [ 198.978910][ T7874] Invalid option length (241) for dns_resolver key [ 199.377927][ T7887] netlink: 'syz.3.477': attribute type 10 has an invalid length. [ 199.740966][ T7888] netlink: 32 bytes leftover after parsing attributes in process `syz.0.478'. [ 199.751311][ T7888] netlink: 'syz.0.478': attribute type 1 has an invalid length. [ 200.313952][ T7897] FAULT_INJECTION: forcing a failure. [ 200.313952][ T7897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.409302][ T7894] 9pnet_fd: Insufficient options for proto=fd [ 200.670733][ T7897] CPU: 0 UID: 0 PID: 7897 Comm: syz.3.480 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 200.670752][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.670761][ T7897] Call Trace: [ 200.670765][ T7897] [ 200.670769][ T7897] dump_stack_lvl+0x16c/0x1f0 [ 200.670784][ T7897] should_fail_ex+0x512/0x640 [ 200.670803][ T7897] strncpy_from_user+0x3b/0x2e0 [ 200.670823][ T7897] getname_flags.part.0+0x8f/0x550 [ 200.670848][ T7897] getname_flags+0x93/0xf0 [ 200.670859][ T7897] user_path_at+0x24/0x60 [ 200.670870][ T7897] __x64_sys_mount+0x1fc/0x310 [ 200.670885][ T7897] ? __pfx___x64_sys_mount+0x10/0x10 [ 200.670902][ T7897] do_syscall_64+0xcd/0x4c0 [ 200.670915][ T7897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.670926][ T7897] RIP: 0033:0x7f863498ebe9 [ 200.670934][ T7897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.670944][ T7897] RSP: 002b:00007f86357ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.670955][ T7897] RAX: ffffffffffffffda RBX: 00007f8634bb5fa0 RCX: 00007f863498ebe9 [ 200.670961][ T7897] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 200.670967][ T7897] RBP: 00007f86357ce090 R08: 00002000000004c0 R09: 0000000000000000 [ 200.670973][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.670979][ T7897] R13: 00007f8634bb6038 R14: 00007f8634bb5fa0 R15: 00007ffda61e51b8 [ 200.670993][ T7897] [ 201.760664][ T7912] tipc: Enabled bearer , priority 0 [ 201.804785][ T7912] syzkaller0: entered promiscuous mode [ 201.810320][ T7912] syzkaller0: entered allmulticast mode [ 201.943536][ T7912] UHID_CREATE from different security context by process 327 (syz.4.485), this is not allowed. [ 202.031072][ T5892] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 202.193769][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 202.285417][ T5892] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 202.303906][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.312291][ T7909] tipc: Resetting bearer [ 202.361585][ T7909] tipc: Disabling bearer [ 202.392330][ T5892] pvrusb2: Hardware description: Terratec Grabster AV400 [ 202.413782][ T5892] pvrusb2: ********** [ 202.426465][ T5892] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 202.460264][ T5892] pvrusb2: Important functionality might not be entirely working. [ 202.526916][ T5892] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 202.550874][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 202.550890][ T30] audit: type=1400 audit(1755039321.412:510): avc: denied { write } for pid=7926 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 202.632281][ T5892] pvrusb2: ********** [ 202.719038][ T2336] pvrusb2: Invalid write control endpoint [ 202.862482][ T7934] delete_channel: no stack [ 203.078454][ T30] audit: type=1400 audit(1755039321.792:511): avc: denied { append } for pid=7900 comm="syz.3.483" name="i2c-1" dev="devtmpfs" ino=3005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.764030][ T2336] pvrusb2: Invalid write control endpoint [ 203.788951][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 203.811781][ T5939] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 203.814829][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 203.834814][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 203.846181][ T2336] pvrusb2: Device being rendered inoperable [ 203.859800][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 203.871269][ T5905] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 203.878119][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 203.903526][ T2336] pvrusb2: Attached sub-driver cx25840 [ 203.915649][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 203.926206][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 204.020775][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 204.037381][ T1207] usb 4-1: USB disconnect, device number 15 [ 204.067743][ T5905] usb 6-1: Using ep0 maxpacket: 8 [ 204.079068][ T5939] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 204.113158][ T5905] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 204.128820][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.149589][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.193093][ T5939] pvrusb2: Hardware description: Terratec Grabster AV400 [ 204.232168][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 204.239837][ T5939] pvrusb2: ********** [ 204.249418][ T5939] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 204.269748][ T5905] pvrusb2: ********** [ 204.278861][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 204.296078][ T5939] pvrusb2: Important functionality might not be entirely working. [ 204.328613][ T5905] pvrusb2: Important functionality might not be entirely working. [ 204.339612][ T5939] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 204.369240][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 204.410520][ T5939] pvrusb2: ********** [ 204.452764][ T2336] pvrusb2: Invalid write control endpoint [ 204.458733][ T5905] pvrusb2: ********** [ 204.588305][ T7958] netlink: 188 bytes leftover after parsing attributes in process `syz.4.495'. [ 204.617993][ T30] audit: type=1400 audit(1755039323.482:512): avc: denied { map } for pid=7955 comm="syz.4.495" path="/103" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 204.837418][ T7931] pvrusb2: Invalid write control endpoint [ 204.848681][ T1207] usb 3-1: USB disconnect, device number 29 [ 204.850439][ T2336] pvrusb2: Invalid write control endpoint [ 204.866709][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 204.876110][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 204.883876][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 204.902551][ T2336] pvrusb2: Device being rendered inoperable [ 204.909256][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 204.938528][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 204.955816][ T2336] pvrusb2: Attached sub-driver cx25840 [ 204.986209][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 204.988988][ T30] audit: type=1400 audit(1755039323.482:513): avc: denied { execute } for pid=7955 comm="syz.4.495" path="/103" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 205.035366][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 205.071642][ T2336] pvrusb2: Invalid write control endpoint [ 205.268582][ T2336] pvrusb2: Invalid write control endpoint [ 205.326787][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 205.386188][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 205.430825][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 205.752913][ T2336] pvrusb2: Device being rendered inoperable [ 205.790856][ T5939] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 205.818651][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 205.864228][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 205.878705][ T2336] pvrusb2: Attached sub-driver cx25840 [ 205.897144][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 205.909922][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 205.982173][ T5939] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 206.030227][ T5939] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 206.056186][ T5939] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 206.094887][ T5939] usb 5-1: config 220 has no interface number 2 [ 206.114054][ T5939] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 206.149380][ T5939] usb 5-1: config 220 interface 0 has no altsetting 0 [ 206.173449][ T1207] usb 6-1: USB disconnect, device number 18 [ 206.220566][ T5939] usb 5-1: config 220 interface 76 has no altsetting 0 [ 206.274580][ T5939] usb 5-1: config 220 interface 1 has no altsetting 0 [ 206.321071][ T5939] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 206.336869][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.358009][ T5939] usb 5-1: Product: syz [ 206.364899][ T5939] usb 5-1: Manufacturer: syz [ 206.417730][ T5939] usb 5-1: SerialNumber: syz [ 206.500915][ T6018] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 206.540703][ T1207] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 206.662249][ T5939] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 206.668945][ T5939] usb 5-1: No valid video chain found. [ 206.672337][ T6018] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.679311][ T5939] usb 5-1: selecting invalid altsetting 0 [ 206.697936][ T1207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.705913][ T5939] usb 5-1: selecting invalid altsetting 0 [ 206.710843][ T6018] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 206.721154][ T5939] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 206.724567][ T1207] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.746541][ T6018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.756675][ T5939] usb 5-1: USB disconnect, device number 16 [ 206.759615][ T6018] usb 1-1: config 0 descriptor?? [ 206.775316][ T5912] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 206.785748][ T1207] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 206.801593][ T1207] usb 6-1: New USB device found, idVendor=1079, idProduct=0011, bcdDevice= 0.00 [ 206.813467][ T6018] pwc: Askey VC010 type 2 USB webcam detected. [ 206.821417][ T1207] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.833816][ T1207] usb 6-1: config 0 descriptor?? [ 206.953933][ T5912] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 206.963791][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.972177][ T5912] usb 4-1: Product: syz [ 206.976414][ T5912] usb 4-1: Manufacturer: syz [ 206.981304][ T5912] usb 4-1: SerialNumber: syz [ 206.987367][ T5912] usb 4-1: config 0 descriptor?? [ 207.220999][ T6018] pwc: recv_control_msg error -32 req 02 val 2b00 [ 207.258477][ T6018] pwc: recv_control_msg error -32 req 02 val 2700 [ 207.317201][ T5912] usb 4-1: USB disconnect, device number 16 [ 207.373929][ T1207] hid (null): invalid report_count -326368751 [ 207.406577][ T6018] pwc: recv_control_msg error -32 req 02 val 2c00 [ 207.484152][ T6018] pwc: recv_control_msg error -32 req 04 val 1000 [ 207.533261][ T1207] hid-generic 0003:1079:0011.000A: invalid report_count -326368751 [ 207.556423][ T6018] pwc: recv_control_msg error -32 req 04 val 1300 [ 207.566435][ T1207] hid-generic 0003:1079:0011.000A: item 0 4 1 9 parsing failed [ 207.578004][ T1207] hid-generic 0003:1079:0011.000A: probe with driver hid-generic failed with error -22 [ 207.776783][ T6018] pwc: recv_control_msg error -71 req 02 val 2000 [ 207.797907][ T6018] pwc: recv_control_msg error -71 req 02 val 2100 [ 207.815868][ T6018] pwc: recv_control_msg error -71 req 04 val 1500 [ 207.823338][ T6018] pwc: recv_control_msg error -71 req 02 val 2500 [ 207.843198][ T6018] pwc: recv_control_msg error -71 req 02 val 2400 [ 207.862015][ T6018] pwc: recv_control_msg error -71 req 02 val 2600 [ 207.899816][ T6018] pwc: recv_control_msg error -71 req 02 val 2900 [ 207.918459][ T6018] pwc: recv_control_msg error -71 req 02 val 2800 [ 207.931282][ T6018] pwc: recv_control_msg error -71 req 04 val 1100 [ 207.947193][ T6018] pwc: recv_control_msg error -71 req 04 val 1200 [ 207.989244][ T6018] pwc: Registered as video103. [ 208.014731][ T6018] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 208.067232][ T6018] usb 1-1: USB disconnect, device number 16 [ 208.449454][ T30] audit: type=1326 audit(1755039327.312:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8033 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981cb8ebe9 code=0x7ffc0000 [ 208.485386][ T30] audit: type=1326 audit(1755039327.312:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8033 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981cb8ebe9 code=0x7ffc0000 [ 208.508985][ T5841] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 208.544885][ T30] audit: type=1326 audit(1755039327.392:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8033 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f981cb8ebe9 code=0x7ffc0000 [ 208.568402][ T30] audit: type=1326 audit(1755039327.392:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8033 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981cb8ebe9 code=0x7ffc0000 [ 208.593246][ T30] audit: type=1326 audit(1755039327.392:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8033 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981cb8ebe9 code=0x7ffc0000 [ 208.618976][ T30] audit: type=1326 audit(1755039327.392:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8033 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f981cb8ebe9 code=0x7ffc0000 [ 208.645577][ T30] audit: type=1326 audit(1755039327.392:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8033 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981cb8ebe9 code=0x7ffc0000 [ 208.672046][ T30] audit: type=1326 audit(1755039327.392:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8033 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981cb8ebe9 code=0x7ffc0000 [ 208.696313][ T30] audit: type=1326 audit(1755039327.392:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8033 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f981cb8ebe9 code=0x7ffc0000 [ 208.720799][ T5841] usb 3-1: device descriptor read/64, error -71 [ 208.723292][ T30] audit: type=1326 audit(1755039327.392:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8033 comm="syz.0.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f981cb8ebe9 code=0x7ffc0000 [ 208.990714][ T5841] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 209.142111][ T8038] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 209.273436][ T5841] usb 3-1: device descriptor read/64, error -71 [ 209.308338][ T6018] usb 6-1: USB disconnect, device number 19 [ 209.356588][ T8043] futex_wake_op: syz.5.514 tries to shift op by -1; fix this program [ 209.412870][ T5841] usb usb3-port1: attempt power cycle [ 209.527180][ T5905] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 209.680766][ T5905] usb 4-1: device descriptor read/64, error -71 [ 209.803414][ T5841] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 210.042758][ T5841] usb 3-1: device descriptor read/8, error -71 [ 210.107501][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.517'. [ 210.124475][ T8053] vlan2: entered allmulticast mode [ 210.129789][ T8053] veth0_to_team: entered allmulticast mode [ 210.250842][ T5905] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 210.290725][ T5841] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 210.331892][ T5841] usb 3-1: device descriptor read/8, error -71 [ 210.356411][ T8057] netlink: 104 bytes leftover after parsing attributes in process `syz.5.519'. [ 210.380731][ T5905] usb 4-1: device descriptor read/64, error -71 [ 210.453682][ T5841] usb usb3-port1: unable to enumerate USB device [ 210.502758][ T5905] usb usb4-port1: attempt power cycle [ 210.941394][ T5905] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 211.601135][ T5905] usb 4-1: device descriptor read/8, error -71 [ 211.973450][ T5905] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 212.381982][ T5905] usb 4-1: device not accepting address 20, error -71 [ 212.382358][ T5905] usb usb4-port1: unable to enumerate USB device [ 212.525886][ T6018] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 212.923226][ T6018] usb 5-1: Using ep0 maxpacket: 8 [ 212.926294][ T6018] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.926327][ T6018] usb 5-1: config 1 interface 0 has no altsetting 0 [ 212.928392][ T6018] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 212.996859][ T6018] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.014714][ T6018] usb 5-1: Product: ᚑ韦ﭰȵ⑵蒆熫蛱ì•î…Šä«é…½ë–¥î¬†éšŠëœ®æ§¥êŠšâ–ºáŠ¸í“…â®é‚‘è³îƒ‚鮱薠㦵ì£ï¸ºç£® [ 213.049641][ T8083] netlink: 188 bytes leftover after parsing attributes in process `syz.3.525'. [ 213.133913][ T6018] usb 5-1: Manufacturer: С [ 213.142074][ T6018] usb 5-1: SerialNumber: 䀊 [ 213.420436][ T6018] usb 5-1: USB disconnect, device number 17 [ 213.892551][ T8098] lo speed is unknown, defaulting to 1000 [ 214.638699][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 214.638714][ T30] audit: type=1400 audit(1755039333.502:543): avc: denied { lock } for pid=8096 comm="syz.2.528" path="socket:[17903]" dev="sockfs" ino=17903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 214.668594][ C0] vkms_vblank_simulate: vblank timer overrun [ 214.683592][ T8102] netlink: 36 bytes leftover after parsing attributes in process `syz.2.528'. [ 216.392920][ T8124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.537951][ T8124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.027093][ T8149] netlink: 248 bytes leftover after parsing attributes in process `syz.5.539'. [ 219.470375][ T30] audit: type=1400 audit(1755039338.332:544): avc: denied { map } for pid=8177 comm="syz.3.546" path="socket:[18108]" dev="sockfs" ino=18108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.583860][ T30] audit: type=1400 audit(1755039338.372:545): avc: denied { accept } for pid=8177 comm="syz.3.546" path="socket:[18108]" dev="sockfs" ino=18108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 219.620707][ T5912] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 219.810843][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 219.838416][ T5912] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 219.962928][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.029751][ T5912] pvrusb2: Hardware description: Terratec Grabster AV400 [ 220.045157][ T5912] pvrusb2: ********** [ 220.049817][ T5912] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 220.203718][ T5912] pvrusb2: Important functionality might not be entirely working. [ 220.211935][ T5912] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 220.252061][ T5912] pvrusb2: ********** [ 221.401632][ T5841] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 221.823208][ T5912] usb 5-1: USB disconnect, device number 18 [ 221.829959][ T5912] pvrusb2: Device being rendered inoperable [ 221.878005][ T5841] usb 6-1: Using ep0 maxpacket: 8 [ 221.908938][ T5841] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 222.260917][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.272324][ T30] audit: type=1400 audit(1755039341.122:546): avc: denied { create } for pid=8224 comm="syz.4.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 222.319314][ T5841] pvrusb2: Hardware description: Terratec Grabster AV400 [ 222.354230][ T30] audit: type=1400 audit(1755039341.172:547): avc: denied { ioctl } for pid=8224 comm="syz.4.552" path="socket:[18151]" dev="sockfs" ino=18151 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 222.358282][ T5841] pvrusb2: ********** [ 222.457710][ T5841] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 222.482584][ T5841] pvrusb2: Important functionality might not be entirely working. [ 222.500821][ T5841] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 222.557335][ T5841] pvrusb2: ********** [ 223.438462][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.557'. [ 223.474713][ T30] audit: type=1400 audit(1755039342.332:548): avc: denied { connect } for pid=8243 comm="syz.4.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 223.696591][ T30] audit: type=1400 audit(1755039342.562:549): avc: denied { map } for pid=8250 comm="syz.2.557" path="socket:[17324]" dev="sockfs" ino=17324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 224.148749][ T5841] usb 6-1: USB disconnect, device number 20 [ 224.164956][ T5841] pvrusb2: Device being rendered inoperable [ 224.210206][ T6018] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 224.397322][ T6018] usb 5-1: Using ep0 maxpacket: 32 [ 224.551702][ T6018] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 224.592742][ T6018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.743847][ T6018] usb 5-1: config 0 descriptor?? [ 224.954710][ T8270] netlink: 104 bytes leftover after parsing attributes in process `syz.2.561'. [ 224.987495][ T6018] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 225.015409][ T6018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.040340][ T6018] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 225.047978][ T6018] usb 5-1: media controller created [ 225.089633][ T6018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.294174][ T5168] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 226.314009][ T5168] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 226.365824][ T5168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 226.379787][ T5168] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 226.389859][ T5168] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.455304][ T8291] lo speed is unknown, defaulting to 1000 [ 226.961429][ T30] audit: type=1400 audit(1755039345.822:550): avc: denied { module_request } for pid=8291 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 227.192475][ T8291] chnl_net:caif_netlink_parms(): no params data found [ 227.245826][ T6018] az6027: usb out operation failed. (-71) [ 227.350817][ T6018] az6027: usb out operation failed. (-71) [ 227.376016][ T6018] stb0899_attach: Driver disabled by Kconfig [ 227.397325][ T6018] az6027: no front-end attached [ 227.397325][ T6018] [ 227.432081][ T6018] az6027: usb out operation failed. (-71) [ 227.458106][ T6018] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 227.495866][ T6018] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 227.562683][ T6018] dvb-usb: schedule remote query interval to 400 msecs. [ 227.569788][ T6018] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 227.582686][ T6018] usb 5-1: USB disconnect, device number 19 [ 227.822104][ T8291] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.859038][ T8291] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.870200][ T6018] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 227.902305][ T8291] bridge_slave_0: entered allmulticast mode [ 228.045734][ T8291] bridge_slave_0: entered promiscuous mode [ 228.298473][ T5841] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 228.450760][ T5168] Bluetooth: hci5: command tx timeout [ 228.508184][ T8291] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.516436][ T8291] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.524011][ T8291] bridge_slave_1: entered allmulticast mode [ 228.530862][ T8291] bridge_slave_1: entered promiscuous mode [ 228.616767][ T8291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.640726][ T6018] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 228.644595][ T8291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.698319][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 228.835632][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 228.852197][ T5841] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 228.868287][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.979895][ T5841] usb 3-1: Product: syz [ 228.998803][ T5841] usb 3-1: Manufacturer: syz [ 229.027380][ T8291] team0: Port device team_slave_0 added [ 229.045642][ T5841] usb 3-1: SerialNumber: syz [ 229.074673][ T8291] team0: Port device team_slave_1 added [ 229.100971][ T6018] usb 5-1: device descriptor read/64, error -71 [ 229.222677][ T5841] usb 3-1: config 0 descriptor?? [ 229.240694][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 229.241978][ T5841] hub 3-1:0.0: bad descriptor, ignoring hub [ 229.278850][ T5841] hub 3-1:0.0: probe with driver hub failed with error -5 [ 229.333732][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.340869][ T5841] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 229.342164][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.378045][ T6018] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 229.412237][ T8291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.444709][ T8291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.466754][ T30] audit: type=1400 audit(1755039348.332:551): avc: denied { read } for pid=8315 comm="syz.2.566" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 229.490562][ T8291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.638345][ T8344] netlink: 16 bytes leftover after parsing attributes in process `syz.5.570'. [ 229.673003][ T5841] input: failed to attach handler mousedev to device input19, error: -5 [ 229.999567][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 230.008874][ T6018] usb 5-1: device descriptor read/64, error -71 [ 230.015175][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.022085][ T5841] usb 3-1: USB disconnect, device number 34 [ 230.023345][ T30] audit: type=1400 audit(1755039348.332:552): avc: denied { open } for pid=8315 comm="syz.2.566" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 230.052876][ T24] usb 4-1: Product: syz [ 230.057046][ T24] usb 4-1: Manufacturer: syz [ 230.061008][ T8291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.070666][ T24] usb 4-1: SerialNumber: syz [ 230.116256][ T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 230.142136][ T6018] usb usb5-port1: attempt power cycle [ 230.159904][ T5912] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 230.447123][ T8291] hsr_slave_0: entered promiscuous mode [ 230.465870][ T8291] hsr_slave_1: entered promiscuous mode [ 230.501923][ T8291] debugfs: 'hsr0' already exists in 'hsr' [ 230.507685][ T8291] Cannot create hsr debugfs directory [ 230.536659][ T5168] Bluetooth: hci5: command 0x041b tx timeout [ 230.758450][ T5841] usb 4-1: USB disconnect, device number 21 [ 231.251677][ T5912] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 231.293698][ T5912] ath9k_htc: Failed to initialize the device [ 231.310357][ T5841] usb 4-1: ath9k_htc: USB layer deinitialized [ 231.748314][ T8291] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 231.858207][ T8291] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 231.990578][ T8291] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 232.078161][ T8389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.386625][ T8291] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 232.521222][ T5912] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 232.610871][ T5856] Bluetooth: hci5: command 0x041b tx timeout [ 232.711538][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 232.721451][ T5912] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 232.745751][ T8291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.761428][ T5912] usb 5-1: config 0 interface 0 has no altsetting 0 [ 232.789708][ T5912] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 232.813090][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.940301][ T5912] usb 5-1: Product: syz [ 232.957131][ T8291] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.311607][ T8404] comedi comedi0: Minor 5 could not be opened [ 233.316795][ T5912] usb 5-1: Manufacturer: syz [ 233.323446][ T30] audit: type=1400 audit(1755039352.082:553): avc: denied { read } for pid=8379 comm="syz.5.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.323449][ T5912] usb 5-1: SerialNumber: syz [ 233.363014][ T6072] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.370143][ T6072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.387274][ T5912] usb 5-1: config 0 descriptor?? [ 233.418050][ T5912] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 233.445452][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.452591][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.622740][ T5912] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 233.650576][ T5912] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 233.690780][ T5912] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 233.846821][ T5892] usb 5-1: USB disconnect, device number 23 [ 234.447902][ T8433] tmpfs: Unknown parameter 'xuge€' [ 234.475141][ T8291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.489113][ T5841] libceph: connect (1)[c::]:6789 error -101 [ 234.501128][ T5841] libceph: mon0 (1)[c::]:6789 connect error [ 234.691936][ T5856] Bluetooth: hci5: command 0x041b tx timeout [ 234.797566][ T8449] delete_channel: no stack [ 234.826433][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 235.029458][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 235.139696][ T8433] ceph: No mds server is up or the cluster is laggy [ 235.318698][ T8291] veth0_vlan: entered promiscuous mode [ 235.354028][ T5905] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 235.374062][ T8291] veth1_vlan: entered promiscuous mode [ 235.608056][ T8291] veth0_macvtap: entered promiscuous mode [ 235.677362][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 235.740134][ T5905] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 235.757568][ T8291] veth1_macvtap: entered promiscuous mode [ 235.766334][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.777822][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 235.788474][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 235.797837][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.589'. [ 235.917954][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.932890][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 235.939940][ T5905] pvrusb2: ********** [ 236.117904][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 236.164489][ T8291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.179037][ T8466] delete_channel: no stack [ 236.196918][ T5905] pvrusb2: Important functionality might not be entirely working. [ 236.215768][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.231747][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.241349][ T8474] block nbd3: not configured, cannot reconfigure [ 236.247856][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 236.280262][ T5905] pvrusb2: ********** [ 236.284980][ T6588] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.296711][ T2336] pvrusb2: Invalid write control endpoint [ 236.312484][ T6588] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.348482][ T8476] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.430993][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 236.499533][ T6018] usb 5-1: USB disconnect, device number 24 [ 236.525333][ T2336] pvrusb2: Invalid write control endpoint [ 236.543273][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 236.578472][ T6072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.598746][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 236.610695][ T6072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.621665][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 236.630061][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 236.639346][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 236.650297][ T30] audit: type=1400 audit(1755039355.502:554): avc: denied { write } for pid=8482 comm="syz.5.593" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.666927][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.680701][ T2336] pvrusb2: Device being rendered inoperable [ 236.695414][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 236.703695][ T6072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.725622][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 236.738316][ T30] audit: type=1400 audit(1755039355.552:555): avc: denied { ioctl } for pid=8482 comm="syz.5.593" path="/106/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.744927][ T24] pvrusb2: ********** [ 236.762718][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 236.768283][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 236.772554][ T6072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.791257][ T5856] Bluetooth: hci5: command 0x041b tx timeout [ 236.793157][ T2336] pvrusb2: Attached sub-driver cx25840 [ 236.819573][ T24] pvrusb2: Important functionality might not be entirely working. [ 236.827873][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 236.846032][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 236.847351][ T24] pvrusb2: ********** [ 236.883010][ T30] audit: type=1800 audit(1755039355.562:556): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.593" name="/" dev="9p" ino=2 res=0 errno=0 [ 236.903580][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 236.921125][ T2336] pvrusb2: Invalid write control endpoint [ 236.990066][ T2336] pvrusb2: Invalid write control endpoint [ 237.017958][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 237.060657][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 237.085574][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 237.102856][ T2336] pvrusb2: Device being rendered inoperable [ 237.108819][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 237.117938][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 237.149839][ T2336] pvrusb2: Attached sub-driver cx25840 [ 237.186913][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 237.199090][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 237.219367][ T5841] usb 3-1: USB disconnect, device number 35 [ 237.281297][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 237.450728][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 237.457760][ T8493] overlay: Unknown parameter 'dont_measure' [ 237.468227][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 237.540713][ T24] usb 7-1: config 0 interface 0 altsetting 109 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.610781][ T24] usb 7-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 237.661287][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 237.668122][ T24] usb 7-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 237.680697][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.694758][ T5892] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 237.718819][ T24] usb 7-1: config 0 descriptor?? [ 237.876749][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.599'. [ 237.886207][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 237.908067][ T5892] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 237.955505][ T8488] netlink: 32 bytes leftover after parsing attributes in process `syz.6.559'. [ 238.081394][ T5892] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 238.672917][ T8508] netlink: 'syz.3.601': attribute type 10 has an invalid length. [ 238.673293][ T5892] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.696203][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 238.706417][ T5892] usb 5-1: SerialNumber: syz [ 238.730755][ T8495] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 238.745956][ T8495] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 238.759167][ T8512] netlink: 32 bytes leftover after parsing attributes in process `syz.2.602'. [ 238.903131][ T30] audit: type=1400 audit(1755039357.772:557): avc: denied { read } for pid=8513 comm="syz.5.603" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 239.286929][ T8517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.298429][ T5856] Bluetooth: hci1: Unable to find connection with handle 0x01f5 [ 239.310508][ T8517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.703989][ T30] audit: type=1400 audit(1755039358.272:558): avc: denied { setopt } for pid=8515 comm="syz.3.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 239.776187][ T5892] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 239.791314][ T30] audit: type=1326 audit(1755039358.302:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8515 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863498ebe9 code=0x7ffc0000 [ 239.830862][ T5892] usb 5-1: USB disconnect, device number 25 [ 239.929412][ T30] audit: type=1326 audit(1755039358.302:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8515 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863498ebe9 code=0x7ffc0000 [ 240.012394][ T30] audit: type=1326 audit(1755039358.312:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8515 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f863498ebe9 code=0x7ffc0000 [ 240.012531][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 240.050093][ T30] audit: type=1326 audit(1755039358.312:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8515 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f863498ebe9 code=0x7ffc0000 [ 240.222411][ T8525] delete_channel: no stack [ 240.454519][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 240.493807][ T30] audit: type=1326 audit(1755039358.322:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8515 comm="syz.3.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f863498ebe9 code=0x7ffc0000 [ 240.606089][ T24] usb 7-1: USB disconnect, device number 2 [ 240.611714][ T5905] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 240.785604][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 241.038458][ T5905] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 241.047601][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.062789][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 241.069895][ T5905] pvrusb2: ********** [ 241.074932][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 241.085620][ T5905] pvrusb2: Important functionality might not be entirely working. [ 241.093842][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 241.105214][ T5905] pvrusb2: ********** [ 241.128041][ T6588] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.343484][ T2336] pvrusb2: Invalid write control endpoint [ 241.363693][ T6588] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.537478][ T24] usb 4-1: USB disconnect, device number 22 [ 242.045509][ T2336] pvrusb2: Invalid write control endpoint [ 242.056149][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 242.058322][ T6588] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.091561][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 242.112319][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 242.156301][ T2336] pvrusb2: Device being rendered inoperable [ 242.283630][ T6588] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.332226][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 242.347240][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 242.414871][ T2336] pvrusb2: Attached sub-driver cx25840 [ 242.534301][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 242.736516][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 244.752036][ T5954] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 244.922705][ T5954] usb 6-1: no configurations [ 244.948839][ T5954] usb 6-1: can't read configurations, error -22 [ 245.160749][ T5954] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 245.199175][ T6588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.212713][ T6588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.223374][ T6588] bond0 (unregistering): Released all slaves [ 245.409980][ T5954] usb 6-1: no configurations [ 245.420045][ T5954] usb 6-1: can't read configurations, error -22 [ 245.433321][ T5954] usb usb6-port1: attempt power cycle [ 245.612500][ T8614] delete_channel: no stack [ 245.842563][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'. [ 245.862939][ T6588] team0: Port device wlan1 removed [ 245.881799][ T5954] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 245.964594][ T5954] usb 6-1: no configurations [ 245.990650][ T5905] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 245.994585][ T5954] usb 6-1: can't read configurations, error -22 [ 246.173388][ T5954] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 246.213211][ T5954] usb 6-1: no configurations [ 246.232618][ T5954] usb 6-1: can't read configurations, error -22 [ 246.253661][ T5954] usb usb6-port1: unable to enumerate USB device [ 246.300813][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 246.300830][ T30] audit: type=1400 audit(1755039365.152:575): avc: denied { map } for pid=8621 comm="syz.6.627" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 246.370834][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 246.388952][ T30] audit: type=1400 audit(1755039365.152:576): avc: denied { execute } for pid=8621 comm="syz.6.627" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 246.431282][ T5905] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 246.440522][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.469739][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 246.520700][ T5905] pvrusb2: ********** [ 246.544290][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 246.578074][ T5905] pvrusb2: Important functionality might not be entirely working. [ 246.602004][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 246.617433][ T5905] pvrusb2: ********** [ 246.625040][ T30] audit: type=1400 audit(1755039365.492:577): avc: denied { write } for pid=8632 comm="syz.6.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 246.685383][ T2336] pvrusb2: Invalid write control endpoint [ 246.687140][ T8641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=8641 comm=syz.6.630 [ 246.693773][ T5905] usb 5-1: USB disconnect, device number 26 [ 246.745678][ T6588] hsr_slave_0: left promiscuous mode [ 246.755735][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.798078][ T2336] pvrusb2: Invalid write control endpoint [ 246.806012][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.810365][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 246.825971][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 246.911872][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.923618][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.931892][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 246.962221][ T2336] pvrusb2: Device being rendered inoperable [ 246.979969][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 246.993809][ T6588] veth1_macvtap: left promiscuous mode [ 246.999456][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 247.007557][ T6588] veth0_macvtap: left promiscuous mode [ 247.017781][ T2336] pvrusb2: Attached sub-driver cx25840 [ 247.084876][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 247.097669][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 248.304462][ T6588] team0 (unregistering): Port device team_slave_1 removed [ 248.356499][ T6588] team0 (unregistering): Port device team_slave_0 removed [ 249.931953][ T5939] lo speed is unknown, defaulting to 1000 [ 249.978262][ T5939] syz2: Port: 1 Link DOWN [ 250.150782][ T8697] netlink: 'syz.4.641': attribute type 10 has an invalid length. [ 250.341472][ T8697] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.492169][ T8697] bond0: (slave team0): Enslaving as an active interface with an up link [ 250.556498][ T8697] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 250.593113][ T30] audit: type=1400 audit(1755039369.462:578): avc: denied { bind } for pid=8690 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 250.703945][ T30] audit: type=1400 audit(1755039369.522:579): avc: denied { read } for pid=8696 comm="syz.5.642" path="socket:[20803]" dev="sockfs" ino=20803 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 250.727571][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.058843][ T30] audit: type=1400 audit(1755039369.912:580): avc: denied { create } for pid=8707 comm="syz.4.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 252.650681][ T30] audit: type=1400 audit(1755039371.512:581): avc: denied { listen } for pid=8732 comm="syz.2.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 252.735594][ T30] audit: type=1400 audit(1755039371.542:582): avc: denied { setattr } for pid=8735 comm="syz.4.651" name="anycast6" dev="proc" ino=4026533259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 252.758618][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.156041][ T8747] netlink: 532 bytes leftover after parsing attributes in process `syz.3.653'. [ 254.730682][ T5939] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 254.837567][ T8783] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[8783] [ 254.959685][ T5939] usb 7-1: Using ep0 maxpacket: 8 [ 255.113034][ T5939] usb 7-1: unable to get BOS descriptor or descriptor too short [ 255.132187][ T5939] usb 7-1: config 7 has an invalid interface number: 59 but max is 0 [ 255.140297][ T5939] usb 7-1: config 7 has no interface number 0 [ 255.247229][ T5939] usb 7-1: config 7 interface 59 has no altsetting 0 [ 255.258965][ T5939] usb 7-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=cc.70 [ 255.268799][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.270650][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.316050][ T5939] usb 7-1: Product: syz [ 255.320254][ T5939] usb 7-1: Manufacturer: syz [ 255.362809][ T5939] usb 7-1: SerialNumber: syz [ 255.374670][ T30] audit: type=1400 audit(1755039374.242:583): avc: denied { create } for pid=8780 comm="syz.2.660" name="#7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 255.438588][ T30] audit: type=1400 audit(1755039374.242:584): avc: denied { link } for pid=8780 comm="syz.2.660" name="#7" dev="tmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 255.483955][ T30] audit: type=1400 audit(1755039374.242:585): avc: denied { rename } for pid=8780 comm="syz.2.660" name="#8" dev="tmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 255.619958][ T5939] kobil_sct 7-1:7.59: KOBIL USB smart card terminal converter detected [ 255.669020][ T5939] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 255.713836][ T5939] usb 7-1: USB disconnect, device number 3 [ 255.739816][ T5939] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 255.759604][ T5939] kobil_sct 7-1:7.59: device disconnected [ 255.771355][ T8801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 257.230663][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 257.428669][ T24] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 257.488635][ T24] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 257.534020][ T24] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.539972][ T8834] : entered promiscuous mode [ 257.556735][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 257.566045][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.647395][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.662017][ T24] usb 7-1: invalid MIDI out EP 0 [ 257.804581][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.828311][ T24] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 257.879368][ T8844] netlink: 'syz.2.671': attribute type 10 has an invalid length. [ 257.928148][ T8844] veth0_vlan: left promiscuous mode [ 257.958361][ T8844] veth0_vlan: entered promiscuous mode [ 257.964015][ T6018] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 257.994411][ T8844] team0: Device veth0_vlan failed to register rx_handler [ 258.281379][ T6018] usb 6-1: Using ep0 maxpacket: 32 [ 258.309235][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12288, setting to 1024 [ 258.334108][ T6018] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 258.353537][ T6018] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 258.787682][ T6018] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 258.796175][ T6018] usb 6-1: Product: syz [ 258.800342][ T6018] usb 6-1: Manufacturer: syz [ 258.805313][ T6018] usb 6-1: SerialNumber: syz [ 258.829412][ T6018] usb 6-1: config 0 descriptor?? [ 259.026042][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.033531][ T8857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.158132][ T8857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.288770][ T8857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.318803][ T5939] usb 6-1: USB disconnect, device number 25 [ 260.370084][ T8878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.427886][ T8878] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 260.913951][ T8817] delete_channel: no stack [ 260.946900][ T5939] usb 7-1: USB disconnect, device number 4 [ 261.065366][ T30] audit: type=1400 audit(1755039379.932:586): avc: denied { shutdown } for pid=8881 comm="syz.3.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.640650][ T30] audit: type=1400 audit(1755039382.462:587): avc: denied { execute } for pid=8921 comm="syz.2.685" dev="hugetlbfs" ino=21142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 263.830913][ T30] audit: type=1400 audit(1755039382.462:588): avc: denied { execute_no_trans } for pid=8921 comm="syz.2.685" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=21142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 264.631379][ T5939] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 264.660721][ T8936] mkiss: ax0: crc mode is auto. [ 264.781253][ T8936] FAULT_INJECTION: forcing a failure. [ 264.781253][ T8936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.814702][ T8936] CPU: 0 UID: 0 PID: 8936 Comm: syz.6.689 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 264.814727][ T8936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.814737][ T8936] Call Trace: [ 264.814742][ T8936] [ 264.814748][ T8936] dump_stack_lvl+0x16c/0x1f0 [ 264.814769][ T8936] should_fail_ex+0x512/0x640 [ 264.814791][ T8936] _copy_from_user+0x2e/0xd0 [ 264.814812][ T8936] mkiss_ioctl+0x102/0x470 [ 264.814835][ T8936] ? __pfx_mkiss_ioctl+0x10/0x10 [ 264.814855][ T8936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 264.814880][ T8936] ? __pfx_mkiss_ioctl+0x10/0x10 [ 264.814899][ T8936] tty_ioctl+0x700/0x1680 [ 264.814917][ T8936] ? __pfx_tty_ioctl+0x10/0x10 [ 264.814933][ T8936] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 264.814981][ T8936] ? hook_file_ioctl_common+0x145/0x410 [ 264.815003][ T8936] ? selinux_file_ioctl+0x180/0x270 [ 264.815046][ T8936] ? selinux_file_ioctl+0xb4/0x270 [ 264.815069][ T8936] ? __pfx_tty_ioctl+0x10/0x10 [ 264.815087][ T8936] __x64_sys_ioctl+0x18b/0x210 [ 264.815114][ T8936] do_syscall_64+0xcd/0x4c0 [ 264.815133][ T8936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.815149][ T8936] RIP: 0033:0x7f8f5898ebe9 [ 264.815161][ T8936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.815176][ T8936] RSP: 002b:00007f8f59759038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.815191][ T8936] RAX: ffffffffffffffda RBX: 00007f8f58bb5fa0 RCX: 00007f8f5898ebe9 [ 264.815201][ T8936] RDX: 0000200000000040 RSI: 0000000000008924 RDI: 0000000000000003 [ 264.815210][ T8936] RBP: 00007f8f59759090 R08: 0000000000000000 R09: 0000000000000000 [ 264.815219][ T8936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.815227][ T8936] R13: 00007f8f58bb6038 R14: 00007f8f58bb5fa0 R15: 00007ffcac8b97b8 [ 264.815248][ T8936] [ 265.004069][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.155594][ T8946] delete_channel: no stack [ 265.166058][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 265.167623][ T5939] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 265.167648][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.172322][ T5939] pvrusb2: Hardware description: Terratec Grabster AV400 [ 265.172339][ T5939] pvrusb2: ********** [ 265.172345][ T5939] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 265.172355][ T5939] pvrusb2: Important functionality might not be entirely working. [ 265.172362][ T5939] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 265.172371][ T5939] pvrusb2: ********** [ 265.187676][ T8939] netlink: 'syz.5.688': attribute type 10 has an invalid length. [ 265.270360][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 265.562293][ T2336] pvrusb2: Invalid write control endpoint [ 265.825351][ T2336] pvrusb2: Invalid write control endpoint [ 265.956949][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 265.970091][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 265.977912][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 265.988065][ T2336] pvrusb2: Device being rendered inoperable [ 265.994235][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 266.007834][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 266.018842][ T30] audit: type=1400 audit(1755039384.892:589): avc: denied { append } for pid=8959 comm="syz.6.694" name="001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 266.068188][ T2336] pvrusb2: Attached sub-driver cx25840 [ 266.282012][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 266.401496][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 266.659734][ T30] audit: type=1400 audit(1755039385.522:590): avc: denied { getopt } for pid=8959 comm="syz.6.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.845695][ T6018] usb 3-1: USB disconnect, device number 36 [ 267.001027][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 267.341007][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 267.664364][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.712109][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 267.723796][ T8981] vlan2: entered allmulticast mode [ 267.728916][ T8981] veth0_to_team: entered allmulticast mode [ 267.760416][ T24] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 267.785054][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.819158][ T24] usb 7-1: config 0 descriptor?? [ 267.979191][ T30] audit: type=1400 audit(1755039386.842:591): avc: denied { ioctl } for pid=8989 comm="syz.2.701" path="socket:[21910]" dev="sockfs" ino=21910 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 268.004412][ C0] vkms_vblank_simulate: vblank timer overrun [ 268.070368][ T30] audit: type=1400 audit(1755039386.932:592): avc: denied { write } for pid=8992 comm="syz.5.702" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 268.815823][ T24] hid-multitouch 0003:1FD2:6007.000B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.6-1/input0 [ 268.843117][ T9003] 9pnet_fd: Insufficient options for proto=fd [ 269.052114][ T8997] tty tty2: ldisc open failed (-12), clearing slot 1 [ 269.069473][ T9008] smc: net device bond0 applied user defined pnetid SYZ2 [ 269.148625][ T9010] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 269.155247][ T9010] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 269.162933][ T9010] vhci_hcd vhci_hcd.0: Device attached [ 269.411136][ T24] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 269.560747][ T5954] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 270.250664][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 270.339991][ T5954] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.400669][ T5954] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.470738][ T5954] usb 4-1: config 0 interface 0 has no altsetting 0 [ 270.544180][ T5954] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 270.688564][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 270.771027][ T5954] usb 4-1: Product: syz [ 270.814765][ T5954] usb 4-1: config 0 descriptor?? [ 270.998085][ T9029] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.5 [ 271.102599][ T9029] PKCS7: Only support pkcs7_signedData type [ 271.388581][ T5954] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 271.435305][ T5954] waterforce 0003:1044:7A4D.000C: unknown main item tag 0x0 [ 271.479980][ T5954] waterforce 0003:1044:7A4D.000C: item fetching failed at offset 2/5 [ 271.542957][ T5954] waterforce 0003:1044:7A4D.000C: hid parse failed with -22 [ 271.585841][ T5954] waterforce 0003:1044:7A4D.000C: probe with driver waterforce failed with error -22 [ 271.818998][ T9032] netlink: 'syz.4.708': attribute type 10 has an invalid length. [ 271.850051][ T9032] team0: Port device wlan1 added [ 272.150676][ T5954] usb 4-1: USB disconnect, device number 23 [ 272.335394][ T9011] vhci_hcd: connection reset by peer [ 272.351172][ T5905] usb 7-1: USB disconnect, device number 5 [ 272.373172][ T178] vhci_hcd: stop threads [ 272.389555][ T178] vhci_hcd: release socket [ 272.405203][ T178] vhci_hcd: disconnect device [ 272.643665][ T9050] netlink: 'syz.5.712': attribute type 2 has an invalid length. [ 272.748750][ T30] audit: type=1400 audit(1755039391.612:593): avc: denied { getopt } for pid=9053 comm="syz.6.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 272.817049][ T9057] fuse: Unknown parameter 'group_i00000000000000000000' [ 272.885685][ T9061] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 272.895710][ T9061] netlink: 'syz.2.718': attribute type 7 has an invalid length. [ 272.904294][ T9061] netlink: 'syz.2.718': attribute type 8 has an invalid length. [ 272.912491][ T9061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 272.924738][ T9061] team0: entered promiscuous mode [ 272.929778][ T9061] team_slave_0: entered promiscuous mode [ 272.935869][ T9061] team_slave_1: entered promiscuous mode [ 272.942847][ T9061] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 272.953240][ T9061] bond0: entered promiscuous mode [ 272.958288][ T9061] bond_slave_0: entered promiscuous mode [ 272.964738][ T9061] bond_slave_1: entered promiscuous mode [ 272.971561][ T9061] team0: left promiscuous mode [ 272.976430][ T9061] team_slave_0: left promiscuous mode [ 272.982521][ T9061] team_slave_1: left promiscuous mode [ 272.987983][ T9061] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 272.996789][ T9061] bond0: left promiscuous mode [ 273.001648][ T9061] bond_slave_0: left promiscuous mode [ 273.007186][ T9061] bond_slave_1: left promiscuous mode [ 273.020771][ T5905] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 273.110825][ T5954] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 273.156934][ T9064] ptrace attach of "./syz-executor exec"[5851] was attempted by "./syz-executor exec"[9064] [ 273.229797][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.249142][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.270757][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 273.273149][ T5905] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 273.299460][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.300203][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12288, setting to 1024 [ 273.323953][ T5954] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 273.373533][ T5905] usb 7-1: config 0 descriptor?? [ 273.377307][ T5954] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 273.390478][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 273.418661][ T5954] usb 4-1: Product: syz [ 273.429168][ T5954] usb 4-1: Manufacturer: syz [ 273.447902][ T5954] usb 4-1: SerialNumber: syz [ 273.533940][ T5954] usb 4-1: config 0 descriptor?? [ 274.252593][ T5905] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 274.259947][ T5905] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 274.293768][ T5905] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.000D/input/input20 [ 274.499182][ T5905] cm6533_jd 0003:0D8C:0022.000D: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 274.528717][ T5905] usb 7-1: USB disconnect, device number 6 [ 275.010188][ T6018] usb 4-1: USB disconnect, device number 24 [ 275.180697][ T24] vhci_hcd: vhci_device speed not set [ 275.251865][ T9080] netlink: 20 bytes leftover after parsing attributes in process `syz.2.724'. [ 275.343329][ T9073] fido_id[9073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 275.860810][ T5905] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 276.555819][ T30] audit: type=1400 audit(1755039395.062:594): avc: denied { create } for pid=9087 comm="syz.6.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 277.281286][ T30] audit: type=1400 audit(1755039395.122:595): avc: denied { ioctl } for pid=9087 comm="syz.6.727" path="socket:[21384]" dev="sockfs" ino=21384 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 277.305814][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.316573][ T5905] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 277.382947][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.396239][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 277.405283][ T9105] netlink: 19 bytes leftover after parsing attributes in process `syz.2.730'. [ 277.554927][ T5905] usb 6-1: Product: syz [ 277.613367][ T5905] usb 6-1: Manufacturer: syz [ 277.819205][ T5905] usb 6-1: SerialNumber: syz [ 278.326585][ T5905] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 278.365776][ T5939] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.431847][ T5905] usb 6-1: USB disconnect, device number 26 [ 280.711213][ T9130] netlink: 104 bytes leftover after parsing attributes in process `syz.3.734'. [ 281.517231][ T5939] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 281.530820][ T5939] ath9k_htc: Failed to initialize the device [ 281.561093][ T5905] usb 6-1: ath9k_htc: USB layer deinitialized [ 281.660658][ T9137] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[9137] [ 282.210777][ T5905] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 282.269110][ T9142] netlink: 44 bytes leftover after parsing attributes in process `syz.4.739'. [ 282.390714][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 282.397930][ T5905] usb 6-1: config 0 has no interfaces? [ 282.407328][ T5905] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.416950][ T5939] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 282.428366][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.438692][ T5905] usb 6-1: Product: syz [ 282.445831][ T5905] usb 6-1: Manufacturer: syz [ 282.476614][ T5905] usb 6-1: SerialNumber: syz [ 282.492893][ T5905] usb 6-1: config 0 descriptor?? [ 282.956893][ T5892] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 282.982524][ T5939] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 282.995442][ T5939] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 283.011996][ T5939] usb 3-1: config 6 has no interface number 0 [ 283.021899][ T5939] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 283.038455][ T5939] usb 3-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.054639][ T5939] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 283.058875][ T1207] usb 6-1: USB disconnect, device number 27 [ 283.084606][ T9154] syz.4.742: attempt to access beyond end of device [ 283.084606][ T9154] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 283.112182][ T9154] syz.4.742: attempt to access beyond end of device [ 283.112182][ T9154] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 283.126174][ T9154] Mount JFS Failure: -5 [ 283.145330][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 283.209753][ T5939] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 283.218441][ T5892] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 283.227951][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.236413][ T5939] usb 3-1: Product: syz [ 283.245516][ T5892] usb 4-1: config 0 descriptor?? [ 283.250773][ T5939] usb 3-1: Manufacturer: syz [ 283.255775][ T5939] usb 3-1: SerialNumber: syz [ 283.269598][ T5892] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 283.304639][ T5939] hso 3-1:6.2: Failed to find INT IN ep [ 283.401464][ T30] audit: type=1400 audit(1755039402.262:596): avc: denied { listen } for pid=9156 comm="syz.6.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.453209][ T30] audit: type=1326 audit(1755039402.292:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7ffc0000 [ 283.499982][ T30] audit: type=1326 audit(1755039402.292:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7ffc0000 [ 283.555646][ T30] audit: type=1326 audit(1755039402.292:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f8f5898ebe9 code=0x7ffc0000 [ 283.558364][ T9159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.674157][ T30] audit: type=1400 audit(1755039402.292:600): avc: denied { accept } for pid=9156 comm="syz.6.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 283.725075][ T30] audit: type=1326 audit(1755039402.302:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7ffc0000 [ 283.950012][ T30] audit: type=1326 audit(1755039402.302:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f8f5898ebe9 code=0x7ffc0000 [ 283.984066][ T5939] usb 3-1: USB disconnect, device number 37 [ 284.049956][ T30] audit: type=1326 audit(1755039402.302:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7ffc0000 [ 284.179614][ T30] audit: type=1326 audit(1755039402.302:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7ffc0000 [ 284.297033][ T5892] gspca_nw80x: reg_w err -71 [ 284.301743][ T5892] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 284.313211][ T5892] usb 4-1: USB disconnect, device number 25 [ 284.333150][ T30] audit: type=1326 audit(1755039402.302:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9156 comm="syz.6.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8f5898ebe9 code=0x7ffc0000 [ 284.815477][ T9175] fuse: Unknown parameter 'group_i00000000000000000000' [ 284.826550][ T9173] loop6: detected capacity change from 0 to 524287999 [ 284.889184][ T9173] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.085665][ T9173] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.173464][ T9173] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.276526][ T9173] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.312676][ T9173] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.411951][ T9173] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.429699][ T9173] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.438562][ T9173] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.447403][ T9173] ldm_validate_partition_table(): Disk read failed. [ 285.454391][ T9173] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.466359][ T9173] Buffer I/O error on dev loop6, logical block 0, async page read [ 285.475741][ T9173] Dev loop6: unable to read RDB block 0 [ 285.482355][ T9173] loop6: unable to read partition table [ 285.488807][ T9173] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 286.468924][ T9196] netlink: 'syz.3.749': attribute type 5 has an invalid length. [ 286.538114][ T5217] ldm_validate_partition_table(): Disk read failed. [ 286.556382][ T5217] Dev loop6: unable to read RDB block 0 [ 286.564429][ T5217] loop6: unable to read partition table [ 286.663390][ T9203] ptrace attach of "./syz-executor exec"[6182] was attempted by "./syz-executor exec"[9203] [ 288.380688][ T6018] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 288.620705][ T6018] usb 4-1: Using ep0 maxpacket: 16 [ 288.663444][ T6018] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.677474][ T6018] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 288.720751][ T6018] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 288.743977][ T6018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.765036][ T6018] usb 4-1: config 0 descriptor?? [ 289.532703][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 289.532716][ T30] audit: type=1400 audit(1755039408.382:617): avc: denied { read } for pid=9218 comm="syz.3.761" laddr=::ffff:172.20.20.10 lport=37320 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 289.674135][ T9243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.683321][ T9243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.127432][ T30] audit: type=1400 audit(1755039408.882:618): avc: denied { ioctl } for pid=9242 comm="syz.4.768" path="socket:[22778]" dev="sockfs" ino=22778 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 291.311018][ T6018] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 291.481566][ T6018] usb 6-1: Using ep0 maxpacket: 8 [ 291.501931][ T6018] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 291.510941][ T5939] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 291.520968][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.542189][ T6018] pvrusb2: Hardware description: Terratec Grabster AV400 [ 291.559147][ T6018] pvrusb2: ********** [ 291.600145][ T6018] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 291.760698][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 291.779169][ T9261] ptrace attach of "./syz-executor exec"[8291] was attempted by "./syz-executor exec"[9261] [ 291.939992][ T6018] pvrusb2: Important functionality might not be entirely working. [ 291.940672][ T5939] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.968266][ T6018] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 291.989889][ T6018] pvrusb2: ********** [ 292.011509][ T5939] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 292.022439][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.030541][ T5939] usb 5-1: Product: syz [ 292.042479][ T5939] usb 5-1: Manufacturer: syz [ 292.057288][ T5939] usb 5-1: SerialNumber: syz [ 292.062301][ T2336] pvrusb2: Invalid write control endpoint [ 292.065290][ T5939] usb 5-1: config 0 descriptor?? [ 292.093021][ T5905] usb 4-1: USB disconnect, device number 26 [ 292.134023][ T2336] pvrusb2: Invalid write control endpoint [ 292.172348][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 292.204902][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 292.276758][ T9266] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[9266] [ 292.285000][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 292.586717][ T9267] overlayfs: overlapping lowerdir path [ 292.607290][ T2336] pvrusb2: Device being rendered inoperable [ 292.617673][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 292.621563][ T5905] usb 5-1: USB disconnect, device number 27 [ 292.650102][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 292.658936][ T2336] pvrusb2: Attached sub-driver cx25840 [ 292.667421][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 292.677976][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 293.501031][ T6018] usb 6-1: USB disconnect, device number 28 [ 293.607977][ T9280] tipc: Started in network mode [ 293.612930][ T9280] tipc: Node identity 9e604f87b16a, cluster identity 4711 [ 293.620117][ T9280] tipc: Enabled bearer , priority 0 [ 293.633787][ T9280] tipc: Resetting bearer [ 293.644204][ T9277] tipc: Disabling bearer [ 293.906883][ T1207] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 294.102498][ T1207] usb 7-1: Using ep0 maxpacket: 16 [ 294.294719][ T1207] usb 7-1: config 0 has an invalid interface number: 226 but max is 0 [ 294.303409][ T30] audit: type=1400 audit(1755039413.172:619): avc: denied { setopt } for pid=9292 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 294.329382][ T1207] usb 7-1: config 0 has no interface number 0 [ 294.458566][ T1207] usb 7-1: config 0 interface 226 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.862311][ T1207] usb 7-1: config 0 interface 226 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.886681][ T1207] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 294.919884][ T1207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.555711][ T1207] usb 7-1: config 0 descriptor?? [ 296.118615][ T9303] delete_channel: no stack [ 296.144985][ T9313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.172979][ T9313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.348403][ T30] audit: type=1400 audit(1755039415.212:620): avc: denied { ioctl } for pid=9309 comm="syz.5.786" path="socket:[23629]" dev="sockfs" ino=23629 ioctlcmd=0x89b0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 296.373267][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.920684][ T5905] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 297.179816][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 297.195282][ T5905] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 297.210827][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.662491][ T5939] usb 7-1: USB disconnect, device number 7 [ 297.698053][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 297.725952][ T5905] pvrusb2: ********** [ 297.749661][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 297.770201][ T5905] pvrusb2: Important functionality might not be entirely working. [ 297.778344][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 297.796176][ T5905] pvrusb2: ********** [ 298.062305][ T9344] netlink: 'syz.3.795': attribute type 10 has an invalid length. [ 298.435681][ T2336] pvrusb2: Invalid write control endpoint [ 298.580980][ T2336] pvrusb2: Invalid write control endpoint [ 298.598850][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 298.620905][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 298.684483][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 298.709662][ T2336] pvrusb2: Device being rendered inoperable [ 298.717259][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 298.725793][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 298.751599][ T2336] pvrusb2: Attached sub-driver cx25840 [ 298.757127][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 298.787740][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 299.116614][ T30] audit: type=1326 audit(1755039417.982:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7fc00000 [ 299.154308][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.801'. [ 299.594232][ T30] audit: type=1326 audit(1755039417.982:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f5898ebe9 code=0x7fc00000 [ 299.700805][ T30] audit: type=1326 audit(1755039417.982:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7fc00000 [ 299.724030][ C0] vkms_vblank_simulate: vblank timer overrun [ 299.849063][ T5905] usb 5-1: USB disconnect, device number 28 [ 299.931196][ T30] audit: type=1326 audit(1755039417.982:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7fc00000 [ 299.954452][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.240699][ T30] audit: type=1326 audit(1755039417.982:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7fc00000 [ 300.264737][ T30] audit: type=1326 audit(1755039417.982:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7fc00000 [ 300.287946][ C0] vkms_vblank_simulate: vblank timer overrun [ 300.730664][ T30] audit: type=1326 audit(1755039417.982:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7fc00000 [ 300.753888][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.045255][ T30] audit: type=1326 audit(1755039417.982:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7fc00000 [ 301.068519][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.075653][ T9380] netlink: 'syz.4.804': attribute type 21 has an invalid length. [ 301.085141][ T9380] netlink: 'syz.4.804': attribute type 15 has an invalid length. [ 301.093269][ T9380] netlink: 144 bytes leftover after parsing attributes in process `syz.4.804'. [ 301.169988][ T30] audit: type=1326 audit(1755039417.982:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9335 comm="syz.6.794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f5898ebe9 code=0x7fc00000 [ 302.525477][ T9390] ptrace attach of "./syz-executor exec"[6182] was attempted by "./syz-executor exec"[9390] [ 304.166389][ T5905] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 304.683417][ T5892] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 304.711043][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 304.720210][ T5905] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 304.738720][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.847702][ T5905] pvrusb2: Hardware description: Terratec Grabster AV400 [ 304.862367][ T5905] pvrusb2: ********** [ 304.866477][ T5905] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 304.876651][ T5905] pvrusb2: Important functionality might not be entirely working. [ 304.884552][ T5905] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 304.898494][ T5905] pvrusb2: ********** [ 304.920746][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 304.928384][ T5892] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 304.940092][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.958159][ T5892] pvrusb2: Hardware description: Terratec Grabster AV400 [ 304.975362][ T5892] pvrusb2: ********** [ 304.996963][ T5892] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 305.008062][ T5892] pvrusb2: Important functionality might not be entirely working. [ 305.019828][ T5892] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 305.033023][ T5892] pvrusb2: ********** [ 305.189103][ T2336] pvrusb2: Invalid write control endpoint [ 305.279924][ T2336] pvrusb2: Invalid write control endpoint [ 305.292760][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 305.304911][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 305.315426][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 305.327343][ T2336] pvrusb2: Device being rendered inoperable [ 305.334758][ T2336] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 305.342092][ T2336] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 305.350318][ T2336] pvrusb2: Attached sub-driver cx25840 [ 305.355903][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 305.366226][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 305.375591][ T2336] pvrusb2: Invalid write control endpoint [ 305.419638][ T2336] pvrusb2: Invalid write control endpoint [ 305.425717][ T2336] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 305.437508][ T2336] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 305.449204][ T2336] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 305.459622][ T2336] pvrusb2: Device being rendered inoperable [ 305.465988][ T2336] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 305.473460][ T2336] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 305.484940][ T2336] pvrusb2: Attached sub-driver cx25840 [ 305.490525][ T2336] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 305.507567][ T2336] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 305.571561][ T5954] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 305.809440][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 305.870237][ T5954] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.967205][ T5954] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 306.015309][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 306.015333][ T30] audit: type=1400 audit(1755039424.852:658): avc: denied { map } for pid=9423 comm="syz.3.815" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.068296][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.228078][ T5954] usb 5-1: config 0 descriptor?? [ 306.296683][ T30] audit: type=1400 audit(1755039424.852:659): avc: denied { execute } for pid=9423 comm="syz.3.815" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 306.332405][ T6018] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 306.340407][ T5892] usb 3-1: USB disconnect, device number 38 [ 306.526710][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.572723][ T10] usb 7-1: USB disconnect, device number 8 [ 306.599912][ T6018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.647699][ T6018] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 306.957678][ T5954] hid-multitouch 0003:1FD2:6007.000F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 306.969795][ T6018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.983452][ T6018] usb 6-1: config 0 descriptor?? [ 306.995600][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.817'. [ 307.010341][ T9430] vlan2: entered allmulticast mode [ 307.015687][ T9430] veth0_to_team: entered allmulticast mode [ 307.055985][ T9432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.818'. [ 307.070818][ T9432] vlan2: entered allmulticast mode [ 307.075160][ T9438] 9pnet_fd: p9_fd_create_tcp (9438): problem connecting socket to 127.0.0.1 [ 307.075980][ T9432] veth0_to_team: entered allmulticast mode [ 307.291020][ T30] audit: type=1400 audit(1755039425.942:660): avc: denied { mounton } for pid=9437 comm="syz.2.820" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 307.592131][ T30] audit: type=1400 audit(1755039426.462:661): avc: denied { map } for pid=9420 comm="syz.4.814" path="socket:[23200]" dev="sockfs" ino=23200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 307.626440][ T24] usb 5-1: USB disconnect, device number 29 [ 307.879555][ T30] audit: type=1400 audit(1755039426.462:662): avc: denied { accept } for pid=9420 comm="syz.4.814" path="socket:[23200]" dev="sockfs" ino=23200 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 307.999607][ T9442] fido_id[9442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 308.911664][ T6018] playstation 0003:054C:0BA0.0010: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.5-1/input0 [ 308.963181][ T5954] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 309.101757][ T6018] playstation 0003:054C:0BA0.0010: Failed to retrieve feature with reportID 18: -71 [ 309.117066][ T9462] syz.3.825: attempt to access beyond end of device [ 309.117066][ T9462] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 309.130290][ T9462] SQUASHFS error: Failed to read block 0x0: -5 [ 309.137283][ T9462] unable to read squashfs_super_block [ 309.162681][ T6018] playstation 0003:054C:0BA0.0010: Failed to retrieve DualShock4 pairing info: -71 [ 309.177820][ T6018] playstation 0003:054C:0BA0.0010: Failed to get MAC address from DualShock4 [ 309.186966][ T6018] playstation 0003:054C:0BA0.0010: Failed to create dualshock4. [ 309.201188][ T5954] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.211489][ T6018] playstation 0003:054C:0BA0.0010: probe with driver playstation failed with error -71 [ 309.223247][ T5954] usb 7-1: config 0 has no interface number 0 [ 309.229512][ T5954] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 309.264911][ T6018] usb 6-1: USB disconnect, device number 29 [ 309.278977][ T9457] kvm: MWAIT instruction emulated as NOP! [ 309.291221][ T5954] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 309.345605][ T5954] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 309.377971][ T5954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.537151][ T5954] usb 7-1: config 0 descriptor?? [ 309.551635][ T9452] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 309.707685][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 309.729171][ T5954] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 309.835153][ T9452] fuse: Bad value for 'group_id' [ 309.870007][ T9452] fuse: Bad value for 'group_id' [ 309.919532][ T30] audit: type=1400 audit(1755039428.782:663): avc: denied { mount } for pid=9451 comm="syz.6.824" name="/" dev="autofs" ino=23315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 309.949201][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 309.960435][ T5892] usb 7-1: USB disconnect, device number 9 [ 310.186997][ T5954] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 310.420411][ T10] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 310.460777][ T5954] usb 3-1: device descriptor read/64, error -71 [ 310.590709][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 310.608323][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.620872][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.636092][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 310.645660][ T10] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 310.654767][ T10] usb 6-1: Product: syz [ 310.659052][ T10] usb 6-1: Manufacturer: syz [ 310.663988][ T10] usb 6-1: SerialNumber: syz [ 310.697490][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input21 [ 310.714941][ T30] audit: type=1400 audit(1755039429.562:664): avc: denied { unmount } for pid=8291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 310.756224][ T5892] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 311.034380][ T5954] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 311.053610][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 311.067835][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short [ 311.078743][ T5892] usb 4-1: config 247 has an invalid interface number: 145 but max is 0 [ 311.109363][ T5892] usb 4-1: config 247 has no interface number 0 [ 311.204298][ T5954] usb 3-1: device descriptor read/64, error -71 [ 311.497264][ T5892] usb 4-1: config 247 interface 145 has no altsetting 0 [ 311.506793][ T5892] usb 4-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=1a.98 [ 311.526491][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.606857][ T5892] usb 4-1: Product: syz [ 311.613982][ T9500] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[9500] [ 311.625084][ T5892] usb 4-1: Manufacturer: syz [ 311.625508][ T5954] usb usb3-port1: attempt power cycle [ 311.629810][ T5892] usb 4-1: SerialNumber: syz [ 312.114368][ T9505] netlink: 'syz.6.837': attribute type 10 has an invalid length. [ 312.151120][ T5954] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 312.151849][ T9505] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.179866][ T9505] bond0: (slave team0): Enslaving as an active interface with an up link [ 312.408489][ T9489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.442732][ T5954] usb 3-1: device descriptor read/8, error -71 [ 312.529571][ T5892] upd78f0730 4-1:247.145: upd78f0730 converter detected [ 312.575723][ T5892] usb 4-1: upd78f0730 converter now attached to ttyUSB0 [ 312.722374][ T5954] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 312.868910][ T5892] usb 4-1: USB disconnect, device number 27 [ 312.881205][ T5954] usb 3-1: device descriptor read/8, error -71 [ 312.952917][ T9513] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[9513] [ 313.284094][ T5892] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 313.284625][ T5954] usb usb3-port1: unable to enumerate USB device [ 313.349244][ T5892] upd78f0730 4-1:247.145: device disconnected [ 313.409435][ T30] audit: type=1400 audit(1755039432.262:665): avc: denied { setattr } for pid=9518 comm="syz.4.842" name="RDS" dev="sockfs" ino=23473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 313.648736][ T30] audit: type=1400 audit(1755039432.512:666): avc: denied { mounton } for pid=9525 comm="syz.3.843" path="/180/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 313.879305][ T9535] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[9535] [ 313.920847][ T30] audit: type=1400 audit(1755039432.562:667): avc: denied { read } for pid=9526 comm="syz.6.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 314.441016][ T5892] usb 6-1: USB disconnect, device number 30 [ 314.511986][ T5892] appletouch 6-1:1.0: input: appletouch disconnected [ 314.691760][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.847'. [ 315.310248][ T30] audit: type=1400 audit(1755039434.172:668): avc: denied { read } for pid=9542 comm="syz.3.848" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.408874][ T9551] Invalid source name [ 315.549342][ T9543] binder: 9540:9543 ioctl c0306201 0 returned -14 [ 316.641593][ T9564] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 316.708555][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.941737][ T9576] ptrace attach of "./syz-executor exec"[6182] was attempted by "./syz-executor exec"[9576] [ 317.035062][ T9576] overlayfs: overlapping lowerdir path [ 317.082938][ T9575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.128849][ T30] audit: type=1400 audit(1755039435.992:669): avc: denied { getopt } for pid=9574 comm="syz.3.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 317.165119][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 317.175416][ T9567] block nbd1: server does not support multiple connections per device. [ 317.247889][ T9567] block nbd1: shutting down sockets [ 317.661418][ T9596] delete_channel: no stack [ 318.008123][ T9598] netlink: 104 bytes leftover after parsing attributes in process `syz.5.861'. [ 318.674124][ T9600] netlink: 'syz.3.856': attribute type 2 has an invalid length. [ 318.737480][ T30] audit: type=1400 audit(1755039437.602:670): avc: denied { create } for pid=9603 comm="syz.5.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 318.757604][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.042046][ T9612] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 319.350787][ T5892] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 319.362168][ T30] audit: type=1400 audit(1755039438.232:671): avc: denied { unmount } for pid=6182 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 319.521512][ T9617] binder: 9615:9617 ioctl 400c620e 200000000140 returned -22 [ 319.541098][ T5892] usb 7-1: Using ep0 maxpacket: 32 [ 319.699371][ T5892] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.266372][ T5892] usb 7-1: config 0 has no interface number 0 [ 320.273197][ T5892] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.440695][ T5892] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.451265][ T5892] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 320.460323][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.470306][ T9623] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[9623] [ 320.501342][ T5892] usb 7-1: config 0 descriptor?? [ 320.601865][ T9623] overlayfs: overlapping lowerdir path [ 321.470494][ T9637] netlink: 104 bytes leftover after parsing attributes in process `syz.3.873'. [ 321.481835][ T9639] macsec0: entered promiscuous mode [ 321.487246][ T9639] macsec0: entered allmulticast mode [ 321.492653][ T9639] veth1_macvtap: entered allmulticast mode [ 321.511032][ T9641] i2c i2c-0: Invalid block write size 33 [ 321.512082][ T9630] sp0: Synchronizing with TNC [ 321.640856][ T5892] uclogic 0003:28BD:0094.0011: pen parameters not found [ 321.689638][ T5892] uclogic 0003:28BD:0094.0011: interface is invalid, ignoring [ 321.751957][ T30] audit: type=1400 audit(1755039440.622:672): avc: denied { write } for pid=9629 comm="syz.2.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 321.969927][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.013359][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.106444][ T9608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.121243][ T9648] [U] è [ 322.162166][ T9608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.818718][ T24] usb 7-1: USB disconnect, device number 10 [ 323.092309][ T30] audit: type=1400 audit(1755039441.962:673): avc: denied { getopt } for pid=9659 comm="syz.2.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 323.166723][ T9660] syz.2.877: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 323.244718][ T9660] CPU: 1 UID: 0 PID: 9660 Comm: syz.2.877 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 323.244747][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 323.244757][ T9660] Call Trace: [ 323.244763][ T9660] [ 323.244770][ T9660] dump_stack_lvl+0x16c/0x1f0 [ 323.244793][ T9660] warn_alloc+0x248/0x3a0 [ 323.244813][ T9660] ? __pfx_warn_alloc+0x10/0x10 [ 323.244842][ T9660] ? xskq_create+0xfb/0x1d0 [ 323.244867][ T9660] ? __vmalloc_node_noprof+0xad/0xf0 [ 323.244897][ T9660] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 323.244932][ T9660] ? xskq_create+0xfb/0x1d0 [ 323.244963][ T9660] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 323.244998][ T9660] ? xskq_create+0xfb/0x1d0 [ 323.245020][ T9660] vmalloc_user_noprof+0x9e/0xe0 [ 323.245042][ T9660] ? xskq_create+0xfb/0x1d0 [ 323.245063][ T9660] xskq_create+0xfb/0x1d0 [ 323.245088][ T9660] xsk_setsockopt+0x792/0x9a0 [ 323.245114][ T9660] ? __pfx_xsk_setsockopt+0x10/0x10 [ 323.245137][ T9660] ? find_held_lock+0x2b/0x80 [ 323.245164][ T9660] ? selinux_socket_setsockopt+0x6a/0x80 [ 323.245187][ T9660] ? __pfx_xsk_setsockopt+0x10/0x10 [ 323.245213][ T9660] do_sock_setsockopt+0xf3/0x1d0 [ 323.245240][ T9660] __sys_setsockopt+0x1a0/0x230 [ 323.245268][ T9660] __x64_sys_setsockopt+0xbd/0x160 [ 323.245291][ T9660] ? do_syscall_64+0x91/0x4c0 [ 323.245307][ T9660] ? lockdep_hardirqs_on+0x7c/0x110 [ 323.245322][ T9660] do_syscall_64+0xcd/0x4c0 [ 323.245341][ T9660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.245357][ T9660] RIP: 0033:0x7fa837d8ebe9 [ 323.245370][ T9660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.245386][ T9660] RSP: 002b:00007fa838c53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 323.245403][ T9660] RAX: ffffffffffffffda RBX: 00007fa837fb5fa0 RCX: 00007fa837d8ebe9 [ 323.245414][ T9660] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 323.245424][ T9660] RBP: 00007fa837e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 323.245434][ T9660] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 323.245444][ T9660] R13: 00007fa837fb6038 R14: 00007fa837fb5fa0 R15: 00007fff6a35fbc8 [ 323.245474][ T9660] [ 323.469165][ T9660] Mem-Info: [ 323.472318][ T9660] active_anon:21457 inactive_anon:0 isolated_anon:0 [ 323.472318][ T9660] active_file:12606 inactive_file:40694 isolated_file:0 [ 323.472318][ T9660] unevictable:768 dirty:81 writeback:0 [ 323.472318][ T9660] slab_reclaimable:12127 slab_unreclaimable:129209 [ 323.472318][ T9660] mapped:45408 shmem:13165 pagetables:1294 [ 323.472318][ T9660] sec_pagetables:0 bounce:0 [ 323.472318][ T9660] kernel_misc_reclaimable:0 [ 323.472318][ T9660] free:1261498 free_pcp:15446 free_cma:0 [ 323.518135][ T9660] Node 0 active_anon:85828kB inactive_anon:0kB active_file:50424kB inactive_file:162572kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:181632kB dirty:324kB writeback:0kB shmem:51124kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12428kB pagetables:5048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 323.524892][ T9665] netlink: 532 bytes leftover after parsing attributes in process `syz.3.874'. [ 323.550128][ T9660] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 323.588970][ T9660] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 323.618098][ T9660] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 323.624069][ T9660] Node 0 DMA32 free:1152452kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:87576kB inactive_anon:0kB active_file:51324kB inactive_file:161244kB unevictable:1536kB writepending:324kB present:3129332kB managed:2539412kB mlocked:0kB bounce:0kB free_pcp:32788kB local_pcp:18496kB free_cma:0kB [ 323.656772][ T9660] lowmem_reserve[]: 0 0 1 1 1 [ 323.661574][ T9660] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 323.692781][ T9660] lowmem_reserve[]: 0 0 0 0 0 [ 323.697481][ T9660] Node 1 Normal free:3875680kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:28932kB local_pcp:15104kB free_cma:0kB [ 323.729042][ T9660] lowmem_reserve[]: 0 0 0 0 0 [ 323.733809][ T9660] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 323.746570][ T9660] Node 0 DMA32: 2481*4kB (UME) 1462*8kB (UE) 599*16kB (UE) 158*32kB (UME) 117*64kB (UE) 51*128kB (UME) 21*256kB (U) 20*512kB (UM) 13*1024kB (UME) 4*2048kB (UM) 260*4096kB (UM) = 1152356kB [ 323.765190][ T9660] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 323.783821][ T9660] Node 1 Normal: 200*4kB (UE) 50*8kB (UME) 35*16kB (UME) 60*32kB (UME) 22*64kB (UME) 9*128kB (UME) 3*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 943*4096kB (ME) = 3875680kB [ 323.817745][ T9660] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.850602][ T9660] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.863534][ T9660] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 323.875686][ T9660] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 323.885202][ T9660] 68018 total pagecache pages [ 323.889974][ T9660] 0 pages in swap cache [ 323.894185][ T9660] Free swap = 124996kB [ 323.900343][ T9660] Total swap = 124996kB [ 323.904752][ T9660] 2097051 pages RAM [ 323.908768][ T9660] 0 pages HighMem/MovableOnly [ 323.914584][ T9660] 430236 pages reserved [ 323.918778][ T9660] 0 pages cma reserved [ 324.158530][ T5856] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 324.390907][ T5954] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 324.440974][ T30] audit: type=1400 audit(1755039443.312:674): avc: denied { write } for pid=9673 comm="syz.6.881" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 324.515066][ T9676] overlayfs: overlapping lowerdir path [ 324.550751][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 325.452214][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.463894][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.475558][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.488598][ T5954] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 325.498589][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.512403][ T5954] usb 3-1: config 0 descriptor?? [ 325.588319][ T9679] netlink: 104 bytes leftover after parsing attributes in process `syz.4.884'. [ 326.122774][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 326.561799][ T5954] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 326.569319][ T5954] microsoft 0003:045E:07DA.0012: unknown main item tag 0x5 [ 326.586135][ T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 326.615201][ T24] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 326.630630][ T5954] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 326.648364][ T5954] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 326.883338][ T24] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.896752][ T5954] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 326.904059][ T5954] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 326.911421][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 326.920824][ T5954] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 326.928100][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.940976][ T5954] microsoft 0003:045E:07DA.0012: unknown global tag 0xe [ 326.964579][ T5954] microsoft 0003:045E:07DA.0012: item 0 4 1 14 parsing failed [ 326.988297][ T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.018957][ T5954] microsoft 0003:045E:07DA.0012: parse failed [ 327.035595][ T24] usb 4-1: invalid MIDI out EP 0 [ 327.055474][ T5954] microsoft 0003:045E:07DA.0012: probe with driver microsoft failed with error -22 [ 327.210518][ T9707] overlayfs: overlapping lowerdir path [ 327.249910][ T9706] ptrace attach of "./syz-executor exec"[6182] was attempted by "./syz-executor exec"[9706] [ 327.391133][ T5954] usb 3-1: USB disconnect, device number 43 [ 327.575615][ T9709] FAULT_INJECTION: forcing a failure. [ 327.575615][ T9709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.576362][ T9709] [ 327.576369][ T9709] ====================================================== [ 327.576376][ T9709] WARNING: possible circular locking dependency detected [ 327.576383][ T9709] 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 Not tainted [ 327.576393][ T9709] ------------------------------------------------------ [ 327.576399][ T9709] syz.2.891/9709 is trying to acquire lock: [ 327.576408][ T9709] ffffffff8e4ce820 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 327.576454][ T9709] [ 327.576454][ T9709] but task is already holding lock: [ 327.576458][ T9709] ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 327.576494][ T9709] [ 327.576494][ T9709] which lock already depends on the new lock. [ 327.576494][ T9709] [ 327.576500][ T9709] [ 327.576500][ T9709] the existing dependency chain (in reverse order) is: [ 327.576505][ T9709] [ 327.576505][ T9709] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 327.576525][ T9709] _raw_spin_lock_nested+0x31/0x40 [ 327.576550][ T9709] raw_spin_rq_lock_nested+0x29/0x130 [ 327.576568][ T9709] task_rq_lock+0xcf/0x490 [ 327.576586][ T9709] cgroup_move_task+0x81/0x2a0 [ 327.576606][ T9709] css_set_move_task+0x288/0x5f0 [ 327.576620][ T9709] cgroup_post_fork+0x201/0x9e0 [ 327.576639][ T9709] copy_process+0x5cfa/0x7690 [ 327.576660][ T9709] kernel_clone+0xfc/0x930 [ 327.576679][ T9709] user_mode_thread+0xc7/0x110 [ 327.576700][ T9709] rest_init+0x23/0x2b0 [ 327.576718][ T9709] start_kernel+0x3ee/0x4d0 [ 327.576741][ T9709] x86_64_start_reservations+0x18/0x30 [ 327.576764][ T9709] x86_64_start_kernel+0x130/0x190 [ 327.576785][ T9709] common_startup_64+0x13e/0x148 [ 327.576803][ T9709] [ 327.576803][ T9709] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 327.576822][ T9709] _raw_spin_lock_irqsave+0x3a/0x60 [ 327.576844][ T9709] try_to_wake_up+0xb7/0x1870 [ 327.576861][ T9709] __wake_up_common+0x135/0x1f0 [ 327.576884][ T9709] __wake_up+0x31/0x60 [ 327.576903][ T9709] tty_port_default_wakeup+0x2a/0x40 [ 327.576922][ T9709] serial8250_tx_chars+0x68e/0x860 [ 327.576940][ T9709] serial8250_handle_irq+0x761/0xcb0 [ 327.576959][ T9709] serial8250_default_handle_irq+0x9a/0x250 [ 327.576979][ T9709] serial8250_interrupt+0xf5/0x1b0 [ 327.576999][ T9709] __handle_irq_event_percpu+0x22c/0x7d0 [ 327.577019][ T9709] handle_irq_event+0xab/0x1e0 [ 327.577036][ T9709] handle_edge_irq+0x3ca/0x9e0 [ 327.577053][ T9709] __common_interrupt+0xd0/0x2f0 [ 327.577074][ T9709] common_interrupt+0xba/0xe0 [ 327.577093][ T9709] asm_common_interrupt+0x26/0x40 [ 327.577109][ T9709] pv_native_safe_halt+0xf/0x20 [ 327.577133][ T9709] default_idle+0x13/0x20 [ 327.577150][ T9709] default_idle_call+0x6d/0xb0 [ 327.577167][ T9709] do_idle+0x391/0x510 [ 327.577184][ T9709] cpu_startup_entry+0x4f/0x60 [ 327.577202][ T9709] start_secondary+0x21d/0x2b0 [ 327.577230][ T9709] common_startup_64+0x13e/0x148 [ 327.577246][ T9709] [ 327.577246][ T9709] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 327.577266][ T9709] _raw_spin_lock_irqsave+0x3a/0x60 [ 327.577288][ T9709] __wake_up+0x1c/0x60 [ 327.577307][ T9709] tty_port_default_wakeup+0x2a/0x40 [ 327.577324][ T9709] serial8250_tx_chars+0x68e/0x860 [ 327.577341][ T9709] serial8250_handle_irq+0x761/0xcb0 [ 327.577360][ T9709] serial8250_default_handle_irq+0x9a/0x250 [ 327.577384][ T9709] serial8250_interrupt+0xf5/0x1b0 [ 327.577404][ T9709] __handle_irq_event_percpu+0x22c/0x7d0 [ 327.577422][ T9709] handle_irq_event+0xab/0x1e0 [ 327.577440][ T9709] handle_edge_irq+0x3ca/0x9e0 [ 327.577456][ T9709] __common_interrupt+0xd0/0x2f0 [ 327.577475][ T9709] common_interrupt+0xba/0xe0 [ 327.577494][ T9709] asm_common_interrupt+0x26/0x40 [ 327.577509][ T9709] pv_native_safe_halt+0xf/0x20 [ 327.577532][ T9709] default_idle+0x13/0x20 [ 327.577549][ T9709] default_idle_call+0x6d/0xb0 [ 327.577566][ T9709] do_idle+0x391/0x510 [ 327.577582][ T9709] cpu_startup_entry+0x4f/0x60 [ 327.577600][ T9709] start_secondary+0x21d/0x2b0 [ 327.577621][ T9709] common_startup_64+0x13e/0x148 [ 327.577638][ T9709] [ 327.577638][ T9709] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 327.577657][ T9709] _raw_spin_lock_irqsave+0x3a/0x60 [ 327.577679][ T9709] serial8250_console_write+0x181/0x1890 [ 327.577699][ T9709] console_flush_all+0x801/0xc60 [ 327.577716][ T9709] console_unlock+0xd8/0x210 [ 327.577733][ T9709] vprintk_emit+0x418/0x6d0 [ 327.577751][ T9709] _printk+0xc7/0x100 [ 327.577762][ T9709] register_console+0xc2d/0x11b0 [ 327.577781][ T9709] univ8250_console_init+0x5f/0x90 [ 327.577806][ T9709] console_init+0x14f/0x680 [ 327.577828][ T9709] start_kernel+0x29f/0x4d0 [ 327.577849][ T9709] x86_64_start_reservations+0x18/0x30 [ 327.577872][ T9709] x86_64_start_kernel+0x130/0x190 [ 327.577894][ T9709] common_startup_64+0x13e/0x148 [ 327.577910][ T9709] [ 327.577910][ T9709] -> #0 (console_owner){-.-.}-{0:0}: [ 327.577929][ T9709] __lock_acquire+0x12a6/0x1ce0 [ 327.577952][ T9709] lock_acquire+0x179/0x350 [ 327.577974][ T9709] console_lock_spinning_enable+0xb0/0xd0 [ 327.577991][ T9709] console_flush_all+0x7aa/0xc60 [ 327.578008][ T9709] console_unlock+0xd8/0x210 [ 327.578025][ T9709] vprintk_emit+0x418/0x6d0 [ 327.578043][ T9709] _printk+0xc7/0x100 [ 327.578054][ T9709] should_fail_ex+0x4e7/0x640 [ 327.578070][ T9709] strncpy_from_user+0x3b/0x2e0 [ 327.578084][ T9709] strncpy_from_user_nofault+0x7f/0x180 [ 327.578102][ T9709] bpf_bprintf_prepare+0xe90/0x13f0 [ 327.578125][ T9709] bpf_trace_printk+0xda/0x190 [ 327.578139][ T9709] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 327.578151][ T9709] bpf_trace_run2+0x236/0x590 [ 327.578166][ T9709] __bpf_trace_contention_begin+0xc9/0x110 [ 327.578190][ T9709] trace_contention_begin.constprop.0+0xde/0x160 [ 327.578208][ T9709] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 327.578228][ T9709] do_raw_spin_lock+0x20e/0x2b0 [ 327.578243][ T9709] raw_spin_rq_lock_nested+0x7e/0x130 [ 327.578261][ T9709] __schedule+0x307/0x5de0 [ 327.578284][ T9709] preempt_schedule_irq+0x51/0x90 [ 327.578297][ T9709] irqentry_exit+0x36/0x90 [ 327.578309][ T9709] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 327.578325][ T9709] format_decode+0x128/0xd40 [ 327.578345][ T9709] vsnprintf+0x156/0x1160 [ 327.578357][ T9709] tomoyo_supervisor+0x11d/0x13b0 [ 327.578372][ T9709] tomoyo_path_number_perm+0x448/0x580 [ 327.578390][ T9709] security_file_ioctl+0x9b/0x240 [ 327.578411][ T9709] __x64_sys_ioctl+0xb7/0x210 [ 327.578434][ T9709] do_syscall_64+0xcd/0x4c0 [ 327.578448][ T9709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.578463][ T9709] [ 327.578463][ T9709] other info that might help us debug this: [ 327.578463][ T9709] [ 327.578467][ T9709] Chain exists of: [ 327.578467][ T9709] console_owner --> &p->pi_lock --> &rq->__lock [ 327.578467][ T9709] [ 327.578489][ T9709] Possible unsafe locking scenario: [ 327.578489][ T9709] [ 327.578493][ T9709] CPU0 CPU1 [ 327.578497][ T9709] ---- ---- [ 327.578501][ T9709] lock(&rq->__lock); [ 327.578510][ T9709] lock(&p->pi_lock); [ 327.578520][ T9709] lock(&rq->__lock); [ 327.578530][ T9709] lock(console_owner); [ 327.578539][ T9709] [ 327.578539][ T9709] *** DEADLOCK *** [ 327.578539][ T9709] [ 327.578543][ T9709] 5 locks held by syz.2.891/9709: [ 327.578551][ T9709] #0: ffffffff8f05b2f0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x237/0x580 [ 327.578589][ T9709] #1: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 327.578627][ T9709] #2: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1bc/0x590 [ 327.578662][ T9709] #3: ffffffff8e5aec60 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 327.578694][ T9709] #4: ffffffff8e5aecd0 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 327.578731][ T9709] [ 327.578731][ T9709] stack backtrace: [ 327.578738][ T9709] CPU: 1 UID: 0 PID: 9709 Comm: syz.2.891 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 327.578758][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 327.578768][ T9709] Call Trace: [ 327.578773][ T9709] [ 327.578779][ T9709] dump_stack_lvl+0x116/0x1f0 [ 327.578795][ T9709] print_circular_bug+0x275/0x350 [ 327.578820][ T9709] check_noncircular+0x14c/0x170 [ 327.578847][ T9709] __lock_acquire+0x12a6/0x1ce0 [ 327.578875][ T9709] lock_acquire+0x179/0x350 [ 327.578900][ T9709] ? console_lock_spinning_enable+0x9f/0xd0 [ 327.578920][ T9709] ? console_lock_spinning_enable+0x88/0xd0 [ 327.578941][ T9709] console_lock_spinning_enable+0xb0/0xd0 [ 327.578959][ T9709] ? console_lock_spinning_enable+0x9f/0xd0 [ 327.578977][ T9709] console_flush_all+0x7aa/0xc60 [ 327.578999][ T9709] ? __pfx_console_flush_all+0x10/0x10 [ 327.579022][ T9709] ? is_printk_cpu_sync_owner+0x32/0x40 [ 327.579046][ T9709] console_unlock+0xd8/0x210 [ 327.579065][ T9709] ? __pfx_console_unlock+0x10/0x10 [ 327.579084][ T9709] ? do_raw_spin_unlock+0xe0/0x230 [ 327.579103][ T9709] ? _printk+0xc7/0x100 [ 327.579117][ T9709] ? __down_trylock_console_sem+0xb0/0x140 [ 327.579134][ T9709] vprintk_emit+0x418/0x6d0 [ 327.579155][ T9709] ? __pfx_vprintk_emit+0x10/0x10 [ 327.579175][ T9709] ? ring_buffer_unlock_commit+0x2e8/0x620 [ 327.579195][ T9709] _printk+0xc7/0x100 [ 327.579213][ T9709] ? __pfx__printk+0x10/0x10 [ 327.579230][ T9709] ? __pfx____ratelimit+0x10/0x10 [ 327.579257][ T9709] should_fail_ex+0x4e7/0x640 [ 327.579275][ T9709] strncpy_from_user+0x3b/0x2e0 [ 327.579292][ T9709] strncpy_from_user_nofault+0x7f/0x180 [ 327.579312][ T9709] bpf_bprintf_prepare+0xe90/0x13f0 [ 327.579339][ T9709] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 327.579370][ T9709] ? bpf_trace_run2+0x3e1/0x590 [ 327.579385][ T9709] bpf_trace_printk+0xda/0x190 [ 327.579400][ T9709] ? __pfx_bpf_trace_printk+0x10/0x10 [ 327.579418][ T9709] ? bpf_trace_run2+0x3e1/0x590 [ 327.579438][ T9709] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 327.579452][ T9709] bpf_trace_run2+0x236/0x590 [ 327.579467][ T9709] ? __pfx_bpf_trace_run2+0x10/0x10 [ 327.579483][ T9709] ? ring_buffer_unlock_commit+0x2e8/0x620 [ 327.579501][ T9709] ? trace_buffer_unlock_commit_regs+0xd7/0x550 [ 327.579526][ T9709] __bpf_trace_contention_begin+0xc9/0x110 [ 327.579552][ T9709] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 327.579582][ T9709] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 327.579602][ T9709] trace_contention_begin.constprop.0+0xde/0x160 [ 327.579621][ T9709] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 327.579639][ T9709] ? __lock_acquire+0xb97/0x1ce0 [ 327.579664][ T9709] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 327.579682][ T9709] ? bpf_trace_printk+0x126/0x190 [ 327.579697][ T9709] ? __schedule+0x11a3/0x5de0 [ 327.579723][ T9709] do_raw_spin_lock+0x20e/0x2b0 [ 327.579741][ T9709] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 327.579758][ T9709] ? rcu_qs+0x2b/0xe0 [ 327.579776][ T9709] ? rcu_note_context_switch+0x192/0x1e00 [ 327.579799][ T9709] raw_spin_rq_lock_nested+0x7e/0x130 [ 327.579819][ T9709] ? preempt_schedule_irq+0x51/0x90 [ 327.579833][ T9709] __schedule+0x307/0x5de0 [ 327.579860][ T9709] ? __bpf_trace_contention_begin+0xc9/0x110 [ 327.579886][ T9709] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 327.579914][ T9709] ? __pfx___schedule+0x10/0x10 [ 327.579939][ T9709] ? is_bpf_text_address+0x8a/0x1a0 [ 327.579958][ T9709] ? rcu_is_watching+0x12/0xc0 [ 327.579979][ T9709] ? mark_held_locks+0x49/0x80 [ 327.580004][ T9709] preempt_schedule_irq+0x51/0x90 [ 327.580019][ T9709] irqentry_exit+0x36/0x90 [ 327.580034][ T9709] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 327.580051][ T9709] RIP: 0010:format_decode+0x128/0xd40 [ 327.580074][ T9709] Code: ea 03 0f b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 ec 08 00 00 45 0f b6 65 00 31 ff 4c 89 eb 44 89 e6 e8 a8 ba 2b f6 <45> 84 e4 74 6c 49 bf 00 00 00 00 00 fc ff df eb 3e e8 b2 bf 2b f6 [ 327.580090][ T9709] RSP: 0018:ffffc9000e6578c8 EFLAGS: 00000293 [ 327.580102][ T9709] RAX: 0000000000000000 RBX: ffffffff8c0f40a5 RCX: ffffffff8b8fd358 [ 327.580113][ T9709] RDX: ffff888028e3a440 RSI: 0000000000000000 RDI: 0000000000000001 [ 327.580123][ T9709] RBP: ffffc9000e657968 R08: 0000000000000001 R09: 0000000000000000 [ 327.580133][ T9709] R10: 0000000000000025 R11: 0000000000000000 R12: 0000000000000025 [ 327.580142][ T9709] R13: ffffffff8c0f40a5 R14: ffffc9000e6579e8 R15: 0000000000000025 [ 327.580156][ T9709] ? format_decode+0x128/0xd40 [ 327.580180][ T9709] ? format_decode+0x128/0xd40 [ 327.580202][ T9709] ? __pfx_format_decode+0x10/0x10 [ 327.580231][ T9709] ? number+0x9aa/0xc70 [ 327.580252][ T9709] vsnprintf+0x156/0x1160 [ 327.580266][ T9709] ? __pfx_number+0x10/0x10 [ 327.580287][ T9709] ? __pfx_vsnprintf+0x10/0x10 [ 327.580304][ T9709] tomoyo_supervisor+0x11d/0x13b0 [ 327.580321][ T9709] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 327.580336][ T9709] ? __pfx_vsnprintf+0x10/0x10 [ 327.580357][ T9709] ? tomoyo_check_acl+0x9f/0x410 [ 327.580373][ T9709] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 327.580397][ T9709] tomoyo_path_number_perm+0x448/0x580 [ 327.580417][ T9709] ? find_held_lock+0x14/0x80 [ 327.580436][ T9709] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 327.580456][ T9709] ? finish_task_switch.isra.0+0x21c/0xc10 [ 327.580487][ T9709] ? find_held_lock+0x2b/0x80 [ 327.580506][ T9709] ? hook_file_ioctl_common+0x145/0x410 [ 327.580525][ T9709] ? __fget_files+0x20e/0x3c0 [ 327.580542][ T9709] security_file_ioctl+0x9b/0x240 [ 327.580560][ T9709] __x64_sys_ioctl+0xb7/0x210 [ 327.580581][ T9709] do_syscall_64+0xcd/0x4c0 [ 327.580596][ T9709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.580609][ T9709] RIP: 0033:0x7fa837d8ebe9 [ 327.580621][ T9709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.580636][ T9709] RSP: 002b:00007fa838c53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 327.580651][ T9709] RAX: ffffffffffffffda RBX: 00007fa837fb5fa0 RCX: 00007fa837d8ebe9 [ 327.580661][ T9709] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000006 [ 327.580671][ T9709] RBP: 00007fa838c53090 R08: 0000000000000000 R09: 0000000000000000 [ 327.580681][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.580690][ T9709] R13: 00007fa837fb6038 R14: 00007fa837fb5fa0 R15: 00007fff6a35fbc8 [ 327.580707][ T9709] [ 328.994103][ T9709] CPU: 1 UID: 0 PID: 9709 Comm: syz.2.891 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 328.994124][ T9709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.994133][ T9709] Call Trace: [ 328.994146][ T9709] [ 328.994151][ T9709] dump_stack_lvl+0x116/0x1f0 [ 328.994170][ T9709] should_fail_ex+0x512/0x640 [ 328.994185][ T9709] strncpy_from_user+0x3b/0x2e0 [ 328.994204][ T9709] strncpy_from_user_nofault+0x7f/0x180 [ 328.994221][ T9709] bpf_bprintf_prepare+0xe90/0x13f0 [ 328.994243][ T9709] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 328.994266][ T9709] ? bpf_trace_run2+0x3e1/0x590 [ 328.994279][ T9709] bpf_trace_printk+0xda/0x190 [ 328.994291][ T9709] ? __pfx_bpf_trace_printk+0x10/0x10 [ 328.994305][ T9709] ? bpf_trace_run2+0x3e1/0x590 [ 328.994321][ T9709] bpf_prog_7c77c7e0f6645ad8+0x3e/0x44 [ 328.994331][ T9709] bpf_trace_run2+0x236/0x590 [ 328.994345][ T9709] ? __pfx_bpf_trace_run2+0x10/0x10 [ 328.994358][ T9709] ? ring_buffer_unlock_commit+0x2e8/0x620 [ 328.994373][ T9709] ? trace_buffer_unlock_commit_regs+0xd7/0x550 [ 328.994392][ T9709] __bpf_trace_contention_begin+0xc9/0x110 [ 328.994413][ T9709] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 328.994435][ T9709] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 328.994451][ T9709] trace_contention_begin.constprop.0+0xde/0x160 [ 328.994466][ T9709] __pv_queued_spin_lock_slowpath+0x109/0xcf0 [ 328.994482][ T9709] ? __lock_acquire+0xb97/0x1ce0 [ 328.994501][ T9709] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 328.994515][ T9709] ? bpf_trace_printk+0x126/0x190 [ 328.994526][ T9709] ? __schedule+0x11a3/0x5de0 [ 328.994547][ T9709] do_raw_spin_lock+0x20e/0x2b0 [ 328.994560][ T9709] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 328.994573][ T9709] ? rcu_qs+0x2b/0xe0 [ 328.994587][ T9709] ? rcu_note_context_switch+0x192/0x1e00 [ 328.994605][ T9709] raw_spin_rq_lock_nested+0x7e/0x130 [ 328.994621][ T9709] ? preempt_schedule_irq+0x51/0x90 [ 328.994632][ T9709] __schedule+0x307/0x5de0 [ 328.994653][ T9709] ? __bpf_trace_contention_begin+0xc9/0x110 [ 328.994673][ T9709] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 328.994694][ T9709] ? __pfx___schedule+0x10/0x10 [ 328.994712][ T9709] ? is_bpf_text_address+0x8a/0x1a0 [ 328.994726][ T9709] ? rcu_is_watching+0x12/0xc0 [ 328.994742][ T9709] ? mark_held_locks+0x49/0x80 [ 328.994761][ T9709] preempt_schedule_irq+0x51/0x90 [ 328.994772][ T9709] irqentry_exit+0x36/0x90 [ 328.994783][ T9709] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 328.994797][ T9709] RIP: 0010:format_decode+0x128/0xd40 [ 328.994816][ T9709] Code: ea 03 0f b6 04 02 4c 89 ea 83 e2 07 38 d0 7f 08 84 c0 0f 85 ec 08 00 00 45 0f b6 65 00 31 ff 4c 89 eb 44 89 e6 e8 a8 ba 2b f6 <45> 84 e4 74 6c 49 bf 00 00 00 00 00 fc ff df eb 3e e8 b2 bf 2b f6 [ 328.994829][ T9709] RSP: 0018:ffffc9000e6578c8 EFLAGS: 00000293 [ 328.994841][ T9709] RAX: 0000000000000000 RBX: ffffffff8c0f40a5 RCX: ffffffff8b8fd358 [ 328.994849][ T9709] RDX: ffff888028e3a440 RSI: 0000000000000000 RDI: 0000000000000001 [ 328.994857][ T9709] RBP: ffffc9000e657968 R08: 0000000000000001 R09: 0000000000000000 [ 328.994865][ T9709] R10: 0000000000000025 R11: 0000000000000000 R12: 0000000000000025 [ 328.994872][ T9709] R13: ffffffff8c0f40a5 R14: ffffc9000e6579e8 R15: 0000000000000025 [ 328.994883][ T9709] ? format_decode+0x128/0xd40 [ 328.994901][ T9709] ? format_decode+0x128/0xd40 [ 328.994918][ T9709] ? __pfx_format_decode+0x10/0x10 [ 328.994936][ T9709] ? number+0x9aa/0xc70 [ 328.994952][ T9709] vsnprintf+0x156/0x1160 [ 328.994962][ T9709] ? __pfx_number+0x10/0x10 [ 328.994978][ T9709] ? __pfx_vsnprintf+0x10/0x10 [ 328.994991][ T9709] tomoyo_supervisor+0x11d/0x13b0 [ 328.995005][ T9709] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 328.995016][ T9709] ? __pfx_vsnprintf+0x10/0x10 [ 328.995032][ T9709] ? tomoyo_check_acl+0x9f/0x410 [ 328.995045][ T9709] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 328.995063][ T9709] tomoyo_path_number_perm+0x448/0x580 [ 328.995078][ T9709] ? find_held_lock+0x14/0x80 [ 328.995092][ T9709] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 328.995107][ T9709] ? finish_task_switch.isra.0+0x21c/0xc10 [ 328.995131][ T9709] ? find_held_lock+0x2b/0x80 [ 328.995145][ T9709] ? hook_file_ioctl_common+0x145/0x410 [ 328.995159][ T9709] ? __fget_files+0x20e/0x3c0 [ 328.995175][ T9709] security_file_ioctl+0x9b/0x240 [ 328.995198][ T9709] __x64_sys_ioctl+0xb7/0x210 [ 328.995218][ T9709] do_syscall_64+0xcd/0x4c0 [ 328.995232][ T9709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.995244][ T9709] RIP: 0033:0x7fa837d8ebe9 [ 328.995253][ T9709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.995266][ T9709] RSP: 002b:00007fa838c53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 328.995277][ T9709] RAX: ffffffffffffffda RBX: 00007fa837fb5fa0 RCX: 00007fa837d8ebe9 [ 328.995285][ T9709] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000006 [ 328.995292][ T9709] RBP: 00007fa838c53090 R08: 0000000000000000 R09: 0000000000000000 [ 328.995300][ T9709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.995307][ T9709] R13: 00007fa837fb6038 R14: 00007fa837fb5fa0 R15: 00007fff6a35fbc8 [ 328.995320][ T9709] [ 329.495293][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.665415][ T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 329.900627][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 330.050679][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 330.057025][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.067965][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.077886][ T10] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 330.086971][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.098633][ T10] usb 5-1: config 0 descriptor?? [ 330.309523][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 330.316189][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 330.325769][ T10] usb 5-1: USB disconnect, device number 30 [ 330.593838][ T24] usb 4-1: USB disconnect, device number 28