last executing test programs: 4m6.869054509s ago: executing program 2 (id=1738): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) 4m6.716566152s ago: executing program 2 (id=1740): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r0, r0, 0x0) 4m5.821417948s ago: executing program 2 (id=1744): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x1, 0x0, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000740)=0x1) r1 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x100004, 0x10, {}, {0x0, 0x8, 0x0, 0x0, 0xfd, 0x0, "00a300"}, 0x0, 0x2, {0x0}}) 4m5.355913837s ago: executing program 2 (id=1746): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 4m5.102429256s ago: executing program 2 (id=1748): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0xc050) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x68, 0x0, &(0x7f00000002c0)=[@enter_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}, @acquire_done={0x40106309, 0x2}], 0x1, 0x0, &(0x7f0000001ac0)="d4"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') fchdir(r6) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) syz_fuse_handle_req(r5, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180), 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r8, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 4m4.255434641s ago: executing program 2 (id=1752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 4m3.337591836s ago: executing program 32 (id=1752): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 3m26.718049114s ago: executing program 5 (id=1924): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) fspick(r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) 3m25.852676731s ago: executing program 3 (id=1931): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4888", 0x2}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3m25.645624231s ago: executing program 0 (id=1932): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3m25.64479037s ago: executing program 5 (id=1933): memfd_create(&(0x7f0000000040)='%\x00', 0x3) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m25.439913815s ago: executing program 5 (id=1935): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 3m25.360974108s ago: executing program 0 (id=1936): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x39}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000881) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x88}}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x80c00, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000680)={0x200, 0x4}) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0xa) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x1403, 0x200, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4004860) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x20, 0x23, 0x1f, {0x1f, 0xa, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3027c59ccb7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004080) 3m25.27274248s ago: executing program 5 (id=1937): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) 3m24.132618804s ago: executing program 5 (id=1942): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m23.640181553s ago: executing program 3 (id=1946): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@multicast1}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) 3m23.531573633s ago: executing program 3 (id=1947): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x21}, 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) 3m23.472484447s ago: executing program 0 (id=1948): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r2, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x100000000000, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="b00000000000000000000000000000000000000000200000000000000000000000000000000000000200000000000000000020000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000c0000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0021000000000000467700000000000000000000000000000000000001"], 0x0, 0x0, 0x0}) 3m23.428152738s ago: executing program 3 (id=1950): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000240)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16, @ANYBLOB="01000000000000000000011500002c000280060002004e2000000800090010000000060002004e210000080007000101000006000f000700000008000400ff7fffff1400028008000600020000000800090008000000080004000200000060000180080009005600000007000600666f00000c0007002000000002"], 0xc4}}, 0x4008800) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3m23.3167236s ago: executing program 3 (id=1951): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000057c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)='2', 0x1}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x20000000) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0xfffffffe, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f00000009c0)=""/224, 0xe0}], 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3m23.249889796s ago: executing program 0 (id=1953): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 3m22.974554335s ago: executing program 0 (id=1954): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505331, &(0x7f0000000300)={0x2000000}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x501000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a7379"], 0x54}}, 0x0) 3m22.928529629s ago: executing program 3 (id=1955): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r6, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000002c0)=0x65, 0x2) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f6e6500000000080008"], 0x50}}, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x6bf68237da62a01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8014) 3m22.611950854s ago: executing program 33 (id=1955): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r6, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000002c0)=0x65, 0x2) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) creat(&(0x7f00000005c0)='./file0\x00', 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f6e6500000000080008"], 0x50}}, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x6bf68237da62a01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8014) 3m22.607186617s ago: executing program 0 (id=1957): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0xc050) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xac, 0x0, &(0x7f00000002c0)=[@enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}, @acquire_done={0x40106309, 0x2}], 0x1, 0x0, &(0x7f0000001ac0)="d4"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') fchdir(r6) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) syz_fuse_handle_req(r5, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180), 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r8, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 3m22.355545561s ago: executing program 34 (id=1957): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x18, 0x1409, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0xc050) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xac, 0x0, &(0x7f00000002c0)=[@enter_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}}, @acquire_done={0x40106309, 0x2}], 0x1, 0x0, &(0x7f0000001ac0)="d4"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='fdinfo\x00') fchdir(r6) mkdir(&(0x7f0000000140)='./file0\x00', 0x12) syz_fuse_handle_req(r5, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180), 0x0}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r8, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 3m22.351050234s ago: executing program 5 (id=1959): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) 3m7.152521116s ago: executing program 35 (id=1959): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r2 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r2, 0x16) 17.392519345s ago: executing program 1 (id=2541): socket$nl_route(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00}}]}}}]}, 0x4c}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x5b04, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) 16.092575296s ago: executing program 4 (id=2548): readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.941134555s ago: executing program 8 (id=2549): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1000403, 0x2000000000032, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mm_collapse_huge_page_isolate\x00', r2, 0x0, 0xffffffff}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x40}], 0x1, 0x0, 0x0, 0x8d0}, 0x40004) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000540)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x4080}, 0x4004000) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000280)={0x40, 0x14, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x21, 0xef, {0xef, 0x31, "51d9dd646101976ab9c654b419483fd2298fccdbd3ec528083a37e08cc81714b41d695717ad8f1ad9cd45aebbcf0ab1c60ffb8af737931cc387e5cc8394380b45f1ee76111fd31aa4582e5b26f5130b3e7760f97bf68018ffd4c2c8f86c7763b2219a2af60be373205e3e8f7421c140295fd5ff98f6ec024d4cdc4611ec1f26000a1a21a46c4c13cb629935e95106046331ce29048b30995d635e4163b460ee05355d7c4a6de13a33c18d2d041b8422b352f302fd16c73c9254e18e634ba91946af06153d6994dbc71ab2cc3384fa62efd8973a4aa02e476b15980a782a96321cf2a681143ef993809e66f1569"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0x6, 0xa8, "68ddbb0179bcd0e5bb3b5ec095d9b50a24d99f55ae32e87a9b1d436d7ed0aef84800d46426ccab61d97eedd046d210cfbb9c4aa670780b2d2f215642d241c257d56b2a72e828ac0dc527706332bdd5b26a8f198cb6275df8792a6a6d7207ac54e44cabd7e2780c22a70446c7fd36de06dd0fdd4039576d608d9e3412f668ca4e1ac768ba59c8482b292c6b0c3c042487dde35749348e1fc1a32e3224d5b7b7479cd900b6caa37ea1"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x5, 0x2, 0x6, 0x465, 0x4, 0x8, 0x9, 0x4, 0x2, 0x6, 0xefbe, 0x4}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x9}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x4}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}}) 15.039319686s ago: executing program 4 (id=2550): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x5c0}}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x2) 14.013749821s ago: executing program 7 (id=2552): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) 13.871775903s ago: executing program 1 (id=2554): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100)) 12.056694486s ago: executing program 7 (id=2555): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000003, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 12.056039015s ago: executing program 6 (id=2556): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$alg(0x26, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.7532218s ago: executing program 1 (id=2557): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'batadv_slave_1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) syz_open_dev$media(&(0x7f0000000280), 0xd6e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000139000/0x1000)=nil, 0x1000, 0x15) 10.633611269s ago: executing program 8 (id=2558): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0) setreuid(0x0, 0xee00) inotify_init() syz_emit_ethernet(0x83, 0x0, 0x0) 10.631345265s ago: executing program 6 (id=2559): socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b010203010902"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 10.353058079s ago: executing program 7 (id=2560): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9.592932406s ago: executing program 8 (id=2561): syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/19, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) syz_open_dev$media(0x0, 0x8000009, 0x8800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r1, &(0x7f000000ae80)={0x2020}, 0x2020) 8.872037966s ago: executing program 7 (id=2562): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x8, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x8810}, 0x48080) socket$kcm(0x21, 0x2, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01001f774d20611e032f1b00000010002e800600040000000000000000000c00060001"], 0x30}}, 0x0) 8.304289834s ago: executing program 7 (id=2563): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000080)) r2 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x84) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f00000001c0)={0x40, 0x6, 0x84, {0x84, 0xa, "bf882320a070480b2d0618b01e7f939616d9d08f2133dbc0c0e8aaf14627ca9cc1462a93ede7ead42f52b94b3db8e80fdc6cf26f012553df63c09e889579448008a9c40ff68cca31c2aaa94fc28105b88d852b3079df26caad1d195dfc31f650e32460043d95f7592a130cc94092d881a8642b88adacd4f2ca970351491c323d6562"}}, &(0x7f0000000280)={0x0, 0x3, 0x91, @string={0x91, 0x3, "9f716b814adc753dfb0f1d4046c1dd28758022a4117a10b1f135ca3a218527726ad38f62662e4fa751439548f44e23518fa57b8c42cd040f4e66609bdf1d5d61346b91d85cd4759026efb86c13120ef12e2a0954bd5de305906f991bfce6b8e1a828ee88d237779d488e87bd7d124bd64c48eb7dacfa69fd539e28353e3828c30737755b7a2e8c48664aa184c47eb1"}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x9e, 0x6, "9b21ac18", "8d29cfc4"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x1d, 0x3, 0xd2, 0xc2, 0x800}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x20, 0x12, 0xe5, "8d7061bf210d13056ad197a3a6647726025d753a3787f28d55cde0eb753f0b5e19b51207b5231cfbdb33625cfda2d3f1bf322324c52d5440811fe7d9cdb0ebc156020eb00ae7142df06b3b1c4243b1cbdcedae6ded29f08974c1f3fe5dfca30960b8cd79ebbdc1e417c7f3362a205c0750a4edc906964e8b0827582072298b36956379cb5bc79827634a3b662362b3d00d20c93d45920f32d4734adf79e8407bad069833a0c3c4f8ff16f7196c3a98553e4979239253ae2e6ea5f4c76a9198724b2e76ffd15289dcc3a971641ba92f725d83216b5b7a220e7e9205bf9d427d0833ff833f54"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x1000, 0x29, [0x0]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x33}, &(0x7f0000000840)={0x40, 0x9, 0x1}, &(0x7f0000000880)={0x40, 0xb, 0x2, "95b2"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xb230}, &(0x7f0000000900)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000940)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, &(0x7f0000000980)={0x40, 0x19, 0x2, "cbe1"}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000a00)={0x40, 0x1c, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0xfd}}) syz_usb_disconnect(r2) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0x0, 0x0) syz_usb_disconnect(r2) 8.18828435s ago: executing program 4 (id=2564): msgctl$IPC_RMID(0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x6) socket(0x14, 0x80000, 0x9) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x1, 0x4, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x1fffffc, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000, 0x2b}, 0x0, @in6=@empty, 0x1, 0x0, 0x0, 0x7, 0x7, 0x0, 0x2}}, 0xe8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 7.990384595s ago: executing program 1 (id=2565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb20xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.026209992s ago: executing program 6 (id=2567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(0x0, 0x2, 0x2) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r3}) 3.995389861s ago: executing program 7 (id=2568): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 3.950962319s ago: executing program 1 (id=2569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r4, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9, 0x0, 0x20000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x400c0}, 0x40000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 3.883845373s ago: executing program 6 (id=2570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 2.752554708s ago: executing program 1 (id=2571): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4888", 0x2}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.655343774s ago: executing program 4 (id=2572): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000980)={0x14, 0x16, 0xb35, 0x70bd27, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 1.996339613s ago: executing program 6 (id=2573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000180)={'macvtap0\x00', @random="b400073500"}) 1.412581497s ago: executing program 4 (id=2574): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 684.647752ms ago: executing program 6 (id=2575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) io_uring_setup(0x4577, &(0x7f0000000540)={0x0, 0x988d, 0x8000, 0x2, 0x2be}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) 524.509735ms ago: executing program 8 (id=2576): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r2, &(0x7f0000000180)=ANY=[], 0xb8) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r3, r2, 0x0) 221.083317ms ago: executing program 4 (id=2577): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$l2tp(0x2, 0x2, 0x73) syz_open_procfs(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x5) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x14, 0x0) 0s ago: executing program 8 (id=2578): socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) kernel console output (not intermixed with test programs): 401][ T5892] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.779946][ T5982] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 547.779962][ T5892] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 547.796797][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.865272][T12656] tipc: Disabling bearer [ 547.958196][T12711] evm: overlay not supported [ 547.971595][ T5982] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 548.007630][ T5982] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 548.018843][ T5982] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 548.093095][ T5892] usb 4-1: GET_CAPABILITIES returned 0 [ 548.100583][ T5892] usbtmc 4-1:16.0: can't read capabilities [ 548.103256][ T5982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.172007][T12706] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 548.199041][ T5982] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.321635][ T6412] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 548.390078][ T5892] usb 4-1: USB disconnect, device number 56 [ 548.627782][ T6412] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 548.638706][ T6412] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 548.709814][ T6412] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 548.723561][ T5982] usb 6-1: USB disconnect, device number 5 [ 548.748781][ T6412] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 548.768578][ T6412] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.870285][ T6412] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.890082][ T6412] usb 1-1: invalid MIDI out EP 0 [ 548.956742][T12728] loop6: detected capacity change from 0 to 524287999 [ 549.029761][T12712] delete_channel: no stack [ 549.136194][ T7746] udevd[7746]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.153611][ T6412] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 549.235307][ T8896] buffer_io_error: 2 callbacks suppressed [ 549.235317][ T8896] Buffer I/O error on dev loop6, logical block 65535999, async page read [ 549.312734][ T6412] usb 1-1: USB disconnect, device number 66 [ 549.429966][ T5899] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 549.561453][T12737] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 549.691089][ T5899] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 549.702089][ T5899] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.731311][ T5899] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 549.762411][ T5899] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 549.787209][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.822585][ T5899] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.848691][ T5899] usb 4-1: invalid MIDI out EP 0 [ 549.907441][ T5899] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 549.945889][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.029287][T12731] delete_channel: no stack [ 550.038830][ T5899] usb 4-1: USB disconnect, device number 57 [ 550.296566][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1908'. [ 550.860500][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.995696][ T30] audit: type=1400 audit(1754222942.842:1125): avc: denied { transfer } for pid=12776 comm="syz.0.1915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 552.093270][T12780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1918'. [ 552.209551][T12785] netlink: zone id is out of range [ 552.215080][T12785] netlink: zone id is out of range [ 552.222291][T12785] netlink: zone id is out of range [ 552.227975][T12785] netlink: zone id is out of range [ 552.270035][T12785] netlink: zone id is out of range [ 552.355515][T12788] syz.4.1919: attempt to access beyond end of device [ 552.355515][T12788] loop4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 552.372287][T12785] netlink: zone id is out of range [ 552.382257][T12785] netlink: zone id is out of range [ 552.390327][T12785] netlink: zone id is out of range [ 552.396877][T12785] netlink: zone id is out of range [ 552.445940][T12785] netlink: zone id is out of range [ 553.757333][ T30] audit: type=1400 audit(1754222944.602:1126): avc: denied { write } for pid=12821 comm="syz.4.1930" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 553.843705][ T30] audit: type=1400 audit(1754222944.652:1127): avc: denied { append } for pid=12821 comm="syz.4.1930" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 553.878777][ T30] audit: type=1400 audit(1754222944.722:1128): avc: denied { ioctl } for pid=12815 comm="syz.0.1928" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0xaed5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 553.964823][T12827] netlink: 'syz.0.1932': attribute type 4 has an invalid length. [ 553.993572][T12827] netlink: 'syz.0.1932': attribute type 4 has an invalid length. [ 554.259261][ T30] audit: type=1400 audit(1754222945.102:1129): avc: denied { read } for pid=12833 comm="syz.4.1934" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 554.281341][ C1] vkms_vblank_simulate: vblank timer overrun                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         [ 562.144880][T12890] netdevsim netdevsim6 netdevsim3: renamed from eth3 syzkaller syzkaller login: [ 562.237345][T12549] bridge_slave_1: left allmulticast mode [ 562.243439][T12549] bridge_slave_1: left promiscuous mode [ 562.249242][T12549] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.335709][T12549] bridge_slave_0: left allmulticast mode [ 562.343716][T12549] bridge_slave_0: left promiscuous mode [ 562.349465][T12549] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.386058][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.394810][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.585786][ T30] audit: type=1400 audit(1754222953.432:1136): avc: denied { create } for pid=12965 comm="syz.4.1974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 562.605851][ T30] audit: type=1400 audit(1754222953.432:1137): avc: denied { ioctl } for pid=12965 comm="syz.4.1974" path="socket:[39065]" dev="sockfs" ino=39065 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 562.704366][T12549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.715384][T12549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 562.726026][T12549] bond0 (unregistering): (slave team0): Releasing backup interface [ 562.735001][T12549] bond0 (unregistering): Released all slaves [ 562.810008][T12895] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 562.822242][T12968] bpq0: entered allmulticast mode [ 562.836691][T12895] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 562.869551][T12895] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 562.889906][ T30] audit: type=1400 audit(1754222953.732:1138): avc: denied { name_connect } for pid=12970 comm="syz.1.1975" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 562.913950][T12895] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 562.928336][ T30] audit: type=1400 audit(1754222953.772:1139): avc: denied { write } for pid=12972 comm="syz.4.1976" lport=44660 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 562.931690][T12549] : left promiscuous mode [ 562.958442][ T30] audit: type=1400 audit(1754222953.802:1140): avc: denied { setopt } for pid=12972 comm="syz.4.1976" lport=44660 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 563.028838][T12890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.048554][T12549] tipc: Left network mode [ 563.069149][T12890] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.119992][T12895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.275037][T12554] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.282211][T12554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.298901][T12895] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.325484][T12516] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.332550][T12516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.343690][T12516] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.350811][T12516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.390529][T12554] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.397609][T12554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.494484][T12549] hsr_slave_0: left promiscuous mode [ 563.507016][T12549] hsr_slave_1: left promiscuous mode [ 563.536123][T12549] veth1_macvtap: left promiscuous mode [ 563.545592][T12549] veth0_macvtap: left promiscuous mode [ 563.554802][T12549] veth1_vlan: left promiscuous mode [ 563.563798][T12549] veth0_vlan: left promiscuous mode [ 563.659951][ T5851] Bluetooth: hci1: command tx timeout [ 563.748210][T12549] pim6reg (unregistering): left allmulticast mode [ 563.979973][ T5851] Bluetooth: hci4: command tx timeout [ 564.954937][T12549] team0 (unregistering): Port device team_slave_1 removed [ 564.984919][T12549] team0 (unregistering): Port device team_slave_0 removed [ 565.288026][T12890] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 565.322519][T12890] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 565.368802][T12999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1981'. [ 565.527667][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 565.559274][T12549] IPVS: stop unused estimator thread 0... [ 565.645671][T12890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.738067][T12895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.747369][ T5851] Bluetooth: hci1: command tx timeout [ 565.890163][ T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 565.919122][T12890] veth0_vlan: entered promiscuous mode [ 565.935436][T12890] veth1_vlan: entered promiscuous mode [ 565.969992][T12890] veth0_macvtap: entered promiscuous mode [ 565.980643][T12890] veth1_macvtap: entered promiscuous mode [ 566.000336][ T5920] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 566.012250][T12890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.029524][T12890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.037924][T12895] veth0_vlan: entered promiscuous mode [ 566.045446][ T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 566.053725][T12549] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.059975][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.065365][ T5851] Bluetooth: hci4: command tx timeout [ 566.075887][ T10] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.085977][T12549] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.102596][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.111787][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.114644][T12549] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.130965][T12549] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.134075][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.148842][ T10] usb 5-1: invalid MIDI out EP 0 [ 566.157486][T12895] veth1_vlan: entered promiscuous mode [ 566.164785][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.192009][ T5920] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 566.202967][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.249238][ T8896] udevd[8896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.251852][T12895] veth0_macvtap: entered promiscuous mode [ 566.275239][ T5920] usb 2-1: config 0 descriptor?? [ 566.286098][T12895] veth1_macvtap: entered promiscuous mode [ 566.293757][ T5920] pwc: Askey VC010 type 2 USB webcam detected. [ 566.305048][ T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 566.353044][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.365288][T12895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.381744][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.389466][ T10] usb 5-1: USB disconnect, device number 77 [ 566.395071][T12895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.404202][T13011] delete_channel: no stack [ 566.442287][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.452081][T12549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.455686][ T68] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.470501][ T68] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.481599][T12549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.494658][ T68] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.581481][T12549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.599446][T12549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.654026][T12515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.662905][T12515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.715893][ T5920] pwc: recv_control_msg error -32 req 02 val 2b00 [ 566.724368][ T5920] pwc: recv_control_msg error -32 req 02 val 2700 [ 566.737181][ T5920] pwc: recv_control_msg error -32 req 02 val 2c00 [ 566.752401][ T5920] pwc: recv_control_msg error -32 req 04 val 1000 [ 566.765297][ T5920] pwc: recv_control_msg error -32 req 04 val 1300 [ 566.773799][ T5920] pwc: recv_control_msg error -32 req 04 val 1400 [ 566.783016][ T5920] pwc: recv_control_msg error -32 req 02 val 2000 [ 566.950510][T13039] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1986'. [ 567.001664][ T5920] pwc: recv_control_msg error -71 req 04 val 1500 [ 567.013773][ T5920] pwc: recv_control_msg error -71 req 02 val 2500 [ 567.028062][ T5920] pwc: recv_control_msg error -71 req 02 val 2400 [ 567.035281][ T5920] pwc: recv_control_msg error -71 req 02 val 2600 [ 567.043425][ T5920] pwc: recv_control_msg error -71 req 02 val 2900 [ 567.061698][ T5920] pwc: recv_control_msg error -71 req 02 val 2800 [ 567.068647][ T5920] pwc: recv_control_msg error -71 req 04 val 1100 [ 567.076153][ T5920] pwc: recv_control_msg error -71 req 04 val 1200 [ 567.085388][ T5920] pwc: Registered as video103. [ 567.093377][ T5920] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 567.141341][ T5920] usb 2-1: USB disconnect, device number 73 [ 569.489903][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1998'. [ 569.933897][T13084] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 570.279832][ T5892] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 571.266627][ T5892] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 571.285077][ T5892] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 571.306153][ T5892] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 571.417654][ T5892] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 571.427640][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.444428][ T5906] IPVS: starting estimator thread 0... [ 571.448340][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 571.463558][ T5892] usb 5-1: invalid MIDI out EP 0 [ 571.972270][T13085] delete_channel: no stack [ 572.075352][T13101] IPVS: using max 39 ests per chain, 93600 per kthread [ 572.123185][ T5892] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 572.182327][ T5892] usb 5-1: USB disconnect, device number 78 [ 572.526840][T13111] syz_tun: entered allmulticast mode [ 572.574283][T13111] dvmrp1: entered allmulticast mode [ 572.699636][T13110] syz_tun: left allmulticast mode [ 572.944211][T13119] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 573.256659][ T30] audit: type=1400 audit(1754222964.082:1141): avc: denied { setattr } for pid=13121 comm="syz.4.2014" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 573.282266][T13122] bridge_slave_0: left allmulticast mode [ 573.298440][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.299740][T13122] bridge_slave_0: left promiscuous mode [ 573.314408][T13126] netlink: 'syz.7.2013': attribute type 10 has an invalid length. [ 573.324661][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.328646][T13122] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.341639][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.358246][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.366772][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 573.387675][T13122] bridge_slave_1: left allmulticast mode [ 573.394473][T13122] bridge_slave_1: left promiscuous mode [ 573.401135][T13122] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.417354][T13122] bond0: (slave bond_slave_0): Releasing backup interface [ 573.430501][T13122] bond0: (slave bond_slave_1): Releasing backup interface [ 573.455606][T13122] team0: Port device team_slave_0 removed [ 573.470812][T13122] team0: Port device team_slave_1 removed [ 573.478585][T13122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.486130][T13122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.504618][T13122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.513971][T13122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.642532][T13126] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 573.704943][T13124] lo speed is unknown, defaulting to 1000 [ 573.721855][T13124] lo speed is unknown, defaulting to 1000 [ 575.197154][T13124] chnl_net:caif_netlink_parms(): no params data found [ 575.368490][T13124] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.375734][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.383965][T13124] bridge_slave_0: entered allmulticast mode [ 575.391832][T13124] bridge_slave_0: entered promiscuous mode [ 575.420887][ T5848] Bluetooth: hci0: command tx timeout [ 575.462660][T13124] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.482431][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.620753][T13124] bridge_slave_1: entered allmulticast mode [ 575.635504][T13124] bridge_slave_1: entered promiscuous mode [ 575.662164][T12551] bridge_slave_1: left allmulticast mode [ 575.710349][T12551] bridge_slave_1: left promiscuous mode [ 575.721707][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.731939][T12551] bridge_slave_0: left allmulticast mode [ 575.737570][T12551] bridge_slave_0: left promiscuous mode [ 575.746932][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.906490][T12551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.915877][T12551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.926114][T12551] bond0 (unregistering): Released all slaves [ 577.021594][T13124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.201629][T13124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.345932][ T30] audit: type=1400 audit(1754222968.192:1142): avc: denied { bind } for pid=13180 comm="syz.6.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 577.348584][ T5920] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 577.386016][ T5920] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 577.394692][ T5920] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 577.403659][ T5920] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 577.411412][ T5920] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 577.424812][ T5920] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 577.432862][ T5920] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 577.471043][ T5982] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 577.478671][ T5920] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 577.497792][ T5920] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 577.508904][ T5848] Bluetooth: hci0: command tx timeout [ 577.523207][T13124] team0: Port device team_slave_0 added [ 577.527019][ T5920] hid-generic 00A0:0008:0003.000F: unknown main item tag 0x0 [ 577.549202][ T5920] hid-generic 00A0:0008:0003.000F: hidraw0: HID v0.05 Device [syz1] on syz0 [ 577.575505][T13124] team0: Port device team_slave_1 added [ 577.658768][ T5982] usb 5-1: Using ep0 maxpacket: 32 [ 577.708222][ T5982] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 577.751354][ T5982] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 577.760729][ T5982] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 577.768965][ T5982] usb 5-1: Product: syz [ 577.798927][ T5982] usb 5-1: Manufacturer: syz [ 577.808586][ T5982] usb 5-1: SerialNumber: syz [ 577.837771][ T5982] usb 5-1: config 0 descriptor?? [ 577.866882][T13178] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 577.868494][T13124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.881981][ T5982] hub 5-1:0.0: bad descriptor, ignoring hub [ 577.908590][ T5982] hub 5-1:0.0: probe with driver hub failed with error -5 [ 577.926129][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.960037][T13124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.972774][T13124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.979748][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.006992][T13124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.081902][T12551] hsr_slave_0: left promiscuous mode [ 578.088740][T12551] hsr_slave_1: left promiscuous mode [ 578.095810][T12551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.119105][T12551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.363384][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 578.660245][T13178] usb 5-1: reset high-speed USB device number 79 using dummy_hcd [ 578.954491][T13178] usb 5-1: device firmware changed [ 578.962602][ T5920] usb 5-1: USB disconnect, device number 79 [ 578.983919][T12551] team0 (unregistering): Port device team_slave_1 removed [ 579.027737][T12551] team0 (unregistering): Port device team_slave_0 removed [ 579.119853][ T5920] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 579.269873][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 579.304003][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short [ 579.317490][ T5920] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 579.331906][ T5920] usb 5-1: can't read configurations, error -71 [ 579.475109][T13124] hsr_slave_0: entered promiscuous mode [ 579.503868][T13124] hsr_slave_1: entered promiscuous mode [ 579.579924][ T5848] Bluetooth: hci0: command tx timeout [ 580.109945][ T5892] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 580.192654][T13124] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 580.205022][T13124] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 580.213787][T13124] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 580.224239][T13124] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 580.311007][T13124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.413058][ T5892] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 580.427436][T13124] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.444950][T12515] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.445287][ T5892] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 580.452065][T12515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.461654][T12515] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.463571][ T5892] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 580.470331][T12515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.512467][ T5892] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 580.533303][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.692519][ T5920] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 580.875687][ T5892] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 580.897242][ T5892] usb 8-1: invalid MIDI out EP 0 [ 581.002054][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 581.012921][ T5892] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 581.036316][ T5920] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 581.048857][ T5920] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 581.079339][ T5920] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.096301][ T5920] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 581.108233][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.172072][T13204] delete_channel: no stack [ 581.181457][ T5892] usb 8-1: USB disconnect, device number 2 [ 581.398728][ T5920] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 581.566617][ T5920] usb 2-1: invalid MIDI out EP 0 [ 581.660110][ T5848] Bluetooth: hci0: command tx timeout [ 581.750177][T13210] delete_channel: no stack [ 581.815416][T13124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.882420][ T5920] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 581.956483][ T5920] usb 2-1: USB disconnect, device number 74 [ 582.085630][ T30] audit: type=1400 audit(1754222972.932:1143): avc: denied { mounton } for pid=13237 comm="syz.7.2042" path="/proc/64/task" dev="proc" ino=41543 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 582.289829][ T10] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 582.589910][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 582.826076][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.836707][T13124] veth0_vlan: entered promiscuous mode [ 582.858636][T13124] veth1_vlan: entered promiscuous mode [ 582.909909][ T10] usb 5-1: config 0 descriptor?? [ 583.051934][T13124] veth0_macvtap: entered promiscuous mode [ 583.065383][T13124] veth1_macvtap: entered promiscuous mode [ 583.101648][T13124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.122714][T13124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.569397][ T68] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.621941][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.639895][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.649570][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.695001][T12515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.717861][T12515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.778885][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.787047][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.936337][T13270] vlan2: entered allmulticast mode [ 584.765403][T13281] input: syz0 as /devices/virtual/input/input28 [ 585.232759][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 585.291604][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 585.374604][T13286] hub 2-0:1.0: USB hub found [ 585.381050][T13286] hub 2-0:1.0: 1 port detected [ 585.520494][ T6412] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 585.525688][ T10] usb 5-1: USB disconnect, device number 82 [ 585.770003][ T6412] usb 7-1: Using ep0 maxpacket: 32 [ 585.784457][ T6412] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 585.793901][ T6412] usb 7-1: config 0 has no interface number 0 [ 585.800862][ T6412] usb 7-1: config 0 interface 184 has no altsetting 0 [ 585.874330][ T6412] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 585.961224][ T6412] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.969313][ T6412] usb 7-1: Product: syz [ 585.980546][ T6412] usb 7-1: Manufacturer: syz [ 585.985212][ T6412] usb 7-1: SerialNumber: syz [ 586.010327][ T6412] usb 7-1: config 0 descriptor?? [ 586.028643][ T6412] smsc75xx v1.0.0 [ 586.448669][ T30] audit: type=1400 audit(1754222977.292:1144): avc: denied { lock } for pid=13308 comm="syz.7.2063" path="/26/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 586.670504][ T10] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 586.680244][T13317] trusted_key: syz.7.2064 sent an empty control message without MSG_MORE. [ 586.752009][ T6412] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 586.790722][ T6412] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 586.860141][ T5982] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 586.902010][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 586.915201][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 586.927675][ T30] audit: type=1400 audit(1754222977.772:1145): avc: denied { read } for pid=13318 comm="syz.1.2065" path="socket:[41822]" dev="sockfs" ino=41822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 586.958420][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 586.967580][ T10] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 586.983949][ T10] usb 5-1: Product: syz [ 586.991513][ T10] usb 5-1: Manufacturer: syz [ 586.999286][ T10] usb 5-1: SerialNumber: syz [ 587.014303][ T10] usb 5-1: config 0 descriptor?? [ 587.044806][ T5982] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 587.063801][ T10] usb 5-1: selecting invalid altsetting 0 [ 587.071012][ T5982] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 587.112564][ T5982] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 587.208666][ T5982] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 587.227934][ T5982] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.280971][ T5982] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.288310][ T5982] usb 9-1: invalid MIDI out EP 0 [ 587.417645][ T5982] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 587.443523][ T10] usb 5-1: USB disconnect, device number 83 [ 588.021744][T13331] ubi0: attaching mtd0 [ 588.025865][T13331] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 588.420308][ T6412] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 588.435218][ T6412] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 588.445215][ T6412] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 588.455225][ T6412] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 588.477130][ T6412] usb 7-1: USB disconnect, device number 2 [ 588.791633][ T5982] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 589.039925][ T5982] usb 2-1: Invalid ep0 maxpacket: 64 [ 589.169873][ T5982] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 589.319820][ T5982] usb 2-1: Invalid ep0 maxpacket: 64 [ 589.344685][ T5982] usb usb2-port1: attempt power cycle [ 589.654310][T13355] ubi0: attaching mtd0 [ 589.658428][T13355] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 590.040141][ T5892] usb 9-1: USB disconnect, device number 2 [ 590.080256][T13309] delete_channel: no stack [ 590.080358][ T6412] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 590.100968][ T5982] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 590.153906][ T5982] usb 2-1: Invalid ep0 maxpacket: 64 [ 590.280596][ T6412] usb 5-1: Invalid ep0 maxpacket: 64 [ 590.293445][ T30] audit: type=1400 audit(1754222981.142:1146): avc: denied { listen } for pid=13361 comm="syz.7.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 590.313878][ T30] audit: type=1400 audit(1754222981.142:1147): avc: denied { accept } for pid=13361 comm="syz.7.2077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 590.333962][ T5982] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 590.362387][ T5982] usb 2-1: Invalid ep0 maxpacket: 64 [ 590.372342][ T5982] usb usb2-port1: unable to enumerate USB device [ 590.422915][ T30] audit: type=1400 audit(1754222981.272:1148): avc: denied { write } for pid=13361 comm="syz.7.2077" path="socket:[42905]" dev="sockfs" ino=42905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 590.446469][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.471076][ T30] audit: type=1400 audit(1754222981.272:1149): avc: denied { write } for pid=13361 comm="syz.7.2077" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 590.589950][ T6412] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 590.780890][ T6412] usb 5-1: Invalid ep0 maxpacket: 64 [ 591.236271][ T6412] usb usb5-port1: attempt power cycle [ 591.780037][ T6412] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 591.931025][ T6412] usb 5-1: Invalid ep0 maxpacket: 64 [ 592.086463][ T6412] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 592.200309][ T6412] usb 5-1: Invalid ep0 maxpacket: 64 [ 592.206608][ T6412] usb usb5-port1: unable to enumerate USB device [ 593.995240][ T30] audit: type=1400 audit(1754222984.842:1150): avc: denied { override_creds } for pid=13401 comm="syz.4.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 594.149868][ T5899] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 594.301871][ T5899] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 594.313190][ T5899] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 594.325375][ T5899] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.338650][ T5899] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 594.347769][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.370908][ T5899] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.379177][ T5899] usb 8-1: invalid MIDI out EP 0 [ 594.455750][ T5899] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 594.578575][ T6412] usb 8-1: USB disconnect, device number 3 [ 594.592992][T13400] delete_channel: no stack [ 595.399691][ T30] audit: type=1326 audit(1754222986.242:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13433 comm="syz.4.2099" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc49378eb69 code=0x0 [ 595.557941][ T30] audit: type=1400 audit(1754222986.392:1152): avc: denied { create } for pid=13437 comm="syz.1.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 595.578269][ C0] vkms_vblank_simulate: vblank timer overrun [ 595.635887][ T30] audit: type=1400 audit(1754222986.472:1153): avc: denied { create } for pid=13440 comm="syz.6.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 595.892525][T13448] ubi0: attaching mtd0 [ 595.896645][T13448] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 596.492526][ T5899] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 596.639874][ T6412] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 596.673553][ T5899] usb 8-1: config 0 has no interfaces? [ 596.679101][ T5899] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 596.689080][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.699486][ T5899] usb 8-1: config 0 descriptor?? [ 596.789815][ T6412] usb 9-1: Invalid ep0 maxpacket: 64 [ 596.800119][ T5982] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 596.920083][ T6412] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 596.962083][ T5982] usb 7-1: Using ep0 maxpacket: 32 [ 596.968564][ T5982] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 596.981965][ T5982] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 596.993438][ T5982] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 597.010051][ T5982] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 597.022838][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 597.031243][ T5982] usb 7-1: Product: syz [ 597.035427][ T5982] usb 7-1: Manufacturer: syz [ 597.042913][ T5982] usb 7-1: SerialNumber: syz [ 597.065299][ T5982] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input29 [ 597.110035][ T6412] usb 9-1: Invalid ep0 maxpacket: 64 [ 597.168292][ T6412] usb usb9-port1: attempt power cycle [ 597.265048][ T5982] usb 7-1: USB disconnect, device number 3 [ 597.454296][ T5982] appletouch 7-1:1.0: input: appletouch disconnected [ 597.569861][ T6412] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 597.611166][ T6412] usb 9-1: Invalid ep0 maxpacket: 64 [ 597.829971][ T6412] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 597.860904][ T6412] usb 9-1: Invalid ep0 maxpacket: 64 [ 597.867556][ T6412] usb usb9-port1: unable to enumerate USB device [ 598.176535][T13476] Bluetooth: MGMT ver 1.23 [ 598.446420][ T6412] usb 8-1: USB disconnect, device number 4 [ 598.489280][ T30] audit: type=1400 audit(1754222989.332:1154): avc: denied { read } for pid=13479 comm="syz.1.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 598.579864][ T5982] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 598.741774][ T5982] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 598.753317][ T5982] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 598.770391][ T5982] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 598.785419][ T5982] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 598.813558][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.858487][ T5982] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.892353][ T5982] usb 7-1: invalid MIDI out EP 0 [ 599.055028][T13478] delete_channel: no stack [ 599.081989][ T7746] udevd[7746]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.128417][ T5892] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 599.197758][ T5982] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 599.262954][ T5982] usb 7-1: USB disconnect, device number 4 [ 599.469078][ T5892] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 599.516716][ T5892] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 599.558660][ T30] audit: type=1400 audit(1754222990.402:1155): avc: denied { write } for pid=13495 comm="syz.4.2119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 599.669928][ T5892] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.684825][T13502] net_ratelimit: 16 callbacks suppressed [ 599.684835][T13502] openvswitch: netlink: Unknown key attributes 2 [ 600.050924][ T5892] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 600.139447][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.186990][ T5892] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 600.200003][ T5892] usb 9-1: invalid MIDI out EP 0 [ 600.280612][ T7747] udevd[7747]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 600.458669][ T5892] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 600.483688][T13487] delete_channel: no stack [ 600.601549][ T5892] usb 9-1: USB disconnect, device number 7 [ 601.241127][T13522] syzkaller0: entered promiscuous mode [ 601.279210][T13522] syzkaller0: entered allmulticast mode [ 601.477087][ T30] audit: type=1400 audit(1754222992.312:1156): avc: denied { setattr } for pid=13526 comm="syz.4.2128" name="file0" dev="tmpfs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 601.936608][ T30] audit: type=1400 audit(1754222992.312:1157): avc: denied { read } for pid=13526 comm="syz.4.2128" name="file0" dev="tmpfs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 601.989956][ T30] audit: type=1800 audit(1754222992.832:1158): pid=13533 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2129" name="/" dev="9p" ino=2 res=0 errno=0 [ 603.194830][T13545] kvm: pic: non byte write [ 605.469973][ T5920] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 605.987253][ T5920] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 606.039891][ T5899] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 606.061381][ T5920] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 606.206600][ T5920] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.231601][ T5920] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 606.244704][ T5920] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.254818][ T5899] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 606.327165][T13606] ubi0: attaching mtd0 [ 606.331332][T13606] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 606.509995][ T5899] usb 7-1: config 0 has no interface number 0 [ 606.527633][ T5899] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.670697][T12044] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 606.697992][ T5899] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 606.772922][ T5899] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 606.805973][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.820411][ T5920] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 606.831809][ T5899] usb 7-1: config 0 descriptor?? [ 606.861288][ T5920] usb 9-1: invalid MIDI out EP 0 [ 606.921611][T12044] usb 8-1: Invalid ep0 maxpacket: 64 [ 606.941566][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 606.952966][ T5920] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 607.099819][T12044] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 607.108048][ T30] audit: type=1400 audit(1754222997.952:1159): avc: denied { map } for pid=13608 comm="syz.1.2153" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 607.193648][T13584] delete_channel: no stack [ 607.200098][ T10] usb 9-1: USB disconnect, device number 8 [ 607.290017][T12044] usb 8-1: Invalid ep0 maxpacket: 64 [ 607.305876][T12044] usb usb8-port1: attempt power cycle [ 607.540701][ T30] audit: type=1400 audit(1754222998.392:1160): avc: denied { mounton } for pid=13616 comm="syz.4.2156" path="/445/file0" dev="tmpfs" ino=2355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 607.563940][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.669902][T12044] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 607.704482][T12044] usb 8-1: Invalid ep0 maxpacket: 64 [ 607.839964][T12044] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 607.900485][T12044] usb 8-1: Invalid ep0 maxpacket: 64 [ 607.906237][T12044] usb usb8-port1: unable to enumerate USB device [ 607.921147][ T5899] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.0010/input/input30 [ 608.120009][ T5899] holtek_kbd 0003:04D9:A055.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 608.608516][ T5899] usb 7-1: USB disconnect, device number 5 [ 608.731997][T13625] fido_id[13625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 610.095035][T13637] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2161'. [ 610.237808][T13641] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13641 comm=syz.7.2161 [ 610.548214][ T30] audit: type=1400 audit(1754223001.282:1161): avc: denied { create } for pid=13645 comm="syz.1.2163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 611.222499][ T30] audit: type=1400 audit(1754223002.032:1162): avc: denied { read } for pid=13645 comm="syz.1.2163" path="socket:[43552]" dev="sockfs" ino=43552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 611.353346][ T30] audit: type=1400 audit(1754223002.202:1163): avc: denied { create } for pid=13648 comm="syz.7.2166" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 611.540159][ T30] audit: type=1400 audit(1754223002.382:1164): avc: denied { name_bind } for pid=13660 comm="syz.7.2168" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 612.279867][ T5899] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 612.525846][T13681] ubi0: attaching mtd0 [ 612.530022][T13681] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 612.913101][ T5899] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 612.926580][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.963338][ T5899] usb 9-1: Product: syz [ 612.976564][ T5899] usb 9-1: Manufacturer: syz [ 612.981351][ T5899] usb 9-1: SerialNumber: syz [ 612.988526][ T5899] usb 9-1: config 0 descriptor?? [ 613.020376][T13682] kvm: pic: single mode not supported [ 613.020390][T13682] kvm: pic: level sensitive irq not supported [ 613.042388][T13682] kvm: pic: single mode not supported [ 613.058136][T13682] kvm: pic: single mode not supported [ 613.144659][T13682] kvm: pic: single mode not supported [ 613.155367][T13682] kvm: pic: single mode not supported [ 613.163053][T13682] kvm: pic: level sensitive irq not supported [ 613.168518][T13682] kvm: pic: level sensitive irq not supported [ 613.174895][T13682] kvm: pic: level sensitive irq not supported [ 613.190061][ T5906] usb 2-1: new low-speed USB device number 79 using dummy_hcd [ 613.576466][T13682] kvm: pic: single mode not supported [ 613.576478][T13682] kvm: pic: level sensitive irq not supported [ 613.583495][ T5899] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 613.751775][ T5906] usb 2-1: Invalid ep0 maxpacket: 64 [ 614.033346][ T5906] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 614.410649][ T5906] usb 2-1: Invalid ep0 maxpacket: 64 [ 614.520549][ T5906] usb usb2-port1: attempt power cycle [ 615.465521][ T5906] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 615.473041][ T5982] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 615.800003][ T5982] usb 5-1: Using ep0 maxpacket: 16 [ 615.812230][ T5982] usb 5-1: config 0 has no interfaces? [ 615.819885][ T5982] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 615.829845][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.839783][ T5906] usb 2-1: device not accepting address 81, error -71 [ 615.863829][ T5982] usb 5-1: config 0 descriptor?? [ 615.870187][ T5899] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 615.987137][ T5899] usb 9-1: USB disconnect, device number 9 [ 616.419146][ T5899] usb 5-1: USB disconnect, device number 88 [ 616.673024][T13726] netlink: 'syz.7.2186': attribute type 10 has an invalid length. [ 618.408083][T13746] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 619.563039][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2197'. [ 620.631802][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2198'. [ 620.951033][T13775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2200'. [ 621.185912][T13778] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 621.300694][T13778] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 622.924856][ T30] audit: type=1400 audit(1754223013.772:1165): avc: denied { setopt } for pid=13792 comm="syz.8.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 623.493407][T13792] delete_channel: no stack [ 623.827244][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.833664][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.879938][T12044] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 624.029850][T12044] usb 9-1: Using ep0 maxpacket: 32 [ 624.036082][T12044] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.047135][T12044] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 624.062283][T12044] usb 9-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 624.071390][T12044] usb 9-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 624.079788][T12044] usb 9-1: Product: syz [ 624.083924][T12044] usb 9-1: Manufacturer: syz [ 624.088482][T12044] usb 9-1: SerialNumber: syz [ 624.103017][T12044] input: appletouch as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input31 [ 624.199844][ T5906] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 624.229832][ T5899] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 624.332718][T11225] usb 9-1: USB disconnect, device number 10 [ 624.346861][T11225] appletouch 9-1:1.0: input: appletouch disconnected [ 624.353695][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 624.364932][ T5906] usb 2-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 624.374922][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.384271][ T5906] usb 2-1: Product: syz [ 624.388449][ T5906] usb 2-1: Manufacturer: syz [ 624.393596][ T5906] usb 2-1: SerialNumber: syz [ 624.398661][ T5899] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 624.408301][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.416990][ T5906] usb 2-1: config 0 descriptor?? [ 624.424107][ T5906] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 624.432876][ T5899] usb 5-1: config 0 descriptor?? [ 624.440985][ T5899] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 624.909595][T13819] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 626.209836][ T5982] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 626.255063][ T5906] gspca_zc3xx: reg_w_i err -71 [ 626.334690][ T5899] usb 5-1: USB disconnect, device number 89 [ 626.359934][ T5982] usb 7-1: Using ep0 maxpacket: 16 [ 626.372529][ T5982] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.386383][ T5982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 626.398647][ T5982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.432931][ T5982] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 626.445605][ T5982] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 626.459545][ T5982] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 626.474961][ T5982] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 626.484190][ T5982] usb 7-1: Manufacturer: syz [ 626.588162][ T5982] usb 7-1: config 0 descriptor?? [ 626.739988][T12044] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 626.912143][T12044] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.077413][T12044] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.092224][ T5906] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 627.101679][ T5906] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 627.112418][ T5906] usb 2-1: USB disconnect, device number 83 [ 627.114192][T12044] usb 8-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 627.137153][T12044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.176623][T12044] usb 8-1: config 0 descriptor?? [ 627.190264][ T5982] rc_core: IR keymap rc-hauppauge not found [ 627.199484][ T5982] Registered IR keymap rc-empty [ 627.204950][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.239997][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.296251][ T5982] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 627.346712][ T5982] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input32 [ 627.361380][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.379919][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.439889][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.470559][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.489857][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.519836][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.547157][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.580056][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.595568][T12044] hid-steam 0003:28DE:1142.0011: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 627.609934][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.630086][ T5982] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 627.650419][ T5919] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 627.651868][ T5982] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 627.680916][T12044] hid-steam 0003:28DE:1142.0011: Steam wireless receiver connected [ 627.803860][ T5982] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 627.938475][ T5919] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 627.972729][T12044] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.7-1/input0 [ 627.984950][ T5919] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 627.986831][ T5982] usb 7-1: USB disconnect, device number 6 [ 628.159860][ T5899] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 628.170500][ T5919] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.265072][T12044] usb 8-1: USB disconnect, device number 9 [ 628.290654][ T5919] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 628.357716][ T5899] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 628.372460][T12044] hid-steam 0003:28DE:1142.0011: Steam wireless receiver disconnected [ 628.380891][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.509550][ T5982] IPVS: starting estimator thread 0... [ 628.524301][ T5899] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 628.549759][ T5899] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 628.575141][ T5899] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 628.599956][T13868] IPVS: using max 38 ests per chain, 91200 per kthread [ 628.638386][ T5919] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 628.658464][ T5919] usb 5-1: invalid MIDI out EP 0 [ 628.770446][ T5919] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 628.789648][ T8896] udevd[8896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 628.883474][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.911989][T13855] delete_channel: no stack [ 628.923346][ T5919] usb 5-1: USB disconnect, device number 90 [ 628.982583][ T5899] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 629.002473][ T5899] usb 2-1: invalid MIDI out EP 0 [ 629.146448][ T7747] udevd[7747]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.176115][ T5899] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 629.201984][T13863] delete_channel: no stack [ 629.248416][ T5899] usb 2-1: USB disconnect, device number 84 [ 630.683331][T13881] ubi0: attaching mtd0 [ 630.687477][T13881] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 631.020062][T12044] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 631.179944][T12044] usb 5-1: Invalid ep0 maxpacket: 64 [ 631.429851][T12044] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 631.612785][T12044] usb 5-1: Invalid ep0 maxpacket: 64 [ 631.618286][T12044] usb usb5-port1: attempt power cycle [ 631.658587][T13890] kvm: pic: non byte write [ 632.510003][T12044] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 632.823080][T12044] usb 5-1: Invalid ep0 maxpacket: 64 [ 632.880523][T13904] netlink: 'syz.1.2237': attribute type 4 has an invalid length. [ 632.925733][T13904] netlink: 'syz.1.2237': attribute type 4 has an invalid length. [ 632.949137][ T9] lo speed is unknown, defaulting to 1000 [ 632.959387][ T9] 3yz0: Port: 1 Link ACTIVE [ 632.960032][T12044] usb 5-1: new low-speed USB device number 94 using dummy_hcd [ 633.000311][T12044] usb 5-1: Invalid ep0 maxpacket: 64 [ 633.011327][T12044] usb usb5-port1: unable to enumerate USB device [ 635.729783][ T5920] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 636.200065][ T5920] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 636.254525][ T5920] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 636.336560][ T5920] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.412029][ T9] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 636.449319][ T5920] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 636.519566][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.549663][ T5920] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 636.557909][ T5920] usb 7-1: invalid MIDI out EP 0 [ 636.591588][ T9] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 636.601995][ T9] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 636.632262][ T9] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 636.650190][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.803626][T13946] delete_channel: no stack [ 636.859592][ T5920] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 636.905449][ T5920] usb 7-1: USB disconnect, device number 7 [ 636.979004][ T9] usb 9-1: GET_CAPABILITIES returned 0 [ 636.987636][ T9] usbtmc 9-1:16.0: can't read capabilities [ 637.716222][ T9] usb 9-1: USB disconnect, device number 11 [ 639.139956][ T5899] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 639.759405][ T5899] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.759446][ T5899] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 639.759459][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.763066][ T5899] usb 9-1: config 0 descriptor?? [ 639.766773][ T5899] pwc: Askey VC010 type 2 USB webcam detected. [ 640.316364][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00 [ 640.413574][ T5899] pwc: recv_control_msg error -32 req 02 val 2700 [ 640.434181][ T5899] pwc: recv_control_msg error -32 req 02 val 2c00 [ 640.488740][ T5899] pwc: recv_control_msg error -32 req 04 val 1000 [ 640.543335][ T30] audit: type=1400 audit(1754223031.332:1166): avc: denied { node_bind } for pid=14001 comm="syz.1.2260" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 640.595512][ T5899] pwc: recv_control_msg error -32 req 04 val 1300 [ 640.645128][ T5899] pwc: recv_control_msg error -32 req 04 val 1400 [ 640.666106][ T5899] pwc: recv_control_msg error -32 req 02 val 2000 [ 640.820247][ T5899] pwc: recv_control_msg error -32 req 02 val 2100 [ 640.827366][ T5899] pwc: recv_control_msg error -32 req 04 val 1500 [ 641.474289][ T30] audit: type=1400 audit(1754223032.312:1167): avc: denied { write } for pid=14003 comm="syz.1.2261" path="socket:[46430]" dev="sockfs" ino=46430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 641.633260][ T5899] pwc: recv_control_msg error -71 req 02 val 2400 [ 641.660767][ T5899] pwc: recv_control_msg error -71 req 02 val 2600 [ 641.842776][ T5899] pwc: recv_control_msg error -71 req 02 val 2900 [ 641.876384][ T5899] pwc: recv_control_msg error -71 req 02 val 2800 [ 641.992945][ T5899] pwc: recv_control_msg error -71 req 04 val 1100 [ 642.010021][ T5899] pwc: recv_control_msg error -71 req 04 val 1200 [ 642.062157][ T5899] pwc: Registered as video103. [ 642.285704][ T5899] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input33 [ 642.357773][ T5899] usb 9-1: USB disconnect, device number 12 [ 643.142067][T14026] tipc: Started in network mode [ 643.146916][T14026] tipc: Node identity 4, cluster identity 4711 [ 643.153113][T14026] tipc: Node number set to 4 [ 643.436287][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2269'. [ 643.739833][ T5982] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 644.019784][ T5982] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 644.140516][T14048] vxfs: WRONG superblock magic 00000000 at 1 [ 644.150508][T14048] vxfs: WRONG superblock magic 00000000 at 8 [ 644.165113][T14048] vxfs: can't find superblock. [ 644.210050][ T5982] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 644.221354][ T5982] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 644.234868][ T5982] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 644.238956][T14045] binder: BINDER_SET_CONTEXT_MGR already set [ 644.251780][ T5982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.271732][ T5982] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 644.307687][T14045] binder: 14041:14045 ioctl 4018620d 2000000001c0 returned -16 [ 644.336100][ T5982] usb 8-1: invalid MIDI out EP 0 [ 645.334084][T14031] delete_channel: no stack [ 646.050232][ T5899] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 646.211387][ T5982] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 646.370637][ T5899] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 646.386712][ T5982] usb 8-1: USB disconnect, device number 10 [ 647.126152][ T5899] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 647.382609][ T5899] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.409779][ T5899] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 647.424306][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.474809][ T5899] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 647.485438][ T5899] usb 5-1: invalid MIDI out EP 0 [ 647.558113][ T5899] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 647.875105][ T7747] udevd[7747]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.078377][T14065] delete_channel: no stack [ 648.540644][T12044] usb 5-1: USB disconnect, device number 95 [ 648.550359][ T30] audit: type=1400 audit(1754223038.982:1168): avc: denied { write } for pid=14082 comm="syz.1.2285" path="socket:[46520]" dev="sockfs" ino=46520 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 648.579769][ T5899] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 648.621908][ T30] audit: type=1400 audit(1754223039.462:1169): avc: denied { read write } for pid=12890 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 648.698422][ T30] audit: type=1400 audit(1754223039.462:1170): avc: denied { open } for pid=12890 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 648.723245][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2284'. [ 648.830259][ T30] audit: type=1400 audit(1754223039.462:1171): avc: denied { ioctl } for pid=12890 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 648.880110][ T5899] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 648.890490][ T5899] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 648.901570][ T5899] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 648.914537][ T5899] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 648.923631][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.953510][ T5899] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 649.285494][ T5899] usb 9-1: invalid MIDI out EP 0 [ 649.324935][T14080] delete_channel: no stack [ 649.901232][ T5982] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 650.081189][ T5982] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 650.096747][ T5982] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 650.109129][ T5899] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 650.139287][ T5982] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 650.200497][ T5899] usb 9-1: USB disconnect, device number 13 [ 650.408911][ T5982] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 650.793908][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.016315][ T5982] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 652.019856][ T30] audit: type=1400 audit(1754223042.262:1172): avc: denied { mounton } for pid=14112 comm="syz.8.2292" path="/44/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 652.020642][ T5982] usb 2-1: invalid MIDI out EP 0 [ 652.042452][ C1] vkms_vblank_simulate: vblank timer overrun [ 652.056971][T14095] delete_channel: no stack [ 652.276312][ T7746] udevd[7746]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 652.292809][T14123] binder: 14122:14123 ioctl c0306201 200000000280 returned -14 [ 652.307046][ T5982] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 652.357252][ T5982] usb 2-1: USB disconnect, device number 85 [ 652.490913][ T30] audit: type=1400 audit(1754223043.332:1173): avc: denied { allowed } for pid=14128 comm="syz.8.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 652.510292][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.812736][T14151] block nbd6: NBD_DISCONNECT [ 653.818261][T14151] block nbd6: Disconnected due to user request. [ 653.828516][T14151] block nbd6: shutting down sockets [ 654.069867][ T5920] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 654.849919][ T30] audit: type=1326 audit(1754223045.702:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14164 comm="syz.8.2307" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841518eb69 code=0x0 [ 655.001989][ T5920] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 655.014467][ T5920] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 655.047211][ T5920] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.139615][ T5920] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 655.165122][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.302605][ T5920] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.349844][T12044] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 655.366448][ T5920] usb 5-1: invalid MIDI out EP 0 [ 655.587182][T14153] delete_channel: no stack [ 655.600990][ T5899] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 655.644445][T12044] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 655.655989][T12044] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 655.749422][T12044] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.794388][ T5899] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 655.805524][ T5899] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 655.813020][ T5920] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 655.821495][ T5899] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.857324][T12044] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 655.874892][ T5899] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 655.946644][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.962925][ T5920] usb 5-1: USB disconnect, device number 96 [ 655.977990][ T5899] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.986113][ T5899] usb 2-1: invalid MIDI out EP 0 [ 656.590451][T12044] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.818885][T14183] delete_channel: no stack [ 656.868244][T14171] delete_channel: no stack [ 657.035495][ T5899] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 657.035909][T12044] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 657.055015][T12044] usb 8-1: invalid MIDI out EP 0 [ 657.081981][T12044] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 657.110981][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.147193][T12044] usb 8-1: USB disconnect, device number 11 [ 657.193146][ T5899] usb 2-1: USB disconnect, device number 86 [ 659.352515][T14214] netlink: 'syz.8.2318': attribute type 27 has an invalid length. [ 659.696417][T14214] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.703727][T14214] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.980092][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2320'. [ 660.041632][T14214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.054105][T14214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.347412][T12516] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.441448][T12516] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.455781][T12516] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.469402][T12516] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.184480][T14251] syzkaller0: entered promiscuous mode [ 662.200356][T14251] syzkaller0: entered allmulticast mode [ 662.209780][ T5899] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 662.658188][ T5899] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 662.907776][ T5899] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 663.068242][ T5899] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.130287][ T5899] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 663.169293][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.209363][ T5899] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 663.216979][ T5899] usb 2-1: invalid MIDI out EP 0 [ 663.289770][ T5982] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 663.503223][T14249] delete_channel: no stack [ 663.649874][ T30] audit: type=1400 audit(1754223054.462:1175): avc: denied { create } for pid=14265 comm="syz.8.2332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 663.669701][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.840170][ T5982] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 663.876867][ T30] audit: type=1400 audit(1754223054.482:1176): avc: denied { sys_admin } for pid=14265 comm="syz.8.2332" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 664.359228][ T5982] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 664.372762][ T5899] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 664.383437][ T5899] usb 2-1: USB disconnect, device number 87 [ 664.389800][ T5982] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 664.404440][ T5982] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 664.413701][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.461154][ T5982] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 664.468727][ T5982] usb 5-1: invalid MIDI out EP 0 [ 664.917458][T14263] delete_channel: no stack [ 665.754493][ T5982] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 665.877197][ T5982] usb 5-1: USB disconnect, device number 97 [ 667.509804][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 667.693807][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 667.712018][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 667.740120][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 667.750182][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 667.771230][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 667.828586][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 667.838924][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 667.861986][ T9] usb 2-1: Product: syz [ 667.886367][ T9] usb 2-1: Manufacturer: syz [ 667.925872][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 667.932608][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 667.956441][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 667.984406][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 668.395114][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 668.396030][ T5919] usb 2-1: USB disconnect, device number 88 [ 668.401934][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 668.413443][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 668.419483][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 668.743394][T14325] netlink: 1304 bytes leftover after parsing attributes in process `syz.7.2345'. [ 671.541950][T14353] ubi0: attaching mtd0 [ 671.546109][T14353] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 672.410025][ T5919] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 672.634538][ T5919] usb 5-1: Invalid ep0 maxpacket: 64 [ 672.919764][ T5919] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 673.029823][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 673.408631][ T9] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 673.419275][ T9] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 673.430574][ T9] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.431769][ T5919] usb 5-1: Invalid ep0 maxpacket: 64 [ 673.473369][ T9] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 673.486788][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.504564][ T5919] usb usb5-port1: attempt power cycle [ 673.642369][ T9] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 673.683638][ T9] usb 9-1: invalid MIDI out EP 0 [ 673.919825][ T5919] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 673.950362][T14362] delete_channel: no stack [ 674.380251][ T5919] usb 5-1: Invalid ep0 maxpacket: 64 [ 675.072611][ T9] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 675.223252][ T9] usb 9-1: USB disconnect, device number 14 [ 675.462317][T14390] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 675.678441][ T5982] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 675.848264][ T5982] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 675.868690][ T5982] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 675.895215][ T5982] usb 8-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 675.912825][ T5982] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 675.922758][ T5982] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.943019][ T5982] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 675.954432][ T5982] usb 8-1: invalid MIDI out EP 0 [ 676.151393][T14389] delete_channel: no stack [ 676.307420][ T5982] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 676.330526][ T5982] usb 8-1: USB disconnect, device number 12 [ 679.160152][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 679.389751][ T6412] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 679.780027][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 679.841764][ T9] usb 8-1: config 0 has an invalid interface number: 33 but max is 1 [ 679.893595][ T9] usb 8-1: config 0 has no interface number 1 [ 679.900847][ T9] usb 8-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 679.912538][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 679.940351][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 679.949469][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.966680][ T6412] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 679.976941][ T6412] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 680.075542][ T6412] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 680.088886][ T6412] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 680.098098][ T6412] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.682660][ T6412] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.712094][ T9] usb 8-1: Product: syz [ 680.715980][ T6412] usb 5-1: invalid MIDI out EP 0 [ 680.719917][ T9] usb 8-1: Manufacturer: syz [ 680.725717][ T9] usb 8-1: SerialNumber: syz [ 680.754445][ T9] usb 8-1: config 0 descriptor?? [ 680.769080][ T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 681.332007][T14433] delete_channel: no stack [ 681.638707][T14422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.663830][T14422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.745432][ T2328] pvrusb2: Invalid read control endpoint [ 681.745816][ T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 681.759067][ T2328] usb 8-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 681.764230][ T8896] udevd[8896]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.868251][ T30] audit: type=1400 audit(1754223072.712:1177): avc: denied { firmware_load } for pid=2328 comm="pvrusb2-context" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 681.889028][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.906064][ T6412] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 681.915917][ T9] usb 8-1: USB disconnect, device number 13 [ 681.945948][ T6412] usb 5-1: USB disconnect, device number 102 [ 681.954875][ T2328] usb 8-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 682.159765][ T5920] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 682.702707][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 682.708739][T14444] Bluetooth: hci4: command 0x0406 tx timeout [ 682.827889][ T5920] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 682.839730][ T5920] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 682.918602][ T5920] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 682.929062][ T5920] usb 7-1: config 220 has no interface number 2 [ 682.937298][ T5920] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 682.997327][ T5920] usb 7-1: config 220 interface 0 has no altsetting 0 [ 683.014354][ T5920] usb 7-1: config 220 interface 76 has no altsetting 0 [ 683.035258][ T5920] usb 7-1: config 220 interface 1 has no altsetting 0 [ 683.728096][ T5920] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 683.746446][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.756567][ T5920] usb 7-1: Product: syz [ 683.762646][ T5920] usb 7-1: Manufacturer: syz [ 683.767348][ T5920] usb 7-1: SerialNumber: syz [ 685.105014][ T5920] usb 7-1: selecting invalid altsetting 0 [ 685.119170][ T5920] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 685.162236][ T5920] usb 7-1: No valid video chain found. [ 685.291125][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.297798][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.511580][T14492] ubi0: attaching mtd0 [ 685.515695][T14492] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 685.910401][ T5920] usb 7-1: selecting invalid altsetting 0 [ 685.916149][ T5920] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 686.000680][ T5920] usb 7-1: USB disconnect, device number 8 [ 686.045319][ T30] audit: type=1400 audit(1754223076.892:1178): avc: denied { sqpoll } for pid=14489 comm="syz.1.2392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 687.309793][ T5899] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 687.503750][ T5899] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 687.574994][ T5899] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 687.609518][ T5899] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 687.642929][ T5899] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 687.839151][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.883887][ T5899] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 687.906028][ T5899] usb 5-1: invalid MIDI out EP 0 [ 688.034284][ T5899] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 688.069846][ T5982] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 688.098422][T14508] delete_channel: no stack [ 688.136879][ T5899] usb 5-1: USB disconnect, device number 103 [ 688.240837][ T5982] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 688.251596][ T5982] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 688.265627][ T5982] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.291963][ T5982] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 688.410130][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.564375][ T5982] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 688.691683][ T5982] usb 2-1: invalid MIDI out EP 0 [ 688.782769][ T5982] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 688.937798][ T5982] usb 2-1: USB disconnect, device number 89 [ 688.966824][T14517] delete_channel: no stack [ 689.401879][T14529] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 689.577424][ T5982] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 690.272816][ T5982] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 690.286684][ T5982] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 690.715048][ T5982] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 690.749784][ T5982] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 690.758840][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.894837][ T5982] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 691.471057][T14531] delete_channel: no stack [ 691.530411][ T5982] usb 5-1: invalid MIDI out EP 0 [ 692.001417][ T5982] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 692.007258][ T6026] udevd[6026]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 692.098107][ T5982] usb 5-1: USB disconnect, device number 104 [ 692.711536][ T30] audit: type=1400 audit(1754223083.522:1179): avc: denied { setopt } for pid=14566 comm="syz.6.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 693.039779][ T5899] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 693.354983][ T5899] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 693.538588][ T5899] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 693.789155][ T5899] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 694.559313][ T5899] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 694.672970][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.770695][T14586] netlink: zone id is out of range [ 694.776526][T14586] netlink: zone id is out of range [ 695.018242][ T5899] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 695.358529][ T5899] usb 9-1: invalid MIDI out EP 0 [ 695.544645][T14586] netlink: set zone limit has 4 unknown bytes [ 695.621082][T14571] delete_channel: no stack [ 696.322952][ T5899] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 696.339543][T14595] netlink: 'syz.4.2418': attribute type 10 has an invalid length. [ 696.368730][T14595] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 696.379429][T14595] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 696.622547][ T5899] usb 9-1: USB disconnect, device number 15 [ 697.622409][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 698.225262][T14615] lo speed is unknown, defaulting to 1000 [ 698.313494][T14620] ubi0: attaching mtd0 [ 698.317604][T14620] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 698.722496][T14615] lo speed is unknown, defaulting to 1000 [ 698.759791][ T6412] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 699.369733][ T6412] usb 2-1: Invalid ep0 maxpacket: 64 [ 699.499972][ T6412] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 700.781827][T14637] netlink: 'syz.6.2428': attribute type 2 has an invalid length. [ 701.416070][T14638] trusted_key: encrypted_key: hex blob is missing [ 702.509849][ T5899] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 702.801422][ T5899] usb 7-1: Using ep0 maxpacket: 16 [ 703.016707][ T5899] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 703.039900][ T5899] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 703.050410][ T5899] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 703.532775][ T5899] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 703.544040][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.571836][ T5899] usb 7-1: Product: syz [ 703.602859][ T5899] usb 7-1: Manufacturer: syz [ 703.607473][ T5899] usb 7-1: SerialNumber: syz [ 703.684056][T11225] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 704.001552][T11225] usb 2-1: Using ep0 maxpacket: 32 [ 704.004323][ T30] audit: type=1400 audit(1754223094.852:1180): avc: denied { mounton } for pid=14678 comm="syz.8.2440" path="/76/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 704.151477][T11225] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 704.159580][T11225] usb 2-1: config 0 has no interface number 0 [ 704.168155][T11225] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 704.177708][T11225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.194967][T11225] usb 2-1: Product: syz [ 704.199850][ T5899] usb 7-1: 0:2 : does not exist [ 704.207233][T11225] usb 2-1: Manufacturer: syz [ 704.218452][T11225] usb 2-1: SerialNumber: syz [ 704.240684][T11225] usb 2-1: config 0 descriptor?? [ 704.252116][T11225] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 704.263582][ T5899] usb 7-1: USB disconnect, device number 9 [ 704.297901][ T30] audit: type=1400 audit(1754223094.952:1181): avc: denied { mounton } for pid=14651 comm="syz.6.2432" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 704.324622][ T8896] udevd[8896]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 705.208399][T14689] ubi0: attaching mtd0 [ 705.212573][T14689] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 705.919894][ T6412] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 706.122031][T11225] usb 2-1: qt2_attach - failed to power on unit: -71 [ 706.128912][T11225] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 706.169762][ T6412] usb 7-1: Invalid ep0 maxpacket: 64 [ 706.223170][T11225] usb 2-1: USB disconnect, device number 92 [ 706.231966][T14659] delete_channel: no stack [ 706.309947][ T6412] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 706.346708][T14700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2444'. [ 706.549798][ T6412] usb 7-1: Invalid ep0 maxpacket: 64 [ 706.570148][ T6412] usb usb7-port1: attempt power cycle [ 707.951889][T14714] netlink: 'syz.4.2449': attribute type 4 has an invalid length. [ 708.665015][T14714] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2449'. [ 708.685179][T14714] wlan1: mtu less than device minimum [ 708.836334][T14722] binder_alloc: 14720: pid 14720 spamming oneway? 1 buffers allocated for a total size of 4096 [ 709.308390][T14722] binder_alloc: 14720: pid 14720 spamming oneway? 2 buffers allocated for a total size of 5120 [ 710.522662][ T5899] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 710.899797][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 710.909245][ T5899] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 710.917492][ T5899] usb 2-1: config 0 has no interface number 0 [ 710.926286][ T5899] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 710.947384][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.959739][ T5899] usb 2-1: Product: syz [ 710.963899][ T5899] usb 2-1: Manufacturer: syz [ 710.969798][ T5899] usb 2-1: SerialNumber: syz [ 710.989226][ T5899] usb 2-1: config 0 descriptor?? [ 711.068065][ T5899] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 711.970029][ T30] audit: type=1400 audit(1754223102.202:1182): avc: denied { shutdown } for pid=14741 comm="syz.4.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 711.990181][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.762138][ T5899] usb 2-1: qt2_attach - failed to power on unit: -71 [ 712.769107][ T5899] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71 [ 713.708458][ T5899] usb 2-1: USB disconnect, device number 93 [ 716.878629][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2472'. [ 718.243553][ T30] audit: type=1400 audit(1754223109.082:1183): avc: denied { setopt } for pid=14806 comm="syz.7.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 718.516962][T14819] ubi0: attaching mtd0 [ 718.521124][T14819] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 718.888234][ T30] audit: type=1400 audit(1754223109.082:1184): avc: denied { bind } for pid=14806 comm="syz.7.2476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 718.889079][ T6412] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 719.111705][ T6412] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 719.123768][ T6412] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 719.144901][ T6412] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 719.180922][ T5919] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 719.262750][ T6412] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 719.278141][ T6412] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.347178][ T6412] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 719.364463][ T6412] usb 9-1: invalid MIDI out EP 0 [ 719.369828][ T5919] usb 7-1: Invalid ep0 maxpacket: 64 [ 719.510338][ T5919] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 719.532737][ T30] audit: type=1400 audit(1754223110.362:1185): avc: denied { map } for pid=14823 comm="syz.1.2479" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 719.601549][T14812] delete_channel: no stack [ 719.667345][ T6412] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 719.678425][ T5919] usb 7-1: Invalid ep0 maxpacket: 64 [ 719.685777][ T5919] usb usb7-port1: attempt power cycle [ 719.698520][ T6412] usb 9-1: USB disconnect, device number 16 [ 719.768901][T14826] netfs: Couldn't get user pages (rc=-14) [ 719.839776][ T30] audit: type=1400 audit(1754223110.362:1186): avc: denied { execute } for pid=14823 comm="syz.1.2479" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 720.040778][ T5919] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 720.059174][ T30] audit: type=1800 audit(1754223110.602:1187): pid=14826 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.2480" name="/" dev="9p" ino=2 res=0 errno=0 [ 720.083868][ T5919] usb 7-1: Invalid ep0 maxpacket: 64 [ 720.187339][ T30] audit: type=1400 audit(1754223110.612:1188): avc: denied { map } for pid=14825 comm="syz.1.2480" path="/476/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 720.219590][T14830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14830 comm=syz.1.2481 [ 720.289825][ T5919] usb 7-1: new low-speed USB device number 16 using dummy_hcd [ 720.310980][ T5919] usb 7-1: Invalid ep0 maxpacket: 64 [ 720.325980][ T5919] usb usb7-port1: unable to enumerate USB device [ 722.124687][ T30] audit: type=1400 audit(1754223112.962:1189): avc: denied { execute } for pid=14841 comm="syz.6.2487" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 722.167779][T14847] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 722.469576][ T5919] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 723.460062][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 723.489758][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.499579][ T5919] usb 2-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 724.312680][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.322822][ T5919] usb 2-1: config 0 descriptor?? [ 725.035324][ T5919] hid-generic 0003:04F3:0754.0013: failed to start in urb: -90 [ 725.078126][ T5919] hid-generic 0003:04F3:0754.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.1-1/input0 [ 725.153709][ T5919] usb 2-1: USB disconnect, device number 94 [ 725.190472][T14880] fido_id[14880]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 726.898406][ T5851] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 732.871316][ T5899] hid_parser_main: 5 callbacks suppressed [ 732.871329][ T5899] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 732.935818][ T5899] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 735.252584][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2520'. [ 736.039948][T12044] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 737.220084][T12044] usb 5-1: Using ep0 maxpacket: 32 [ 737.250416][T12044] usb 5-1: config 0 has an invalid interface number: 162 but max is 0 [ 737.258706][T12044] usb 5-1: config 0 has no interface number 0 [ 737.270773][T12044] usb 5-1: config 0 interface 162 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 737.381237][T14990] random: crng reseeded on system resumption [ 737.543466][T12044] usb 5-1: config 0 interface 162 has no altsetting 0 [ 738.251561][ T30] audit: type=1400 audit(1754223129.092:1190): avc: denied { firmware_load } for pid=12532 comm="kworker/u8:21" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 738.615139][T12044] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 738.767513][T12044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.795610][T12044] usb 5-1: config 0 descriptor?? [ 739.324855][T12044] usb 5-1: can't set config #0, error -71 [ 739.413448][T12044] usb 5-1: USB disconnect, device number 105 [ 739.812046][T15003] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 739.883307][T15003] picdev_read: 2 callbacks suppressed [ 739.883316][T15003] kvm: pic: non byte read [ 739.918163][T15003] kvm: pic: level sensitive irq not supported [ 739.918260][T15003] kvm: pic: non byte read [ 739.934271][T15003] kvm: pic: level sensitive irq not supported [ 739.934328][T15003] kvm: pic: non byte read [ 739.961014][T15003] kvm: pic: level sensitive irq not supported [ 739.961074][T15003] kvm: pic: non byte read [ 739.973089][T15003] kvm: pic: level sensitive irq not supported [ 739.973146][T15003] kvm: pic: non byte read [ 739.985115][T15003] kvm: pic: level sensitive irq not supported [ 739.985172][T15003] kvm: pic: non byte read [ 740.478255][T15022] tipc: Enabled bearer , priority 0 [ 740.497750][T15022] syzkaller0: entered promiscuous mode [ 740.528744][T15022] syzkaller0: entered allmulticast mode [ 740.884574][T15026] tipc: Resetting bearer [ 740.935080][T15020] tipc: Resetting bearer [ 740.984374][T15020] tipc: Disabling bearer [ 742.615157][T11225] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 743.049714][T11225] usb 2-1: Using ep0 maxpacket: 8 [ 743.085922][T11225] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 743.170503][T11225] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.189231][T11225] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 743.209696][T11225] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 743.229895][T11225] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.244191][T11225] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 743.263401][T11225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.529563][T11225] usb 2-1: usb_control_msg returned -32 [ 743.549637][T11225] usbtmc 2-1:16.0: can't read capabilities [ 743.914731][T15069] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 743.959856][T11225] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 744.300884][ T5906] usb 2-1: USB disconnect, device number 95 [ 744.341132][T11225] usb 9-1: Using ep0 maxpacket: 16 [ 744.362511][T11225] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 744.398319][T11225] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 744.453392][T11225] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 744.475063][T11225] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.483295][T11225] usb 9-1: Product: syz [ 744.489739][T11225] usb 9-1: Manufacturer: syz [ 744.494404][T11225] usb 9-1: SerialNumber: syz [ 744.517560][T11225] usb 9-1: config 0 descriptor?? [ 744.542126][T11225] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 744.566655][T11225] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 744.691854][T15074] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0) [ 745.838566][ T30] audit: type=1400 audit(1754223136.682:1191): avc: denied { bind } for pid=15077 comm="syz.7.2552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 746.267376][T11225] em28xx 9-1:0.0: unknown em28xx chip ID (104) [ 746.705817][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.018531][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.027624][ T2328] pvrusb2: request_firmware fatal error with code=-110 [ 747.038848][T11225] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 747.486722][T11225] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 747.511332][ T2328] pvrusb2: Failure uploading firmware1 [ 747.529763][T11225] em28xx 9-1:0.0: No AC97 audio processor [ 747.536897][ T2328] pvrusb2: Device initialization was not successful. [ 748.475792][ T2328] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 748.485914][ T2328] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 748.495178][ T2328] pvrusb2: Failed to submit write-control URB status=-19 [ 748.502866][ T2328] usb 8-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 748.512064][ T2328] usb 8-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 748.513481][T11225] usb 9-1: USB disconnect, device number 17 [ 748.533719][ T9] pvrusb2: Device being rendered inoperable [ 748.759620][T11225] em28xx 9-1:0.0: Disconnecting em28xx [ 748.954300][T11225] em28xx 9-1:0.0: Freeing device [ 749.809720][T11225] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 750.903230][T15113] netlink: 'syz.7.2562': attribute type 4 has an invalid length. [ 751.048944][T11225] usb 7-1: Using ep0 maxpacket: 16 [ 751.061597][T11225] usb 7-1: config 0 has no interfaces? [ 751.068634][T11225] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 751.078214][T11225] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.087824][T11225] usb 7-1: Product: syz [ 751.095116][T11225] usb 7-1: Manufacturer: syz [ 751.102280][T11225] usb 7-1: SerialNumber: syz [ 751.108142][T11225] usb 7-1: config 0 descriptor?? [ 751.373484][T15118] Falling back ldisc for ptm0. [ 751.872736][T15127] ubi0: attaching mtd0 [ 751.876860][T15127] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 752.249188][ T30] audit: type=1400 audit(1754223143.082:1192): avc: denied { create } for pid=15120 comm="syz.4.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 753.056698][ T5899] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 753.234807][ T5899] usb 2-1: Invalid ep0 maxpacket: 64 [ 753.524704][ T5919] usb 7-1: USB disconnect, device number 17 [ 753.560093][ T5899] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 753.794304][ T5899] usb 2-1: Invalid ep0 maxpacket: 64 [ 753.827802][ T5899] usb usb2-port1: attempt power cycle [ 758.300468][T15164] macvtap0: refused to change device tx_queue_len [ 758.321378][ T6412] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 758.887823][ T6412] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 758.908420][ T6412] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 758.953445][ T6412] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 758.987182][ T6412] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 759.141402][T15173] ALSA: mixer_oss: invalid OSS volume '' [ 759.383036][ T6412] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.425989][ T6412] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 759.454597][ T6412] usb 2-1: invalid MIDI out EP 0 [ 759.629407][T15179] syz.4.2577: attempt to access beyond end of device [ 759.629407][T15179] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 759.670893][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.690331][ T6412] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 759.698038][T15179] ------------[ cut here ]------------ [ 759.704872][T15179] WARNING: CPU: 0 PID: 15179 at fs/buffer.c:1125 __getblk_slow+0x4cc/0x560 [ 759.713534][T15179] Modules linked in: [ 759.717538][T15179] CPU: 0 UID: 0 PID: 15179 Comm: syz.4.2577 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 759.729292][T15179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 759.739497][T15179] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 759.744864][T15179] Code: c0 8b 48 89 df e8 f4 e3 bb ff 90 0f 0b e8 0c 41 73 ff 48 c7 c6 20 5b c0 8b 48 89 df e8 dd e3 bb ff 90 0f 0b e8 f5 40 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 80 5c c0 8b 31 db e8 4d f3 51 [ 759.764518][T15179] RSP: 0018:ffffc9000433f7f0 EFLAGS: 00010283 [ 759.770569][T15179] RAX: 0000000000008315 RBX: 0000000000000200 RCX: ffffc9000ec10000 [ 759.778520][T15179] RDX: 0000000000080000 RSI: ffffffff8248478b RDI: 0000000000000005 [ 759.786621][T15179] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 759.794621][T15179] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888024027300 [ 759.802583][T15179] R13: 0000000000000100 R14: 0000000000000200 R15: ffff888024027300 [ 759.810552][T15179] FS: 00007fc4946996c0(0000) GS:ffff8881246c8000(0000) knlGS:0000000000000000 [ 759.819458][T15179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 759.826034][T15179] CR2: 00002000001c1000 CR3: 00000000513b5000 CR4: 00000000003526f0 [ 759.833993][T15179] Call Trace: [ 759.837306][T15179] [ 759.840258][T15179] ? __pfx___might_resched+0x10/0x10 [ 759.845523][T15179] bdev_getblk+0xd4/0xe0 [ 759.849776][T15179] __bread_gfp+0x86/0x3c0 [ 759.854113][T15179] udf_read_tagged+0xae/0x740 [ 759.858799][T15179] udf_check_anchor_block+0x89/0x4b0 [ 759.864107][T15179] ? udf_get_last_block+0x1ce/0x2a0 [ 759.869312][T15179] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 759.875232][T15179] udf_load_vrs+0x3b8/0x1070 [ 759.879839][T15179] ? __pfx_udf_load_vrs+0x10/0x10 [ 759.884863][T15179] ? __pfx_udf_get_last_session+0x10/0x10 [ 759.890604][T15179] ? lockdep_init_map_type+0x5c/0x280 [ 759.895979][T15179] udf_fill_super+0x791/0x1df0 [ 759.900884][T15179] ? __pfx_udf_fill_super+0x10/0x10 [ 759.906073][T15179] ? do_raw_spin_lock+0x12c/0x2b0 [ 759.911103][T15179] ? find_held_lock+0x2b/0x80 [ 759.915775][T15179] ? sb_set_blocksize+0x176/0x1d0 [ 759.920802][T15179] ? setup_bdev_super+0x369/0x730 [ 759.925823][T15179] get_tree_bdev_flags+0x38c/0x620 [ 759.930988][T15179] ? __pfx_udf_fill_super+0x10/0x10 [ 759.936161][T15179] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 759.941840][T15179] ? bpf_lsm_capable+0x9/0x10 [ 759.946497][T15179] ? security_capable+0x7e/0x260 [ 759.951433][T15179] vfs_get_tree+0x8b/0x340 [ 759.955837][T15179] path_mount+0x1482/0x1fd0 [ 759.960402][T15179] ? __pfx_path_mount+0x10/0x10 [ 759.965239][T15179] ? kmem_cache_free+0x2d1/0x4d0 [ 759.970182][T15179] ? putname+0x154/0x1a0 [ 759.974442][T15179] ? putname+0x154/0x1a0 [ 759.978672][T15179] ? __x64_sys_mount+0x28d/0x310 [ 759.983620][T15179] __x64_sys_mount+0x28d/0x310 [ 759.988380][T15179] ? __pfx___x64_sys_mount+0x10/0x10 [ 759.993679][T15179] do_syscall_64+0xcd/0x4c0 [ 759.998174][T15179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.004069][T15179] RIP: 0033:0x7fc49378eb69 [ 760.008457][T15179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.028074][T15179] RSP: 002b:00007fc494699038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 760.036476][T15179] RAX: ffffffffffffffda RBX: 00007fc4939b6160 RCX: 00007fc49378eb69 [ 760.044493][T15179] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 760.052468][T15179] RBP: 00007fc493811df1 R08: 0000000000000000 R09: 0000000000000000 [ 760.060429][T15179] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 760.068374][T15179] R13: 0000000000000001 R14: 00007fc4939b6160 R15: 00007fffb5de60c8 [ 760.076355][T15179] [ 760.079352][T15179] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 760.086603][T15179] CPU: 0 UID: 0 PID: 15179 Comm: syz.4.2577 Not tainted 6.16.0-syzkaller-11241-g186f3edfdd41 #0 PREEMPT(full) [ 760.098286][T15179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 760.108311][T15179] Call Trace: [ 760.111562][T15179] [ 760.114466][T15179] dump_stack_lvl+0x3d/0x1f0 [ 760.119055][T15179] vpanic+0x6a3/0x780 [ 760.123033][T15179] ? __pfx_vpanic+0x10/0x10 [ 760.127523][T15179] ? __getblk_slow+0x4cc/0x560 [ 760.132269][T15179] panic+0xca/0xd0 [ 760.135970][T15179] ? __pfx_panic+0x10/0x10 [ 760.140368][T15179] check_panic_on_warn+0xab/0xb0 [ 760.145276][T15179] __warn+0xf6/0x3c0 [ 760.149142][T15179] ? __getblk_slow+0x4cc/0x560 [ 760.153894][T15179] report_bug+0x3c3/0x580 [ 760.158199][T15179] ? __getblk_slow+0x4cc/0x560 [ 760.162940][T15179] handle_bug+0x184/0x210 [ 760.167243][T15179] exc_invalid_op+0x17/0x50 [ 760.171730][T15179] asm_exc_invalid_op+0x1a/0x20 [ 760.176556][T15179] RIP: 0010:__getblk_slow+0x4cc/0x560 [ 760.181905][T15179] Code: c0 8b 48 89 df e8 f4 e3 bb ff 90 0f 0b e8 0c 41 73 ff 48 c7 c6 20 5b c0 8b 48 89 df e8 dd e3 bb ff 90 0f 0b e8 f5 40 73 ff 90 <0f> 0b 90 8b 74 24 0c 89 ea 48 c7 c7 80 5c c0 8b 31 db e8 4d f3 51 [ 760.201491][T15179] RSP: 0018:ffffc9000433f7f0 EFLAGS: 00010283 [ 760.207527][T15179] RAX: 0000000000008315 RBX: 0000000000000200 RCX: ffffc9000ec10000 [ 760.215467][T15179] RDX: 0000000000080000 RSI: ffffffff8248478b RDI: 0000000000000005 [ 760.223410][T15179] RBP: 0000000000000400 R08: 0000000000000005 R09: 0000000000000000 [ 760.231354][T15179] R10: 0000000000000200 R11: 0000000000000000 R12: ffff888024027300 [ 760.239296][T15179] R13: 0000000000000100 R14: 0000000000000200 R15: ffff888024027300 [ 760.247252][T15179] ? __getblk_slow+0x4cb/0x560 [ 760.251998][T15179] ? __pfx___might_resched+0x10/0x10 [ 760.257258][T15179] bdev_getblk+0xd4/0xe0 [ 760.261487][T15179] __bread_gfp+0x86/0x3c0 [ 760.265819][T15179] udf_read_tagged+0xae/0x740 [ 760.270487][T15179] udf_check_anchor_block+0x89/0x4b0 [ 760.275752][T15179] ? udf_get_last_block+0x1ce/0x2a0 [ 760.280936][T15179] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 760.286812][T15179] udf_load_vrs+0x3b8/0x1070 [ 760.291390][T15179] ? __pfx_udf_load_vrs+0x10/0x10 [ 760.296395][T15179] ? __pfx_udf_get_last_session+0x10/0x10 [ 760.302101][T15179] ? lockdep_init_map_type+0x5c/0x280 [ 760.307461][T15179] udf_fill_super+0x791/0x1df0 [ 760.312208][T15179] ? __pfx_udf_fill_super+0x10/0x10 [ 760.317383][T15179] ? do_raw_spin_lock+0x12c/0x2b0 [ 760.322384][T15179] ? find_held_lock+0x2b/0x80 [ 760.327044][T15179] ? sb_set_blocksize+0x176/0x1d0 [ 760.332050][T15179] ? setup_bdev_super+0x369/0x730 [ 760.337061][T15179] get_tree_bdev_flags+0x38c/0x620 [ 760.342150][T15179] ? __pfx_udf_fill_super+0x10/0x10 [ 760.347327][T15179] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 760.352942][T15179] ? bpf_lsm_capable+0x9/0x10 [ 760.357601][T15179] ? security_capable+0x7e/0x260 [ 760.362517][T15179] vfs_get_tree+0x8b/0x340 [ 760.366916][T15179] path_mount+0x1482/0x1fd0 [ 760.371405][T15179] ? __pfx_path_mount+0x10/0x10 [ 760.376243][T15179] ? kmem_cache_free+0x2d1/0x4d0 [ 760.381159][T15179] ? putname+0x154/0x1a0 [ 760.385393][T15179] ? putname+0x154/0x1a0 [ 760.389631][T15179] ? __x64_sys_mount+0x28d/0x310 [ 760.394558][T15179] __x64_sys_mount+0x28d/0x310 [ 760.399309][T15179] ? __pfx___x64_sys_mount+0x10/0x10 [ 760.404584][T15179] do_syscall_64+0xcd/0x4c0 [ 760.409079][T15179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.414955][T15179] RIP: 0033:0x7fc49378eb69 [ 760.419349][T15179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.438935][T15179] RSP: 002b:00007fc494699038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 760.447330][T15179] RAX: ffffffffffffffda RBX: 00007fc4939b6160 RCX: 00007fc49378eb69 [ 760.455281][T15179] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 760.463231][T15179] RBP: 00007fc493811df1 R08: 0000000000000000 R09: 0000000000000000 [ 760.471181][T15179] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000000 [ 760.479132][T15179] R13: 0000000000000001 R14: 00007fc4939b6160 R15: 00007fffb5de60c8 [ 760.487096][T15179] [ 760.490275][T15179] Kernel Offset: disabled [ 760.494571][T15179] Rebooting in 86400 seconds..