last executing test programs: 2m32.265671779s ago: executing program 0 (id=2304): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) mmap(&(0x7f0000a6c000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, r0, 0x0) 2m31.60195292s ago: executing program 0 (id=2308): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = fsopen(&(0x7f00000001c0)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000300)='posixacl\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYRESHEX=r3, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64=r0], 0x8) r4 = openat$vcs(0xffffff9c, &(0x7f0000001100), 0x6a201, 0x0) write$UHID_INPUT(r4, &(0x7f0000002c40)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67002f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad94bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd8456a18f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3a532f000000000000880ef33ca51d4bf5f0fb55baa10cf56606001253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368cef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a7a881a1d617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb475dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df00", 0xffffffc2}}, 0x1006) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, 0x0) write$cgroup_devices(r2, &(0x7f0000000000)={'c', ' *:* ', 'rm\x00'}, 0x9) r5 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r7 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xf8) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x3, 0x1, 0x0, 0x200, 0x100000000, 0x5, 0x40, 0x1000, 0x80000000, 0x5, 0x3f, 0x4, 0xab, 0x20000000000000, 0x8000000, 0x100000001], 0x1000, 0x1a000}) write$cgroup_devices(r5, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 2m31.408038668s ago: executing program 0 (id=2309): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e", 0xf3}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266e", 0xe2}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa8", 0xea}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08", 0x41}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/86, 0x56}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c2", 0xc9}, {&(0x7f0000000e80)="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", 0x1b2}], 0x3}}], 0x2, 0xc0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x50) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m30.5136307s ago: executing program 0 (id=2312): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000180)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="0bbc33ef48bb315031d63060485faca4acb0eeec7689a57edead9ea415ebd0147986ab82696de834a0b5c18455f1a77e74f24c4361d4f92a33061eed798221d9181ac7c65a5220560d7b499c9cd2215a4047284449dfcdca611313de207e5127bdcd0d1f14c1a802b0e52605dd0f6f0bd8d118f23852cef044394895cada6ae2b6a38f36b2f7a4b17de63979242b1ea6ffc38ca3e615cef2bd2e0ab313750f1439407c97c0619dc6e818e4a8eef8b4f5fa755ec54135707231408c203f0d"], 0x50) write(r5, &(0x7f0000000000)='W', 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_IO_FLUSHER(0x41, 0x3) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xe) r7 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, &(0x7f00000000c0)=0xfffffffffffffeff) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) 2m29.509385268s ago: executing program 0 (id=2313): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x3, 0x0, 0x300) 2m29.411831322s ago: executing program 0 (id=2314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94) getpid() r0 = syz_open_dev$video4linux(0x0, 0x5, 0x40c00) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) syz_clone3(0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 2m14.098995289s ago: executing program 32 (id=2314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94) getpid() r0 = syz_open_dev$video4linux(0x0, 0x5, 0x40c00) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000500), 0x0, 0x0) syz_clone3(0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r1, 0xab03) 11.766699483s ago: executing program 4 (id=2682): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) r3 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80"], 0x0) syz_usb_control_io(r3, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000001840)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x20, 0x17, 0x4, "28a3f7ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000000)={0x20, 0x3, 0x2, "9377"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001640)={0x84, &(0x7f0000001180)={0x20, 0x0, 0x2, 'eH'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001480)={0x84, &(0x7f0000001040)={0x40, 0x8, 0x2, "e249"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000700)=""/243) sched_setscheduler(r2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) 10.361792145s ago: executing program 3 (id=2689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000040)=0x4, 0x4) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000055098a403a0901268f08000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000300)={r5, 0x81}, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0xffffffffdfffefff, 0x9) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@bridge_delneigh={0x1b, 0x1c, 0x1, 0x70bd28, 0x0, {0x7, 0x0, 0x0, 0x0, 0x1, 0x64, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) sendmsg$NL80211_CMD_STOP_AP(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r7, 0x200, 0x70bd26, 0x25dfdbf9, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000006}, 0x40000) 9.546705489s ago: executing program 2 (id=2692): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpriority(0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) r4 = socket$inet(0x2, 0x800, 0x0) setpriority(0x2, 0xff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x4) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x5, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000340)=ANY=[@ANYRES8=0xffffffffffffffff, @ANYRES32], 0x30}, 0x40084) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x111910, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x100, &(0x7f0000000240)=0x4, 0x0, 0x4) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4, @ANYRES16=r6, @ANYRES64=r1], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 8.6630655s ago: executing program 4 (id=2694): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf500090584"], 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {0xa}, {0x5}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x64}}, 0x40) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='hfsplus\x00', 0x200, &(0x7f0000000300)='&\x00') r5 = socket$inet_tcp(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_tcp_buf(r5, 0x6, 0x1c, 0x0, &(0x7f0000000040)=0xffffffffffffff83) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 7.631918425s ago: executing program 3 (id=2696): socket$inet_smc(0x2b, 0x1, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000180)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6.858182583s ago: executing program 1 (id=2698): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r1, r2}}}], 0x20, 0x40044}}], 0x1, 0x4) 6.601013219s ago: executing program 1 (id=2699): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x150) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200, 0x0) move_mount(r2, &(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000380)='./file0\x00', 0x204) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001000), 0x0, 0x2000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xc}}, 0x20) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, r8, 0x0) 6.480231186s ago: executing program 5 (id=2700): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) userfaultfd(0x80001) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x4, 0xfe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0x6) r2 = syz_open_dev$video(0x0, 0x3, 0x1340) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000004c0)={0x1, @sliced={0x6, [0x101, 0x7, 0x6, 0x8, 0x7, 0xb, 0xfffb, 0xd89, 0x4d26, 0x5, 0x6, 0x0, 0xfffe, 0x3, 0x180, 0xfe00, 0x1000, 0x2, 0x401, 0x8, 0x5, 0x4, 0x8, 0x3d2, 0x3, 0xfff, 0x9273, 0x2, 0xd5f, 0xffdf, 0x3, 0xa, 0x86a, 0x0, 0xcc92, 0x667, 0x3, 0xff36, 0x0, 0x1, 0x1, 0xffff, 0xfffc, 0x1, 0x38, 0x5, 0x80, 0x2], 0x9}}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 6.125737502s ago: executing program 2 (id=2701): fsmount(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 6.008752359s ago: executing program 3 (id=2702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 5.833344991s ago: executing program 5 (id=2703): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe0281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x7f, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0x91, '\x00', 0x5}, {0xf, 0x2, 0x8, '\x00', 0xa9}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0xff, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0x1, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x6}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.677398931s ago: executing program 1 (id=2704): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048081) connect$can_j1939(r4, &(0x7f00000010c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r5, 0x0, 0x79a2}, 0x18) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r7, 0x0, 0x18, 0x0, 0x0) 5.656969789s ago: executing program 3 (id=2705): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000049ffe840e5130100534e0000000109021b0001000000000904"], 0x0) 4.724725004s ago: executing program 4 (id=2706): setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000040)=@bpq0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = creat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rpcb_register\x00', r1, 0x0, 0x9}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000007500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48}}], 0x1, 0x68034) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000042584500d43", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e08000007090000", 0x14}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) socket$inet6_sctp(0xa, 0x4, 0x84) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @mcast1}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) inotify_init() socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e041f0204"], 0x7) 4.661477051s ago: executing program 1 (id=2707): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x198, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x3) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$KVM_VCPU(&(0x7f0000f3d000/0x4000)=nil, 0x930, 0x0, 0x4030031, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0x7f, 0xc9, 0xb6}}}}, 0xa) chdir(0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) recvfrom$packet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f000000d040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x38, r0, 0x8de13c6b70ae92c3, 0x70bd2d, 0xfffffffe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x42}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8015}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.43594848s ago: executing program 4 (id=2708): r0 = openat$kvm(0x0, &(0x7f0000000200), 0x2002, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x2100020, &(0x7f0000000380)=ANY=[@ANYBLOB="6e7247733d85e005000000000040346d2c74a755e5e57080741ec16c082ae7bf4403e44d852b748d096b9bd9a416020f4f70a7c1168d5d82ba449eb6f3da75046c5163175ed7f10945ea119d27f4bc514572a2b37796cdadbffeed117aed19501bbd19db98889fe3b9becb3ac160dc1e389aa6f8e38afc45b13742bd4d954355d4407c0e000000000000001d9ea3847a84c6f46d6d6440f26b14ca"]) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) ioperm(0x3, 0x4, 0x1000009) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r4, 0x80) setsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000200)=0x7fff, 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) fanotify_init(0x20, 0x0) (async) r6 = fanotify_init(0x20, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r6, 0x71, 0x8000000, r7, 0x0) fanotify_mark(r6, 0x12, 0x8000001, r2, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4}) (async) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4}) 3.329181242s ago: executing program 5 (id=2709): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) r1 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) umount2(&(0x7f0000000040)='./file0\x00', 0x4) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2d7352ec7a99afa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4040004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5, 0x0, 0x1000ff}, 0x18) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r7, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x3fffff) recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340), 0x0) 2.866679024s ago: executing program 3 (id=2710): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095", @ANYRES8=r0, @ANYRES32, @ANYRES64=r0, @ANYBLOB="c832b6ca81c73259a0f0e2eff9e57d5d4b7d78d355ef4199899cde5acdf0bdcf852597579736ee6ead25e8a4a2bb14bbcdbb0eb97422851fbb40ad2d25b4a9bebce11bb2fd7b9a67fbe9ab20a51930df", @ANYRESOCT, @ANYRES16=r0, @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='nmi_handler\x00', r1}, 0x18) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r7, 0x0, 0x9}, 0x18) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)="d8001c00180098621a11382e386ef59e1e44", 0x12}], 0x1}, 0x4080) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, &(0x7f0000000180)={r6}) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r10, &(0x7f0000010140)={0x2020}, 0x2036) ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) 2.849627389s ago: executing program 1 (id=2711): migrate_pages(0x0, 0x4, &(0x7f0000000080)=0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet(r2, &(0x7f0000000d80)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000180)=[{0x0}, {&(0x7f0000002540)="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", 0xa07}, {&(0x7f0000000080)="c5bbc593cab6cbb6683ff5f648fd16b289782f1d95b4cacbc93090196bd54c8b7ebafea70b752ac1887a7858296fce807c9802dd0fc066c5477b232ebd3271ac3fb821299407032f90e853b901787337827dcfe77ce17940130928266ad44c6a948c8cb7fec8d28371cf65ce387b810dfa85b488", 0x74}], 0x3}}, {{&(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000340)="0197fc4dc5e03721e222bb26bba0911649a5ff1e4ee0d2e30fdb4285add738b5e0701720835793efc14146e2b5df57dae1e1f879e7de0101bfe21352b5f7f5e7629e2297b6cade7c668940b5ec1b5997c936151479b5", 0x56}, {&(0x7f00000003c0)="672c83203a8abdc6079f895c00015276de9fefe7191a8cffc3d4be0902bd191229f64ff9468d4e3d6131be208e0feb91d55414d355bc54d585879d3c851375bb283b8f38f4f3b8204deece9fcedc46af9e116f14a02632131aeea9277f561bf2b7aa7ea97814cc4bbbcb861272d51d8c874b01b9", 0x74}, {&(0x7f0000000680)="4e286f529ba2664a68fb15f07dea521e92be3bcbd66f4d59f72fe209ccccc5bc0e7f1d00b0c7171281e7a8765506eb5387aae9eddcf5fd28d83cf256d122a2276be4f8583eb253e0efcb5839ded03c01fefa4dfd98c82df2ef9591b27e69891c9dd1cc9c6ceba1f7bd24981dee5c9b34464b97a64192ff03b783b78a6f6953578e251ae06f0b16f4a4c954886dd355173fe776e0668825c7bde80f46ebcac12a96d622d7c20bd1bdf206a9208c602ed99fd0f3fdca57666aa8d992e55d7e33051191fb128de8cfcdf16dac4cd0cff505480422b5a16e9f49", 0xd8}, {&(0x7f0000000880)="3a918e177f5ee290b2cbae68652ae0f9c8490138d5a63db7977f8d8195f1ab649257baa8527be7a23192b728b52984b9df5037723eeb92c859bea5b176263773afbba233708d6a13bdc10fdafa36f116ab3b6cfb746e7520755e67aeeb19744fe647187770a8de56cf12c42eed89bda4dce74e6081a6a86caad7cafcde19dc5c4351468c43b0342f0f115719e0f500e82dd4bdab4594c1355d6670e40401e05b6693eef93bc055ef8a73e0c0a62df81760ef0f29feea9ebc3f06c4c0396b34a2006dbc1d2380a19aadf6a62f56fa92ff38e85e00e33b0fbb9749dadc", 0xdc}], 0x4, &(0x7f0000000780)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x30}, @multicast2}}}], 0x58}}, {{&(0x7f0000000480)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000980)="bdd363a6b06dfb7b3de85d5ed4b41b17e092685eb7407790b70c1aeaf333d5ff86be68d9d17d1c0247297d355b36c1c19fbeb95650bfed003cc17914f6421b9f85c17c617a7fb869e082029159c24a0b378dc85292518bdce75810734a946ae478034a5891ede2e36825587d7f8383b6fe56f9e03d48fe2953c8200cdd21bb410e25d3f35bc384df28c93ef96eba6d25983960e620ec354d637581f6bce168d4882f0c9bc7f6da0e16fcc11052efe7056761aaf6d34fed63b105e4a366e8bfa7ce79df2874c5dcaa894b082daaff84ab7158c89c660a08070ff5aed2f2b1b53cac62942a347bef999a6be886780d92bd4a21f0e25620", 0xf6}, {&(0x7f0000000a80)="3f55d74349c78351b468cfe391fa3bc73b3033539dc1e3ba0e2239557e6c39490bb0f6f2853f22c7fb14a26d8847dd3d62c7993c7ed0fe175108830f5bf796a0f4608d82b1db84b696fe376a3cae2e1ae65b50e61148744a53738967bde6a3672e3dec3558287ba5fe1cbe82573fd84f5e598dfd9eec23da", 0x78}], 0x2, &(0x7f0000000c40)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@cipso={0x86, 0x5e, 0xffffffffffffffff, [{0x5, 0x8, "ebf45ca90470"}, {0x5, 0xb, "21dbb316b73f5a7504"}, {0x1, 0x6, "7002bde5"}, {0x1, 0xc, "bd58c42bbc5b7befcc06"}, {0x3, 0xa, "370d2ee0ff04a7f1"}, {0x5, 0x11, "5ce1b3406f33bad55399f7f3c57152"}, {0x7, 0xa, "265e0c42458cee37"}, {0x1, 0xe, "be8b0aafff22034a6bc653ef"}]}, @end, @rr={0x7, 0x27, 0x34, [@rand_addr=0x64010100, @broadcast, @remote, @local, @local, @local, @multicast1, @multicast1, @empty]}, @timestamp_addr={0x44, 0x4, 0xe6, 0x1, 0x4}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x100}}], 0x3, 0x2000c000) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r3, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @private=0xa010100}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}) dup(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r6 = socket(0xa, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r5, @ANYRESOCT, @ANYRES8=r4, @ANYRESDEC=r6, @ANYRESHEX=r7, @ANYRES64=r7, @ANYRESDEC=0x0, @ANYRESHEX=r4, @ANYRESDEC=r7], 0x1c}}, 0x40090) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRESHEX=r5, @ANYRESOCT=r0, @ANYRES8=r1, @ANYBLOB="73cc37b0c8abaa02852ad80d111b08"], 0x3c}, 0x1, 0x0, 0x0, 0x2000e000}, 0x11ea1afab7de4f4e) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000014c0)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) memfd_secret(0x0) 2.551872998s ago: executing program 4 (id=2712): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000000c0)={'bond_slave_1\x00', {0x2, 0x4e22, @loopback}}) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.912812973s ago: executing program 5 (id=2713): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_vhci(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3}}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) userfaultfd(0x80001) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000340)={0x4, 0xfe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300), 0x6) r2 = syz_open_dev$video(0x0, 0x3, 0x1340) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000004c0)={0x1, @sliced={0x6, [0x101, 0x7, 0x6, 0x8, 0x7, 0xb, 0xfffb, 0xd89, 0x4d26, 0x5, 0x6, 0x0, 0xfffe, 0x3, 0x180, 0xfe00, 0x1000, 0x2, 0x401, 0x8, 0x5, 0x4, 0x8, 0x3d2, 0x3, 0xfff, 0x9273, 0x2, 0xd5f, 0xffdf, 0x3, 0xa, 0x86a, 0x0, 0xcc92, 0x667, 0x3, 0xff36, 0x0, 0x1, 0x1, 0xffff, 0xfffc, 0x1, 0x38, 0x5, 0x80, 0x2], 0x9}}) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) 1.827439317s ago: executing program 3 (id=2714): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c2402000000000000080000052405000008240700"], 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24000044) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000440)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000480)={0x0, 0x0, 0x0}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x7], [0x0, 0x0, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000500)={r2, r3, r6, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0]}) socket$inet6(0x10, 0x3, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r11, @ANYBLOB="10007d80", @ANYRES32=r9, @ANYRESDEC=r8], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r12, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1.700611376s ago: executing program 2 (id=2715): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000300)={0x100000, 0x100000, 0x1}) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.608139054s ago: executing program 2 (id=2716): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffff9) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x200, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', r2, &(0x7f0000000380)='./file0\x00', 0x204) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) r4 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001000), 0x0, 0x2000) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xc}}, 0x20) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, r8, 0x0) 1.60738367s ago: executing program 1 (id=2717): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000040)=0x6e, 0x40800) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001f80)={0x5, 0x9, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x81, 0x593a}) statx(0xffffffffffffff9c, &(0x7f0000001fc0)='./file0\x00', 0x400, 0x40, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r8 = memfd_create(&(0x7f0000002bc0)='/dev/ptmx\x00', 0x3) r9 = epoll_create1(0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002c00), 0x523000, 0x0) sendmmsg$unix(r2, &(0x7f0000002cc0)=[{{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000280)="939323fee69b3baca1ee775f573256ab411a7e0fcafa303fd5dfd3b6b1dbba2d06505bc59f0c6c5591090d4b07a07b8fb5273c31df788f9a6b1cbb4f2a771955b9", 0x41}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="e9e3bc66d266d2a987be3125f539a94d4f7b71b4a250cea397fb3b3bf6b9bf8dba13f8451501c07eca376ae24541f6cbb18b1d0b53deb700d525ba0dc66e28ba33a21e735a7a81b8ed2e702c11ffb9f6a3699b5588a9d9b96d85b719cff42b7f11347e21fbf024e604db1f85d40e348ed50c273e30c0", 0x76}, {&(0x7f00000014c0)="ce282c7d7e3bb9f73d4cfef5c2b7f1b540acc9e84205becd4df28f8c35506e3a4e784fe51f67662c73651bda8fe9b82aff5844b01dffa5525c4f052f5a6853c02dda97aca639f1372505299e57c213030e7bd4a43886d30656e17083671e1b1cdb6a82e474", 0x65}, {&(0x7f0000001540)="97128303cddcd3bbc29875687910240c1a3666c7056a7da3b8e06a78bbd5f705a3bd37db5159a72683f5a995a2bde416da84583c2b73e0fa24058fd1f78e7f7ad389874cdc89a7916ca9a28f9b67c611bc997e90983864230c1fa4aada3f68176664a373bd53ee9256ea580ccea393d5688fff58e11b725a6148b263283a47a34f6d2baaaeff352771f5376c9b3844b50ba0ae4509b96d99e6b6aeb9972d26a26daab67d293a3549dc16be0a454144bc0927b6d75969ba2605ec4b087285aa49efdf2f4b", 0xc4}, {&(0x7f0000000300)="c34854039b51", 0x6}, {&(0x7f0000001640)="ac3e0794d2e400a27e0b40b0b59fc84d5ef3292dc9b09bd452a4f4e501cbd47993dd001414812ba641c23d0e7778512d5fc01a4dd603bc15ea0a8896463bc8afa2f60fcd8f148436ae45a07b2f91f9fcd64b065536e99ed7b2f56827b87ad6c4ad8c1cb6b878c50a9544d8458e5751ac4c3b91f239c0487a058d5c3ed069cdfa94c59b61b5b878f215e28cb56ece94305cbc88f968da92ea26efa63919557200de8ed9ab55bf95c717c2626bdd448c7692cf61662b8aa2308c863dec0c7589c315", 0xc1}, {&(0x7f0000001740)="7852973063adecf12b29f358ad50b6b0058783a504c9fbefaf63deb2bf78fe95342a105b03e9dc2d32ff74e7da7c8131581257e89732fd4ac1682913e44467d925e8298b7b6223f8c6d18fcb40ce3af8b9b9e9dcc204df4fe44374d4759c24eaf71c1669fd7f217320bbc212c692d2c2cb05366c530aaa7f1435459f", 0x7c}, {&(0x7f00000017c0)="509d443e0b8e39efa7fead673b15bed09eb7483f838ff3f6be7ad4e3554cdc7b61be89a9cbb14aa10f61a9b2fccad62a7378cc7cd3866ae810cb615ea88ebdbff81054dd24e58872d144842e65", 0x4d}, {&(0x7f0000001840)="683e88733b8b8a4b06c592dbaf67c3838d63e57e4acb9067620e115a16be16692b05fde618bcc1580528c15b66faeb0c8dd90b84c6361c58347a8cf05c4d9d51ec0620e303da063d8759f23bb0f22ce14ee96aaa90c4a873d52f187a451662ecbbe823bc66465cf6aad0c5d5dd76dad5624ccb6db8314a952684090c798110ef16d85b0f9b80b2cfbf310a879a6cee1343b22652cf9370bd777c0ae6e17f2b194d252d66f280bb8967b46477cb397d6a2c2b862c3c589e131d05be7f357e503b7c0ba308876091d4", 0xc8}], 0xa, 0x0, 0x0, 0x50}}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001a00)="ac5d42224249750944125a5efc6fa62fa3da352346dacaeb3ef4a473bd95c3785f881d8fbe69a80a96fbcd6ac72e6e1eb90c0d34d05b1ce6587dc2bf22812c057b98bf8fb2fb6d19ba7701bd304034b820dce5d608a2dacc22a3ca077b5c9406e65d7a6ea8a28bde464e22868954925a289e48868421e8fe06a47f12f9e667bbab56ee23976c7a2549297b54d17f6be28d2ba21858d3f00e417a7dead328a9c8d3ef5c", 0xa3}, {&(0x7f0000001ac0)="d84000eceefbf93f6e37a29c0dcc227e918d6868708c73486ca4fae8246334eb229e19cb36cb56988f606dda5bbca55a7dc04e7835896adc5ce8bc67294c5147baaec33e836ec36e56e8d4852ed1637ae5296064342f83e9838a9b12b660aee2b4150b5c6c94adc26f1f87f0d21697de6d60016128c45b7b9119505f9c47e9d8ac8db7442b10c6c840438c94cebcafaeb6f8a8db3ad9f8001d161c6674484a8f2cbb9da0bc464e1577ea7f507c", 0xad}, {&(0x7f0000001b80)="76cfd84421cd6f7be2431aca8ee2a1dfcc4e45ef1f9e8de645a5d148bb23fc656183ee9b2b466c11c7639eadccad939dea513d8f18ba9e83326e813e329d8a5bf008892fa7c52062e7cdf19f86b8d66e3d1b143e6096a69481aef1954bc33753ba651a0c70b5311598a3b22f8c6919bfcf7d93884c74667986f4fdec24d45560cc71878376c690ff0c648f8555a0", 0x8e}, {&(0x7f0000001c40)="39a871349bcfc6d206b8823c07c22b1d1cfa8eac3c9f0e047d6dde92a7537469fc01bc74cfaf36b842bba69951cc9df5f8c832ae3c271e80e79c92d6b396c3f8bb852ec71b44", 0x46}, {&(0x7f0000001cc0)="cdb5d668806643d8b93d70676965db5d494b13033affe932044ce3c1398ad55e3cb1d588c367e1cf3e558b7bd61eb92347c273bf5e5198bbe232a21d3d15ab861e50edd4bc6bca0b43ea62dd33515ea42defd77a8ca570f77fbc05f274da308070ace19d09af8342ce004e3a3bca89ad0740cee598f774aa7f8bedd806541b07aad6758e5ab13b5fbfde46dcf33b9b670b6b03f365c33100b43c93fa09c470c041fab6118b02bed622129b455ace34314beb0fbb41cf86169a03d84745fbe19a90319dad74c31688b3265c08c4788ea6f615bea5b49a6b1d08e98aa57b0e45a7197aaab425e401d1647248e7181cdab32bdf09ce3cef3c0e", 0xf8}, {&(0x7f0000001dc0)="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", 0xfe}, {&(0x7f0000001ec0)}], 0x7, &(0x7f0000002180)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r3, r0, r1, r1, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r1, r1, r0]}}, @rights={{0x2c, 0x1, 0x1, [r1, r0, r1, r1, r0, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0xb8, 0x28008080}}, {{&(0x7f0000002240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002340)="44e1be8820ead4a682b9190d48d65b503148747385a5555da0ad0153aa5424c8248810aed922efefee4c67e4f34da91843889c5d89ec2e4f1435a91096e137e008fa1c7ae90c02eef33b21ffb075de7b23e21fe795672ecc94446e062b42772123add608415b185993b2879eb9a1aa6a2da65fd9533457a1777f2275b411f37c78ee9762c8b27d90b12877744ee19dd9", 0x90}, {&(0x7f0000002400)="fd2a73104725de5f10c348312d93ac155765ed115e6beb221f4e87c8fab5d94824aefb3d102702136373ee022cbf30d296d631aa5aa8807c089a78f91fe83feb36fad034f2fddff5de6ae7c29ce25b6d1fafebad9fbe4d05d6fcb71756fbd4fb5fefa6ea5e83c474c99ba54109cd177b0af1b52225b453861bb4f0b78b5cfa3d3b7b165437c9fdad1d56aa365fd868857cfe3cd21c3b867b20b1ca3e6a201051462aca13eb4361ee0d21e2451fe666414922f6f44e38412a2be25af18214fb6c49d2ec8bb7e29a2badb5dfb6351277", 0xcf}, {&(0x7f0000002500)="6c4f442fef40fd866304c56bc0c6825f14b5ccc6475c0abad212c64ce955e683161c69dbec81a91a403a59d4f1cdfe8dd86cc9e391409541794b82c4d2bd0942ce981c09058332661fd25a49d66898c05c4e0934e5475acd380f62447baeb28b54a53619", 0x64}, {&(0x7f0000002580)="8bdf39519db327a93caa67214bccd56408c4a52ae8f8e18f09be7bd2a2bf51776d293a7bab39bd6c19c256e6c93e66b80e533977f784604c9d170ba5656525e4c4ecf704d201fffbfaf7104f0a12904100f2a863c9d0f4da5cc202daee2b1611ba629fe6c144b90e1bbde313b77106c9685d80dbae91244788456dc043f9858abb162cf72489168e15f392524ee58d2a3062eb", 0x93}, {&(0x7f0000002640)="838d34a6930d71fba773831130e87d86eb0b1abacaeff13143ea52ab2b294e7b6ea0a44e03a3182d2b505763ea564fe847ded3b166319e84fd178a51204254f06cb70a8fc760040490f00a1ff46e64e3ba5270709b2d60780bae74dd41f60720dfa9f3d9b5e2bcbb8301fb78a23c08a45401e7e3f61cb53b4b72a47f5bb23f3515f05cb93b1849c3412345a69d6c01b8f50c031a05a1b001d015bf9e57ce27c09122592a20c1d2eb5db43fd64eee5040a80f48db2832a878c899d2c718b735a498d52da552b9d0861a2bbaf91190a3b506efab", 0xd3}], 0x5, &(0x7f00000022c0), 0x0, 0x4004890}}, {{&(0x7f00000027c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002840)="f90e9f940844371846a6d501411ae8ed482fa10efea489dd5c0b1e18fe1db9", 0x1f}, {&(0x7f0000002880)="0303ea47ecd606766d51f4b490154c399fc2996bb83a4605073a4d339d83d1bc903269d4c7ff9e72c9b0df727bd4343dc03a3ea39547a9fa30b146d0c15407e6ea571ebfbfb5ca1da176921179a3acb6ce", 0x51}, {&(0x7f0000002900)="a8a57c2919c53ed30d3eef265d8bd718034cd10937e465b2dfd830a40d33a3c9c9821fa98a58839c9028613ebfc138da9b360fa63334373591f8a0a58f58517ea83454a61a452aed4e389369fff33364ed114108660c54780b18b66a5c4ed48094c69e85a5eb22ef5f24fa88854410ad276356bf0b5b77aa33f8a9bbff9b7d2b50af26dfc7755656baf7ab0010f68e2bf9190956aa9c880c2801f1fb0e9a8e005587235837160234c34bb618247b6ac1a763cc872130d361bd9f324c0b", 0xbd}, {&(0x7f00000029c0)="2a008d777c36ba52356cc4de5ee74bded9787d408a92f6635f94a85ad21f475d661a4d8400f3e0425db13807c14e6fe436a2b8a5a2a3355800a9d28ed1f671d88aafa7fc608bc83d3ca3f128256f478cc14cbea955691da2bd638dd76d3b5e887e35eb55064f6fb7d2212c2110c43d32902987243a7a63a291ff8d45f81232a875c99788b2e1a815768700c184384c2a338af0102a1c41a3908b4037be01da175a0ac77d53d8b0", 0xa7}, {&(0x7f0000002a80)="58eb7f4dab8ebcad1061c7c930c98dcb25b27e91472ab3c8135890211a1501011f6a4c21f4a74c1182123c7bb42da5a848eba8203e6a542cc1811e436e4f25df369693e3c734520e57a97362d1fb4654ee6b1e1326fb75a71db092a229505f3fe161b0740be704cc604abf7fb73a06b01c6ecf72d6bf82cafd3604aac3f38259a347eedb647e75adc02285420ec830a5e1d916c0f3f8c292add7bea1c1eec908fbd591bc3e5eaf9026144d5540595389dd90ebbeda00c60852", 0xb9}], 0x5, &(0x7f0000002c40)=[@rights={{0x24, 0x1, 0x1, [r7, r1, r1, r1, r8]}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r9, r10, r0, r1]}}], 0x80, 0x40}}], 0x4, 0x11) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a09058103", @ANYBLOB='h'], 0x0) openat$khugepaged_scan(0xffffffffffffff9c, 0x0, 0x1, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) r11 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r11, 0x4606, &(0x7f0000000380)={0x190, 0x78, 0x400, 0x0, 0x0, 0x10001, 0xf, 0x0, {0x4, 0x401}, {0x0, 0x0, 0x4000000}, {}, {}, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0xb5b, 0x0, 0x2, 0x3, 0x5}) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$FIONREAD(r0, 0x80047456, &(0x7f0000002300)) 1.583816241s ago: executing program 5 (id=2718): r0 = socket(0x23, 0x4, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r2 = syz_io_uring_complete(0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000140)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7b, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a5f9240090508"], 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 985.883767ms ago: executing program 2 (id=2719): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) inotify_init1(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) timer_delete(0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000e80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) write$binfmt_misc(r5, &(0x7f0000000300), 0xfdef) 523.743891ms ago: executing program 4 (id=2720): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2716c3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, 0xffffffffffffffff, 0xc662c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x4e22, 0x0, 0xa}, {0x1000000000000000, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x4}, {0x0, 0x400}, 0x0, 0xfffffffe}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xe8) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000080)={0x0, ""/14}, 0xb, 0x1, 0x800) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a1800, 0x0) ioctl$SNDCTL_SYNTH_INFO(r4, 0xc08c5102, &(0x7f0000000440)={"2ec15cf994f3193adfe857bc2a4100", 0xffff8001, 0x0, 0x1, 0x23e, 0x51b, 0x9, 0xe730, 0x1, [0xfffffffa, 0x7, 0x9, 0x1, 0x8, 0x2c, 0xeae, 0xc7, 0x3ff, 0x1, 0x5, 0xce2, 0x7, 0x5, 0x6, 0x6, 0x0, 0x100, 0x9d]}) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x0, 0x2, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) read(0xffffffffffffffff, &(0x7f0000000200)=""/208, 0xd0) r6 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) wait4(r6, 0x0, 0x80000000, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xe4) 303.295658ms ago: executing program 5 (id=2721): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x5452, 0xfffffffffffffffe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x49c, &(0x7f00000006c0)={0x0, 0x79af, 0x3180, 0x2, 0x40024e}, &(0x7f0000000480)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r5, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 0s ago: executing program 2 (id=2722): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = memfd_create(0x0, 0x5) ioctl$FS_IOC_RESVSP(r3, 0x402c5828, &(0x7f0000000180)={0x0, 0x2, 0x80000, 0xb3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) ioprio_set$pid(0x2, 0x0, 0x6000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0xa4, 0x30, 0x1, 0xfefffffd, 0x0, {}, [{0x90, 0x1, [@m_mpls={0x60, 0x2, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x22, 0x6, "97242c813cd1f7162480be44c94b116e25b0f938a7c90def5e7dca8dc6a1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x2c, 0x20, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x884}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xee, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = timerfd_create(0x0, 0x0) timerfd_gettime(r8, &(0x7f00000001c0)) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') preadv(r9, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, 0x142, 0xfe) ppoll(0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x200000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): 0 [ 923.487890][T14760] do_syscall_64+0xcd/0x4c0 [ 923.487916][T14760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.487934][T14760] RIP: 0033:0x7faf5638e969 [ 923.487948][T14760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.487965][T14760] RSP: 002b:00007faf5720c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.487983][T14760] RAX: ffffffffffffffda RBX: 00007faf565b5fa0 RCX: 00007faf5638e969 [ 923.487995][T14760] RDX: 000000000000ff00 RSI: 0000200000000000 RDI: 0000000000000006 [ 923.488006][T14760] RBP: 00007faf5720c090 R08: 0000000000000000 R09: 0000000000000000 [ 923.488017][T14760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.488027][T14760] R13: 0000000000000000 R14: 00007faf565b5fa0 R15: 00007ffd0c306228 [ 923.488051][T14760] [ 923.653643][ C0] vkms_vblank_simulate: vblank timer overrun [ 923.757828][T14662] veth0_vlan: entered promiscuous mode [ 923.770095][T14662] veth1_vlan: entered promiscuous mode [ 923.802905][T14662] veth0_macvtap: entered promiscuous mode [ 923.814211][T14662] veth1_macvtap: entered promiscuous mode [ 923.833827][T14662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.849219][T14662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.861554][T14662] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.872368][T14662] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.881080][T14662] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.891145][T14662] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.919188][ T30] audit: type=1400 audit(2000000019.470:364): avc: denied { getopt } for pid=14752 comm="syz.4.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 923.962409][ T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 923.993552][ T7725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.019083][ T7725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.071224][ T7725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.080061][ T7725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.263706][ T30] audit: type=1400 audit(2000000019.810:365): avc: denied { mount } for pid=14662 comm="syz-executor" name="/" dev="gadgetfs" ino=6353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 924.286342][ C0] vkms_vblank_simulate: vblank timer overrun [ 924.293238][ T5829] Bluetooth: hci5: command tx timeout [ 924.355550][T14777] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 924.946239][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 924.963214][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.973670][ T9] usb 2-1: config 0 descriptor?? [ 924.983185][ T9] cp210x 2-1:0.0: cp210x converter detected [ 926.122764][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 926.309782][ T9] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 926.322138][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -121 [ 926.442122][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 926.766452][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 926.795531][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 927.279894][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 927.332839][ T9] usb 2-1: USB disconnect, device number 64 [ 927.339874][ T43] usb 6-1: config index 0 descriptor too short (expected 51730, got 18) [ 927.357790][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 927.392800][ T9] cp210x 2-1:0.0: device disconnected [ 927.398943][ T43] usb 6-1: config 8 has an invalid interface number: 255 but max is 0 [ 927.412074][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 927.436651][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.452498][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.472729][ T43] usb 6-1: config 8 has no interface number 0 [ 927.480787][ T43] usb 6-1: config 8 interface 255 has no altsetting 0 [ 927.489315][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 927.503183][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 927.517761][ T43] usb 6-1: string descriptor 0 read error: -22 [ 927.527446][ T43] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 927.538075][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.549272][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.650703][ T24] usb 3-1: config 0 descriptor?? [ 927.885800][T14801] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 928.142044][T14805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 928.172365][ T5868] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 928.181527][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 928.188534][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 928.222721][ T24] usb 3-1: USB disconnect, device number 58 [ 928.365524][ T5868] usb 4-1: config 0 has an invalid interface number: 198 but max is 0 [ 928.417414][ T5868] usb 4-1: config 0 has no interface number 0 [ 928.423762][ T5868] usb 4-1: too many endpoints for config 0 interface 198 altsetting 226: 120, using maximum allowed: 30 [ 928.482195][ T5868] usb 4-1: config 0 interface 198 altsetting 226 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 928.488348][ T30] audit: type=1400 audit(2000000024.040:366): avc: denied { ioctl } for pid=14806 comm="syz.4.2395" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 928.521065][ T5868] usb 4-1: config 0 interface 198 has no altsetting 0 [ 928.539964][ T5868] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 928.553277][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.562055][ T5868] usb 4-1: Product: syz [ 928.566679][ T5868] usb 4-1: Manufacturer: syz [ 928.592141][ T5868] usb 4-1: SerialNumber: syz [ 928.781148][ T5868] usb 4-1: config 0 descriptor?? [ 928.809937][ T5868] i2c-tiny-usb 4-1:0.198: version 6d.cc found at bus 004 address 066 [ 929.292304][ T43] catc 6-1:8.255: Can't set altsetting 1. [ 929.311670][ T43] catc 6-1:8.255: probe with driver catc failed with error -5 [ 929.347227][T12599] block nbd0: Possible stuck request ffff8880269c0000: control (read@0,4096B). Runtime 30 seconds [ 929.394705][ T43] usb 6-1: USB disconnect, device number 2 [ 930.521616][ T5868] (null): failure reading functionality [ 930.530792][ T5868] i2c i2c-1: failure reading functionality [ 930.539553][ T5868] i2c i2c-1: connected i2c-tiny-usb device [ 930.548452][ T5868] usb 4-1: USB disconnect, device number 66 [ 931.595422][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.552598][ T5868] IPVS: starting estimator thread 0... [ 933.675314][T14841] IPVS: using max 35 ests per chain, 84000 per kthread [ 933.731474][T14836] overlayfs: failed to resolve './file0': -2 [ 934.557104][T14836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2401'. [ 934.840394][T14866] batadv_slave_1: entered promiscuous mode [ 935.281508][T14865] ptrace attach of "./syz-executor exec"[14662] was attempted by "./syz-executor exec"[14865] [ 935.444961][T14860] batadv_slave_1: left promiscuous mode [ 935.555824][ T30] audit: type=1400 audit(2000000031.100:367): avc: denied { getopt } for pid=14867 comm="syz.4.2410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 935.599997][T14871] FAULT_INJECTION: forcing a failure. [ 935.599997][T14871] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 935.614026][T14871] CPU: 0 UID: 0 PID: 14871 Comm: syz.2.2411 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 935.614052][T14871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 935.614063][T14871] Call Trace: [ 935.614069][T14871] [ 935.614075][T14871] dump_stack_lvl+0x16c/0x1f0 [ 935.614104][T14871] should_fail_ex+0x512/0x640 [ 935.614134][T14871] should_fail_alloc_page+0xe7/0x130 [ 935.614159][T14871] prepare_alloc_pages+0x3c2/0x610 [ 935.614192][T14871] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 935.614214][T14871] ? do_user_addr_fault+0x843/0x1370 [ 935.614246][T14871] ? irqentry_exit+0x3b/0x90 [ 935.614267][T14871] ? lockdep_hardirqs_on+0x7c/0x110 [ 935.614286][T14871] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 935.614317][T14871] ? rep_movs_alternative+0x4a/0x90 [ 935.614335][T14871] ? _copy_from_iter+0x15d/0x16f0 [ 935.614363][T14871] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 935.614394][T14871] ? policy_nodemask+0xea/0x4e0 [ 935.614418][T14871] alloc_pages_mpol+0x1fb/0x550 [ 935.614442][T14871] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 935.614472][T14871] alloc_pages_noprof+0x131/0x390 [ 935.614494][T14871] anon_pipe_write+0xbc2/0x1a70 [ 935.614526][T14871] ? __pfx_anon_pipe_write+0x10/0x10 [ 935.614546][T14871] ? selinux_file_permission+0x126/0x660 [ 935.614575][T14871] ? bpf_lsm_file_permission+0x9/0x10 [ 935.614599][T14871] ? security_file_permission+0x71/0x210 [ 935.614626][T14871] ? rw_verify_area+0xcf/0x680 [ 935.614654][T14871] vfs_write+0x6c7/0x1150 [ 935.614672][T14871] ? __pfx_anon_pipe_write+0x10/0x10 [ 935.614696][T14871] ? __pfx_vfs_write+0x10/0x10 [ 935.614711][T14871] ? find_held_lock+0x2b/0x80 [ 935.614745][T14871] ksys_write+0x1f8/0x250 [ 935.614763][T14871] ? __pfx_ksys_write+0x10/0x10 [ 935.614789][T14871] do_syscall_64+0xcd/0x4c0 [ 935.614812][T14871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.614830][T14871] RIP: 0033:0x7f578278e969 [ 935.614845][T14871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.614861][T14871] RSP: 002b:00007f57835e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 935.614878][T14871] RAX: ffffffffffffffda RBX: 00007f57829b5fa0 RCX: 00007f578278e969 [ 935.614889][T14871] RDX: 00000000fffffede RSI: 0000200000000400 RDI: 0000000000000006 [ 935.614899][T14871] RBP: 00007f57835e4090 R08: 0000000000000000 R09: 0000000000000000 [ 935.614909][T14871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.614918][T14871] R13: 0000000000000000 R14: 00007f57829b5fa0 R15: 00007fff86222008 [ 935.614943][T14871] [ 937.043057][T14883] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 937.481071][ T5863] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 937.652051][ T30] audit: type=1400 audit(2000000033.180:368): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 937.871096][ T5863] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 938.778468][ T5863] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 938.789365][ T5863] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1280, setting to 64 [ 938.800210][ T5863] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 938.871514][ T5863] usb 5-1: string descriptor 0 read error: -71 [ 938.898364][ T5863] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 938.944878][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 939.182689][ T5863] usb 5-1: can't set config #1, error -71 [ 939.736570][ T5863] usb 5-1: USB disconnect, device number 58 [ 940.380106][T14917] QAT: failed to copy from user cfg_data. [ 940.514190][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 940.690962][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 940.699155][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 940.709357][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.720064][ T9] usb 2-1: config 0 descriptor?? [ 940.743474][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 940.763682][ T5863] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 941.372904][ T9] gspca_sonixj: reg_w1 err -110 [ 941.385310][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 941.462100][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 941.475443][ T5863] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 941.502366][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.537796][ T5863] usb 5-1: Product: syz [ 941.573365][ T5863] usb 5-1: Manufacturer: syz [ 941.586764][ T5863] usb 5-1: SerialNumber: syz [ 941.602810][ T5863] usb 5-1: config 0 descriptor?? [ 941.625470][ T5863] as10x_usb: device has been detected [ 941.631560][ T5863] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 941.693893][ T5863] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 941.742119][ T5863] as10x_usb: error during firmware upload part1 [ 941.776388][ T5863] Registered device Sky IT Digital Key (green led) [ 942.748807][T14924] random: crng reseeded on system resumption [ 942.812969][ T2150] usb 2-1: USB disconnect, device number 65 [ 944.303885][ T5863] usb 5-1: USB disconnect, device number 59 [ 944.789303][ T5863] Unregistered device Sky IT Digital Key (green led) [ 944.792672][ T5863] as10x_usb: device has been disconnected [ 944.994219][T14971] ptrace attach of "./syz-executor exec"[5810] was attempted by "./syz-executor exec"[14971] [ 944.997431][T14972] QAT: failed to copy from user cfg_data. [ 945.052459][T14973] nbd2: detected capacity change from 0 to 4294967296 [ 945.075584][T14969] block nbd2: shutting down sockets [ 945.230473][ C1] blk_print_req_error: 58 callbacks suppressed [ 945.230494][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.245814][ C1] buffer_io_error: 56 callbacks suppressed [ 945.245828][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.260107][ T5831] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.288053][ T5831] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.401283][ T5831] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.428518][ T5831] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.470950][ T5831] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.495845][ T5831] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.541256][ T5831] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.567555][ T5831] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.601681][ T5831] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.630058][ T5831] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.659120][ T5831] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.671156][ T5831] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.680700][ T5831] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.693238][ T5831] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.710621][ T5831] ldm_validate_partition_table(): Disk read failed. [ 945.731088][ T5831] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.748732][ T5831] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.765507][ T5831] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 945.775325][ T5831] Buffer I/O error on dev nbd2, logical block 0, async page read [ 945.785794][ T5831] Dev nbd2: unable to read RDB block 0 [ 945.796075][ T5831] nbd2: unable to read partition table [ 945.814507][ T5831] ldm_validate_partition_table(): Disk read failed. [ 945.847014][ T5831] Dev nbd2: unable to read RDB block 0 [ 945.874702][ T5831] nbd2: unable to read partition table [ 946.073812][ T30] audit: type=1400 audit(2000000041.630:369): avc: denied { append } for pid=14983 comm="syz.3.2438" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 946.172233][ T5863] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 946.213634][T14986] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2439'. [ 947.412843][ T5863] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 947.420875][ T5863] usb 3-1: config 0 has no interface number 0 [ 947.433392][ T5863] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 947.446523][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.136563][ T5863] usb 3-1: Product: syz [ 948.214475][ T5863] usb 3-1: Manufacturer: syz [ 948.230124][ T5863] usb 3-1: SerialNumber: syz [ 948.256096][ T5863] usb 3-1: config 0 descriptor?? [ 948.479511][ T5863] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 948.517782][ T5863] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 948.658384][ T5863] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 948.777158][ T5863] usb 3-1: media controller created [ 949.018196][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 949.062422][ T2150] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 949.246017][ T2150] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 949.310503][ T2150] usb 5-1: config 0 has no interface number 0 [ 949.383812][ T2150] usb 5-1: config 0 interface 200 has no altsetting 0 [ 949.542215][ T2150] usb 5-1: string descriptor 0 read error: -71 [ 949.558741][ T2150] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 949.585304][ T5863] usb 3-1: USB disconnect, device number 59 [ 949.624464][ T2150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.653186][ T2150] usb 5-1: config 0 descriptor?? [ 949.672155][ T2150] usb 5-1: can't set config #0, error -71 [ 949.694869][ T2150] usb 5-1: USB disconnect, device number 60 [ 950.012794][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 950.132107][ T2150] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 950.207803][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 950.216040][ T9] usb 4-1: config 0 has no interface number 0 [ 950.234494][ T9] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 950.244923][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.255210][ T9] usb 4-1: Product: syz [ 950.259390][ T9] usb 4-1: Manufacturer: syz [ 950.265879][ T9] usb 4-1: SerialNumber: syz [ 950.276527][ T9] usb 4-1: config 0 descriptor?? [ 950.356793][ T2150] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 950.365041][ T2150] usb 5-1: config 0 has no interface number 0 [ 950.376335][ T2150] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 950.386992][ T2150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.446879][T15026] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 950.494628][ T5829] Bluetooth: hci5: failed to read key size for handle 201 [ 950.716244][ T9] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 950.812055][ T2150] usb 5-1: Product: syz [ 950.812641][ T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 950.816239][ T2150] usb 5-1: Manufacturer: syz [ 950.816257][ T2150] usb 5-1: SerialNumber: syz [ 950.835825][ T2150] usb 5-1: config 0 descriptor?? [ 950.845253][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 950.855684][ T9] usb 4-1: media controller created [ 950.900880][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 950.924233][T15033] sg_write: data in/out 198/14 bytes for SCSI command 0x0-- guessing data in; [ 950.924233][T15033] program syz.2.2451 not setting count and/or reply_len properly [ 950.973854][T15035] sg_write: data in/out 198/14 bytes for SCSI command 0x0-- guessing data in; [ 950.973854][T15035] program syz.1.2452 not setting count and/or reply_len properly [ 951.069095][ T2150] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 951.079693][ T2150] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 951.090578][ T2150] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 951.099940][ T2150] usb 5-1: media controller created [ 951.113277][ T2150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 951.397274][T15036] affs: No valid root block on device nullb0 [ 951.777113][T15038] affs: No valid root block on device nullb0 [ 951.944281][ T5863] usb 4-1: USB disconnect, device number 67 [ 952.016532][ T9] usb 5-1: USB disconnect, device number 61 [ 952.736101][T15042] overlayfs: failed to resolve './file0': -2 [ 952.762133][ T5863] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 952.912621][T15051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2454'. [ 952.941651][ T5863] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 952.986740][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.998021][ T5863] usb 2-1: Product: syz [ 953.003114][ T5863] usb 2-1: Manufacturer: syz [ 953.007774][ T5863] usb 2-1: SerialNumber: syz [ 953.029807][ T5863] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 953.097509][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 953.422162][ T2150] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 953.552065][ T5863] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 953.594836][ T2150] usb 6-1: Using ep0 maxpacket: 16 [ 953.984124][ T5863] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 953.990439][ T2150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.004084][ T2150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.013911][ T2150] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 954.026752][ T2150] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 954.033273][ T5863] usb 4-1: config 0 has no interface number 0 [ 954.042049][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.050366][ T5863] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 954.067829][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.081516][ T5863] usb 4-1: Product: syz [ 954.090046][ T5863] usb 4-1: Manufacturer: syz [ 954.101591][ T2150] usb 6-1: config 0 descriptor?? [ 954.104699][ T5863] usb 4-1: SerialNumber: syz [ 954.818325][ T9] usb 2-1: Service connection timeout for: 256 [ 954.823189][ T5829] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 954.834067][ T5829] Bluetooth: hci5: Injecting HCI hardware error event [ 954.843160][ T5828] Bluetooth: hci5: hardware error 0x00 [ 954.877580][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 954.889604][ T5863] usb 4-1: config 0 descriptor?? [ 954.924964][ T9] ath9k_htc: Failed to initialize the device [ 954.943380][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 955.101207][ T2150] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0015/input/input55 [ 955.101341][ T5863] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 955.157135][ T5863] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 955.167737][ T5863] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 955.180154][ T5863] usb 4-1: media controller created [ 955.182036][ T5868] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 955.204638][ T2150] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 955.239526][ T5863] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 955.355967][ T2150] usb 6-1: USB disconnect, device number 3 [ 955.394482][ T5868] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 955.403740][T15070] fido_id[15070]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 955.420654][ T5868] usb 3-1: config 0 has no interface number 0 [ 955.436431][ T5868] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 955.456733][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.469089][ T5868] usb 3-1: Product: syz [ 955.474733][ T5868] usb 3-1: Manufacturer: syz [ 955.481564][ T5868] usb 3-1: SerialNumber: syz [ 955.492529][ T5868] usb 3-1: config 0 descriptor?? [ 955.828750][ T5868] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 955.943976][ T2150] usb 2-1: USB disconnect, device number 66 [ 955.965049][ T5868] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 955.974230][ T9] usb 4-1: USB disconnect, device number 68 [ 955.988701][ T5868] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 956.002240][ T5868] usb 3-1: media controller created [ 956.041889][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 956.284805][T15079] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 956.770015][T15083] sg_write: data in/out 198/14 bytes for SCSI command 0x0-- guessing data in; [ 956.770015][T15083] program syz.5.2464 not setting count and/or reply_len properly [ 956.932489][ T5828] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 957.235798][ T9] usb 3-1: USB disconnect, device number 60 [ 958.536468][T15095] binder: BINDER_SET_CONTEXT_MGR already set [ 958.543269][T15095] binder: 15094:15095 ioctl 4018620d 200000000040 returned -16 [ 958.776343][T15104] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2470'. [ 958.884256][ T5868] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 959.146064][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 959.801617][T12599] block nbd0: Possible stuck request ffff8880269c0000: control (read@0,4096B). Runtime 60 seconds [ 959.849007][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.865103][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.967933][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 960.009919][ T5868] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 960.397824][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.434260][ T5868] usb 2-1: config 0 descriptor?? [ 960.639308][ T5863] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 960.644867][T15123] FAULT_INJECTION: forcing a failure. [ 960.644867][T15123] name failslab, interval 1, probability 0, space 0, times 0 [ 960.689043][T15123] CPU: 0 UID: 0 PID: 15123 Comm: syz.3.2473 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 960.689071][T15123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 960.689082][T15123] Call Trace: [ 960.689089][T15123] [ 960.689096][T15123] dump_stack_lvl+0x16c/0x1f0 [ 960.689125][T15123] should_fail_ex+0x512/0x640 [ 960.689150][T15123] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 960.689175][T15123] should_failslab+0xc2/0x120 [ 960.689199][T15123] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 960.689219][T15123] ? __alloc_skb+0x2b2/0x380 [ 960.689244][T15123] __alloc_skb+0x2b2/0x380 [ 960.689263][T15123] ? __pfx___alloc_skb+0x10/0x10 [ 960.689287][T15123] ? find_held_lock+0x2b/0x80 [ 960.689310][T15123] tcp_stream_alloc_skb+0x34/0x570 [ 960.689333][T15123] tcp_sendmsg_locked+0x130f/0x4300 [ 960.689362][T15123] ? __lock_acquire+0xb8a/0x1c90 [ 960.689386][T15123] ? nf_tables_deactivate_set+0x6ea/0x940 [ 960.689415][T15123] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 960.689438][T15123] ? do_raw_spin_lock+0x12c/0x2b0 [ 960.689455][T15123] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 960.689477][T15123] ? __local_bh_enable_ip+0xa4/0x120 [ 960.689500][T15123] tcp_sendmsg+0x2e/0x50 [ 960.689518][T15123] ? __pfx_tcp_sendmsg+0x10/0x10 [ 960.689535][T15123] inet_sendmsg+0xb9/0x140 [ 960.689557][T15123] __sys_sendto+0x43c/0x520 [ 960.689577][T15123] ? __pfx___sys_sendto+0x10/0x10 [ 960.689615][T15123] ? ksys_write+0x1ac/0x250 [ 960.689633][T15123] ? __pfx_ksys_write+0x10/0x10 [ 960.689653][T15123] __x64_sys_sendto+0xe0/0x1c0 [ 960.689671][T15123] ? do_syscall_64+0x91/0x4c0 [ 960.689692][T15123] ? lockdep_hardirqs_on+0x7c/0x110 [ 960.689709][T15123] do_syscall_64+0xcd/0x4c0 [ 960.689728][T15123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.689743][T15123] RIP: 0033:0x7faf5638e969 [ 960.689755][T15123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.689769][T15123] RSP: 002b:00007faf5720c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 960.689785][T15123] RAX: ffffffffffffffda RBX: 00007faf565b5fa0 RCX: 00007faf5638e969 [ 960.689794][T15123] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000004 [ 960.689803][T15123] RBP: 00007faf5720c090 R08: 0000000000000000 R09: 0000000000000000 [ 960.689812][T15123] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 960.689822][T15123] R13: 0000000000000000 R14: 00007faf565b5fa0 R15: 00007ffd0c306228 [ 960.689851][T15123] [ 961.057041][ T5863] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 961.091147][ T5863] usb 3-1: config 0 has no interface number 0 [ 961.097478][ T5811] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 961.106925][ T5863] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 961.116126][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.124442][ T5863] usb 3-1: Product: syz [ 961.128605][ T5863] usb 3-1: Manufacturer: syz [ 961.133225][ T5863] usb 3-1: SerialNumber: syz [ 961.195153][ T5863] usb 3-1: config 0 descriptor?? [ 961.253672][ T5811] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 961.261750][ T5811] usb 5-1: config 0 has no interface number 0 [ 961.270502][ T5811] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 961.280020][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.288262][ T5811] usb 5-1: Product: syz [ 961.292637][ T5811] usb 5-1: Manufacturer: syz [ 961.297289][ T5811] usb 5-1: SerialNumber: syz [ 961.304676][ T5811] usb 5-1: config 0 descriptor?? [ 961.376319][ T5868] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0016/input/input56 [ 961.422513][ T5863] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 961.433477][ T5863] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 961.441486][ T5863] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 961.449427][ T5863] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 961.459900][ T5863] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 961.460415][ T5868] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 961.481065][ T2150] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 961.518852][ T5811] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 961.538523][ T5811] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 961.566060][ T5811] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 961.584496][ T5811] usb 5-1: media controller created [ 961.621781][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 961.648333][ T5868] usb 2-1: USB disconnect, device number 67 [ 961.664167][ T2150] usb 6-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 961.676014][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.696914][ T2150] usb 6-1: config 0 descriptor?? [ 961.719191][ T2150] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 961.728861][ T2150] dvb-usb: bulk message failed: -22 (3/0) [ 961.742928][ T2150] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 961.755294][ T2150] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 961.771395][ T2150] usb 6-1: media controller created [ 961.779676][ T2150] dvb-usb: bulk message failed: -22 (5/0) [ 961.786202][ T2150] dvb-usb: MAC address reading failed. [ 961.793978][ T2150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 961.811742][ T2150] dvb-usb: bulk message failed: -22 (6/0) [ 961.818177][ T2150] dvb-usb: bulk message failed: -22 (6/0) [ 961.827027][ T2150] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 961.836963][ T2150] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input57 [ 961.850682][T15115] sch_tbf: burst 127 is lower than device lo mtu (65550) ! [ 961.859105][ T2150] dvb-usb: schedule remote query interval to 100 msecs. [ 961.870018][ T2150] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 961.932937][ T2150] usb 5-1: USB disconnect, device number 62 [ 961.940603][T15127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.957047][T15127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 962.015421][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 962.042460][ T5868] dvb-usb: error while querying for an remote control event. [ 962.173565][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 962.179704][ T5868] dvb-usb: error while querying for an remote control event. [ 962.335704][ T2150] dvb-usb: bulk message failed: -22 (2/0) [ 962.342871][ T2150] dvb-usb: error while querying for an remote control event. [ 962.696535][ T2150] dvb-usb: bulk message failed: -22 (2/0) [ 962.702930][ T2150] dvb-usb: error while querying for an remote control event. [ 962.812654][ T5811] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 962.814894][ T2150] dvb-usb: bulk message failed: -22 (2/0) [ 962.826243][ T2150] dvb-usb: error while querying for an remote control event. [ 962.969396][ T2150] dvb-usb: bulk message failed: -22 (2/0) [ 962.985896][ T2150] dvb-usb: error while querying for an remote control event. [ 963.042732][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 963.052305][ T5863] usb 3-1: USB disconnect, device number 61 [ 963.083001][ T5863] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 963.096586][ T5811] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 963.107489][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 963.117045][ T5863] keyspan 3-1:0.133: device disconnected [ 963.252423][ T5868] dvb-usb: error while querying for an remote control event. [ 964.136925][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 964.142825][ T30] audit: type=1400 audit(2000000059.680:370): avc: denied { getopt } for pid=15136 comm="syz.3.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 964.162425][ C1] vkms_vblank_simulate: vblank timer overrun [ 964.173636][ T5868] dvb-usb: error while querying for an remote control event. [ 964.343454][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.352423][T13054] dvb-usb: bulk message failed: -22 (2/0) [ 964.358175][T13054] dvb-usb: error while querying for an remote control event. [ 964.411120][ T5811] usb 2-1: Product: syz [ 964.416584][ T5811] usb 2-1: Manufacturer: syz [ 964.421228][ T5811] usb 2-1: SerialNumber: syz [ 964.499108][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 964.515646][ T5868] dvb-usb: error while querying for an remote control event. [ 964.522962][ T5811] usb 2-1: config 0 descriptor?? [ 964.552674][ T5811] as10x_usb: device has been detected [ 965.131789][ T5868] dvb-usb: bulk message failed: -22 (2/0) [ 965.132734][ T5863] usb 6-1: USB disconnect, device number 4 [ 965.137806][ T5868] dvb-usb: error while querying for an remote control event. [ 965.157780][ T5811] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 965.158600][T15134] random: crng reseeded on system resumption [ 965.190925][ T5811] usb 2-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))... [ 965.229885][ T5811] as10x_usb: error during firmware upload part1 [ 965.236519][ T5811] Registered device Sky IT Digital Key (green led) [ 965.295814][ T5863] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 965.299300][T15154] sg_write: data in/out 198/14 bytes for SCSI command 0x0-- guessing data in; [ 965.299300][T15154] program syz.4.2484 not setting count and/or reply_len properly [ 966.099075][ T5863] usb 2-1: USB disconnect, device number 68 [ 966.142664][ T5863] Unregistered device Sky IT Digital Key (green led) [ 966.149155][ T30] audit: type=1400 audit(2000000061.700:371): avc: denied { bind } for pid=15163 comm="syz.3.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 966.184881][ T5863] as10x_usb: device has been disconnected [ 966.312085][ T5868] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 966.474823][T15170] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 966.535281][ T5868] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 966.865148][ T2150] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 966.872901][ T5868] usb 3-1: config 0 has no interface number 0 [ 966.884189][ T5868] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 966.893432][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.901649][ T5868] usb 3-1: Product: syz [ 966.906610][ T5868] usb 3-1: Manufacturer: syz [ 966.911613][ T5868] usb 3-1: SerialNumber: syz [ 966.920037][ T5868] usb 3-1: config 0 descriptor?? [ 967.036044][ T2150] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 967.045645][ T2150] usb 4-1: config 0 has no interface number 0 [ 967.059684][ T2150] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 967.082030][ T2150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.090173][ T2150] usb 4-1: Product: syz [ 967.094415][ T2150] usb 4-1: Manufacturer: syz [ 967.099021][ T2150] usb 4-1: SerialNumber: syz [ 967.113970][ T2150] usb 4-1: config 0 descriptor?? [ 967.130693][ T5868] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 967.142213][ T5811] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 967.155089][ T5868] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 967.172265][ T5868] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 967.180346][ T5868] usb 3-1: media controller created [ 967.215999][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 967.303980][ T5811] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 967.318895][ T5811] usb 2-1: config 0 has no interface number 0 [ 967.342449][ T2150] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 967.357270][ T2150] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 967.358567][ T5811] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 967.403935][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.413844][ T5811] usb 2-1: Product: syz [ 967.418414][ T5811] usb 2-1: Manufacturer: syz [ 967.422718][ T2150] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 967.423731][ T5811] usb 2-1: SerialNumber: syz [ 967.436483][ T2150] usb 4-1: media controller created [ 967.439126][ T5811] usb 2-1: config 0 descriptor?? [ 967.488292][ T2150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 967.655075][ T5811] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 967.819048][T15177] affs: No valid root block on device nullb0 [ 968.016040][T15178] affs: No valid root block on device nullb0 [ 968.194323][ T5811] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 968.261698][ T5868] usb 3-1: USB disconnect, device number 62 [ 968.265634][ T5811] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 968.298237][ T5811] usb 2-1: media controller created [ 968.339247][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 968.389147][ T30] audit: type=1400 audit(2000000063.940:372): avc: denied { create } for pid=15179 comm="syz.5.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 968.502965][ T30] audit: type=1400 audit(2000000063.940:373): avc: denied { getopt } for pid=15179 comm="syz.5.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 968.550798][ T5868] usb 4-1: USB disconnect, device number 69 [ 968.675813][ T5811] usb 2-1: USB disconnect, device number 69 [ 971.052207][ T2150] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 971.258176][ T2150] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=e4.fb [ 971.265013][T15207] sg_write: data in/out 198/14 bytes for SCSI command 0x0-- guessing data in; [ 971.265013][T15207] program syz.3.2500 not setting count and/or reply_len properly [ 971.277789][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.329994][ T2150] usb 2-1: config 0 descriptor?? [ 971.338415][ T2150] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 971.359667][ T2150] dvb-usb: bulk message failed: -22 (3/0) [ 971.405462][ T2150] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 971.426068][ T2150] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 971.442166][ T5863] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 971.449160][ T2150] usb 2-1: media controller created [ 971.471844][ T2150] dvb-usb: bulk message failed: -22 (5/0) [ 971.559521][T15199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.670332][T15199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.768792][ T2150] dvb-usb: MAC address reading failed. [ 971.782366][ T2150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 971.807358][ T2150] dvb-usb: bulk message failed: -22 (6/0) [ 971.822186][ T2150] dvb-usb: bulk message failed: -22 (6/0) [ 971.828064][ T2150] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 971.858057][ T2150] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input58 [ 971.879602][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 971.974899][ T2150] dvb-usb: schedule remote query interval to 100 msecs. [ 972.146130][T15214] syz.5.2501 (15214): attempted to duplicate a private mapping with mremap. This is not supported. [ 972.244699][ T2150] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 972.258259][ T5863] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 972.278816][ T2150] usb 2-1: USB disconnect, device number 70 [ 972.279673][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.317987][ T5863] usb 3-1: Product: syz [ 972.382337][ T5863] usb 3-1: Manufacturer: syz [ 972.397084][ T5863] usb 3-1: SerialNumber: syz [ 972.403814][T15215] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2501'. [ 972.411623][ T2150] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 972.414904][ T5863] usb 3-1: config 0 descriptor?? [ 972.518043][ T5863] as10x_usb: device has been detected [ 972.525568][ T5863] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 972.684010][ T5863] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 972.696693][ T5863] as10x_usb: error during firmware upload part1 [ 972.703082][ T5863] Registered device Sky IT Digital Key (green led) [ 972.722860][T15205] random: crng reseeded on system resumption [ 972.915415][ T2150] usb 3-1: USB disconnect, device number 63 [ 972.934611][ T2150] Unregistered device Sky IT Digital Key (green led) [ 972.948920][ T2150] as10x_usb: device has been disconnected [ 973.145993][ T30] audit: type=1400 audit(2000000068.700:374): avc: denied { module_load } for pid=15227 comm="syz.1.2506" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=49203 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 973.535355][T15228] Invalid ELF header magic: != ELF [ 974.679230][ T2150] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 974.883581][ T2150] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 974.941244][ T2150] usb 5-1: config 0 has no interface number 0 [ 974.972299][ T2150] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 974.991583][ T2150] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.995482][T15253] sg_write: data in/out 198/14 bytes for SCSI command 0x0-- guessing data in; [ 974.995482][T15253] program syz.1.2513 not setting count and/or reply_len properly [ 975.045193][ T2150] usb 5-1: Product: syz [ 975.049390][ T2150] usb 5-1: Manufacturer: syz [ 975.054554][ T2150] usb 5-1: SerialNumber: syz [ 975.176552][ T2150] usb 5-1: config 0 descriptor?? [ 975.385728][ T2150] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 975.406107][ T2150] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 975.420670][ T2150] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 975.430859][ T2150] usb 5-1: media controller created [ 975.458653][ T2150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 975.654661][T15259] nbd3: detected capacity change from 0 to 4294967296 [ 975.672856][T15260] block nbd3: shutting down sockets [ 975.674066][ T5831] blk_print_req_error: 24 callbacks suppressed [ 975.674080][ T5831] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 975.695001][ T5831] buffer_io_error: 23 callbacks suppressed [ 975.695015][ T5831] Buffer I/O error on dev nbd3, logical block 0, async page read [ 975.752160][ T5868] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 975.762492][T12599] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 975.772125][T12599] Buffer I/O error on dev nbd3, logical block 0, async page read [ 975.781491][ T5831] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 975.798824][ T2150] usb 5-1: USB disconnect, device number 63 [ 975.808703][ T5831] Buffer I/O error on dev nbd3, logical block 0, async page read [ 975.816939][ T5831] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 975.826402][ T5831] Buffer I/O error on dev nbd3, logical block 0, async page read [ 975.846515][ T5831] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 975.858031][ T5831] Buffer I/O error on dev nbd3, logical block 0, async page read [ 975.866490][ T5831] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 975.876360][ T5831] Buffer I/O error on dev nbd3, logical block 0, async page read [ 975.884991][ T5831] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 975.894412][ T5831] Buffer I/O error on dev nbd3, logical block 0, async page read [ 975.902353][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 975.908518][ T5831] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 975.918579][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.931195][ T5831] Buffer I/O error on dev nbd3, logical block 0, async page read [ 975.939389][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.949505][ T5831] ldm_validate_partition_table(): Disk read failed. [ 975.956218][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 975.970000][ T5831] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 975.979707][ T5831] Buffer I/O error on dev nbd3, logical block 0, async page read [ 975.987602][T13054] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 975.995596][ T5868] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 976.010266][ T5831] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 976.020179][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.028495][ T5831] Buffer I/O error on dev nbd3, logical block 0, async page read [ 976.038013][ T5831] Dev nbd3: unable to read RDB block 0 [ 976.044778][ T5868] usb 3-1: config 0 descriptor?? [ 976.053856][ T5831] nbd3: unable to read partition table [ 976.064727][ T5831] ldm_validate_partition_table(): Disk read failed. [ 976.072419][ T5831] Dev nbd3: unable to read RDB block 0 [ 976.080814][ T5831] nbd3: unable to read partition table [ 976.252080][T13054] usb 6-1: Using ep0 maxpacket: 16 [ 976.259199][T13054] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.270186][T13054] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.280243][T13054] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 976.293454][T13054] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 976.302656][T13054] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.712211][ T2150] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 976.722356][T13054] usb 6-1: config 0 descriptor?? [ 976.778243][ T5868] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0017/input/input59 [ 976.871823][ T5868] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 976.912080][ T2150] usb 2-1: Using ep0 maxpacket: 8 [ 976.924391][ T5868] usb 3-1: USB disconnect, device number 64 [ 976.936094][ T2150] usb 2-1: unable to get BOS descriptor or descriptor too short [ 976.960922][ T2150] usb 2-1: config index 0 descriptor too short (expected 51730, got 18) [ 976.972401][ T2150] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 976.976395][T15276] fido_id[15276]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 976.980837][ T2150] usb 2-1: config 8 has no interface number 0 [ 977.025468][ T2150] usb 2-1: config 8 interface 255 has no altsetting 0 [ 977.039546][ T2150] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 977.049209][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.059407][ T2150] usb 2-1: Product: syz [ 977.063829][ T2150] usb 2-1: Manufacturer: syz [ 977.068620][ T2150] usb 2-1: SerialNumber: syz [ 977.102069][ T5863] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 977.146297][T13054] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0018/input/input60 [ 977.216620][T13054] microsoft 0003:045E:07DA.0018: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 977.252054][ T5863] usb 5-1: Using ep0 maxpacket: 16 [ 977.263739][ T5863] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 977.274121][ T5863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.282501][ T5863] usb 5-1: Product: syz [ 977.287416][ T5863] usb 5-1: Manufacturer: syz [ 977.292260][ T5863] usb 5-1: SerialNumber: syz [ 977.300904][ T5863] usb 5-1: config 0 descriptor?? [ 977.314638][ T5863] as10x_usb: device has been detected [ 977.320789][ T5863] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 977.353109][ T5863] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 977.373525][ T5863] as10x_usb: error during firmware upload part1 [ 977.379860][ T5863] Registered device Sky IT Digital Key (green led) [ 977.461146][T13054] usb 6-1: USB disconnect, device number 5 [ 977.820954][T15275] random: crng reseeded on system resumption [ 978.981931][ T43] usb 5-1: USB disconnect, device number 64 [ 979.136582][T15290] vlan0: entered promiscuous mode [ 979.188522][ T43] Unregistered device Sky IT Digital Key (green led) [ 979.189294][ T2150] catc 2-1:8.255: Can't set altsetting 1. [ 979.208375][ T43] as10x_usb: device has been disconnected [ 979.214250][ T2150] catc 2-1:8.255: probe with driver catc failed with error -5 [ 979.224491][ T30] audit: type=1400 audit(2000000074.780:375): avc: denied { create } for pid=15291 comm="syz.3.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 979.228338][ T2150] usb 2-1: USB disconnect, device number 71 [ 979.256742][T15294] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2524'. [ 979.270551][ T30] audit: type=1400 audit(2000000074.830:376): avc: denied { bind } for pid=15291 comm="syz.3.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 979.334022][ T30] audit: type=1400 audit(2000000074.830:377): avc: denied { write } for pid=15291 comm="syz.3.2525" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 979.428720][ T30] audit: type=1400 audit(2000000074.830:378): avc: denied { open } for pid=15291 comm="syz.3.2525" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 979.452646][ C0] vkms_vblank_simulate: vblank timer overrun [ 979.852125][ T2150] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 980.014065][ T2150] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 980.028102][ T2150] usb 2-1: config 0 has no interface number 0 [ 980.045650][ T2150] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 980.069475][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.082144][ T43] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 980.098542][ T2150] usb 2-1: Product: syz [ 980.108986][ T2150] usb 2-1: Manufacturer: syz [ 980.119816][ T2150] usb 2-1: SerialNumber: syz [ 980.171237][ T2150] usb 2-1: config 0 descriptor?? [ 980.745224][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 980.754718][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 980.767636][ T2150] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 980.779472][ T43] usb 5-1: config 0 has an invalid interface number: 82 but max is 1 [ 980.796489][ T43] usb 5-1: config 0 has an invalid interface number: 159 but max is 1 [ 980.805621][ T2150] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 980.825094][ T43] usb 5-1: config 0 has no interface number 0 [ 980.831244][ T43] usb 5-1: config 0 has no interface number 1 [ 980.837695][ T2150] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 980.848127][ T43] usb 5-1: config 0 interface 82 has no altsetting 0 [ 980.855943][ T2150] usb 2-1: media controller created [ 980.866779][ T43] usb 5-1: config 0 interface 159 has no altsetting 0 [ 980.934138][ T43] usb 5-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d [ 980.968585][ T2150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 980.977487][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.985797][ T43] usb 5-1: Product: syz [ 980.990371][ T43] usb 5-1: Manufacturer: syz [ 980.995912][ T43] usb 5-1: SerialNumber: syz [ 981.014571][ T43] usb 5-1: config 0 descriptor?? [ 981.251444][T15320] affs: No valid root block on device nullb0 [ 981.773150][ T5868] usb 2-1: USB disconnect, device number 72 [ 981.827965][T15322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 981.841059][T15322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.087061][ T5863] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 982.256281][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 982.272366][ T5863] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.283586][ T5863] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 982.293688][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.304691][ T5863] usb 3-1: config 0 descriptor?? [ 982.864355][ T5863] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 983.878519][ T5863] usb 3-1: USB disconnect, device number 65 [ 984.147662][ T43] usb 5-1: USB disconnect, device number 65 [ 984.335861][ T6439] udevd[6439]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.159/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 984.494436][T15338] nbd3: detected capacity change from 0 to 4294967296 [ 984.612624][T15348] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 985.159852][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.82/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 985.243066][ T5869] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 985.311511][T15343] block nbd3: shutting down sockets [ 985.486840][ T30] audit: type=1400 audit(2000000081.040:379): avc: denied { ioctl } for pid=15356 comm="syz.5.2542" path="socket:[48658]" dev="sockfs" ino=48658 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 985.502120][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 985.525686][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 985.537739][ T5869] usb 2-1: config index 0 descriptor too short (expected 51730, got 18) [ 985.552323][ T5869] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 985.561809][ T5869] usb 2-1: config 8 has no interface number 0 [ 985.569668][ T5869] usb 2-1: config 8 interface 255 has no altsetting 0 [ 985.588349][ T5869] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 985.597675][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.672092][ T5863] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 985.706673][ T5869] usb 2-1: Product: syz [ 985.710884][ T5869] usb 2-1: Manufacturer: syz [ 985.715610][ T5869] usb 2-1: SerialNumber: syz [ 985.832704][ T5863] usb 3-1: Using ep0 maxpacket: 16 [ 985.984004][ T5863] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 986.125846][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.229650][ T5863] usb 3-1: Product: syz [ 986.244341][ T5863] usb 3-1: Manufacturer: syz [ 986.253389][ T5863] usb 3-1: SerialNumber: syz [ 986.274541][ T5863] usb 3-1: config 0 descriptor?? [ 986.294954][ T5863] as10x_usb: device has been detected [ 986.310985][ T5863] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 986.491835][T15355] random: crng reseeded on system resumption [ 986.528481][ T5863] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 986.660165][ T5863] as10x_usb: error during firmware upload part1 [ 987.272244][ T5869] catc 2-1:8.255: Can't set altsetting 1. [ 987.278296][ T30] audit: type=1400 audit(2000000082.330:380): avc: denied { map } for pid=15367 comm="syz.3.2545" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 987.311040][ T5863] Registered device Sky IT Digital Key (green led) [ 987.320568][ T5869] catc 2-1:8.255: probe with driver catc failed with error -5 [ 987.433758][ T30] audit: type=1400 audit(2000000082.330:381): avc: denied { execute } for pid=15367 comm="syz.3.2545" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 987.461170][ T5869] usb 2-1: USB disconnect, device number 73 [ 987.614291][ T5868] usb 3-1: USB disconnect, device number 66 [ 987.932429][ T5869] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 987.960697][ T5868] Unregistered device Sky IT Digital Key (green led) [ 987.977887][ T5868] as10x_usb: device has been disconnected [ 988.170665][ T5869] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 988.180078][ T5869] usb 2-1: config 0 has no interface number 0 [ 988.194153][ T5869] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 988.222358][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.249825][ T5869] usb 2-1: Product: syz [ 988.260416][ T5869] usb 2-1: Manufacturer: syz [ 988.291918][ T5869] usb 2-1: SerialNumber: syz [ 988.412525][ T5869] usb 2-1: config 0 descriptor?? [ 988.625517][ T5869] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 988.649106][ T5869] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 988.672078][ T5863] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 988.673817][ T5869] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 988.711436][ T30] audit: type=1400 audit(2000000084.250:382): avc: denied { ioctl } for pid=15402 comm="syz.2.2556" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 988.743542][ T5869] usb 2-1: media controller created [ 988.781867][ T5869] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 988.832586][ T5863] usb 4-1: Using ep0 maxpacket: 16 [ 988.890912][ T5863] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 988.911787][ T5863] usb 4-1: config 0 has no interface number 0 [ 988.924570][ T5863] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 988.935177][ T5863] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 988.947995][ T5863] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 988.957503][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.965919][ T5863] usb 4-1: Product: syz [ 988.973393][ T5863] usb 4-1: Manufacturer: syz [ 988.978547][ T5863] usb 4-1: SerialNumber: syz [ 989.010340][ T5863] usb 4-1: config 0 descriptor?? [ 989.022718][T15391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 989.030457][T15391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 989.791408][T15405] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2558'. [ 989.804992][T15391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 989.832105][T15415] affs: No valid root block on device nullb0 [ 989.866753][T15391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 989.873177][T15408] nbd2: detected capacity change from 0 to 4294967296 [ 989.906932][T15409] block nbd2: shutting down sockets [ 990.101103][ C0] blk_print_req_error: 24 callbacks suppressed [ 990.101131][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 990.116682][ C0] buffer_io_error: 23 callbacks suppressed [ 990.116707][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 990.132638][ T2150] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 990.153195][T12599] block nbd0: Possible stuck request ffff8880269c0000: control (read@0,4096B). Runtime 90 seconds [ 990.190752][ T5823] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 990.338846][T14768] usb 2-1: USB disconnect, device number 74 [ 990.362084][ T2150] usb 6-1: Using ep0 maxpacket: 8 [ 990.380706][ T5823] Buffer I/O error on dev nbd2, logical block 0, async page read [ 990.395608][ T2150] usb 6-1: unable to get BOS descriptor or descriptor too short [ 990.402305][ T5823] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 990.408670][ T2150] usb 6-1: config index 0 descriptor too short (expected 51730, got 18) [ 990.426173][ T2150] usb 6-1: config 8 has an invalid interface number: 255 but max is 0 [ 990.435819][ T2150] usb 6-1: config 8 has no interface number 0 [ 990.436064][ T5823] Buffer I/O error on dev nbd2, logical block 0, async page read [ 990.442865][ T2150] usb 6-1: config 8 interface 255 has no altsetting 0 [ 990.459358][ T2150] usb 6-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 990.477519][ T2150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.480903][ T5823] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 990.494396][ T2150] usb 6-1: Product: syz [ 990.504819][ T2150] usb 6-1: Manufacturer: syz [ 990.515034][ T2150] usb 6-1: SerialNumber: syz [ 990.572318][ T5823] Buffer I/O error on dev nbd2, logical block 0, async page read [ 990.580739][ T5823] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 990.596901][ T5823] Buffer I/O error on dev nbd2, logical block 0, async page read [ 990.682306][ T5823] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 990.691559][ T5823] Buffer I/O error on dev nbd2, logical block 0, async page read [ 990.699998][ T5823] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 990.709216][ T5823] Buffer I/O error on dev nbd2, logical block 0, async page read [ 990.717314][ T5823] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 990.730632][ T5863] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 990.745566][ T5863] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 990.757439][ T5863] asix 4-1:0.251: probe with driver asix failed with error -5 [ 990.930826][ T5863] usb 4-1: USB disconnect, device number 70 [ 990.992747][ T5831] udevd[5831]: setting mode of /dev/bus/usb/004/070 to 020664 failed: No such file or directory [ 991.250852][ T5823] Buffer I/O error on dev nbd2, logical block 0, async page read [ 991.268405][ T5823] ldm_validate_partition_table(): Disk read failed. [ 991.270696][ T5831] udevd[5831]: setting owner of /dev/bus/usb/004/070 to uid=0, gid=0 failed: No such file or directory [ 991.276773][ T5823] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 991.298966][ T5823] Buffer I/O error on dev nbd2, logical block 0, async page read [ 991.307045][ T5823] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 991.316564][ T5823] Buffer I/O error on dev nbd2, logical block 0, async page read [ 991.328761][ T5823] Dev nbd2: unable to read RDB block 0 [ 991.337201][ T5823] nbd2: unable to read partition table [ 991.358812][ T5823] ldm_validate_partition_table(): Disk read failed. [ 991.369901][ T5823] Dev nbd2: unable to read RDB block 0 [ 991.376627][ T5823] nbd2: unable to read partition table [ 991.696730][ T30] audit: type=1400 audit(2000000087.250:383): avc: denied { create } for pid=15427 comm="syz.1.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 991.716404][ C0] vkms_vblank_simulate: vblank timer overrun [ 991.822099][ T5863] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 991.973810][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 991.987833][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.998304][ T5863] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 992.011605][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.024352][ T5863] usb 5-1: config 0 descriptor?? [ 992.128207][ T2150] catc 6-1:8.255: Can't set altsetting 1. [ 992.137466][ T43] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 992.142257][T14768] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 992.145653][ T2150] catc 6-1:8.255: probe with driver catc failed with error -5 [ 992.204720][ T2150] usb 6-1: USB disconnect, device number 6 [ 992.312137][T14768] usb 4-1: Using ep0 maxpacket: 16 [ 992.312137][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 992.314987][ T43] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 992.323429][T14768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.332301][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.352064][T14768] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 992.357199][ T43] usb 2-1: Product: syz [ 992.369760][ T43] usb 2-1: Manufacturer: syz [ 992.369799][T14768] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 992.377121][ T43] usb 2-1: SerialNumber: syz [ 992.389535][T14768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.402162][ T43] usb 2-1: config 0 descriptor?? [ 992.410088][T14768] usb 4-1: config 0 descriptor?? [ 992.416714][ T43] as10x_usb: device has been detected [ 992.422919][ T43] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 992.436104][T14768] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input61 [ 992.463896][ T43] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 992.464996][ T5863] elan 0003:04F3:0755.001A: unknown main item tag 0x0 [ 992.496116][ T43] as10x_usb: error during firmware upload part1 [ 992.504857][ T5863] elan 0003:04F3:0755.001A: item fetching failed at offset 3/5 [ 992.515366][ T43] Registered device Sky IT Digital Key (green led) [ 992.520096][ T5863] elan 0003:04F3:0755.001A: Hid Parse failed [ 992.562073][ T2150] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 992.571722][ T5863] elan 0003:04F3:0755.001A: probe with driver elan failed with error -22 [ 992.644915][T15433] random: crng reseeded on system resumption [ 992.664319][ T5863] usb 4-1: USB disconnect, device number 71 [ 992.706007][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.739476][T14768] usb 5-1: USB disconnect, device number 66 [ 992.752643][ T2150] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 992.781738][ T2150] usb 6-1: config 0 has no interface number 0 [ 992.802979][ T2150] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 992.824238][ T2150] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.850697][ T2150] usb 6-1: Product: syz [ 992.863879][ T2150] usb 6-1: Manufacturer: syz [ 992.880029][ T2150] usb 6-1: SerialNumber: syz [ 992.897484][ T2150] usb 6-1: config 0 descriptor?? [ 992.914722][ T5863] usb 2-1: USB disconnect, device number 75 [ 992.953691][ T5863] Unregistered device Sky IT Digital Key (green led) [ 992.956686][ T5863] as10x_usb: device has been disconnected [ 993.111358][ T2150] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 993.152313][ T2150] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 993.164608][ T2150] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 993.173680][ T2150] usb 6-1: media controller created [ 993.225685][ T2150] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 993.376237][T15449] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2567'. [ 993.885404][T15458] x_tables: unsorted underflow at hook 3 [ 994.884005][T15464] affs: No valid root block on device nullb0 [ 996.612591][ T5863] usb 6-1: USB disconnect, device number 7 [ 997.892130][T14768] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 998.062137][ T2150] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 998.064137][T14768] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 998.081462][T14768] usb 4-1: config 0 has no interface number 0 [ 998.212066][ T2150] usb 2-1: Using ep0 maxpacket: 16 [ 998.218717][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.230423][ T2150] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.240588][ T2150] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 998.375901][ T2150] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 998.489443][ T2150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.582104][ T43] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 998.603809][ T2150] usb 2-1: config 0 descriptor?? [ 998.705454][T14768] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 998.719818][T14768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.730115][T14768] usb 4-1: config 0 descriptor?? [ 998.738460][T14768] usb 4-1: can't set config #0, error -71 [ 998.746162][T14768] usb 4-1: USB disconnect, device number 72 [ 998.762108][ T5811] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 998.898460][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 998.912260][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 998.921373][ T43] usb 5-1: config index 0 descriptor too short (expected 51730, got 18) [ 998.930058][ T43] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 998.938315][ T43] usb 5-1: config 8 has no interface number 0 [ 998.944421][ T5811] usb 6-1: Using ep0 maxpacket: 16 [ 998.949728][ T43] usb 5-1: config 8 interface 255 has no altsetting 0 [ 998.949997][ T5811] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 998.958906][ T43] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 998.968699][ T5811] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.975218][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.996028][ T43] usb 5-1: Product: syz [ 999.000315][ T43] usb 5-1: Manufacturer: syz [ 999.006561][ T43] usb 5-1: SerialNumber: syz [ 999.053072][T13054] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 999.199759][ T2150] usbhid 2-1:0.0: can't add hid device: -71 [ 999.245109][ T2150] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 999.345849][ T5811] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 999.357663][ T5811] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 999.364932][ T2150] usb 2-1: USB disconnect, device number 76 [ 999.372028][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.372968][T13054] usb 3-1: Using ep0 maxpacket: 16 [ 999.380577][ T5811] usb 6-1: Product: syz [ 999.380598][ T5811] usb 6-1: Manufacturer: syz [ 999.380612][ T5811] usb 6-1: SerialNumber: syz [ 999.412659][T13054] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 999.423366][T13054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.431526][T13054] usb 3-1: Product: syz [ 999.435962][T13054] usb 3-1: Manufacturer: syz [ 999.440626][T13054] usb 3-1: SerialNumber: syz [ 999.451361][T13054] usb 3-1: config 0 descriptor?? [ 999.460801][T13054] as10x_usb: device has been detected [ 999.466965][T13054] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 999.486885][T13054] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 999.498151][T13054] as10x_usb: error during firmware upload part1 [ 999.504648][T13054] Registered device Sky IT Digital Key (green led) [ 999.675132][T15497] random: crng reseeded on system resumption [ 999.802709][ T5811] usb 6-1: 0:2 : does not exist [ 999.856525][ T5811] usb 6-1: USB disconnect, device number 8 [ 999.939876][T14768] usb 3-1: USB disconnect, device number 67 [ 999.963330][T14768] Unregistered device Sky IT Digital Key (green led) [ 999.964819][T14768] as10x_usb: device has been disconnected [ 999.987624][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1000.726054][ T43] catc 5-1:8.255: Can't set altsetting 1. [ 1000.741643][ T43] catc 5-1:8.255: probe with driver catc failed with error -5 [ 1000.944130][ T43] usb 5-1: USB disconnect, device number 67 [ 1003.329536][T15540] sg_write: data in/out 198/14 bytes for SCSI command 0x0-- guessing data in; [ 1003.329536][T15540] program syz.1.2591 not setting count and/or reply_len properly [ 1003.512132][T15544] block nbd2: shutting down sockets [ 1003.635055][T15548] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2593'. [ 1003.679169][T14768] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1004.275657][T14768] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1004.284176][T14768] usb 6-1: config 0 has no interface number 0 [ 1004.296202][T14768] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1004.313969][T14768] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.324857][T14768] usb 6-1: Product: syz [ 1004.329133][T14768] usb 6-1: Manufacturer: syz [ 1004.335959][T14768] usb 6-1: SerialNumber: syz [ 1004.345955][T14768] usb 6-1: config 0 descriptor?? [ 1005.105036][T14768] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1005.132768][T14768] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1005.151189][T14768] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1005.159929][T14768] usb 6-1: media controller created [ 1005.203510][T14768] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1005.244483][ T43] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1005.267704][ T30] audit: type=1400 audit(2000000100.820:384): avc: denied { read } for pid=15562 comm="syz.1.2598" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1005.432304][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1005.444897][ T30] audit: type=1400 audit(2000000100.990:385): avc: denied { bind } for pid=15567 comm="syz.1.2599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1005.504993][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1005.578973][ T43] usb 4-1: config index 0 descriptor too short (expected 51730, got 18) [ 1005.658779][ T43] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 1005.742760][ T5811] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1005.817507][ T43] usb 4-1: config 8 has no interface number 0 [ 1005.823792][ T43] usb 4-1: config 8 interface 255 has no altsetting 0 [ 1005.833076][ T43] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1005.856109][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.869184][ T43] usb 4-1: Product: syz [ 1005.876161][ T43] usb 4-1: Manufacturer: syz [ 1005.880880][ T43] usb 4-1: SerialNumber: syz [ 1006.112011][ T5811] usb 3-1: Using ep0 maxpacket: 16 [ 1006.133774][ T5811] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1006.147806][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.265805][ T5811] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1006.277676][T15575] affs: No valid root block on device nullb0 [ 1006.786927][ T5811] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1006.850923][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.861612][ T5811] usb 3-1: Product: syz [ 1006.867283][ T5811] usb 3-1: Manufacturer: syz [ 1006.873922][ T5811] usb 3-1: SerialNumber: syz [ 1007.376567][ T43] catc 4-1:8.255: Can't set altsetting 1. [ 1007.394103][ T43] catc 4-1:8.255: probe with driver catc failed with error -5 [ 1007.915703][ T5811] usb 3-1: 0:2 : does not exist [ 1007.938505][ T43] usb 4-1: USB disconnect, device number 73 [ 1007.982385][ T5811] usb 3-1: USB disconnect, device number 68 [ 1007.993849][ T2150] usb 6-1: USB disconnect, device number 9 [ 1009.144796][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.245979][ T30] audit: type=1326 audit(2000000104.790:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1010.025790][ T30] audit: type=1326 audit(2000000104.790:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1010.051114][ T30] audit: type=1326 audit(2000000104.790:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1010.075328][ T30] audit: type=1326 audit(2000000104.790:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1010.100471][ T30] audit: type=1326 audit(2000000104.790:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1010.188283][T15606] block nbd2: shutting down sockets [ 1010.209560][T15604] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2607'. [ 1010.229666][ T30] audit: type=1326 audit(2000000104.800:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1010.295322][T15610] netlink: 'syz.4.2609': attribute type 12 has an invalid length. [ 1010.334739][T15610] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2609'. [ 1010.335847][ T30] audit: type=1326 audit(2000000104.800:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1010.357864][T15610] FAULT_INJECTION: forcing a failure. [ 1010.357864][T15610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1010.369037][ T30] audit: type=1326 audit(2000000104.800:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1010.409423][ T30] audit: type=1326 audit(2000000104.800:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1010.434628][ T30] audit: type=1326 audit(2000000104.800:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1010.437018][T15610] CPU: 0 UID: 0 PID: 15610 Comm: syz.4.2609 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 1010.437040][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1010.437050][T15610] Call Trace: [ 1010.437056][T15610] [ 1010.437062][T15610] dump_stack_lvl+0x16c/0x1f0 [ 1010.437087][T15610] should_fail_ex+0x512/0x640 [ 1010.437114][T15610] should_fail_alloc_page+0xe7/0x130 [ 1010.437136][T15610] prepare_alloc_pages+0x3c2/0x610 [ 1010.437164][T15610] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1010.437185][T15610] ? mark_held_locks+0x49/0x80 [ 1010.437207][T15610] ? finish_task_switch.isra.0+0x221/0xc10 [ 1010.437226][T15610] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 1010.437244][T15610] ? rcu_is_watching+0x12/0xc0 [ 1010.437263][T15610] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1010.437283][T15610] ? console_flush_all+0x990/0xc60 [ 1010.437301][T15610] ? console_flush_all+0x991/0xc60 [ 1010.437340][T15610] ? __pfx___schedule+0x10/0x10 [ 1010.437363][T15610] ? wiphy_new_nm+0x701/0x2160 [ 1010.437384][T15610] __alloc_pages_noprof+0xb/0x1b0 [ 1010.437403][T15610] ___kmalloc_large_node+0x84/0x1e0 [ 1010.437429][T15610] ? wiphy_new_nm+0x701/0x2160 [ 1010.437449][T15610] __kmalloc_large_node_noprof+0x1c/0x70 [ 1010.437473][T15610] __kmalloc_noprof.cold+0xc/0x61 [ 1010.437501][T15610] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1010.437531][T15610] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1010.437554][T15610] wiphy_new_nm+0x701/0x2160 [ 1010.437577][T15610] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1010.437600][T15610] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1010.437623][T15610] ieee80211_alloc_hw_nm+0x1b7a/0x2260 [ 1010.437646][T15610] ? __local_bh_enable_ip+0xa4/0x120 [ 1010.437666][T15610] mac80211_hwsim_new_radio+0x1d4/0x54d0 [ 1010.437691][T15610] ? __pfx__printk+0x10/0x10 [ 1010.437716][T15610] ? __pfx____ratelimit+0x10/0x10 [ 1010.437736][T15610] ? rcu_is_watching+0x12/0xc0 [ 1010.437752][T15610] ? do_trace_netlink_extack+0x164/0x1e0 [ 1010.437773][T15610] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1010.437802][T15610] hwsim_new_radio_nl+0xb51/0x12c0 [ 1010.437827][T15610] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1010.437855][T15610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1010.437873][T15610] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1010.437895][T15610] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1010.437913][T15610] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1010.437938][T15610] ? bpf_lsm_capable+0x9/0x10 [ 1010.437952][T15610] ? security_capable+0x7e/0x260 [ 1010.437972][T15610] ? ns_capable+0xd7/0x110 [ 1010.437990][T15610] genl_rcv_msg+0x55c/0x800 [ 1010.438010][T15610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1010.438026][T15610] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1010.438050][T15610] ? __lock_acquire+0x622/0x1c90 [ 1010.438074][T15610] netlink_rcv_skb+0x155/0x420 [ 1010.438097][T15610] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1010.438114][T15610] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1010.438147][T15610] ? netlink_deliver_tap+0x1ae/0xd30 [ 1010.438168][T15610] ? is_vmalloc_addr+0x86/0xa0 [ 1010.438188][T15610] genl_rcv+0x28/0x40 [ 1010.438201][T15610] netlink_unicast+0x53a/0x7f0 [ 1010.438227][T15610] ? __pfx_netlink_unicast+0x10/0x10 [ 1010.438248][T15610] ? __build_skb_around+0x278/0x3b0 [ 1010.438271][T15610] netlink_sendmsg+0x8d1/0xdd0 [ 1010.438298][T15610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1010.438330][T15610] ____sys_sendmsg+0xa95/0xc70 [ 1010.438354][T15610] ? copy_msghdr_from_user+0x10a/0x160 [ 1010.438373][T15610] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1010.438407][T15610] ___sys_sendmsg+0x134/0x1d0 [ 1010.438428][T15610] ? __pfx____sys_sendmsg+0x10/0x10 [ 1010.438445][T15610] ? __lock_acquire+0x622/0x1c90 [ 1010.438495][T15610] __sys_sendmsg+0x16d/0x220 [ 1010.438519][T15610] ? __pfx___sys_sendmsg+0x10/0x10 [ 1010.438554][T15610] do_syscall_64+0xcd/0x4c0 [ 1010.438576][T15610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.438591][T15610] RIP: 0033:0x7f3d3f98e969 [ 1010.438604][T15610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.438619][T15610] RSP: 002b:00007f3d40765038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.438634][T15610] RAX: ffffffffffffffda RBX: 00007f3d3fbb5fa0 RCX: 00007f3d3f98e969 [ 1010.438644][T15610] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1010.438654][T15610] RBP: 00007f3d40765090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.438663][T15610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.438672][T15610] R13: 0000000000000000 R14: 00007f3d3fbb5fa0 R15: 00007ffc184f4a88 [ 1010.438693][T15610] [ 1010.972053][ T43] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1011.042187][ T2150] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1011.071916][ T30] audit: type=1326 audit(2000000104.800:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1011.096494][ T30] audit: type=1326 audit(2000000104.800:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1011.147511][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.692165][ T2150] usb 2-1: Using ep0 maxpacket: 16 [ 1011.794476][ T2150] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1011.834966][ T30] audit: type=1326 audit(2000000104.800:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1011.844678][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1011.869620][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.871682][ T30] audit: type=1326 audit(2000000104.800:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1011.882536][ T2150] usb 2-1: Product: syz [ 1011.904178][ T30] audit: type=1326 audit(2000000104.800:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1011.908612][ T2150] usb 2-1: Manufacturer: syz [ 1011.929936][ T30] audit: type=1326 audit(2000000104.800:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15594 comm="syz.3.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf5638e969 code=0x7ffc0000 [ 1011.935348][T15502] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1011.963203][T15623] binder: BINDER_SET_CONTEXT_MGR already set [ 1011.965320][ T43] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1011.971400][T15623] binder: 15622:15623 ioctl 4018620d 200000000040 returned -16 [ 1011.994277][ T2150] usb 2-1: SerialNumber: syz [ 1011.998934][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1012.008210][ T43] usb 6-1: SerialNumber: syz [ 1012.015017][ T2150] usb 2-1: config 0 descriptor?? [ 1012.028230][ T2150] as10x_usb: device has been detected [ 1012.042513][ T2150] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1012.069828][ T2150] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1012.081846][ T2150] as10x_usb: error during firmware upload part1 [ 1012.089008][ T2150] Registered device Sky IT Digital Key (green led) [ 1012.162039][T15502] usb 3-1: Using ep0 maxpacket: 8 [ 1012.175292][T15502] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1012.183914][T15502] usb 3-1: config index 0 descriptor too short (expected 51730, got 18) [ 1012.192359][T15502] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 1012.200542][T15502] usb 3-1: config 8 has no interface number 0 [ 1012.206760][T15502] usb 3-1: config 8 interface 255 has no altsetting 0 [ 1012.212155][ T5811] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1012.215812][T15502] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1012.236697][T15502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.249069][T15611] random: crng reseeded on system resumption [ 1012.252879][ T43] usb 6-1: 0:2 : does not exist [ 1012.259956][T15502] usb 3-1: Product: syz [ 1012.276816][T15502] usb 3-1: Manufacturer: syz [ 1012.281456][T15502] usb 3-1: SerialNumber: syz [ 1012.291399][ T43] usb 6-1: USB disconnect, device number 10 [ 1012.312919][T14768] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1012.334241][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.394415][ T5811] usb 5-1: Using ep0 maxpacket: 16 [ 1012.400986][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.414648][ T5811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.424509][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1012.441555][ T5811] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1012.450924][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.467613][ T9] usb 2-1: USB disconnect, device number 77 [ 1012.482497][ T5811] usb 5-1: config 0 descriptor?? [ 1012.495324][ T9] Unregistered device Sky IT Digital Key (green led) [ 1012.496703][ T9] as10x_usb: device has been disconnected [ 1012.513940][T14768] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1012.523459][T14768] usb 4-1: config 0 has no interface number 0 [ 1012.533173][T14768] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1012.544405][T14768] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.552772][T14768] usb 4-1: Product: syz [ 1012.556964][T14768] usb 4-1: Manufacturer: syz [ 1012.561566][T14768] usb 4-1: SerialNumber: syz [ 1012.570172][T14768] usb 4-1: config 0 descriptor?? [ 1012.780981][T14768] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1012.792708][T14768] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1012.803344][T14768] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1012.811415][T14768] usb 4-1: media controller created [ 1012.829500][T14768] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1012.915391][ T5811] usbhid 5-1:0.0: can't add hid device: -71 [ 1012.923086][ T5811] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1012.935690][ T5811] usb 5-1: USB disconnect, device number 68 [ 1013.967843][T15634] affs: No valid root block on device nullb0 [ 1014.288938][T15502] catc 3-1:8.255: Can't set altsetting 1. [ 1014.298997][T15502] catc 3-1:8.255: probe with driver catc failed with error -5 [ 1014.315530][T15502] usb 3-1: USB disconnect, device number 69 [ 1014.355229][T15630] syz.1.2616: attempt to access beyond end of device [ 1014.355229][T15630] loop1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 1014.368461][T15630] qnx4: unable to read the superblock [ 1014.552134][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1014.713800][T15642] Bluetooth: MGMT ver 1.23 [ 1014.839892][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1014.854943][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1014.871456][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.882113][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1015.419789][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1015.473471][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.513608][T14768] usb 4-1: USB disconnect, device number 74 [ 1015.536295][ T24] usb 6-1: Product: syz [ 1015.542691][ T24] usb 6-1: Manufacturer: syz [ 1015.547388][ T24] usb 6-1: SerialNumber: syz [ 1016.356585][T15656] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2622'. [ 1017.046483][T15662] binder_alloc: 15661: pid 15661 spamming oneway? 1 buffers allocated for a total size of 6144 [ 1017.119809][ T24] usb 6-1: 0:2 : does not exist [ 1017.158432][ T24] usb 6-1: USB disconnect, device number 11 [ 1017.211871][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1017.223194][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.253662][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.296089][T15675] openvswitch: netlink: Missing valid actions attribute. [ 1017.313425][T15675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1017.396925][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1017.396945][ T30] audit: type=1400 audit(2000000112.810:452): avc: denied { write } for pid=15664 comm="syz.2.2625" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1017.482688][ T43] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1020.500459][T15603] block nbd0: Possible stuck request ffff8880269c0000: control (read@0,4096B). Runtime 120 seconds [ 1020.788627][T15698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2632'. [ 1020.850139][T15709] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2635'. [ 1021.002508][ T43] usb 4-1: device descriptor read/64, error -71 [ 1021.274259][ T43] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1021.392622][T15725] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2639'. [ 1021.549299][T15729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15729 comm=syz.3.2640 [ 1021.691404][ T43] usb 4-1: device not accepting address 76, error -71 [ 1021.704783][ T43] usb usb4-port1: attempt power cycle [ 1024.402228][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1024.460205][T15729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2640'. [ 1024.574190][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1024.581818][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.596113][ T9] usb 6-1: config 0 has no interfaces? [ 1024.672028][ T43] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1024.694822][ T9] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1024.705822][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.850402][ T9] usb 6-1: Product: syz [ 1024.860157][ T9] usb 6-1: Manufacturer: syz [ 1024.865176][ T9] usb 6-1: SerialNumber: syz [ 1024.871726][ T9] usb 6-1: config 0 descriptor?? [ 1024.906055][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1025.465385][ T43] usb 5-1: config 0 has no interface number 0 [ 1025.680227][T15729] team0 (unregistering): Port device team_slave_0 removed [ 1025.691435][T15767] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2651'. [ 1025.713946][ T43] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1025.731966][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.740241][ T43] usb 5-1: Product: syz [ 1025.745203][ T43] usb 5-1: Manufacturer: syz [ 1025.749833][ T43] usb 5-1: SerialNumber: syz [ 1025.756834][ T43] usb 5-1: config 0 descriptor?? [ 1025.766565][T15729] team0 (unregistering): Port device team_slave_1 removed [ 1026.198779][ T43] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1026.219820][ T43] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1026.232708][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1026.240704][ T43] usb 5-1: media controller created [ 1026.265080][ T5811] usb 6-1: USB disconnect, device number 12 [ 1026.269245][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1026.432032][ T2150] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1026.803319][T15782] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1027.115177][ T2150] usb 2-1: Using ep0 maxpacket: 8 [ 1027.154390][ T2150] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1027.166394][ T2150] usb 2-1: config index 0 descriptor too short (expected 51730, got 18) [ 1027.175301][ T43] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1027.183035][ T2150] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 1027.191280][ T2150] usb 2-1: config 8 has no interface number 0 [ 1027.201445][ T2150] usb 2-1: config 8 interface 255 has no altsetting 0 [ 1027.216268][ T2150] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1027.232764][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.241643][ T2150] usb 2-1: Product: syz [ 1027.257304][ T2150] usb 2-1: Manufacturer: syz [ 1027.269934][ T2150] usb 2-1: SerialNumber: syz [ 1027.342081][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1027.516214][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1027.541821][ T9] usb 5-1: USB disconnect, device number 69 [ 1027.565877][ T43] usb 3-1: config 1 has no interface number 1 [ 1027.591387][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1027.626704][T15787] sg_write: data in/out 198/14 bytes for SCSI command 0x0-- guessing data in; [ 1027.626704][T15787] program syz.5.2656 not setting count and/or reply_len properly [ 1027.626913][ T43] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 144, changing to 7 [ 1027.662872][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1027.673210][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.681328][ T43] usb 3-1: Product: syz [ 1027.686165][ T43] usb 3-1: Manufacturer: syz [ 1027.690873][ T43] usb 3-1: SerialNumber: syz [ 1028.553649][ T43] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1028.634378][ T2150] catc 2-1:8.255: Can't set altsetting 1. [ 1028.652052][ T2150] catc 2-1:8.255: probe with driver catc failed with error -5 [ 1028.678604][ T43] usb 3-1: USB disconnect, device number 70 [ 1028.806718][ T2150] usb 2-1: USB disconnect, device number 78 [ 1029.946135][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.326711][T15809] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2662'. [ 1031.397247][T15817] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2664'. [ 1031.502254][ T5811] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1031.594553][ T30] audit: type=1400 audit(2000000010.600:453): avc: denied { mount } for pid=15823 comm="syz.1.2667" name="/" dev="pstore" ino=1697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1031.715609][ T5811] usb 5-1: Using ep0 maxpacket: 16 [ 1031.726581][ T5811] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1031.739534][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.748045][ T5811] usb 5-1: Product: syz [ 1031.755555][ T5811] usb 5-1: Manufacturer: syz [ 1031.760214][ T5811] usb 5-1: SerialNumber: syz [ 1031.766888][ T5811] usb 5-1: config 0 descriptor?? [ 1031.772198][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1031.783253][ T5811] as10x_usb: device has been detected [ 1031.788955][ T5811] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1031.803814][ T5811] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1031.817370][ T5811] as10x_usb: error during firmware upload part1 [ 1031.824622][ T5811] Registered device Sky IT Digital Key (green led) [ 1031.902060][ T5863] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1031.935391][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1031.958264][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.969650][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.991332][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1032.009343][T15807] random: crng reseeded on system resumption [ 1032.042117][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1032.095543][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.112214][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.147394][ T5863] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1032.224698][ T9] usb 6-1: config 0 descriptor?? [ 1032.237963][ T5811] usb 5-1: USB disconnect, device number 70 [ 1032.256155][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.276264][ T5811] Unregistered device Sky IT Digital Key (green led) [ 1032.278883][ T5811] as10x_usb: device has been disconnected [ 1032.307219][ T5863] usb 2-1: config 0 descriptor?? [ 1032.902374][ T43] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1033.073477][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1033.136169][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1033.222356][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1033.225722][ T9] usb 6-1: USB disconnect, device number 13 [ 1033.303043][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1033.380059][ T5863] usb 2-1: USB disconnect, device number 79 [ 1033.419419][ T43] usb 3-1: config index 0 descriptor too short (expected 51730, got 18) [ 1033.445445][ T43] usb 3-1: config 8 has an invalid interface number: 255 but max is 0 [ 1033.503251][ T43] usb 3-1: config 8 has no interface number 0 [ 1033.511215][ T43] usb 3-1: config 8 interface 255 has no altsetting 0 [ 1033.526512][T15841] netlink: 'syz.4.2671': attribute type 10 has an invalid length. [ 1033.541466][ T43] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1033.562261][T15841] batman_adv: batadv0: Adding interface: macvtap0 [ 1033.570214][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.579223][T15841] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.613270][ T43] usb 3-1: Product: syz [ 1033.618123][ T43] usb 3-1: Manufacturer: syz [ 1033.624231][ T43] usb 3-1: SerialNumber: syz [ 1033.632419][T15841] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 1034.145096][T15851] CIFS: VFS: Malformed UNC in devname [ 1035.793151][ T43] catc 3-1:8.255: Can't set altsetting 1. [ 1035.799164][ T43] catc 3-1:8.255: probe with driver catc failed with error -5 [ 1035.843077][ T43] usb 3-1: USB disconnect, device number 71 [ 1036.689365][ T30] audit: type=1400 audit(2000000015.690:454): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1037.706450][ T43] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1037.922217][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 1037.962832][ T43] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1037.981495][T15891] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1037.982048][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.056294][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1038.109388][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1038.122160][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.150727][ T43] usb 5-1: Product: syz [ 1038.150914][T15895] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ,6O>>Mv^ [ 1038.163302][ T43] usb 5-1: Manufacturer: syz [ 1038.174999][ T43] usb 5-1: SerialNumber: syz [ 1038.712580][ T5863] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1038.776344][ T43] usb 5-1: 0:2 : does not exist [ 1038.804263][T15906] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2690'. [ 1038.819504][ T43] usb 5-1: USB disconnect, device number 71 [ 1038.893369][ T5863] usb 4-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 1038.932892][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.961449][ T30] audit: type=1400 audit(2000000017.960:455): avc: denied { read open } for pid=15912 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1039.010563][ T5863] usb 4-1: config 0 descriptor?? [ 1039.050134][ T5863] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 1039.069044][ T30] audit: type=1400 audit(2000000017.960:456): avc: denied { getattr } for pid=15912 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1039.678644][ T30] audit: type=1400 audit(2000000018.190:457): avc: denied { read } for pid=15917 comm="syz.2.2692" dev="sockfs" ino=51821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1039.762093][ T5863] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 1039.790920][ T5863] pac7311 4-1:0.0: probe with driver pac7311 failed with error -71 [ 1039.821383][ T30] audit: type=1400 audit(2000000018.230:458): avc: denied { module_request } for pid=15917 comm="syz.2.2692" kmod="net-pf-2-proto-0-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1039.832296][ T5863] usb 4-1: USB disconnect, device number 78 [ 1039.902311][T14768] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1039.970796][ T30] audit: type=1400 audit(2000000018.540:459): avc: denied { write } for pid=15917 comm="syz.2.2692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1040.089008][T14768] usb 3-1: device descriptor read/64, error -71 [ 1040.219664][ T30] audit: type=1400 audit(2000000019.220:460): avc: denied { add_name } for pid=15905 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1040.283763][T15911] tipc: Started in network mode [ 1040.322606][ T30] audit: type=1400 audit(2000000019.220:461): avc: denied { create } for pid=15905 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1040.325671][T15911] tipc: Node identity 4, cluster identity 4711 [ 1040.345155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.348214][ T30] audit: type=1400 audit(2000000019.220:462): avc: denied { write } for pid=15905 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wlan2.link" dev="tmpfs" ino=9953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1040.383952][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.444013][T15911] tipc: Node number set to 4 [ 1040.497375][T15940] ufs: You didn't specify the type of your ufs filesystem [ 1040.497375][T15940] [ 1040.497375][T15940] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1040.497375][T15940] [ 1040.497375][T15940] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1040.529306][T15940] ufs: ufstype=old is supported read-only [ 1040.538191][T15940] ufs: ufs_fill_super(): bad magic number [ 1040.764727][ T9] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1040.803141][ T30] audit: type=1400 audit(2000000019.220:463): avc: denied { append } for pid=15905 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" dev="tmpfs" ino=9953 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1040.827396][ C0] vkms_vblank_simulate: vblank timer overrun [ 1040.833651][T14768] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1040.962089][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1040.989300][ T9] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1040.997814][T14768] usb 3-1: device descriptor read/64, error -71 [ 1041.020890][ T9] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1041.112237][T14768] usb usb3-port1: attempt power cycle [ 1041.134201][T15950] FAULT_INJECTION: forcing a failure. [ 1041.134201][T15950] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.206176][T15950] CPU: 1 UID: 0 PID: 15950 Comm: syz.5.2697 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 1041.206208][T15950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1041.206220][T15950] Call Trace: [ 1041.206226][T15950] [ 1041.206234][T15950] dump_stack_lvl+0x16c/0x1f0 [ 1041.206264][T15950] should_fail_ex+0x512/0x640 [ 1041.206289][T15950] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1041.206315][T15950] should_failslab+0xc2/0x120 [ 1041.206339][T15950] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1041.206360][T15950] ? mas_alloc_nodes+0x18b/0x8b0 [ 1041.206384][T15950] mas_alloc_nodes+0x18b/0x8b0 [ 1041.206411][T15950] mas_node_count_gfp+0x105/0x130 [ 1041.206433][T15950] mas_preallocate+0x53e/0xcd0 [ 1041.206460][T15950] ? __memcg_slab_post_alloc_hook+0x500/0x9c0 [ 1041.206487][T15950] ? __pfx_mas_preallocate+0x10/0x10 [ 1041.206523][T15950] ? anon_vma_name+0x75/0x100 [ 1041.206551][T15950] __split_vma+0x33b/0x1030 [ 1041.206575][T15950] ? __pfx___split_vma+0x10/0x10 [ 1041.206609][T15950] vms_gather_munmap_vmas+0x392/0x1310 [ 1041.206636][T15950] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1041.206659][T15950] ? mas_walk+0x6a6/0x910 [ 1041.206690][T15950] __mmap_region+0x314/0x27c0 [ 1041.206714][T15950] ? __pfx___mmap_region+0x10/0x10 [ 1041.206734][T15950] ? mark_held_locks+0x49/0x80 [ 1041.206765][T15950] ? rcu_is_watching+0x12/0xc0 [ 1041.206786][T15950] ? trace_sched_exit_tp+0xde/0x130 [ 1041.206811][T15950] ? __schedule+0x1181/0x5de0 [ 1041.206840][T15950] ? __lock_acquire+0x622/0x1c90 [ 1041.206900][T15950] ? __get_unmapped_area+0x23a/0x440 [ 1041.206932][T15950] mmap_region+0x1ab/0x3f0 [ 1041.206954][T15950] ? __get_unmapped_area+0x267/0x440 [ 1041.206983][T15950] do_mmap+0xd8e/0x11b0 [ 1041.207014][T15950] ? __pfx_do_mmap+0x10/0x10 [ 1041.207046][T15950] ? __pfx_down_write_killable+0x10/0x10 [ 1041.207077][T15950] vm_mmap_pgoff+0x281/0x450 [ 1041.207108][T15950] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1041.207135][T15950] ? __fget_files+0x20e/0x3c0 [ 1041.207167][T15950] ksys_mmap_pgoff+0x7d/0x5c0 [ 1041.207193][T15950] ? __pfx_ksys_write+0x10/0x10 [ 1041.207216][T15950] __x64_sys_mmap+0x125/0x190 [ 1041.207244][T15950] do_syscall_64+0xcd/0x4c0 [ 1041.207270][T15950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.207289][T15950] RIP: 0033:0x7f33fed8e969 [ 1041.207304][T15950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1041.207321][T15950] RSP: 002b:00007f33ffb66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1041.207340][T15950] RAX: ffffffffffffffda RBX: 00007f33fefb6080 RCX: 00007f33fed8e969 [ 1041.207352][T15950] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1041.207364][T15950] RBP: 00007f33ffb66090 R08: ffffffffffffffff R09: 0000000000000000 [ 1041.207376][T15950] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 1041.207387][T15950] R13: 0000000000000000 R14: 00007f33fefb6080 R15: 00007ffed610dee8 [ 1041.207413][T15950] [ 1041.871476][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1041.884754][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1041.925418][ T9] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1041.992136][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.000245][ T9] usb 5-1: Product: syz [ 1042.004720][ T9] usb 5-1: Manufacturer: syz [ 1042.044300][ T9] usb 5-1: SerialNumber: syz [ 1042.263053][T14768] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1042.282799][ T9] usb 5-1: config 0 descriptor?? [ 1042.336460][T14768] usb 3-1: device descriptor read/8, error -71 [ 1042.637535][T15929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2694'. [ 1042.643837][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 1042.656773][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1042.884442][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1042.884457][ T30] audit: type=1400 audit(2000000000.480:469): avc: denied { write } for pid=15928 comm="syz.4.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1042.910713][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.000609][T15973] bridge0: entered promiscuous mode [ 1043.042362][ T9] usb 5-1: USB disconnect, device number 72 [ 1043.067192][T15973] macvlan2: entered promiscuous mode [ 1043.703068][ T974] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1044.027958][ T974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.066887][T15989] netlink: 'syz.4.2706': attribute type 5 has an invalid length. [ 1044.177764][ T974] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1044.218201][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.342541][ T974] usb 4-1: config 0 descriptor?? [ 1044.470150][T15995] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1045.005650][ T974] usb 4-1: USB disconnect, device number 79 [ 1045.188562][T15999] hugetlbfs: Unknown parameter 'nrGs' [ 1045.197292][ T30] audit: type=1400 audit(2000000002.780:470): avc: denied { mount } for pid=15998 comm="syz.4.2708" name="/" dev="hugetlbfs" ino=50979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1045.420758][ T30] audit: type=1400 audit(2000000002.780:471): avc: denied { mounton } for pid=15998 comm="syz.4.2708" path="/549/file0" dev="hugetlbfs" ino=50979 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 1045.607047][ T30] audit: type=1400 audit(2000000002.780:472): avc: denied { remount } for pid=15998 comm="syz.4.2708" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1045.632142][ T30] audit: type=1400 audit(2000000002.870:473): avc: denied { listen } for pid=15998 comm="syz.4.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1045.652208][ T30] audit: type=1400 audit(2000000002.870:474): avc: denied { setopt } for pid=15998 comm="syz.4.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1045.887125][ T30] audit: type=1400 audit(2000000003.480:475): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1047.182064][ T2150] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1047.672165][T14768] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1047.702047][ T2150] usb 4-1: Using ep0 maxpacket: 16 [ 1047.709139][ T2150] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1047.718136][ T2150] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.728342][ T2150] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1047.739611][ T2150] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1047.749161][ T2150] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.757623][ T2150] usb 4-1: Product: syz [ 1047.762005][ T2150] usb 4-1: Manufacturer: syz [ 1047.766637][ T2150] usb 4-1: SerialNumber: syz [ 1048.205398][ T30] audit: type=1326 audit(2000000001.340:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fed8e969 code=0x7ffc0000 [ 1048.228790][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.242110][ T30] audit: type=1326 audit(2000000001.370:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fed8e969 code=0x7ffc0000 [ 1048.266863][T14768] usb 2-1: Using ep0 maxpacket: 16 [ 1048.273219][ T30] audit: type=1326 audit(2000000001.400:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f33fed8e969 code=0x7ffc0000 [ 1048.296426][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.479647][ T30] audit: type=1326 audit(2000000001.400:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fed8e969 code=0x7ffc0000 [ 1048.503281][T14768] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.514334][T14768] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1048.727498][ T30] audit: type=1326 audit(2000000001.400:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fed8e969 code=0x7ffc0000 [ 1048.764896][T14768] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1048.780071][T14768] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.790079][ T30] audit: type=1326 audit(2000000001.410:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f33fed8e969 code=0x7ffc0000 [ 1048.813370][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.825060][T14768] usb 2-1: config 0 descriptor?? [ 1048.836846][T14768] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input62 [ 1048.853303][ T30] audit: type=1326 audit(2000000001.410:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fed8e969 code=0x7ffc0000 [ 1048.876689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.889426][ T30] audit: type=1326 audit(2000000001.410:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fed8e969 code=0x7ffc0000 [ 1048.912817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.925077][ T30] audit: type=1326 audit(2000000001.440:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f33fed8e969 code=0x7ffc0000 [ 1048.950519][ T30] audit: type=1326 audit(2000000001.440:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16055 comm="syz.5.2721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33fed8e969 code=0x7ffc0000 [ 1049.014712][ T31] INFO: task syz.0.2314:14526 blocked for more than 144 seconds. [ 1049.029243][ T31] Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 [ 1049.151268][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1049.175873][ T31] task:syz.0.2314 state:D stack:28408 pid:14526 tgid:14525 ppid:5821 task_flags:0x400140 flags:0x00004004 [ 1049.217077][ T31] Call Trace: [ 1049.225899][ T31] [ 1049.228954][ T31] __schedule+0x116a/0x5de0 [ 1049.234841][ T31] ? kernel_text_address+0xe1/0x100 [ 1049.240214][ T31] ? __pfx___schedule+0x10/0x10 [ 1049.247632][ T31] ? find_held_lock+0x2b/0x80 [ 1049.255092][ T31] ? schedule+0x2d7/0x3a0 [ 1049.259652][ T31] schedule+0xe7/0x3a0 [ 1049.266952][ T31] schedule_preempt_disabled+0x13/0x30 [ 1049.274160][ T31] __mutex_lock+0x6c7/0xb90 [ 1049.278897][ T31] ? bdev_release+0x15a/0x6d0 [ 1049.313338][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1049.318570][ T31] ? find_held_lock+0x2b/0x80 [ 1049.327223][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1049.332953][ T31] ? bdev_release+0x15a/0x6d0 [ 1049.337890][ T31] bdev_release+0x15a/0x6d0 [ 1049.343111][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 1049.348528][ T31] blkdev_release+0x15/0x20 [ 1049.353633][ T31] __fput+0x3ff/0xb70 [ 1049.357738][ T31] task_work_run+0x150/0x240 [ 1049.362910][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1049.368222][ T31] ? __fput_deferred+0x118/0x370 [ 1049.373804][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1049.379318][ T31] do_syscall_64+0x3f6/0x4c0 [ 1049.384559][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.390670][ T31] RIP: 0033:0x7f9fd478e969 [ 1049.395653][ T31] RSP: 002b:00007f9fd55f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1049.405621][ T31] RAX: 0000000000000000 RBX: 00007f9fd49b5fa0 RCX: 00007f9fd478e969 [ 1049.421132][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1049.429546][ T31] RBP: 00007f9fd4810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1049.437803][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1049.446012][ T31] R13: 0000000000000000 R14: 00007f9fd49b5fa0 R15: 00007ffcdad53768 [ 1049.454044][ T31] [ 1049.463925][ T974] usb 2-1: USB disconnect, device number 80 [ 1049.469923][ C0] pxrc 2-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 1049.517921][ T31] [ 1049.517921][ T31] Showing all locks held in the system: [ 1049.526022][ T31] 1 lock held by khungtaskd/31: [ 1049.530936][ T31] #0: ffffffff8e3c27c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1049.555114][ T31] 6 locks held by kworker/0:2/974: [ 1049.560286][ T31] #0: ffff8880216bdd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1049.581408][ T31] #1: ffffc90003bd7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1049.592934][ T31] #2: ffff888029966198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1049.601895][ T31] #3: ffff888033f7f198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x920 [ 1049.611361][ T31] #4: ffff88805a082160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 1049.622216][ T31] #5: ffff88805a0832c0 (&dev->mutex#2){+.+.}-{4:4}, at: __input_unregister_device+0x24/0x470 [ 1049.632683][ T31] 6 locks held by kworker/1:2/2150: [ 1049.637981][ T31] #0: ffff8880216bdd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1049.648999][ T31] #1: ffffc90005797d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1049.674559][ T31] #2: ffff888029ab6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1049.690228][ T31] #3: ffff888022b8e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1049.705239][ T31] #4: ffff888141304160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1049.722022][ T31] #5: ffffffff9007cfa8 (register_mutex#7){+.+.}-{4:4}, at: usb_audio_probe+0x4e2/0x3c80 [ 1049.742319][ T31] 1 lock held by acpid/5170: [ 1049.746976][ T31] #0: ffffffff8e3cdd78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x280/0x3c0 [ 1049.757228][ T31] 2 locks held by getty/5574: [ 1049.761995][ T31] #0: ffff888031bae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1049.771898][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1049.782349][ T31] 1 lock held by udevd/5820: [ 1049.786943][ T31] #0: ffff888143386358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1049.796530][ T31] 4 locks held by udevd/5831: [ 1049.801256][ T31] #0: ffff888035cc7668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x12c0 [ 1049.819358][ T31] #1: ffff88802b2dfc88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x4d/0x240 [ 1049.831683][ T31] #2: ffff8880338f0788 (kn->active#18){++++}-{0:0}, at: kernfs_seq_start+0x71/0x240 [ 1049.855891][ T31] #3: ffff888022b8e198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1049.868573][ T2150] usb 4-1: 0:2 : does not exist [ 1049.882080][ T31] 3 locks held by udevd/6439: [ 1049.889050][ T31] #0: ffff88805a087118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_release+0x29e/0x420 [ 1049.909456][ T2150] usb 4-1: USB disconnect, device number 80 [ 1049.917644][ T31] #1: ffff88805a0832c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x46/0x290 [ 1049.940234][ T31] #2: ffffffff8e3cdd78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1049.950491][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.970714][ T31] 2 locks held by kworker/u8:14/7725: [ 1049.982045][ T31] 1 lock held by syz.0.2314/14526: [ 1050.001968][ T31] #0: ffff888143386358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 1050.011629][ T31] 1 lock held by syz.2.2722/16070: [ 1050.017099][ T31] [ 1050.034423][ T31] ============================================= [ 1050.034423][ T31] [ 1050.063500][ T31] NMI backtrace for cpu 0 [ 1050.063521][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 1050.063543][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1050.063553][ T31] Call Trace: [ 1050.063560][ T31] [ 1050.063567][ T31] dump_stack_lvl+0x116/0x1f0 [ 1050.063596][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1050.063623][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1050.063645][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1050.063669][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1050.063701][ T31] watchdog+0xf70/0x12c0 [ 1050.063723][ T31] ? __pfx_watchdog+0x10/0x10 [ 1050.063739][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1050.063761][ T31] ? __kthread_parkme+0x19e/0x250 [ 1050.063785][ T31] ? __pfx_watchdog+0x10/0x10 [ 1050.063801][ T31] kthread+0x3c2/0x780 [ 1050.063844][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.063871][ T31] ? rcu_is_watching+0x12/0xc0 [ 1050.063890][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.063920][ T31] ret_from_fork+0x5d4/0x6f0 [ 1050.063942][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.063976][ T31] ret_from_fork_asm+0x1a/0x30 [ 1050.064005][ T31] [ 1050.064031][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1050.188581][ C1] NMI backtrace for cpu 1 [ 1050.188599][ C1] CPU: 1 UID: 0 PID: 16070 Comm: syz.2.2722 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 1050.188617][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1050.188625][ C1] RIP: 0010:lock_is_held_type+0xf2/0x150 [ 1050.188649][ C1] Code: c0 45 31 ed 44 39 f0 41 0f 94 c5 48 c7 c7 fc eb bd 8d e8 f1 13 00 00 b8 ff ff ff ff 65 0f c1 05 ac a8 2f 08 83 f8 01 75 2d 9c <58> f6 c4 02 75 43 48 f7 04 24 00 02 00 00 74 01 fb 48 83 c4 08 44 [ 1050.188663][ C1] RSP: 0018:ffffc900034a71b0 EFLAGS: 00000046 [ 1050.188676][ C1] RAX: 0000000000000001 RBX: ffff888065345370 RCX: 0000000000000001 [ 1050.188685][ C1] RDX: 0000000000000000 RSI: ffffffff8dbdebfc RDI: ffffffff8bf52e00 [ 1050.188694][ C1] RBP: ffff8880672370b0 R08: 0000000000000005 R09: 0000000000000000 [ 1050.188702][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff888065344880 [ 1050.188711][ C1] R13: 0000000000000001 R14: 00000000ffffffff R15: 0000000000000000 [ 1050.188719][ C1] FS: 0000000000000000(0000) GS:ffff888124a74000(0000) knlGS:0000000000000000 [ 1050.188736][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1050.188745][ C1] CR2: 00007f15b277d2d8 CR3: 000000007c743000 CR4: 00000000003526f0 [ 1050.188755][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1050.188763][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1050.188771][ C1] Call Trace: [ 1050.188776][ C1] [ 1050.188784][ C1] lru_gen_del_folio.constprop.0+0x7de/0xab0 [ 1050.188805][ C1] ? __pfx_lru_gen_del_folio.constprop.0+0x10/0x10 [ 1050.188822][ C1] ? lruvec_memcg_debug.part.0+0x14/0x240 [ 1050.188838][ C1] __page_cache_release.part.0+0x719/0xb80 [ 1050.188855][ C1] ? page_cache_delete+0x337/0x530 [ 1050.188870][ C1] folios_put_refs+0x638/0x740 [ 1050.188888][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1050.188905][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 1050.188925][ C1] shmem_undo_range+0x58f/0x1150 [ 1050.188944][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 1050.188959][ C1] ? __lock_acquire+0x622/0x1c90 [ 1050.188994][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 1050.189010][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1050.189025][ C1] ? percpu_counter_add_batch+0xb8/0x1f0 [ 1050.189044][ C1] shmem_evict_inode+0x3a1/0xbe0 [ 1050.189060][ C1] ? psi_task_switch+0x201/0x8e0 [ 1050.189075][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1050.189090][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1050.189112][ C1] ? find_held_lock+0x2b/0x80 [ 1050.189126][ C1] ? evict+0x3a2/0x920 [ 1050.189145][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1050.189160][ C1] evict+0x3e3/0x920 [ 1050.189177][ C1] ? __pfx_evict+0x10/0x10 [ 1050.189200][ C1] ? iput+0x519/0x880 [ 1050.189219][ C1] iput+0x521/0x880 [ 1050.189235][ C1] ? __pfx_generic_delete_inode+0x10/0x10 [ 1050.189250][ C1] dentry_unlink_inode+0x29c/0x480 [ 1050.189267][ C1] __dentry_kill+0x1d0/0x600 [ 1050.189286][ C1] dput.part.0+0x4b1/0x9b0 [ 1050.189304][ C1] dput+0x1f/0x30 [ 1050.189321][ C1] __fput+0x51c/0xb70 [ 1050.189338][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1050.189353][ C1] task_work_run+0x150/0x240 [ 1050.189366][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1050.189378][ C1] ? kasan_check_range+0x15c/0x1b0 [ 1050.189399][ C1] do_exit+0xae2/0x2c70 [ 1050.189415][ C1] ? __pfx___might_resched+0x10/0x10 [ 1050.189433][ C1] ? __pfx_do_exit+0x10/0x10 [ 1050.189449][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1050.189461][ C1] ? find_held_lock+0x2b/0x80 [ 1050.189476][ C1] do_group_exit+0xd3/0x2a0 [ 1050.189493][ C1] get_signal+0x2673/0x26d0 [ 1050.189509][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1050.189526][ C1] ? __sched_setaffinity+0x173/0x280 [ 1050.189543][ C1] ? __pfx_get_signal+0x10/0x10 [ 1050.189556][ C1] ? do_futex+0x122/0x350 [ 1050.189576][ C1] arch_do_signal_or_restart+0x8f/0x7d0 [ 1050.189591][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1050.189607][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1050.189626][ C1] exit_to_user_mode_loop+0x84/0x110 [ 1050.189639][ C1] do_syscall_64+0x3f6/0x4c0 [ 1050.189657][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.189670][ C1] RIP: 0033:0x7f578278e969 [ 1050.189681][ C1] Code: Unable to access opcode bytes at 0x7f578278e93f. [ 1050.189687][ C1] RSP: 002b:00007f57835c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1050.189700][ C1] RAX: 0000000000010106 RBX: 00007f57829b6080 RCX: 00007f578278e969 [ 1050.189709][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 1050.189717][ C1] RBP: 00007f5782810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1050.189726][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1050.189734][ C1] R13: 0000000000000000 R14: 00007f57829b6080 R15: 00007fff86222008 [ 1050.189748][ C1] [ 1050.190929][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1050.662954][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 1050.674401][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1050.684446][ T31] Call Trace: [ 1050.687710][ T31] [ 1050.690629][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1050.695215][ T31] panic+0x71c/0x800 [ 1050.699106][ T31] ? __pfx_panic+0x10/0x10 [ 1050.703515][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1050.708878][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1050.714849][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1050.720209][ T31] ? watchdog+0xdda/0x12c0 [ 1050.724616][ T31] ? watchdog+0xdcd/0x12c0 [ 1050.729021][ T31] watchdog+0xdeb/0x12c0 [ 1050.733268][ T31] ? __pfx_watchdog+0x10/0x10 [ 1050.737935][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1050.743125][ T31] ? __kthread_parkme+0x19e/0x250 [ 1050.748151][ T31] ? __pfx_watchdog+0x10/0x10 [ 1050.752814][ T31] kthread+0x3c2/0x780 [ 1050.756879][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.761462][ T31] ? rcu_is_watching+0x12/0xc0 [ 1050.766315][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.770898][ T31] ret_from_fork+0x5d4/0x6f0 [ 1050.775485][ T31] ? __pfx_kthread+0x10/0x10 [ 1050.780068][ T31] ret_from_fork_asm+0x1a/0x30 [ 1050.784834][ T31] [ 1050.788103][ T31] Kernel Offset: disabled [ 1050.792409][ T31] Rebooting in 86400 seconds..