last executing test programs: 25m37.117722415s ago: executing program 0 (id=1456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000300000614000780080011400000000805001500000000000500010006000000050005000a0000f704000400000000000900"], 0x60}, 0x1, 0x0, 0xffffff9e}, 0x4004080) 25m36.958689958s ago: executing program 0 (id=1458): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101802, 0x0) read(r0, &(0x7f00000019c0)=""/4097, 0x1001) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r1, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) (async) pread64(r1, &(0x7f0000019180)=""/102349, 0x18fcd, 0x80002) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) (async) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x1400, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) (async) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) epoll_create(0x7) sched_setaffinity(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) r6 = socket(0x3c, 0xb, 0x92) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000480)=""/67) (async) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000480)=""/67) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0101390000e69dd6f5ff", @ANYRES32=r10, @ANYBLOB="08002a000a0000001c002b"], 0x40}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0101390000e69dd6f5ff", @ANYRES32=r10, @ANYBLOB="08002a000a0000001c002b"], 0x40}, 0x1, 0x0, 0x0, 0x2004c015}, 0x810) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="48007600a3dd27e0e317ae53773fccc704ed9ac1156a1fc8fc5ee90495e4a26392f491458af18dcece2917607a58e4909ec4988081c40439b99d7e573bc16aad5528c93082a66c505d7c1b85ea972e72b14b3c96c11837793c0b3a7c9a62227a0b40a18b5c61e300cbbcb0348022ecf5e9d5f7ed1dac8f9d86cb215377265e0a159baf445ffc4fce4d5a07", @ANYRES16, @ANYBLOB="010025bd7000ffdbdf251e00000034002f800c0002000202aaaaaaaaaaaa080001000000000008000100040000000c0002000203aaaaaaaaaaaa0800010001800000"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x91) 25m36.508069941s ago: executing program 0 (id=1461): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 25m36.457259667s ago: executing program 0 (id=1463): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaae0180c20000000800490000240011476610329078190300000000000000890708e1000001860600"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0) semop(0x0, &(0x7f0000000000)=[{0x0, 0x5, 0x800}, {0x1, 0xffff, 0x1000}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x64}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000002000000000fcffffff850000004f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000170000009500000000000000eadb2dab4d8fa850721034f8b4947f88e95c41e0c72d0d4f897877777e6924bd74"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 25m33.650199944s ago: executing program 0 (id=1471): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x3}, {0xd, 0x2, 0x26, '\x00', 0xfc}, {0x5, 0xef, 0x8d, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0xfc, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x2, '\x00', 0x3}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x9, 0xdb, 0x1, '\x00', 0xff}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0xb, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x3, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcd}, {0x6c, 0x3f, 0x0, '\x00', 0x3}, {0x6e, 0x4, 0x1, '\x00', 0xb}, {0x7, 0x2, 0x8, '\x00', 0x9}, {0x13, 0x7}, {0x1, 0x6, 0x9, '\x00', 0x2}, {0x8, 0x6, 0x1, '\x00', 0x49}, {0xae, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0xbd, 0x9, 0x54, '\x00', 0x9}]}}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="fc89049533e2818bab6dff1a6afacc217ae23abd8a240d0e6a2cd4f700b7cd82971d5d2c4441a698e4b020a0d244e5", 0x2f}], 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426bd7000fedbdf2502142000050000081400000008000200800000ff08000d000400000008000200e00004020c000c400000000000000006"], 0x40}}, 0x0) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xca67, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x208, 0x1, 0x2, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0xcc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_TUPLE={0xb4, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xb9a00000}]}, 0x208}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (rerun: 32) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioperm(0x3, 0x4, 0xe82cf79) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) nanosleep(&(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000880)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 25m33.519387561s ago: executing program 0 (id=1472): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f00000001c0)=')\x00', 0xc4600, &(0x7f0000000240)={@align=0x8000, {0x3, 0x4, 0x10, 0x3}}, 0x2, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xfffffffa}) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000500)={0x0, 0xf7ffffff, 0x10000, 0x2, 0x0, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012020b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) close(0x3) syz_open_procfs$namespace(0x0, &(0x7f00000013c0)='ns/mnt\x00') ioctl$sock_SIOCBRDELBR(r9, 0x89a1, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r8, 0x40384708, &(0x7f0000000040)={0x32e3, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x2, r10, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r11 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newchain={0x1134, 0x64, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff1}, {0xc, 0x9}, {0x8, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffff262}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}, @filter_kind_options=@f_basic={{0xa}, {0x10cc, 0x2, [@TCA_BASIC_EMATCHES={0x1e8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1b4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x7fff, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x48, 0x2}, {0x3, 0x6, 0x3}}}]}}, @TCF_EM_CONTAINER={0x104, 0x3, 0x0, 0x0, {{0x7f, 0x0, 0x9}, "50a0b71d6723043ef1e4ce1eb76b4df13b7024b8957190cd4751c6df2f0917b7e21fac95772652a177045c884b85756f41663e38d76ea90d83541f37743b0ebaa36103e5ea8663b0e1f3a345a7fa476086ce2cdcee8e69d2cb792df1cc7e040f9795b1cca870a31cce97880808e1093988069d81f55c33094dcd95d5061e7690f7808f4221737563cc7dd03b60073cf6f52a6f46d1722494983dd1b930c60dd75a0bc7ac1207a807d0e5652e654ffe628258562eeeb25ffc9e7d15a16307556d8e94a840b57198f2ad8933a56b58354ce678dfb96b22fa61ab725070cc7cb5129e969781390cf68be34f2feaa7768cee8f750b5f34a619dc"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0xffff}, {0x1, 0x3, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x5}, {0xd, 0x6, 0x2, "2afcc60cd741"}}}, @TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0xa, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="55d69d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="28d8c79fb1ecbae2c0", @TCF_META_TYPE_VAR='c', @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="fa97535109fd760f60", @TCF_META_TYPE_VAR="ac1b99f40b2f07865c", @TCF_META_TYPE_VAR="c691fad4ce76154869"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="36f92b26f8aaf4"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xab, 0x6, 0x78624aea, 0x8, 0x2, 0x1, 0x4, 0x80000, 0x800, 0x502, 0x8361, 0x5d4, 0x8, 0x6, 0x0, 0x3, 0x1ff, 0xfffff001, 0x6, 0x26eb, 0x0, 0xa, 0x7, 0xb8, 0xd23b, 0x8, 0xa36b, 0x331, 0x84b4, 0x400, 0x5, 0x7, 0xc1, 0x9, 0x6, 0x2, 0x50000, 0xff, 0x9, 0x15c, 0xb, 0x3, 0x5, 0x200, 0x7f, 0xd, 0x1, 0x40, 0x2, 0x8, 0x3ff, 0x8000, 0x8, 0x3, 0x7, 0x7, 0xf, 0x4, 0x8, 0x6000, 0x10001, 0x5, 0xffffffff, 0x0, 0x80000001, 0x200, 0x27, 0x5, 0x2, 0x0, 0x9, 0x7, 0xfffffff8, 0x5a3, 0xffff, 0x3, 0x3, 0x0, 0x6, 0x0, 0xbbe, 0x7, 0x4, 0x0, 0xf85, 0x7, 0x5, 0x4, 0xc0db, 0xb, 0x0, 0xe2, 0x4, 0x7, 0xb, 0xfff, 0xffffffff, 0x1, 0xce, 0x0, 0x9, 0x8, 0x516, 0x40, 0x800000, 0x8, 0x3fb6f6f, 0x9, 0x2, 0x9, 0x7, 0xf, 0x0, 0x4, 0x7, 0x6, 0xffffffff, 0x7, 0x2, 0x8, 0x81, 0x7ff, 0x1ff, 0x3, 0x3808, 0x4, 0x1, 0x8, 0x7fff, 0x9, 0x80000001, 0x7f, 0x5, 0x635, 0x401, 0xa3fa, 0x3, 0x2ab8000, 0x9, 0x3d, 0xffff, 0x3, 0x2, 0xfffffeff, 0x60, 0xf2, 0x6, 0x5e6c5969, 0x5, 0x76, 0xffffffff, 0x4, 0x2, 0x7, 0x4, 0x2d66b915, 0x222537bd, 0x3, 0x10, 0x9, 0x6, 0x1, 0xe, 0x10df, 0x3, 0xb9, 0x8, 0x7, 0x10001, 0x8000, 0x4, 0x9, 0x200, 0x2, 0x9, 0xb, 0x8, 0x1, 0x80, 0x8, 0xa, 0x4, 0x3, 0x3, 0x8, 0x6, 0x4, 0x3, 0x0, 0x7, 0x7fffffff, 0x3, 0x2, 0x1, 0x5d7, 0x9, 0x6, 0xd, 0x8, 0x9, 0x1, 0x100, 0x8, 0xffffffff, 0x7, 0x7, 0x1000, 0x6, 0x9, 0x9, 0x4, 0x9826, 0x7, 0x7, 0x36, 0x2, 0x1, 0x5, 0x9, 0x0, 0x9, 0x4, 0x5, 0x7fff, 0x3, 0x3, 0xfffffff8, 0x5, 0x8, 0x4, 0x80000000, 0x1, 0x3, 0x1, 0xffffffff, 0x101, 0x4, 0x1, 0x5, 0x0, 0x620, 0x2, 0x3, 0xfffffc01, 0x5, 0x2, 0x2, 0xffffffff, 0x0, 0x150, 0x4, 0x3, 0x6, 0xfffffffd, 0xa, 0x401]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5394}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x8, 0x5, 0x6, {0x2, 0x0, 0x7, 0x4, 0x7e8, 0xdead}, {0xff, 0x1, 0x8, 0x5, 0x5, 0x223}, 0x8, 0x1, 0x1}}]}, @TCA_BASIC_POLICE={0x80c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x9d, 0x1, 0xffffffff, 0xffffffff, 0x2, 0x0, 0x1, 0x3, 0xe, 0x4, 0x0, 0x5, 0xffffffff, 0x0, 0x9, 0x8, 0x4, 0x401, 0x3, 0x2, 0x9, 0xbc74, 0x4, 0x10, 0x80000000, 0xfffff000, 0x7fffffff, 0xc8c, 0x6, 0x7, 0x401, 0x5, 0x7, 0x9, 0xffffff00, 0x9, 0x1, 0x8, 0x9, 0x2, 0x3, 0x2, 0x9, 0x9, 0x6, 0xfff, 0x4, 0x8, 0x6, 0x3ff, 0xf, 0xf, 0x8, 0x10, 0x6, 0xf, 0x10, 0x9, 0x0, 0x6, 0x0, 0x100, 0xb, 0xfffffffc, 0xfffeffff, 0x4, 0x49643b0c, 0x5, 0x101, 0x40, 0x9, 0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x4, 0x7, 0xf, 0x0, 0x100, 0xe, 0x5a, 0x1, 0x7f, 0x8, 0x5, 0x1, 0x10001, 0x6, 0x3, 0x7fff, 0x7d5c, 0xb0, 0x6, 0x55f, 0x6, 0x7, 0x7, 0xd, 0x4, 0x7f, 0x0, 0x1, 0x8a0, 0x7ff, 0x12a, 0xd3, 0xfffffff8, 0x9, 0x7c01, 0x6, 0x7, 0x1, 0x8, 0x0, 0x5cc496bc, 0xccda, 0x7fffffff, 0x200, 0x7, 0xc, 0xffffffff, 0xd4, 0x24, 0x1, 0x1, 0x4f, 0x401, 0x8, 0xffffff61, 0x1000000, 0x4a4, 0x6, 0x400, 0x2, 0xffffffff, 0x3, 0x3, 0x6, 0x8, 0x2, 0x0, 0x800, 0xffffffff, 0x7, 0x9, 0x2, 0x8, 0x2, 0x2, 0x3, 0x2, 0x69, 0x4, 0x8001, 0x5, 0x1, 0xffff, 0x1, 0x2, 0x6, 0x1000, 0x7, 0x9, 0x3, 0x9, 0x5, 0xffff, 0x7, 0x6, 0x7, 0x200, 0x2, 0x2314, 0x8000, 0x9, 0x2, 0x3, 0x8, 0x32, 0x9, 0x6, 0x8001, 0x0, 0x6, 0x5, 0x9, 0x21f7800, 0x2, 0x4, 0xd, 0x50000000, 0x5, 0x4720ed76, 0x40, 0x0, 0x100, 0x8, 0xfffffffd, 0x9b05, 0x7ff, 0xb, 0x9, 0x7, 0xffff, 0x58b3, 0x5, 0x8baf, 0x9, 0x3, 0x5, 0x80000001, 0x0, 0xb, 0x3, 0xac, 0x562, 0xd1a, 0x10000000, 0x6, 0x1, 0x1, 0x7fffffff, 0x9, 0x7, 0x1, 0x1b, 0x4, 0x8, 0x9, 0x200, 0x0, 0xbd, 0x8, 0x338ba2ce, 0x5, 0xfff, 0x100, 0xbe, 0x1, 0x3, 0x80000000, 0x6, 0x8, 0x1f780000, 0x1000, 0x3, 0x5, 0x60, 0x9, 0x3, 0x7fff, 0xb3, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xadc, 0x6, 0xe2, 0x57, 0xe, 0x9, 0x9, 0xffff, 0xfffffff3, 0x5, 0x6, 0xfaa, 0x1, 0x2, 0x2, 0xff, 0x99e8, 0x6, 0x80000000, 0x2, 0x2, 0x3, 0xe4, 0x2, 0x5, 0x1ff, 0x60, 0x4, 0x4, 0x9, 0x1, 0xffff, 0x5877, 0x4, 0xffffff01, 0xfffffffc, 0x9, 0x4, 0x4, 0x966, 0xfffffffe, 0x1ff, 0x6, 0x6, 0x3, 0x1ff, 0x3ff, 0x6, 0x40, 0x9, 0x10000, 0x0, 0x9, 0x2, 0x4, 0x7, 0x9fc, 0xb, 0x58, 0x1, 0x5, 0x9, 0x7, 0x0, 0x9, 0x6, 0x9, 0x9, 0x6, 0x8, 0x4, 0xf2b, 0x800, 0x800, 0xfffffffa, 0x2, 0x5, 0xff, 0xc, 0xfffff001, 0x7, 0xfffffc01, 0x4, 0x1, 0xd, 0x7, 0x8, 0x8, 0x6, 0x400, 0x5d26, 0x9, 0x4, 0x9, 0x7, 0x6, 0x7, 0x9b9, 0x3, 0x0, 0x4, 0x8000, 0x5, 0x220, 0x10000, 0x0, 0xfffffff7, 0x2, 0x3, 0x2, 0x3ca6422f, 0x96, 0x0, 0x9, 0xc844, 0xc2, 0x3, 0x80000001, 0x9, 0x1, 0x6, 0xf, 0x3, 0x7, 0x8, 0x37, 0x9, 0x5, 0x1, 0x1, 0x7fffffff, 0x8, 0x5, 0x3fffc000, 0x6, 0xcc8b, 0x4, 0x1, 0x5, 0x277ca403, 0x4, 0xb3, 0x6, 0x9, 0x200, 0x2, 0x7f, 0x6, 0x45f4, 0xd86, 0x40, 0x2, 0x7, 0x1, 0xf, 0x4, 0x2, 0x200, 0x6, 0x1, 0x9, 0x7397, 0xf, 0x4, 0x8, 0x8, 0x7, 0x7f, 0x6, 0x7, 0xfff, 0x6, 0x80000000, 0x4040, 0x61, 0xa, 0x2, 0x8, 0x2, 0x3, 0x9, 0x1, 0x0, 0x5, 0x7, 0x3, 0x0, 0x5, 0x0, 0xfffffffc, 0x5, 0xf, 0xf, 0x100, 0x5, 0x2, 0x40, 0x0, 0x1ffc0000, 0x14, 0x6, 0x1000, 0x8, 0x6, 0x3, 0x9, 0x4ab, 0xb, 0x8, 0x400, 0x8, 0x8001, 0x4, 0x4f5, 0x0, 0x7, 0x9, 0x1, 0x8, 0x2, 0x3, 0x2, 0x2, 0x4, 0x8, 0x9, 0x6, 0x4, 0x3, 0x1, 0x10001, 0xffff, 0x9, 0x3, 0x3, 0x1, 0xcbc, 0x1, 0x1, 0x10000000, 0x3, 0x10001, 0x4, 0xb0, 0x5, 0x1, 0x1, 0x5, 0x701, 0x3, 0x1, 0x2, 0x400, 0x80, 0x2, 0x1]}]}, @TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x1ff}, {0x4, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xccb4, 0x1, 0x401}, {0x29ef, 0x6, 0xea4a, 0x0, 0x4, 0x2}}}]}]}, @TCA_BASIC_EMATCHES={0x23c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0xffff, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}]}, @TCA_EMATCH_TREE_LIST={0x1c4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14c, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x23b6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xfa, 0x5, "fd3e7a09459310f9a419e5625bccc3c4bf79b2cb70e31fb11aaaff051037d2fc3fb219fd02bb047806fecffa63c39f85597fda6536e8d0153e1013a604629ff20426359e5998b1674605091d1ce02252d8f6e0970c95e149a7cbadad1c221f5f61df659a81bbacb5fefb7f672ac8ffe91f35664dd6c5774e7e6635280c1981df216dc53848d9beaae97a83bb55f330f1777a19c714e0fc0872e5b20d7db36a62262bb6c1d71cac0fc6d5cff1a5f57f36655f74e743c95e885b53db355e2facf436fcddf5e7965b75ab9c2a2a106c21984bdb97456812e61dec6976ed343360e0dd664fc99d0bb964173b536ff1e6b0a98701cb9bf1f3"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0xfffc}, {0xe, 0x0, 0x3, 0x2, 0x7, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x0, 0x2, 0xb}, {0x101, 0x7, 0x2, "b7269adac67a42"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x6344}, {0x0, 0x5}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7ff, 0x2, 0xb}, {0xb12, 0x8, 0x2, "3787371f9392a956"}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xfe01, 0x2, 0x4}, {0x4, 0xa, 0x1, "bdc582d033b84a062fd2"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfffc, 0x1, 0x7f}, {0xfffffffb, 0xffff8001, 0x3, 0x0, 0x9, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}]}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x1134}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r11, 0x2219, 0x7723, 0x16, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb5, 0x1, 0x0, 0x9, 0x5, 0x1d, "2dddb595e966c3d1201b7778344303eb95cd74c35543f0638eb02ca79a7b693193d124da9746f2f751190627ea26a89b9fe41fbe00583f37a52c6b2d6b454ead", "71fee4e3a4047d0e9f33d07d2f79ead91d842cfb3ec1fb4f5f36969759e5ba687f27a0e88b1cc391417836111e247eb3a560fc0334c66eb046c662b0ff070bb7", "0f8816ee9467b7db77b2ad1c8245b690b2b71a1252507c64dee0d4e8e323f665", [0xfffffffffffffff9, 0x8cd7]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) io_uring_enter(r3, 0x1, 0xeed, 0x1, 0x0, 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500), 0x0, 0x0) 25m18.122889934s ago: executing program 32 (id=1472): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {}, {0xe}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f00000001c0)=')\x00', 0xc4600, &(0x7f0000000240)={@align=0x8000, {0x3, 0x4, 0x10, 0x3}}, 0x2, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0xfffffffa}) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000500)={0x0, 0xf7ffffff, 0x10000, 0x2, 0x0, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000001c0012020b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) close(0x3) syz_open_procfs$namespace(0x0, &(0x7f00000013c0)='ns/mnt\x00') ioctl$sock_SIOCBRDELBR(r9, 0x89a1, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r8, 0x40384708, &(0x7f0000000040)={0x32e3, 0x40000001, 0x2000004, 0x7, 0x1a, "3e180000650000000000000000cb00002000"}) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x2, r10, 0x0, 0x0, 0x0, 0x2, 0x0, {0x3}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r11 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x1, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=@newchain={0x1134, 0x64, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff1}, {0xc, 0x9}, {0x8, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffff262}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}, @filter_kind_options=@f_basic={{0xa}, {0x10cc, 0x2, [@TCA_BASIC_EMATCHES={0x1e8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1b4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x7fff, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x48, 0x2}, {0x3, 0x6, 0x3}}}]}}, @TCF_EM_CONTAINER={0x104, 0x3, 0x0, 0x0, {{0x7f, 0x0, 0x9}, "50a0b71d6723043ef1e4ce1eb76b4df13b7024b8957190cd4751c6df2f0917b7e21fac95772652a177045c884b85756f41663e38d76ea90d83541f37743b0ebaa36103e5ea8663b0e1f3a345a7fa476086ce2cdcee8e69d2cb792df1cc7e040f9795b1cca870a31cce97880808e1093988069d81f55c33094dcd95d5061e7690f7808f4221737563cc7dd03b60073cf6f52a6f46d1722494983dd1b930c60dd75a0bc7ac1207a807d0e5652e654ffe628258562eeeb25ffc9e7d15a16307556d8e94a840b57198f2ad8933a56b58354ce678dfb96b22fa61ab725070cc7cb5129e969781390cf68be34f2feaa7768cee8f750b5f34a619dc"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0xffff}, {0x1, 0x3, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x6, 0x2, 0x5}, {0xd, 0x6, 0x2, "2afcc60cd741"}}}, @TCF_EM_META={0x6c, 0x1, 0x0, 0x0, {{0xa, 0x4, 0x6}, [@TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="55d69d", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_RVALUE={0x31, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="28d8c79fb1ecbae2c0", @TCF_META_TYPE_VAR='c', @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="fa97535109fd760f60", @TCF_META_TYPE_VAR="ac1b99f40b2f07865c", @TCF_META_TYPE_VAR="c691fad4ce76154869"]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0xb, 0x3, [@TCF_META_TYPE_VAR="36f92b26f8aaf4"]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xab, 0x6, 0x78624aea, 0x8, 0x2, 0x1, 0x4, 0x80000, 0x800, 0x502, 0x8361, 0x5d4, 0x8, 0x6, 0x0, 0x3, 0x1ff, 0xfffff001, 0x6, 0x26eb, 0x0, 0xa, 0x7, 0xb8, 0xd23b, 0x8, 0xa36b, 0x331, 0x84b4, 0x400, 0x5, 0x7, 0xc1, 0x9, 0x6, 0x2, 0x50000, 0xff, 0x9, 0x15c, 0xb, 0x3, 0x5, 0x200, 0x7f, 0xd, 0x1, 0x40, 0x2, 0x8, 0x3ff, 0x8000, 0x8, 0x3, 0x7, 0x7, 0xf, 0x4, 0x8, 0x6000, 0x10001, 0x5, 0xffffffff, 0x0, 0x80000001, 0x200, 0x27, 0x5, 0x2, 0x0, 0x9, 0x7, 0xfffffff8, 0x5a3, 0xffff, 0x3, 0x3, 0x0, 0x6, 0x0, 0xbbe, 0x7, 0x4, 0x0, 0xf85, 0x7, 0x5, 0x4, 0xc0db, 0xb, 0x0, 0xe2, 0x4, 0x7, 0xb, 0xfff, 0xffffffff, 0x1, 0xce, 0x0, 0x9, 0x8, 0x516, 0x40, 0x800000, 0x8, 0x3fb6f6f, 0x9, 0x2, 0x9, 0x7, 0xf, 0x0, 0x4, 0x7, 0x6, 0xffffffff, 0x7, 0x2, 0x8, 0x81, 0x7ff, 0x1ff, 0x3, 0x3808, 0x4, 0x1, 0x8, 0x7fff, 0x9, 0x80000001, 0x7f, 0x5, 0x635, 0x401, 0xa3fa, 0x3, 0x2ab8000, 0x9, 0x3d, 0xffff, 0x3, 0x2, 0xfffffeff, 0x60, 0xf2, 0x6, 0x5e6c5969, 0x5, 0x76, 0xffffffff, 0x4, 0x2, 0x7, 0x4, 0x2d66b915, 0x222537bd, 0x3, 0x10, 0x9, 0x6, 0x1, 0xe, 0x10df, 0x3, 0xb9, 0x8, 0x7, 0x10001, 0x8000, 0x4, 0x9, 0x200, 0x2, 0x9, 0xb, 0x8, 0x1, 0x80, 0x8, 0xa, 0x4, 0x3, 0x3, 0x8, 0x6, 0x4, 0x3, 0x0, 0x7, 0x7fffffff, 0x3, 0x2, 0x1, 0x5d7, 0x9, 0x6, 0xd, 0x8, 0x9, 0x1, 0x100, 0x8, 0xffffffff, 0x7, 0x7, 0x1000, 0x6, 0x9, 0x9, 0x4, 0x9826, 0x7, 0x7, 0x36, 0x2, 0x1, 0x5, 0x9, 0x0, 0x9, 0x4, 0x5, 0x7fff, 0x3, 0x3, 0xfffffff8, 0x5, 0x8, 0x4, 0x80000000, 0x1, 0x3, 0x1, 0xffffffff, 0x101, 0x4, 0x1, 0x5, 0x0, 0x620, 0x2, 0x3, 0xfffffc01, 0x5, 0x2, 0x2, 0xffffffff, 0x0, 0x150, 0x4, 0x3, 0x6, 0xfffffffd, 0xa, 0x401]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5394}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x8, 0x5, 0x6, {0x2, 0x0, 0x7, 0x4, 0x7e8, 0xdead}, {0xff, 0x1, 0x8, 0x5, 0x5, 0x223}, 0x8, 0x1, 0x1}}]}, @TCA_BASIC_POLICE={0x80c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x9d, 0x1, 0xffffffff, 0xffffffff, 0x2, 0x0, 0x1, 0x3, 0xe, 0x4, 0x0, 0x5, 0xffffffff, 0x0, 0x9, 0x8, 0x4, 0x401, 0x3, 0x2, 0x9, 0xbc74, 0x4, 0x10, 0x80000000, 0xfffff000, 0x7fffffff, 0xc8c, 0x6, 0x7, 0x401, 0x5, 0x7, 0x9, 0xffffff00, 0x9, 0x1, 0x8, 0x9, 0x2, 0x3, 0x2, 0x9, 0x9, 0x6, 0xfff, 0x4, 0x8, 0x6, 0x3ff, 0xf, 0xf, 0x8, 0x10, 0x6, 0xf, 0x10, 0x9, 0x0, 0x6, 0x0, 0x100, 0xb, 0xfffffffc, 0xfffeffff, 0x4, 0x49643b0c, 0x5, 0x101, 0x40, 0x9, 0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x4, 0x7, 0xf, 0x0, 0x100, 0xe, 0x5a, 0x1, 0x7f, 0x8, 0x5, 0x1, 0x10001, 0x6, 0x3, 0x7fff, 0x7d5c, 0xb0, 0x6, 0x55f, 0x6, 0x7, 0x7, 0xd, 0x4, 0x7f, 0x0, 0x1, 0x8a0, 0x7ff, 0x12a, 0xd3, 0xfffffff8, 0x9, 0x7c01, 0x6, 0x7, 0x1, 0x8, 0x0, 0x5cc496bc, 0xccda, 0x7fffffff, 0x200, 0x7, 0xc, 0xffffffff, 0xd4, 0x24, 0x1, 0x1, 0x4f, 0x401, 0x8, 0xffffff61, 0x1000000, 0x4a4, 0x6, 0x400, 0x2, 0xffffffff, 0x3, 0x3, 0x6, 0x8, 0x2, 0x0, 0x800, 0xffffffff, 0x7, 0x9, 0x2, 0x8, 0x2, 0x2, 0x3, 0x2, 0x69, 0x4, 0x8001, 0x5, 0x1, 0xffff, 0x1, 0x2, 0x6, 0x1000, 0x7, 0x9, 0x3, 0x9, 0x5, 0xffff, 0x7, 0x6, 0x7, 0x200, 0x2, 0x2314, 0x8000, 0x9, 0x2, 0x3, 0x8, 0x32, 0x9, 0x6, 0x8001, 0x0, 0x6, 0x5, 0x9, 0x21f7800, 0x2, 0x4, 0xd, 0x50000000, 0x5, 0x4720ed76, 0x40, 0x0, 0x100, 0x8, 0xfffffffd, 0x9b05, 0x7ff, 0xb, 0x9, 0x7, 0xffff, 0x58b3, 0x5, 0x8baf, 0x9, 0x3, 0x5, 0x80000001, 0x0, 0xb, 0x3, 0xac, 0x562, 0xd1a, 0x10000000, 0x6, 0x1, 0x1, 0x7fffffff, 0x9, 0x7, 0x1, 0x1b, 0x4, 0x8, 0x9, 0x200, 0x0, 0xbd, 0x8, 0x338ba2ce, 0x5, 0xfff, 0x100, 0xbe, 0x1, 0x3, 0x80000000, 0x6, 0x8, 0x1f780000, 0x1000, 0x3, 0x5, 0x60, 0x9, 0x3, 0x7fff, 0xb3, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xadc, 0x6, 0xe2, 0x57, 0xe, 0x9, 0x9, 0xffff, 0xfffffff3, 0x5, 0x6, 0xfaa, 0x1, 0x2, 0x2, 0xff, 0x99e8, 0x6, 0x80000000, 0x2, 0x2, 0x3, 0xe4, 0x2, 0x5, 0x1ff, 0x60, 0x4, 0x4, 0x9, 0x1, 0xffff, 0x5877, 0x4, 0xffffff01, 0xfffffffc, 0x9, 0x4, 0x4, 0x966, 0xfffffffe, 0x1ff, 0x6, 0x6, 0x3, 0x1ff, 0x3ff, 0x6, 0x40, 0x9, 0x10000, 0x0, 0x9, 0x2, 0x4, 0x7, 0x9fc, 0xb, 0x58, 0x1, 0x5, 0x9, 0x7, 0x0, 0x9, 0x6, 0x9, 0x9, 0x6, 0x8, 0x4, 0xf2b, 0x800, 0x800, 0xfffffffa, 0x2, 0x5, 0xff, 0xc, 0xfffff001, 0x7, 0xfffffc01, 0x4, 0x1, 0xd, 0x7, 0x8, 0x8, 0x6, 0x400, 0x5d26, 0x9, 0x4, 0x9, 0x7, 0x6, 0x7, 0x9b9, 0x3, 0x0, 0x4, 0x8000, 0x5, 0x220, 0x10000, 0x0, 0xfffffff7, 0x2, 0x3, 0x2, 0x3ca6422f, 0x96, 0x0, 0x9, 0xc844, 0xc2, 0x3, 0x80000001, 0x9, 0x1, 0x6, 0xf, 0x3, 0x7, 0x8, 0x37, 0x9, 0x5, 0x1, 0x1, 0x7fffffff, 0x8, 0x5, 0x3fffc000, 0x6, 0xcc8b, 0x4, 0x1, 0x5, 0x277ca403, 0x4, 0xb3, 0x6, 0x9, 0x200, 0x2, 0x7f, 0x6, 0x45f4, 0xd86, 0x40, 0x2, 0x7, 0x1, 0xf, 0x4, 0x2, 0x200, 0x6, 0x1, 0x9, 0x7397, 0xf, 0x4, 0x8, 0x8, 0x7, 0x7f, 0x6, 0x7, 0xfff, 0x6, 0x80000000, 0x4040, 0x61, 0xa, 0x2, 0x8, 0x2, 0x3, 0x9, 0x1, 0x0, 0x5, 0x7, 0x3, 0x0, 0x5, 0x0, 0xfffffffc, 0x5, 0xf, 0xf, 0x100, 0x5, 0x2, 0x40, 0x0, 0x1ffc0000, 0x14, 0x6, 0x1000, 0x8, 0x6, 0x3, 0x9, 0x4ab, 0xb, 0x8, 0x400, 0x8, 0x8001, 0x4, 0x4f5, 0x0, 0x7, 0x9, 0x1, 0x8, 0x2, 0x3, 0x2, 0x2, 0x4, 0x8, 0x9, 0x6, 0x4, 0x3, 0x1, 0x10001, 0xffff, 0x9, 0x3, 0x3, 0x1, 0xcbc, 0x1, 0x1, 0x10000000, 0x3, 0x10001, 0x4, 0xb0, 0x5, 0x1, 0x1, 0x5, 0x701, 0x3, 0x1, 0x2, 0x400, 0x80, 0x2, 0x1]}]}, @TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x1ff}, {0x4, 0x2, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xccb4, 0x1, 0x401}, {0x29ef, 0x6, 0xea4a, 0x0, 0x4, 0x2}}}]}]}, @TCA_BASIC_EMATCHES={0x23c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x3c, 0x1, 0x0, 0x0, {{0xffff, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}]}, @TCA_EMATCH_TREE_LIST={0x1c4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14c, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x23b6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xfa, 0x5, "fd3e7a09459310f9a419e5625bccc3c4bf79b2cb70e31fb11aaaff051037d2fc3fb219fd02bb047806fecffa63c39f85597fda6536e8d0153e1013a604629ff20426359e5998b1674605091d1ce02252d8f6e0970c95e149a7cbadad1c221f5f61df659a81bbacb5fefb7f672ac8ffe91f35664dd6c5774e7e6635280c1981df216dc53848d9beaae97a83bb55f330f1777a19c714e0fc0872e5b20d7db36a62262bb6c1d71cac0fc6d5cff1a5f57f36655f74e743c95e885b53db355e2facf436fcddf5e7965b75ab9c2a2a106c21984bdb97456812e61dec6976ed343360e0dd664fc99d0bb964173b536ff1e6b0a98701cb9bf1f3"}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0xfffc}, {0xe, 0x0, 0x3, 0x2, 0x7, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x0, 0x2, 0xb}, {0x101, 0x7, 0x2, "b7269adac67a42"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x9, 0x8, 0x6344}, {0x0, 0x5}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x7ff, 0x2, 0xb}, {0xb12, 0x8, 0x2, "3787371f9392a956"}}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xfe01, 0x2, 0x4}, {0x4, 0xa, 0x1, "bdc582d033b84a062fd2"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xfffc, 0x1, 0x7f}, {0xfffffffb, 0xffff8001, 0x3, 0x0, 0x9, 0x1, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}]}, @TCA_BASIC_POLICE={0x10, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]}]}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x1134}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r11, 0x2219, 0x7723, 0x16, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xb5, 0x1, 0x0, 0x9, 0x5, 0x1d, "2dddb595e966c3d1201b7778344303eb95cd74c35543f0638eb02ca79a7b693193d124da9746f2f751190627ea26a89b9fe41fbe00583f37a52c6b2d6b454ead", "71fee4e3a4047d0e9f33d07d2f79ead91d842cfb3ec1fb4f5f36969759e5ba687f27a0e88b1cc391417836111e247eb3a560fc0334c66eb046c662b0ff070bb7", "0f8816ee9467b7db77b2ad1c8245b690b2b71a1252507c64dee0d4e8e323f665", [0xfffffffffffffff9, 0x8cd7]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0xc, &(0x7f0000000100)=[{0x1, 0x36, 0x5, 0x537}, {0x27, 0x8, 0x9}, {0xe49, 0x2, 0xfa, 0x4}, {0x5b6, 0x8, 0x1, 0x2}, {0x2, 0xe, 0x80, 0x1000003}, {0x1ff, 0x5, 0x10, 0xf}, {0x2, 0x0, 0x1, 0x9}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0) io_uring_enter(r3, 0x1, 0xeed, 0x1, 0x0, 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500), 0x0, 0x0) 24m38.918905522s ago: executing program 2 (id=1690): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x500, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) 24m37.450110778s ago: executing program 2 (id=1694): syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x100000000401, 0xe) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4004) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x7, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[], 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = socket(0x15, 0x80005, 0x0) getsockopt(r6, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, 0x0) getsockopt(r2, 0xfff, 0x8, &(0x7f0000000100)=""/134, &(0x7f00000001c0)=0x86) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) close_range(r5, 0xffffffffffffffff, 0x0) fchdir(r1) chroot(&(0x7f0000001640)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="3c9341c29182259d0ebb11fef904e70eaf404125121b36dd006cf9e22d994c42ab1c730733e68e108726bde5348f8318058f5db54fc231aadfa2c453f65e5f4689512c36ea7f60c9c6c7dc6065888215050e537053d8e882a58e1674e2e3138964969a87dab7ddeb6f1223420b0fc6fc77fcba20c451d4b162686eeb6d8a7846c7ba6277419f9a0a2d375bd9745b7bd601c827e831815e37094922e68c3f5657345a64c14df8caeada7f096d5f1950e26f422f6b3bbf4fe71c693e0cbff3512cbbb70c3d5fef377f134e6d7140fb87b691b8f5e519c4e03bdaf0dafdfc34972514a34bdd0498daf205adef859e084b9cebcb996005256e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24m34.024987239s ago: executing program 2 (id=1699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a0502fffffffffffffff5010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007"], 0xcc}, 0x1, 0x0, 0x0, 0xc010}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 24m32.843356609s ago: executing program 2 (id=1703): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004000000070000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$UHID_CREATE2(r6, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x2, 0x4, 0x8, 0x8}}, 0x118) dup(r5) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000000)=0x1000000010) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 24m31.928950163s ago: executing program 2 (id=1705): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$rds(0x15, 0x5, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x0, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_NAME={0x0, 0x2, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x24000080) sched_rr_get_interval(0x0, &(0x7f0000000100)) 24m31.28444702s ago: executing program 2 (id=1707): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1d, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000092000000180100002020702500000000002020207b1af8ff3fffffffbfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 24m30.509649924s ago: executing program 33 (id=1707): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1d, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000092000000180100002020702500000000002020207b1af8ff3fffffffbfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 13m56.5445139s ago: executing program 4 (id=3986): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, 0x16}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff10000400000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 13m56.229622308s ago: executing program 4 (id=3988): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070040003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) (async) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070040003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="9fcf"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x9c, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x2, 0x1, 0x6, 0x10, 0x9, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xe973, 0x4, 0x7}, {0x6, 0x24, 0x1a, 0x61c5, 0x5}, [@country_functional={0xa, 0x24, 0x7, 0x80, 0x87d, [0xa, 0xdbd]}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xf7}, @country_functional={0x10, 0x24, 0x7, 0x6, 0x6, [0x8, 0x9, 0x2, 0x6, 0x0]}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0xb, 0x9, 0x100, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xf, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1f7, 0x1, 0x80, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf, 0x8, 0x9}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x22, 0x33, 0x8, 0x10, 0xf9}, 0x8, &(0x7f0000000440)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x3c, &(0x7f0000000480)=@string={0x3c, 0x3, "f5f220eab5851d6b99853556cc9fc691af08e8837521920517afcf88fbc597ffc2368d43d618717a7c37f1af708ac71a9892c7f2b4169839f3d3"}}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@tclass={{0x14, 0x29, 0x32, 0xfffffff9}}], 0x18}}], 0x1, 0x0) (async) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@tclass={{0x14, 0x29, 0x32, 0xfffffff9}}], 0x18}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20008000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = dup(r0) write$UHID_INPUT(r3, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bffe8d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006) r4 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, r4) (async) add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x1}, 0x0, 0x0, r4) syz_usb_connect$uac2(0x1, 0xd8, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x2e, 0xa0, 0xa, {0x8, 0xb, 0x1, 0x2, 0x1, 0x2, 0x20, 0xb}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x9, 0x1a, 0x80}, [@mixer_unit={0xb, 0x24, 0x4, 0x5, 0xe5, "1bba7a32b2f6"}, @selector_unit={0x6, 0x24, 0xb, 0x2, 0x1, 'X'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x7, 0x88, 0xaa, 0x3}, @as_header={0x10, 0x24, 0x1, 0x1, 0x2, 0x2, 0x1002, 0x5, 0x60000000, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x9, 0x7, 0x4, 0x2}, @as_header={0x10, 0x24, 0x1, 0x4, 0xe, 0x3, 0x2, 0x5, 0x2, 0x3}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9, 0x4, 0x3, 0x7, "eb70"}, @as_header={0x10, 0x24, 0x1, 0x0, 0x2, 0x2, 0x2, 0x9, 0x3, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x37, 0x1, 0x70, {0x8, 0x25, 0x1, 0x80, 0x63, 0x8, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0xd, 0x9, {0x8, 0x25, 0x1, 0x82, 0xf, 0x6, 0x1}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x3, 0x7, 0x8, 0x0, 0xfc}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x4, 0x94, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0xe4, 0x4d, 0xa1, 0x40, 0xbb4, 0xa0e, 0xc455, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0xc, 0x3, 0x40, 0x2, "", [{{0x9, 0x4, 0xd2, 0x0, 0x2, 0x15, 0x27, 0x89, 0x4, [], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x4, 0x8, 0x1, [@generic={0x2, 0xa}, @generic={0x5c, 0x31, "c3855e4f04872791b87fb1c6c4a27d9aaea1ab2998c4a3ef7d74ddbe8039da4cb763f5633fae176fc19baed1232a9182369b58d967886b73fdf4d76bc535e86bfa97b81cb154637cf62f8dae4dacecdffdfe96f6d56ef93ce320"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xb, 0x6, 0x20}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x4, 0x94, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0xe4, 0x4d, 0xa1, 0x40, 0xbb4, 0xa0e, 0xc455, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x1, 0xc, 0x3, 0x40, 0x2, "", [{{0x9, 0x4, 0xd2, 0x0, 0x2, 0x15, 0x27, 0x89, 0x4, [], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x4, 0x8, 0x1, [@generic={0x2, 0xa}, @generic={0x5c, 0x31, "c3855e4f04872791b87fb1c6c4a27d9aaea1ab2998c4a3ef7d74ddbe8039da4cb763f5633fae176fc19baed1232a9182369b58d967886b73fdf4d76bc535e86bfa97b81cb154637cf62f8dae4dacecdffdfe96f6d56ef93ce320"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0xb, 0x6, 0x20}}]}}]}}]}}, 0x0) 13m52.757183018s ago: executing program 4 (id=4005): socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m52.647302807s ago: executing program 4 (id=4006): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='.\x02\x00', 0x102) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r0, &(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f00000041c0)={0x4000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 13m51.855088737s ago: executing program 4 (id=4009): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x1, @win={{0x8, 0x2, 0x31384142, 0x6}, 0x8, 0xe4c8, 0x0, 0xffffffff, 0x0, 0xf}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair(0x8, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x40103) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x103001, 0x30) pipe2$9p(&(0x7f0000000080), 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket(0x40000000015, 0x5, 0x0) 13m51.396093807s ago: executing program 4 (id=4012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) socket(0xf, 0x0, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) finit_module(r3, &(0x7f0000010280)='/dev/sequencer2\x00', 0x3) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000007e000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x303e, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13m51.125722106s ago: executing program 34 (id=4012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6) socket(0xf, 0x0, 0x1) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) finit_module(r3, &(0x7f0000010280)='/dev/sequencer2\x00', 0x3) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000007e000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x303e, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16.409951485s ago: executing program 6 (id=6807): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x830}]}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2, 0x1}, 0x10) vmsplice(r2, &(0x7f0000000980)=[{&(0x7f0000000080)="846c95fcac70ccdc", 0x8}, {&(0x7f00000002c0)="de89", 0x2}], 0x2, 0xc) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000580)='qnx4\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000200)={0x48}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001680)=""/249, 0xf9}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000580)=""/4072, 0xfe8}, {0x0}], 0x6}}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 12.2486456s ago: executing program 6 (id=6821): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000000c0)=0x5, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x3000c15, &(0x7f0000000240)=ANY=[]) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x24044080) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x10, 0x75, 0x9, 0x3c, @dev={0xfe, 0x80, '\x00', 0xf}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x8, 0x80000000, 0x3}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="44020000", @ANYRES16=0x0, @ANYBLOB="000427bd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="7c000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff01000008000100", @ANYRES32=0x0, @ANYBLOB="a401028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000101000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400feffffff3c00030024000c2b390100757365725f6c696e6b75705f656e61626c65640000000000000056919bf2000005000300060000000400040008", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400fbffffff40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040002000000"], 0x244}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000085) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, &(0x7f00000002c0)='\xe1AQ\xfa_\xc2\xc2\xfeUN\t\xa2\xd3\x1a\x14Z\x9c\xecQ\x85c\x06\xf54\x91\x1e\x98+ s\xa1.T^\xc1 \x0f\xedF\xa6}]Z\xa6J\x9e\x154\xf7\x00oi\x0fw\xab{(Q\xeb\x9b\x12\xbc\x9e\xe9l\x18\xbc0\x85\xb8b\xd4\xf4\xb6\x1a\xc3xM\xc8Y\xb1r\xf1I\x00\xfd\x9c\xe8\xe0\x1d5,\x90\xf2\xa9[)\x89v\xc0b\x86i\xf1\xbe}\xac\xe5\x1b\x9b\x10q\xd8\x90M!pt\xf5R\xa8\x13\x0e\xdd\xf4\x96\x87\x01\x91X\x81\xa7z\xac\x06\xcb\x7fe(\x97\xd6}\xc8\xa2Z\xb9Sb{\x12\x04\x8e?\xe7~\xabg\xc9\xb6B\xc0\x88x\x06}\x04O\\c\x9fu\x8f\xed\xc8\x95\xfc:u\xf7\xb6\x96KvA|\\\x888^\xef\xce\x03\xf0\xe2\x05\xefU\xcd\x87k\xfb\xb2\xc94\xd2[\"\x83\x98_&\x00\x00\x00\x00\x00\x00\x00\x00\x9c\x04N\x1fL') openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 11.250740812s ago: executing program 6 (id=6826): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 9.999512686s ago: executing program 6 (id=6827): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x51, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$rtl8150(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd27, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0xc031}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4004840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_SET_TSC_KHZ_cpu(0xffffffffffffffff, 0xaea2, 0x1) 9.169149483s ago: executing program 3 (id=6831): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket(0x18, 0x5, 0x7ff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x2001, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x20a01) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) userfaultfd(0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = getpgid(0xffffffffffffffff) ptrace(0x11, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) 9.02372288s ago: executing program 3 (id=6832): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f00000010c0)=0x14, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000004a00037e58dfc300000000000a000000", @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}}, 0x400040c0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x5, 0xc, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r7, &(0x7f0000001240), 0x0, 0x0, 0x3) readv(r6, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) flistxattr(r5, 0x0, 0xffffffffffffffb1) 8.629710034s ago: executing program 1 (id=6833): socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) r0 = semget(0x2, 0x3, 0x260) semtimedop(r0, &(0x7f0000000140)=[{0x2, 0x1400, 0x800}, {0x1, 0x401}, {0x3, 0x5, 0x800}, {0x3, 0x5, 0x1000}, {0x2, 0x2717, 0x800}], 0x5, &(0x7f0000000180)) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x9, @private2, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000080)="4ef81bc5386f5cb752a39f92e7e183b9a0fdb7331ab2632d4bcfd4805d2bbabe4ecc0dec66f5a3997ff74e2e807cb0dcdd8ae5ea901b3c12838e4f6d4316", 0x3e}], 0x1, 0x0, 0x0, 0x804c040}, 0x40000) 8.554719355s ago: executing program 1 (id=6834): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1d, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000092000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000031001b0095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 8.468874842s ago: executing program 1 (id=6835): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xe3000000, 0xffffffffffffffff, 0x6}, 0x70) 8.423434042s ago: executing program 1 (id=6837): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = inotify_init1(0x800) r3 = fcntl$dupfd(r0, 0x406, r2) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000), 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet(0x2, 0x3, 0xe1) setsockopt$sock_int(r4, 0x1, 0x69, 0x0, 0xffffffffffffff65) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x25}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) 7.678967256s ago: executing program 3 (id=6838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000adc000/0x1000)=nil, &(0x7f000005f000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000462000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00007f0000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xbc7e, 0xc000, 0x1000207, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x610f, 0x7721, 0x7c, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x833, 0x400) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r3}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000280)={r5}) 6.671293344s ago: executing program 6 (id=6840): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) close(0x3) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x42000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x37) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d0d, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022260000005b9602eb2b5a383efb35a7cfaa0be9f43ac79338a703859430a10a"], 0x0}, 0x0) 6.254625829s ago: executing program 5 (id=6841): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) close(0x3) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x42000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x37) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x600, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d0d, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022260000005b9602eb2b5a383efb35a7cfaa0be9f43ac79338a703859430a10a9be086ad668314030000b3"], 0x0}, 0x0) 5.791732186s ago: executing program 7 (id=6845): socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) r0 = semget(0x2, 0x3, 0x260) semtimedop(r0, &(0x7f0000000140)=[{0x2, 0x1400, 0x800}, {0x1, 0x401}, {0x3, 0x5, 0x800}, {0x3, 0x5, 0x1000}, {0x2, 0x2717, 0x800}], 0x5, &(0x7f0000000180)) syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x9, @private2, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000080)="4ef81bc5386f5cb752a39f92e7e183b9a0fdb7331ab2632d4bcfd4805d2bbabe4ecc0dec66f5a3997ff74e2e807cb0dcdd8ae5ea901b3c12838e4f6d4316", 0x3e}], 0x1, 0x0, 0x0, 0x804c040}, 0x40000) 5.756666346s ago: executing program 7 (id=6846): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0xc, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000ffffff900018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.707336192s ago: executing program 7 (id=6847): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYBLOB="b70795"], 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={0x0, 0x0, 0x80000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1f00, 0x28af014ad59059c9}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x100) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r8, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 5.343927681s ago: executing program 5 (id=6848): mmap(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x300000b, 0x2010, 0xffffffffffffffff, 0x3c889000) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000180)={0x4, 0x1, &(0x7f0000000080)=[0x3], &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0xa6440, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)=[0x0, 0x48, 0x1, 0x9, 0x3, 0x2, 0x5, 0x1, 0x5], &(0x7f00000001c0), &(0x7f0000000200)}) r2 = socket(0x2b, 0x1, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r3}, 0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000300)={r9, 0x0}) r11 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f00000000c0)=ANY=[], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000012e000000211009078e0000002000000010000000000000100"], 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r8, 0xc010640b, &(0x7f0000000140)={r10}) syz_open_dev$usbfs(0x0, 0x6, 0x0) dup3(r2, r8, 0x0) fsopen(&(0x7f0000000380)='rootfs\x00', 0x1) 5.293954462s ago: executing program 5 (id=6849): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80800, 0x139) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x3a) 5.104607367s ago: executing program 1 (id=6850): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x4, &(0x7f00000000c0)=[{0x6, 0x80, 0x25, 0x7fff0003}, {0x7, 0x0, 0xf, 0x803}, {0x8, 0x6, 0x0, 0x5}, {0x7, 0x9, 0x5, 0xb}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x4, &(0x7f00000000c0)=[{0x6, 0x80, 0x25, 0x7fff0003}, {0x7, 0x0, 0xf, 0x803}, {0x8, 0x6, 0x0, 0x5}, {0x7, 0x9, 0x5, 0xb}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80), 0x40, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000c80), 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x24040040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x487, 0x0, &(0x7f0000000000), &(0x7f0000000280), &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x30, 0xffffffffffffffff, 0x7}, &(0x7f0000000100)=0x18) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x5, 0x30, 0xffffffffffffffff, 0x7}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000140)={r5, 0x8000, 0x8, 0x7fffffff}, 0x10) r6 = openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r6, r6, 0x0, 0x8000002) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x84080) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e21, 0x3, @empty, 0x5}, 0x1c) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0x0) 4.540169947s ago: executing program 1 (id=6851): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002440), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x80) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x51, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001500010000000000000000000a00000004"], 0x44}}, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r11, 0xff, 0x1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r10}) 4.517443114s ago: executing program 3 (id=6852): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x200001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x6, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x37) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) 4.382756598s ago: executing program 5 (id=6853): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x1000, 0x0, 0x3}, 0x20) 2.745565653s ago: executing program 6 (id=6854): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) creat(&(0x7f0000000480)='./file0\x00', 0x0) splice(r0, 0x0, r1, &(0x7f00000002c0), 0x6, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x58, 0x0) io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc46e, 0x400, 0x20001, 0x3}) r5 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(r5, 0x0, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205649, &(0x7f0000000100)={0x98f90a, 0x300, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x190, '\x00', @ptr=0x20002000}}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 2.271584944s ago: executing program 5 (id=6855): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) inotify_init1(0x800) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$inet(0x2, 0x3, 0xe1) setsockopt$sock_int(r2, 0x1, 0x69, 0x0, 0xffffffffffffff65) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="9fcf"], 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x25}, 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xf7}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002140)={0xf, {"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", 0x1000}}, 0x1006) 1.688766208s ago: executing program 7 (id=6856): socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x106f) semget(0x2, 0x3, 0x260) syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)=@in6={0xa, 0x4e20, 0x9, @private2, 0x9}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000080)="4ef81bc5386f5cb752a39f92e7e183b9a0fdb7331ab2632d4bcfd4805d2bbabe4ecc0dec66f5a3997ff74e2e807cb0dcdd8ae5ea901b3c12838e4f6d4316", 0x3e}], 0x1, 0x0, 0x0, 0x804c040}, 0x40000) 1.516009221s ago: executing program 7 (id=6857): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x830}]}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x2, 0x1}, 0x10) vmsplice(r2, &(0x7f0000000980)=[{&(0x7f0000000080)="846c95fcac70ccdc", 0x8}, {&(0x7f00000002c0)="de89", 0x2}], 0x2, 0xc) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000580)='qnx4\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x20000800, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000200)={0x48}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000001680)=""/249, 0xf9}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000000480)=""/193, 0xc1}, {&(0x7f0000000580)=""/4072, 0xfe8}, {0x0}], 0x6}}], 0x1, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 767.359745ms ago: executing program 5 (id=6858): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = inotify_init1(0x800) r2 = fcntl$dupfd(r0, 0x406, r1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r4 = socket$inet(0x2, 0x80000, 0x7) r5 = accept4(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80, 0x81000) setsockopt$inet_mtu(r5, 0x111, 0xa, &(0x7f0000000000), 0xffffffffffffff07) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x0) 158.395805ms ago: executing program 3 (id=6859): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f00000001c0)=0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x12) 55.701574ms ago: executing program 7 (id=6860): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x40020000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) close(0x3) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x42000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x37) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0xf00, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40043d0d, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022260000005b9602eb2b5a383efb35a7cfaa0be9f43ac79338a703859430a10a9be086ad668314030000b3"], 0x0}, 0x0) 0s ago: executing program 3 (id=6861): munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x40040, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) madvise(&(0x7f000036a000/0x4000)=nil, 0x4000, 0x2) statfs(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000000)={&(0x7f000036c000/0x4000)=nil, 0x5, 0x2, 0x2}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000180)={0x7, 'veth1_vlan\x00', {0xd}, 0x94a}) kernel console output (not intermixed with test programs): b status received: -71 [ 1855.053720][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.060975][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.068243][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.075510][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.083583][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.091292][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.098797][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.108644][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.116091][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.123370][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.130621][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.137921][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.145194][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.152445][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.159689][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.166958][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.174239][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.181484][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.188722][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.195991][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.203767][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.217767][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.225199][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.232612][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.239926][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.242020][T17504] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1855.247253][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.268952][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.276286][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.283772][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.285650][T17504] usb 7-1: config 0 has no interface number 0 [ 1855.291101][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.291288][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.312521][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.319957][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.327286][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.334648][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.341993][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.349302][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.356650][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.364064][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.371454][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.378937][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.386317][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.393615][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.400925][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.408218][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.421271][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.428942][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.429028][ T5165] usb 4-1: control msg error: -71 [ 1855.436241][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.436419][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.460023][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.467353][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.474622][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.481933][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.489208][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.496639][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.503919][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.511225][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.518600][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.525857][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.533118][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.540402][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.547746][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.555007][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.562274][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.569542][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.576821][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.584079][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.591321][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.598566][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.605834][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.613079][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.620515][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.627777][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.635114][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.642354][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.649597][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.656841][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.664100][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.671339][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.678579][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.685834][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.693083][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.700317][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.707554][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.714792][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.731188][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.738458][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.745705][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.752947][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.760180][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.767429][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.774807][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.782084][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.789333][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.796608][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.803849][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.811101][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.818383][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.831171][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.838451][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.845917][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.853287][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.860533][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.867798][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.875101][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.882634][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.889920][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.897196][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.904456][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.911706][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.918942][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.931192][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.938453][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.945699][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.952946][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.960187][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.967446][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.974747][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.982003][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.989271][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1855.996527][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.003824][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.011100][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.018353][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.025600][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.041144][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.048545][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.055829][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.063096][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.070337][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.077586][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.084871][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.092112][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.099364][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.106603][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.113853][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.121134][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.128371][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.140660][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.148039][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.155288][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.162603][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.169903][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.177179][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.184486][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.191811][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.199115][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.207128][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.214702][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.222031][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.229340][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.233533][T17504] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1856.236511][ C0] usb 4-1: pegasus_irq - usb_submit_urb failed with result -1 [ 1856.257071][T17504] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1856.268256][T17504] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1856.284399][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.291760][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.299067][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.306404][ C0] usb 4-1: pegasus_irq - nonzero urb status received: -71 [ 1856.309800][ T24] usb 4-1: USB disconnect, device number 76 [ 1856.313524][ C0] usb 4-1: pegasus_irq - usb_submit_urb failed with result -19 [ 1856.314571][ T5165] usb 4-1: control msg error: -71 [ 1856.320059][T17504] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.423639][T17504] usb 7-1: config 0 descriptor?? [ 1856.453291][T17504] ldusb 7-1:0.55: Interrupt in endpoint not found [ 1856.781069][ T5929] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1858.599403][ T5929] usb 2-1: config 0 has no interfaces? [ 1858.612096][ T5929] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1858.670205][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.793744][ T5929] usb 2-1: config 0 descriptor?? [ 1858.810795][T30930] lo speed is unknown, defaulting to 1000 [ 1859.432239][T30930] lo speed is unknown, defaulting to 1000 [ 1859.630963][ T5940] usb 7-1: USB disconnect, device number 32 [ 1859.736417][ T24] hid-generic 0000:0000:0000.004B: unknown main item tag 0x0 [ 1859.794522][ T24] hid-generic 0000:0000:0000.004B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1859.876063][T30936] lo speed is unknown, defaulting to 1000 [ 1859.897503][T30936] lo speed is unknown, defaulting to 1000 [ 1860.061007][ T5940] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1860.260811][ T5940] usb 7-1: config 0 has no interfaces? [ 1860.280778][ T5940] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1860.311236][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1860.518388][ T5940] usb 7-1: SerialNumber: syz [ 1860.625001][ T5940] usb 7-1: config 0 descriptor?? [ 1860.893797][T30979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1860.928839][ T5940] usb 7-1: USB disconnect, device number 33 [ 1861.334140][T30979] Cannot find add_set index 0 as target [ 1861.751237][ T5940] usb 2-1: USB disconnect, device number 82 [ 1861.845691][ T30] audit: type=1400 audit(2000000823.356:2842): avc: denied { ioctl } for pid=30985 comm="syz.1.6398" path="socket:[125352]" dev="sockfs" ino=125352 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1863.127801][ T5940] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1863.401320][ T5940] usb 2-1: Using ep0 maxpacket: 8 [ 1863.419976][ T5940] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1863.428727][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.481095][ T5940] usb 2-1: config 0 has no interface number 0 [ 1863.507793][ T5940] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1863.529342][ T5940] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1863.582040][ T5940] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1863.610572][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.654766][ T5940] usb 2-1: config 0 descriptor?? [ 1863.677995][ T5940] ldusb 2-1:0.55: Interrupt in endpoint not found [ 1865.793484][T12921] usb 2-1: USB disconnect, device number 83 [ 1866.455367][T31034] netlink: 'syz.5.6410': attribute type 21 has an invalid length. [ 1866.767874][T31034] netlink: 156 bytes leftover after parsing attributes in process `syz.5.6410'. [ 1868.595014][T31054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1868.602171][ T30] audit: type=1400 audit(2000000830.086:2843): avc: denied { ioctl } for pid=31040 comm="syz.1.6412" path="socket:[125440]" dev="sockfs" ino=125440 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1868.802952][T16963] Bluetooth: hci6: unknown advertising packet type: 0x75 [ 1868.803280][T16963] Bluetooth: hci6: unknown advertising packet type: 0x6c [ 1868.811613][T16963] Bluetooth: hci6: unknown advertising packet type: 0x20 [ 1868.820818][T16963] Bluetooth: hci6: Malformed LE Event: 0x02 [ 1868.841301][ T30] audit: type=1400 audit(2000000830.296:2844): avc: denied { remount } for pid=31040 comm="syz.1.6412" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1869.636195][T31072] loop2: detected capacity change from 0 to 7 [ 1869.674760][T31072] Dev loop2: unable to read RDB block 7 [ 1869.685673][T31072] loop2: unable to read partition table [ 1869.699875][T31072] loop2: partition table beyond EOD, truncated [ 1869.727838][T31072] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1869.763155][ T5180] Dev loop2: unable to read RDB block 7 [ 1869.782139][ T5180] loop2: unable to read partition table [ 1869.788022][ T5180] loop2: partition table beyond EOD, truncated [ 1870.021045][ T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1870.191179][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1870.470622][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1870.495464][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.518416][ T24] usb 4-1: config 0 has no interface number 0 [ 1870.530852][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1870.542041][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1870.560402][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1870.584268][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.602873][ T30] audit: type=1400 audit(2000000832.126:2845): avc: denied { bind } for pid=31086 comm="syz.1.6425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1870.628165][ T24] usb 4-1: config 0 descriptor?? [ 1870.640295][ T24] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1870.662436][ T30] audit: type=1400 audit(2000000832.146:2846): avc: denied { write } for pid=31086 comm="syz.1.6425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1870.920126][ T30] audit: type=1400 audit(2000000832.436:2847): avc: denied { accept } for pid=31096 comm="syz.1.6428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1870.942503][T31097] input: syz0 as /devices/virtual/input/input128 [ 1873.450946][ T5921] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1873.576707][T31106] lo speed is unknown, defaulting to 1000 [ 1873.613501][ T5921] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1873.627201][T31106] lo speed is unknown, defaulting to 1000 [ 1874.001332][T31121] netlink: 'syz.1.6433': attribute type 3 has an invalid length. [ 1874.117813][ T5921] usb 7-1: config 0 has no interface number 0 [ 1874.171673][ T5921] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1874.183344][ T5921] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1874.194999][ T5921] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1874.281000][ T793] usb 4-1: USB disconnect, device number 77 [ 1874.331192][ T5921] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1874.352067][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1874.437635][ T5921] usb 7-1: Product: syz [ 1874.441948][ T5921] usb 7-1: SerialNumber: syz [ 1874.449396][ T5921] usb 7-1: config 0 descriptor?? [ 1874.460500][ T5921] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1874.469294][ T5921] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input129 [ 1874.650455][ T30] audit: type=1400 audit(2000000836.166:2848): avc: denied { append } for pid=31128 comm="syz.1.6435" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1874.682739][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1874.822381][T31133] fuse: Bad value for 'fd' [ 1874.890239][T31105] lo speed is unknown, defaulting to 1000 [ 1874.896580][ T793] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1874.907439][T31105] lo speed is unknown, defaulting to 1000 [ 1875.208239][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1875.208611][T29668] usb 7-1: USB disconnect, device number 34 [ 1875.215228][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1875.220962][ T793] usb 2-1: Using ep0 maxpacket: 16 [ 1875.321626][ T793] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1875.331368][ T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.350979][ T793] usb 2-1: Product: syz [ 1875.355199][ T793] usb 2-1: Manufacturer: syz [ 1875.359817][ T793] usb 2-1: SerialNumber: syz [ 1875.818904][T29668] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1875.823941][ T793] usb 2-1: config 0 descriptor?? [ 1875.892858][ T793] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 1876.241459][T29668] usb 2-1: USB disconnect, device number 84 [ 1878.525923][T31177] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6447'. [ 1878.664671][T31181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6448'. [ 1878.966511][ T30] audit: type=1400 audit(2000000840.486:2849): avc: denied { connect } for pid=31191 comm="syz.1.6449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1878.999026][T31172] lo speed is unknown, defaulting to 1000 [ 1879.059679][T31172] lo speed is unknown, defaulting to 1000 [ 1879.801084][ T5921] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1879.883584][ T30] audit: type=1400 audit(2000000841.106:2850): avc: denied { write } for pid=31196 comm="syz.6.6451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1879.954777][ T30] audit: type=1400 audit(2000000841.226:2851): avc: denied { map } for pid=31196 comm="syz.6.6451" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1880.014362][ T30] audit: type=1400 audit(2000000841.226:2852): avc: denied { execute } for pid=31196 comm="syz.6.6451" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1880.071350][ T5921] usb 2-1: Using ep0 maxpacket: 8 [ 1880.110047][ T5921] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 1880.204584][ T5921] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.221401][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1880.240727][ T5921] usb 2-1: config 1 has no interface number 0 [ 1880.250022][ T5921] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.261505][ T5921] usb 2-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1880.275923][ T5921] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1880.286359][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.295337][ T5921] usb 2-1: Product: syz [ 1880.299510][ T5921] usb 2-1: Manufacturer: syz [ 1880.311206][ T5921] usb 2-1: SerialNumber: syz [ 1880.345441][ T5921] cdc_wdm 2-1:1.128: skipping garbage [ 1880.362505][ T5921] cdc_wdm 2-1:1.128: cdc-wdm0: USB WDM device [ 1880.375518][ T5921] cdc_wdm 2-1:1.128: Unknown control protocol [ 1880.699703][ T5940] usb 2-1: USB disconnect, device number 85 [ 1881.206960][ T30] audit: type=1400 audit(2000000842.726:2853): avc: denied { create } for pid=31228 comm="syz.6.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1881.273211][ T30] audit: type=1400 audit(2000000842.756:2854): avc: denied { setopt } for pid=31228 comm="syz.6.6460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1881.393901][T31231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6460'. [ 1881.491841][T31232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1881.786495][ T30] audit: type=1326 audit(2000000843.296:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31211 comm="syz.7.6455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cba59c819 code=0x7fc00000 [ 1881.840532][T31235] netlink: 'syz.1.6461': attribute type 6 has an invalid length. [ 1881.864821][T31235] netlink: 'syz.1.6461': attribute type 6 has an invalid length. [ 1882.230751][T31242] fuse: Unknown parameter 'grou00000000000000000000' [ 1882.282051][T17504] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1882.495205][T17504] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 1882.521814][T17504] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.574331][T17504] usb 7-1: config 0 has no interface number 0 [ 1882.580491][T17504] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1882.622583][T17504] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1882.670997][T17504] usb 7-1: config 0 interface 52 has no altsetting 0 [ 1882.692509][T17504] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1882.701845][T17504] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1882.718211][T31255] openvswitch: netlink: Flow key attr not present in new flow. [ 1882.731306][T17504] usb 7-1: Manufacturer: syz [ 1882.752942][T17504] usb 7-1: config 0 descriptor?? [ 1882.785419][T17504] hub 7-1:0.52: bad descriptor, ignoring hub [ 1882.810145][T17504] hub 7-1:0.52: probe with driver hub failed with error -5 [ 1883.161009][ T5940] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1883.200125][T31238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1883.222455][T31238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1883.309201][T31259] lo speed is unknown, defaulting to 1000 [ 1883.340464][T31259] lo speed is unknown, defaulting to 1000 [ 1883.358719][ T5940] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1883.378258][ T5940] usb 2-1: config 0 has no interface number 0 [ 1883.381247][ T5921] usb 7-1: USB disconnect, device number 35 [ 1883.390978][ T5940] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1883.436158][ T5940] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1883.477769][ T5940] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1883.599875][ T5940] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1883.609395][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1883.618104][ T5940] usb 2-1: Product: syz [ 1883.622817][ T5940] usb 2-1: SerialNumber: syz [ 1883.635626][ T5940] usb 2-1: config 0 descriptor?? [ 1883.651428][ T5940] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1883.669851][ T5940] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input130 [ 1883.919501][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1883.929161][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1883.936393][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1883.943531][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1883.950608][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1883.957682][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1883.964779][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1883.971911][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1883.979031][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1883.986455][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1884.012270][ T5921] usb 2-1: USB disconnect, device number 86 [ 1884.012321][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1884.043604][ T5921] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1884.131020][T31281] fuse: Unknown parameter 'grou00000000000000000000' [ 1884.540959][T17504] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1884.741522][T17504] usb 4-1: Using ep0 maxpacket: 32 [ 1884.749607][T31299] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1884.759026][T17504] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.770495][T17504] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1884.849506][T17504] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1884.890223][T17504] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1884.947983][T17504] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1884.972487][T17504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.994409][T17504] usb 4-1: Product: syz [ 1885.014789][T17504] usb 4-1: Manufacturer: syz [ 1885.028583][T17504] usb 4-1: SerialNumber: syz [ 1885.066367][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1885.096279][T17504] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input131 [ 1885.271011][T17504] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1885.319344][T17504] (id 0x00) [ 1885.511408][T17504] rc_core: IR keymap rc-imon-pad not found [ 1885.610145][T17504] Registered IR keymap rc-empty [ 1885.624065][T17504] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1885.635104][T17504] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1885.663508][T17504] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 1885.691797][T17504] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input132 [ 1885.752829][T17504] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:78> initialized [ 1886.061658][T31322] fuse: Unknown parameter 'grou00000000000000000000' [ 1886.211082][T31284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6478'. [ 1886.683668][ T793] usb 4-1: USB disconnect, device number 78 [ 1887.351695][T31335] netlink: 160 bytes leftover after parsing attributes in process `syz.3.6492'. [ 1887.364907][T31335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8464 sclass=netlink_route_socket pid=31335 comm=syz.3.6492 [ 1887.582420][T12921] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1887.649413][T31346] misc userio: The device must be registered before sending interrupts [ 1887.922296][T12921] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1887.945816][T12921] usb 7-1: config 0 has no interfaces? [ 1887.961709][T12921] usb 7-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1887.991740][T12921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.014820][T12921] usb 7-1: config 0 descriptor?? [ 1888.116196][T31353] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1888.475881][T31343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.587185][T31343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.651571][T12921] usb 7-1: USB disconnect, device number 36 [ 1889.897169][T31378] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1890.633961][T31387] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1891.759478][T31404] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6512'. [ 1891.817608][T31404] xt_hashlimit: size too large, truncated to 1048576 [ 1894.172835][T31421] loop2: detected capacity change from 0 to 7 [ 1894.214109][T31421] Dev loop2: unable to read RDB block 7 [ 1894.247407][T31421] loop2: unable to read partition table [ 1894.281643][T31421] loop2: partition table beyond EOD, truncated [ 1894.298911][T31421] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1894.556158][T29668] IPVS: starting estimator thread 0... [ 1894.644679][T31439] netlink: 268 bytes leftover after parsing attributes in process `syz.1.6520'. [ 1894.701003][T31435] IPVS: using max 47 ests per chain, 112800 per kthread [ 1894.735361][ T30] audit: type=1400 audit(2000000856.256:2856): avc: denied { view } for pid=31441 comm="syz.3.6522" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1894.933192][ T30] audit: type=1400 audit(2000000856.316:2857): avc: denied { mount } for pid=31429 comm="syz.6.6518" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1894.967116][T31444] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1895.003099][T31446] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1895.273580][ T5921] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1896.420924][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 1896.436418][ T5921] usb 7-1: no configurations [ 1896.443837][ T5921] usb 7-1: can't read configurations, error -22 [ 1896.696489][ T30] audit: type=1326 audit(2000000858.216:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31460 comm="syz.7.6526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7cba59c819 code=0x0 [ 1896.748865][ T5921] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1896.933287][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 1896.977403][ T5921] usb 7-1: no configurations [ 1897.006618][ T5921] usb 7-1: can't read configurations, error -22 [ 1897.044211][ T5921] usb usb7-port1: attempt power cycle [ 1897.406504][ T5921] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1897.432099][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 1897.455796][ T5921] usb 7-1: no configurations [ 1897.468902][ T5921] usb 7-1: can't read configurations, error -22 [ 1897.622760][ T5921] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1897.643130][T31475] loop2: detected capacity change from 0 to 7 [ 1897.655642][T31424] loop2: [ 1897.658674][T31424] loop2: partition table partially beyond EOD, truncated [ 1897.670238][T31475] loop2: [ 1897.673522][T31475] loop2: partition table partially beyond EOD, truncated [ 1897.748936][T31476] veth11: entered promiscuous mode [ 1897.761201][T31476] veth11: entered allmulticast mode [ 1897.852558][ T5921] usb 7-1: device not accepting address 40, error -71 [ 1897.870514][ T5921] usb usb7-port1: unable to enumerate USB device [ 1898.571164][ T5940] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 1898.671503][T31487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31487 comm=syz.3.6533 [ 1898.718071][ T30] audit: type=1400 audit(2000000860.236:2859): avc: denied { bind } for pid=31482 comm="syz.3.6533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1898.749229][T31493] overlay: Unknown parameter 'obj_role' [ 1899.081056][ T5940] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1899.099354][ T5940] usb 2-1: config 0 has no interface number 0 [ 1899.120033][ T5940] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1899.157642][ T30] audit: type=1400 audit(2000000860.656:2860): avc: denied { accept } for pid=31490 comm="syz.6.6535" lport=51090 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1899.232957][ T5940] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1899.247782][T31497] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1899.294482][ T5940] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1899.309525][T31484] lo speed is unknown, defaulting to 1000 [ 1899.346806][T31497] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1899.363910][T31484] lo speed is unknown, defaulting to 1000 [ 1899.387174][ T5940] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1899.424915][T31497] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1899.450572][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1899.477900][T31497] netdevsim netdevsim5 netdevsim0 (unregistering): left promiscuous mode [ 1899.487649][T31497] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1899.509461][ T5940] usb 2-1: Product: syz [ 1899.521136][ T5940] usb 2-1: SerialNumber: syz [ 1899.534750][ T5940] usb 2-1: config 0 descriptor?? [ 1899.549493][ T5940] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1899.567035][ T5940] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input133 [ 1899.781750][ T5921] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1899.816654][ T3484] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.835208][ T3484] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.872426][ T3484] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.956966][ T36] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1899.963081][ T5921] usb 7-1: Using ep0 maxpacket: 16 [ 1899.972728][ T5921] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1899.990731][ T5921] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1900.017747][ T5921] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1900.062490][ T5921] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1900.069153][ T5921] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1900.086759][ T5921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.086871][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1900.101356][ T5921] usb 7-1: config 0 descriptor?? [ 1900.137591][T31515] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6541'. [ 1900.156053][T31515] team0: No ports can be present during mode change [ 1900.198540][T31515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6541'. [ 1900.251592][T31515] team0 (unregistering): Port device team_slave_0 removed [ 1900.303119][T31515] team0 (unregistering): Port device team_slave_1 removed [ 1900.322259][T31515] team0 (unregistering): Port device bridge0 removed [ 1900.422009][ C1] cm109_urb_ctl_callback: 109 callbacks suppressed [ 1900.422033][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1900.436190][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1900.443567][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1900.450710][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1900.457976][T17504] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1900.465673][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1900.472764][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1900.479798][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1900.486932][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1900.494039][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1900.501101][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1900.508197][ T24] usb 2-1: USB disconnect, device number 87 [ 1900.514321][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1900.528137][T31513] lo speed is unknown, defaulting to 1000 [ 1900.542514][T31513] lo speed is unknown, defaulting to 1000 [ 1900.584606][ T24] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1900.776897][T31520] overlayfs: failed to clone upperpath [ 1900.787333][T17504] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 1900.796505][T17504] usb 4-1: config 0 has no interface number 0 [ 1900.807422][T17504] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1900.819223][T17504] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1900.831027][T17504] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1900.842668][T17504] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1900.852169][T17504] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1900.860272][T17504] usb 4-1: Product: syz [ 1900.864624][T17504] usb 4-1: SerialNumber: syz [ 1900.872750][T17504] usb 4-1: config 0 descriptor?? [ 1900.881833][T17504] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 1900.891148][T17504] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input134 [ 1901.105206][T31525] loop2: detected capacity change from 0 to 7 [ 1901.113304][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1901.121557][T31525] loop2: [ 1901.127668][T31525] loop2: partition table partially beyond EOD, truncated [ 1901.446884][ T793] usb 4-1: USB disconnect, device number 79 [ 1901.446996][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1901.489902][ T793] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1901.907836][ T5921] usbhid 7-1:0.0: can't add hid device: -71 [ 1901.916254][ T5921] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1901.953686][ T5921] usb 7-1: USB disconnect, device number 41 [ 1903.052626][ T5921] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1903.545236][ T5921] usb 7-1: Using ep0 maxpacket: 16 [ 1903.559715][ T5921] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.584316][T31552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6554'. [ 1903.640465][ T5921] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1903.650518][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.659036][ T5921] usb 7-1: Product: syz [ 1903.689399][ T5921] usb 7-1: Manufacturer: syz [ 1903.697092][ T5921] usb 7-1: SerialNumber: syz [ 1903.710401][ T5921] usb 7-1: config 0 descriptor?? [ 1903.728611][ T5921] sr9700 7-1:0.0: probe with driver sr9700 failed with error -22 [ 1903.866787][T31568] fuse: Bad value for 'user_id' [ 1903.889182][T31568] fuse: Bad value for 'user_id' [ 1904.475564][T12921] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1904.556240][ T30] audit: type=1400 audit(2000000866.076:2861): avc: denied { accept } for pid=31584 comm="syz.7.6562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1904.731164][T12921] usb 4-1: Using ep0 maxpacket: 32 [ 1904.742580][T12921] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 1904.760831][T12921] usb 4-1: config 0 has no interface number 0 [ 1904.777244][T12921] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1904.793943][T31594] xt_TCPMSS: Only works on TCP SYN packets [ 1904.813384][T12921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.849359][T12921] usb 4-1: Product: syz [ 1904.889392][T12921] usb 4-1: Manufacturer: syz [ 1904.894112][T12921] usb 4-1: SerialNumber: syz [ 1904.905744][T12921] usb 4-1: config 0 descriptor?? [ 1904.918429][T12921] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1904.936632][T12921] em28xx 4-1:0.132: Video interface 132 found: isoc [ 1905.041807][T29668] usb 7-1: USB disconnect, device number 42 [ 1905.460677][T12921] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 1905.936086][T12921] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1905.950670][T12921] em28xx 4-1:0.132: board has no eeprom [ 1906.060970][T12921] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1906.072096][T12921] em28xx 4-1:0.132: analog set to isoc mode. [ 1906.089043][T29668] em28xx 4-1:0.132: Registering V4L2 extension [ 1906.196221][T31614] fuse: Bad value for 'user_id' [ 1906.213743][T31614] fuse: Bad value for 'user_id' [ 1906.224111][T29668] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1906.225314][ T5921] usb 4-1: USB disconnect, device number 80 [ 1906.246017][T29668] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 1906.268285][T29668] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 1906.280035][ T5921] em28xx 4-1:0.132: Disconnecting em28xx [ 1906.284212][T31616] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6572'. [ 1906.663977][T29668] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 1906.677452][T29668] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 1906.684654][T29668] em28xx 4-1:0.132: No AC97 audio processor [ 1906.747075][T31629] ubi: mtd0 is already attached to ubi31 [ 1906.779380][T29668] usb 4-1: Decoder not found [ 1907.170999][T29668] em28xx 4-1:0.132: failed to create media graph [ 1907.181762][T29668] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 1907.190114][T29668] em28xx 4-1:0.132: Remote control support is not available for this card. [ 1907.205295][ T5921] em28xx 4-1:0.132: Closing input extension [ 1907.239593][ T5921] em28xx 4-1:0.132: Freeing device [ 1908.604600][T12921] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1908.772431][T12921] usb 7-1: Using ep0 maxpacket: 16 [ 1908.779463][T12921] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.792218][T12921] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1908.819428][T12921] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1908.846073][T12921] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1908.874431][T12921] usb 7-1: config 0 descriptor?? [ 1908.904789][T12921] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1908.940953][ T5921] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1908.965023][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1909.091020][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 1909.102826][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1909.145717][ T5921] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1909.217613][T12921] usb 7-1: USB disconnect, device number 43 [ 1909.238920][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.480519][ T5921] usb 2-1: Product: syz [ 1909.495089][ T5921] usb 2-1: Manufacturer: syz [ 1909.499728][ T5921] usb 2-1: SerialNumber: syz [ 1909.616057][ T5921] usb 2-1: config 0 descriptor?? [ 1909.704849][ T5921] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 1909.783649][ T5921] usb 2-1: USB disconnect, device number 88 [ 1909.886698][ T30] audit: type=1400 audit(2000000871.406:2862): avc: denied { create } for pid=31666 comm="syz.1.6587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1909.911205][ T30] audit: type=1400 audit(2000000871.406:2863): avc: denied { ioctl } for pid=31666 comm="syz.1.6587" path="socket:[127864]" dev="sockfs" ino=127864 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1909.954504][T31670] fuse: Bad value for 'fd' [ 1910.006846][ T30] audit: type=1400 audit(2000000871.526:2864): avc: denied { getopt } for pid=31666 comm="syz.1.6587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1910.065008][ T30] audit: type=1400 audit(2000000871.556:2865): avc: denied { write } for pid=31666 comm="syz.1.6587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1910.356915][T31680] loop2: detected capacity change from 0 to 7 [ 1910.367452][T31680] loop2: [ 1910.370663][T31680] loop2: partition table partially beyond EOD, truncated [ 1910.780967][T17504] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1910.990930][T17504] usb 7-1: Using ep0 maxpacket: 16 [ 1911.013609][T17504] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.028476][T31698] netlink: 'syz.7.6596': attribute type 1 has an invalid length. [ 1911.039088][T17504] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1911.055226][T17504] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1911.125969][T31698] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1911.217733][T17504] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1911.257305][T17504] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.700336][T31700] bond5: (slave geneve3): making interface the new active one [ 1911.717697][T17504] usb 7-1: config 0 descriptor?? [ 1911.759875][T31700] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 1911.807465][ T36] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1911.817409][ T36] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1911.829545][ T36] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1911.854215][ T36] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1911.995171][T31707] FAULT_INJECTION: forcing a failure. [ 1911.995171][T31707] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.008020][T31707] CPU: 0 UID: 0 PID: 31707 Comm: syz.6.6591 Tainted: G L syzkaller #0 PREEMPT(full) [ 1912.008049][T31707] Tainted: [L]=SOFTLOCKUP [ 1912.008055][T31707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1912.008063][T31707] Call Trace: [ 1912.008067][T31707] [ 1912.008072][T31707] dump_stack_lvl+0x100/0x190 [ 1912.008093][T31707] should_fail_ex.cold+0x5/0xa [ 1912.008108][T31707] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1912.008126][T31707] should_failslab+0xc2/0x120 [ 1912.008139][T31707] __kmalloc_noprof+0xe0/0x850 [ 1912.008158][T31707] tomoyo_realpath_from_path+0xb6/0x690 [ 1912.008179][T31707] tomoyo_path_number_perm+0x23c/0x580 [ 1912.008193][T31707] ? tomoyo_path_number_perm+0x22e/0x580 [ 1912.008209][T31707] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1912.008237][T31707] ? find_held_lock+0x2b/0x80 [ 1912.008252][T31707] ? __fget_files+0x215/0x3d0 [ 1912.008264][T31707] ? hook_file_ioctl_common+0x146/0x410 [ 1912.008279][T31707] ? __fget_files+0x21f/0x3d0 [ 1912.008293][T31707] security_file_ioctl+0xd3/0x230 [ 1912.008310][T31707] __x64_sys_ioctl+0xb7/0x210 [ 1912.008327][T31707] do_syscall_64+0x106/0xf80 [ 1912.008338][T31707] ? clear_bhb_loop+0x40/0x90 [ 1912.008352][T31707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.008363][T31707] RIP: 0033:0x7fc674f9c819 [ 1912.008373][T31707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1912.008384][T31707] RSP: 002b:00007fc675d7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1912.008394][T31707] RAX: ffffffffffffffda RBX: 00007fc675216090 RCX: 00007fc674f9c819 [ 1912.008401][T31707] RDX: 0000200000000080 RSI: 00000000000007a8 RDI: 0000000000000007 [ 1912.008408][T31707] RBP: 00007fc675d7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1912.008414][T31707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.008420][T31707] R13: 00007fc675216128 R14: 00007fc675216090 R15: 00007ffda1fa17d8 [ 1912.008434][T31707] [ 1912.008454][T31707] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1912.418353][T17504] usbhid 7-1:0.0: can't add hid device: -71 [ 1912.440074][T17504] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1912.491380][T17504] usb 7-1: USB disconnect, device number 44 [ 1912.642527][T31711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1913.504958][ T30] audit: type=1400 audit(2000000875.026:2866): avc: denied { setopt } for pid=31721 comm="syz.6.6604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1913.781598][T28126] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1913.798985][T28126] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1913.898703][T28126] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1914.142716][T28126] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1914.225907][T28121] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1914.298182][T28121] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1914.372430][T28121] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1914.408752][T28121] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1915.745616][T31754] netlink: 5 bytes leftover after parsing attributes in process `syz.6.6611'. [ 1915.781027][T31754] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6611'. [ 1916.024749][T31760] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6611'. [ 1916.033864][T31760] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6611'. [ 1916.132212][T31758] overlayfs: failed to clone upperpath [ 1916.287378][T31758] overlayfs: failed to clone upperpath [ 1916.290966][T17504] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1916.461029][T17504] usb 7-1: Using ep0 maxpacket: 8 [ 1916.468244][T17504] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1916.505077][T17504] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1916.535157][T17504] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1916.548290][ T5921] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1916.594755][T17504] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1916.621162][T17504] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1916.641672][T17504] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1916.669767][T17504] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1916.695868][T17504] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.721250][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 1916.732275][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.761974][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1916.780807][ T5921] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1916.812699][T31786] loop5: detected capacity change from 0 to 7 [ 1916.821002][ T5921] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1916.842141][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.851039][T31786] Dev loop5: unable to read RDB block 7 [ 1916.861693][T31786] loop5: unable to read partition table [ 1916.878070][ T5921] usb 2-1: config 0 descriptor?? [ 1916.898017][T31786] loop5: partition table beyond EOD, truncated [ 1916.922654][T17504] usb 7-1: usb_control_msg returned -32 [ 1916.938475][T31786] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1916.940991][T17504] usbtmc 7-1:16.0: can't read capabilities [ 1917.161515][T31791] FAULT_INJECTION: forcing a failure. [ 1917.161515][T31791] name failslab, interval 1, probability 0, space 0, times 0 [ 1917.174224][T31791] CPU: 0 UID: 0 PID: 31791 Comm: syz.1.6615 Tainted: G L syzkaller #0 PREEMPT(full) [ 1917.174249][T31791] Tainted: [L]=SOFTLOCKUP [ 1917.174255][T31791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1917.174264][T31791] Call Trace: [ 1917.174270][T31791] [ 1917.174277][T31791] dump_stack_lvl+0x100/0x190 [ 1917.174306][T31791] should_fail_ex.cold+0x5/0xa [ 1917.174326][T31791] ? tomoyo_encode2+0xfb/0x3c0 [ 1917.174351][T31791] should_failslab+0xc2/0x120 [ 1917.174369][T31791] __kmalloc_noprof+0xe0/0x850 [ 1917.174393][T31791] ? d_absolute_path+0x136/0x1b0 [ 1917.174420][T31791] tomoyo_encode2+0xfb/0x3c0 [ 1917.174447][T31791] tomoyo_encode+0x29/0x50 [ 1917.174467][T31791] tomoyo_realpath_from_path+0x18c/0x690 [ 1917.174493][T31791] tomoyo_path_number_perm+0x23c/0x580 [ 1917.174510][T31791] ? tomoyo_path_number_perm+0x22e/0x580 [ 1917.174530][T31791] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1917.174568][T31791] ? find_held_lock+0x2b/0x80 [ 1917.174586][T31791] ? __fget_files+0x215/0x3d0 [ 1917.174601][T31791] ? hook_file_ioctl_common+0x146/0x410 [ 1917.174621][T31791] ? __fget_files+0x21f/0x3d0 [ 1917.174639][T31791] security_file_ioctl+0xd3/0x230 [ 1917.174660][T31791] __x64_sys_ioctl+0xb7/0x210 [ 1917.174683][T31791] do_syscall_64+0x106/0xf80 [ 1917.174697][T31791] ? clear_bhb_loop+0x40/0x90 [ 1917.174714][T31791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.174728][T31791] RIP: 0033:0x7f4b08b9c819 [ 1917.174741][T31791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1917.174755][T31791] RSP: 002b:00007f4b09984028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1917.174769][T31791] RAX: ffffffffffffffda RBX: 00007f4b08e16090 RCX: 00007f4b08b9c819 [ 1917.174778][T31791] RDX: 0000200000000080 RSI: 00000000000007a8 RDI: 0000000000000007 [ 1917.174787][T31791] RBP: 00007f4b09984090 R08: 0000000000000000 R09: 0000000000000000 [ 1917.174795][T31791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1917.174809][T31791] R13: 00007f4b08e16128 R14: 00007f4b08e16090 R15: 00007fff20082738 [ 1917.174828][T31791] [ 1917.174883][T31791] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1917.439805][T29668] usb 7-1: USB disconnect, device number 45 [ 1917.681225][ T5921] usbhid 2-1:0.0: can't add hid device: -71 [ 1917.710310][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1917.738544][ T5921] usb 2-1: USB disconnect, device number 89 [ 1917.818813][T31798] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1918.251801][T31803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6623'. [ 1918.990361][T31803] team0: Port device team_slave_0 removed [ 1919.568723][T31824] /dev/nullb0: Can't lookup blockdev [ 1920.009530][T31832] loop5: detected capacity change from 0 to 7 [ 1920.071256][T31832] Dev loop5: unable to read RDB block 7 [ 1920.109222][T31832] loop5: unable to read partition table [ 1920.147539][T31832] loop5: partition table beyond EOD, truncated [ 1920.168943][T31832] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1920.577549][T31845] loop2: detected capacity change from 0 to 7 [ 1920.584650][T31845] loop2: [ 1920.587589][T31845] loop2: partition table partially beyond EOD, truncated [ 1920.611320][T29668] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1920.766428][T31850] overlayfs: failed to clone upperpath [ 1920.781042][T29668] usb 4-1: Using ep0 maxpacket: 16 [ 1920.787588][T29668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1920.865773][T29668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1920.883570][T31853] overlayfs: failed to clone upperpath [ 1921.150269][T29668] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1921.178736][T29668] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1921.207816][T29668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.219268][T31858] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.6643'. [ 1921.344865][T29668] usb 4-1: config 0 descriptor?? [ 1921.714778][T31868] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6644'. [ 1921.723782][T31868] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6644'. [ 1921.732740][T31868] netlink: 'syz.7.6644': attribute type 13 has an invalid length. [ 1921.740574][T31868] netlink: 'syz.7.6644': attribute type 12 has an invalid length. [ 1921.779295][T31868] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6644'. [ 1921.903107][ T30] audit: type=1800 audit(2000000883.316:2867): pid=31868 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.6644" name="nullb0" dev="tmpfs" ino=3241 res=0 errno=0 [ 1921.949836][T29668] usbhid 4-1:0.0: can't add hid device: -71 [ 1921.961839][T29668] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1922.009429][T29668] usb 4-1: USB disconnect, device number 81 [ 1923.193675][ T30] audit: type=1400 audit(2000000884.366:2868): avc: denied { relabelto } for pid=31890 comm="syz.5.6649" name="file0" dev="tmpfs" ino=2393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 1923.265613][ T30] audit: type=1400 audit(2000000884.366:2869): avc: denied { associate } for pid=31890 comm="syz.5.6649" name="file0" dev="tmpfs" ino=2393 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0" [ 1923.447033][T31898] CIFS mount error: No usable UNC path provided in device string! [ 1923.447033][T31898] [ 1923.484039][T31898] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1923.631074][ T5921] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1923.646596][T31903] overlayfs: failed to clone upperpath [ 1923.665181][T31903] overlayfs: failed to clone upperpath [ 1923.678849][T31906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1923.738459][ T30] audit: type=1400 audit(2000000885.256:2870): avc: denied { write } for pid=31904 comm="syz.3.6652" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1923.951692][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 1923.963016][ T5921] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1923.972157][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.984625][ T5921] usb 2-1: config 0 descriptor?? [ 1923.990350][T31900] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1924.259120][T16963] Bluetooth: hci2: unexpected subevent 0x01 length: 14 < 18 [ 1924.413373][ T5921] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 1924.420984][ T5921] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 1924.428394][ T5921] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 1924.435975][ T5921] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 1924.445132][ T5921] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 1924.454906][ T5921] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 1924.468684][ T5921] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 1924.480986][ T5921] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 1924.491297][ T5921] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 1924.500032][ T30] audit: type=1400 audit(2000000886.016:2871): avc: denied { setattr } for pid=31922 comm="syz.7.6659" name="ALG" dev="sockfs" ino=130205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1924.525084][ T5921] magicmouse 0003:05AC:0324.004C: unknown main item tag 0x0 [ 1924.546330][ T5921] magicmouse 0003:05AC:0324.004C: hidraw0: USB HID v7f.fd Device [HID 05ac:0324] on usb-dummy_hcd.1-1/input0 [ 1924.565808][ T5921] magicmouse 0003:05AC:0324.004C: magicmouse input not registered [ 1924.585234][ T5921] magicmouse 0003:05AC:0324.004C: probe with driver magicmouse failed with error -12 [ 1924.683344][T31900] ptrace attach of "./syz-executor exec"[31930] was attempted by "./syz-executor exec"[31900] [ 1924.751247][T17504] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1924.826328][ T5921] usb 2-1: USB disconnect, device number 90 [ 1924.902131][T17504] usb 4-1: Using ep0 maxpacket: 16 [ 1924.909167][T17504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1924.920748][T17504] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1924.931557][T17504] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1924.958725][T17504] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1924.978145][T17504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.997369][T17504] usb 4-1: config 0 descriptor?? [ 1925.081091][ T793] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1925.104572][T22197] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1925.117272][T22197] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1925.127546][T22197] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1925.135364][T22197] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1925.142980][T22197] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1925.231156][ T793] usb 7-1: device descriptor read/64, error -71 [ 1925.328848][T17504] usbhid 4-1:0.0: can't add hid device: -71 [ 1925.404488][T17504] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1925.501202][ T793] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1925.527878][T17504] usb 4-1: USB disconnect, device number 82 [ 1925.679689][ T30] audit: type=1400 audit(2000000887.196:2872): avc: denied { unlink } for pid=23552 comm="syz-executor" name="file0" dev="tmpfs" ino=2393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0" [ 1925.711115][ T793] usb 7-1: device descriptor read/64, error -71 [ 1925.737511][T31944] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6666'. [ 1925.821162][ T793] usb usb7-port1: attempt power cycle [ 1925.854303][T31938] lo speed is unknown, defaulting to 1000 [ 1925.863713][T31938] lo speed is unknown, defaulting to 1000 [ 1925.929226][T27748] syz_tun (unregistering): left allmulticast mode [ 1925.951564][T27748] bond0: (slave syz_tun): Releasing backup interface [ 1926.161488][ T793] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1926.197688][T31938] chnl_net:caif_netlink_parms(): no params data found [ 1926.205533][ T793] usb 7-1: device descriptor read/8, error -71 [ 1926.212419][T17504] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1926.370927][T17504] usb 2-1: Using ep0 maxpacket: 8 [ 1926.377650][T17504] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 1926.388511][T17504] usb 2-1: config 0 has no interface number 0 [ 1926.398333][T17504] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1926.400976][T29668] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1926.411382][T17504] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1926.418523][T31938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1926.429089][T17504] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1926.446948][T17504] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1926.447407][T31938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1926.457294][T17504] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1926.477211][ T793] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1926.485540][T17504] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1926.495089][T17504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.497477][T31938] bridge_slave_0: entered allmulticast mode [ 1926.510498][T17504] usb 2-1: config 0 descriptor?? [ 1926.516223][ T793] usb 7-1: device descriptor read/8, error -71 [ 1926.530828][T31938] bridge_slave_0: entered promiscuous mode [ 1926.537892][T17504] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1926.545274][T31938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1926.564818][T31938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.580243][T31938] bridge_slave_1: entered allmulticast mode [ 1926.601013][T29668] usb 4-1: Using ep0 maxpacket: 8 [ 1926.607622][T31938] bridge_slave_1: entered promiscuous mode [ 1926.622056][T29668] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1926.630158][T29668] usb 4-1: config 0 has no interface number 0 [ 1926.631220][ T793] usb usb7-port1: unable to enumerate USB device [ 1926.662084][T29668] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1926.686244][T29668] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1926.732729][T29668] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1926.772311][T29668] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1926.790961][T31938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1926.800062][T29668] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1926.824429][T31938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1926.840151][T29668] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1926.861006][T29668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.873906][T28130] bridge_slave_1: left allmulticast mode [ 1926.879578][T28130] bridge_slave_1: left promiscuous mode [ 1926.887827][T29668] usb 4-1: config 0 descriptor?? [ 1926.893027][T28130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.925646][T28130] ¾x9ÿ: left allmulticast mode [ 1926.930476][T28130] ¾x9ÿ: left promiscuous mode [ 1926.981374][T28130] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1927.023091][T29668] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1927.250997][T16963] Bluetooth: hci0: command tx timeout [ 1929.282951][T16963] Bluetooth: hci0: command tx timeout [ 1930.413268][ T793] usb 2-1: USB disconnect, device number 91 [ 1930.438351][T31987] loop5: detected capacity change from 0 to 7 [ 1930.445073][T31987] Dev loop5: unable to read RDB block 7 [ 1930.452149][ T793] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 1930.460512][T31987] loop5: unable to read partition table [ 1930.476630][T31987] loop5: partition table beyond EOD, truncated [ 1930.490199][T31987] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1930.645196][T28130] bond5 (unregistering): (slave geneve3): Releasing active interface [ 1930.735729][ T5929] usb 4-1: USB disconnect, device number 83 [ 1930.747539][ T5929] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 1930.757908][T28130] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1930.893826][T31999] fuse: Bad value for 'fd' [ 1931.088320][T28130] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 1931.112412][T28130] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 1931.156977][T28130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1931.177795][T28130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1931.199857][T28130] bond0 (unregistering): Released all slaves [ 1931.216888][T28130] bond1 (unregistering): Released all slaves [ 1931.233253][T32001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6677'. [ 1931.253522][T28130] bond2 (unregistering): Released all slaves [ 1931.321106][ T30] audit: type=1400 audit(2000000892.836:2873): avc: denied { mounton } for pid=32000 comm="syz.1.6677" path="/99/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 1931.370075][T16963] Bluetooth: hci0: command tx timeout [ 1931.372038][T28130] bond3 (unregistering): Released all slaves [ 1931.436126][T28130] bond4 (unregistering): Released all slaves [ 1931.503936][T28130] bond5 (unregistering): Released all slaves [ 1931.635742][T31938] team0: Port device team_slave_0 added [ 1931.641227][T31993] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1931.647333][T31993] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1931.656656][T31993] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1931.662651][T31993] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1931.672447][T31993] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1931.734327][T28130] tipc: Left network mode [ 1931.735906][T31938] team0: Port device team_slave_1 added [ 1932.155836][ T30] audit: type=1400 audit(2000000893.646:2874): avc: denied { connect } for pid=32005 comm="syz.3.6678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1932.291007][ T5940] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1932.478415][T31938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1932.541369][T31938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1932.653511][ T5940] usb 7-1: Using ep0 maxpacket: 16 [ 1932.655557][T32022] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1932.671589][T31938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1932.698440][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.735028][T31938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1932.742301][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1932.756633][T31938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1932.786709][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1932.817046][ T5940] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1932.833609][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.844360][T31938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1932.867262][ T5940] usb 7-1: config 0 descriptor?? [ 1932.917154][T32026] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1933.554166][ T5940] usbhid 7-1:0.0: can't add hid device: -71 [ 1933.577739][ T5940] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1933.612133][ T5940] usb 7-1: USB disconnect, device number 50 [ 1933.681115][T22197] Bluetooth: hci2: command 0x0c1a tx timeout [ 1933.691116][T31938] hsr_slave_0: entered promiscuous mode [ 1933.697652][T31938] hsr_slave_1: entered promiscuous mode [ 1933.709213][T31938] debugfs: 'hsr0' already exists in 'hsr' [ 1933.715069][T31938] Cannot create hsr debugfs directory [ 1933.763174][T22197] Bluetooth: hci0: command 0x0c1a tx timeout [ 1933.763181][T16963] Bluetooth: hci6: command 0x0c1a tx timeout [ 1934.198651][T32057] loop2: detected capacity change from 0 to 7 [ 1934.337489][T31424] loop2: [ 1935.166852][T31424] loop2: partition table partially beyond EOD, truncated [ 1935.841180][T16963] Bluetooth: hci0: command 0x0c1a tx timeout [ 1935.916643][T32057] loop2: [ 1935.942888][T32057] loop2: partition table partially beyond EOD, truncated [ 1936.265614][T28130] hsr_slave_0: left promiscuous mode [ 1936.278817][T28130] hsr_slave_1: left promiscuous mode [ 1936.362000][T32072] ubi: mtd0 is already attached to ubi31 [ 1936.441154][T16963] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 1936.728952][T28130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1936.744647][T28130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1936.853619][ T793] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 1937.091633][ T793] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1937.099673][ T793] usb 7-1: config 0 has no interface number 0 [ 1937.111413][ T793] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1937.158735][ T793] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1937.174291][ T793] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1937.236747][ T793] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1937.260558][ T793] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1937.315313][ T793] usb 7-1: Product: syz [ 1937.337763][ T793] usb 7-1: SerialNumber: syz [ 1937.395323][T28130] team0 (unregistering): Port device team_slave_1 removed [ 1937.416274][ T793] usb 7-1: config 0 descriptor?? [ 1937.429315][ T793] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1937.447389][T28130] team0 (unregistering): Port device team_slave_0 removed [ 1937.456687][ T793] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input138 [ 1937.630608][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1937.730964][T17504] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1937.810764][T32080] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1937.892622][T17504] usb 2-1: Using ep0 maxpacket: 32 [ 1937.922181][T16963] Bluetooth: hci0: command 0x0c1a tx timeout [ 1937.929575][T17504] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1937.993233][T17504] usb 2-1: config 0 has no interface number 0 [ 1938.025273][T17504] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1938.067353][T17504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.108094][T17504] usb 2-1: Product: syz [ 1938.121452][T17504] usb 2-1: Manufacturer: syz [ 1938.145346][T17504] usb 2-1: SerialNumber: syz [ 1938.155831][T32088] loop5: detected capacity change from 0 to 7 [ 1938.166586][T32088] Dev loop5: unable to read RDB block 7 [ 1938.173697][T32088] loop5: unable to read partition table [ 1938.188437][T17504] usb 2-1: config 0 descriptor?? [ 1938.205610][T32088] loop5: partition table beyond EOD, truncated [ 1938.227360][T32088] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1938.238967][T17504] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1938.283860][T17504] em28xx 2-1:0.132: Video interface 132 found: isoc [ 1938.459472][T28130] IPVS: stop unused estimator thread 0... [ 1938.619085][T32078] mkiss: ax0: crc mode is auto. [ 1938.707993][T32064] lo speed is unknown, defaulting to 1000 [ 1938.749101][T32064] lo speed is unknown, defaulting to 1000 [ 1938.867041][T17504] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1938.882403][ T793] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1939.004759][ C1] cm109_urb_ctl_callback: 34 callbacks suppressed [ 1939.004783][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1939.018487][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1939.025660][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1939.033658][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1939.041889][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1939.049036][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1939.056379][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1939.064058][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1939.071397][ T793] usb 4-1: device descriptor read/64, error -71 [ 1939.077717][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1939.084959][ C1] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1939.092801][ T24] usb 7-1: USB disconnect, device number 51 [ 1939.097390][T31938] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1939.098751][ C1] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1939.188322][ T24] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1939.205886][T31938] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1939.302081][T31938] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1939.311625][T31938] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1939.621118][ T793] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1939.750992][ T793] usb 4-1: device descriptor read/64, error -71 [ 1939.792722][T17504] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1939.856715][T17504] em28xx 2-1:0.132: board has no eeprom [ 1939.862814][ T793] usb usb4-port1: attempt power cycle [ 1939.988875][T17504] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1940.000087][T17504] em28xx 2-1:0.132: analog set to isoc mode. [ 1940.006821][ T24] em28xx 2-1:0.132: Registering V4L2 extension [ 1940.017651][T17504] usb 2-1: USB disconnect, device number 92 [ 1940.028259][T17504] em28xx 2-1:0.132: Disconnecting em28xx [ 1940.219449][T31938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1940.251888][ T793] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1940.262279][T32132] fuse: Bad value for 'rootmode' [ 1940.289201][ T793] usb 4-1: device descriptor read/8, error -71 [ 1940.303848][T31938] 8021q: adding VLAN 0 to HW filter on device team0 [ 1940.342158][T28130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1940.349309][T28130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1940.357156][ T24] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1940.368413][ T24] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1940.395149][ T24] em28xx 2-1:0.132: No AC97 audio processor [ 1940.428429][T28130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1940.435609][T28130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1940.472262][ T24] usb 2-1: Decoder not found [ 1940.487114][ T24] em28xx 2-1:0.132: failed to create media graph [ 1940.516582][ T24] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1940.531068][ T793] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1940.564113][ T793] usb 4-1: device descriptor read/8, error -71 [ 1940.578111][ T24] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1940.597156][T17504] em28xx 2-1:0.132: Closing input extension [ 1940.617535][T17504] em28xx 2-1:0.132: Freeing device [ 1940.691407][ T793] usb usb4-port1: unable to enumerate USB device [ 1940.815953][T32148] ubi: mtd0 is already attached to ubi31 [ 1941.551935][T31938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1942.171072][T29668] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1942.342220][T29668] usb 7-1: Using ep0 maxpacket: 16 [ 1942.357589][T29668] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1942.394164][T29668] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1942.454870][T29668] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1942.484143][T31938] veth0_vlan: entered promiscuous mode [ 1942.498138][T29668] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.529995][T31938] veth1_vlan: entered promiscuous mode [ 1942.551799][T29668] usb 7-1: config 0 descriptor?? [ 1942.585318][T29668] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1942.646750][T31938] veth0_macvtap: entered promiscuous mode [ 1942.701541][T31938] veth1_macvtap: entered promiscuous mode [ 1942.758509][T31938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1942.874245][T29668] usb 7-1: USB disconnect, device number 52 [ 1943.099137][T31938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1943.137495][T22452] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.180398][T22452] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.234693][T22452] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.265965][T22452] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1943.410724][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1943.436873][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1943.504654][T28121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1943.526763][T28121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1943.556540][T32201] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1944.212059][T32208] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=32208 comm=syz.7.6664 [ 1944.531147][T17504] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1944.820987][T17504] usb 7-1: Using ep0 maxpacket: 16 [ 1944.851847][T32220] fuse: Bad value for 'rootmode' [ 1944.875862][T17504] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1944.919293][T17504] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.949939][T17504] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1944.998691][T17504] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1945.018522][T17504] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.052606][T17504] usb 7-1: Product: syz [ 1945.077829][T17504] usb 7-1: Manufacturer: syz [ 1945.102187][T17504] usb 7-1: SerialNumber: syz [ 1945.334142][T17504] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1945.511224][T17504] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1945.547158][T17504] usb 7-1: 2:1 : no UAC_FORMAT_TYPE desc [ 1945.692420][T17504] usb 7-1: USB disconnect, device number 53 [ 1945.740316][T32123] udevd[32123]: setting owner of /dev/bus/usb/007/053 to uid=0, gid=0 failed: No such file or directory [ 1945.913550][T32123] udevd[32123]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1945.950963][ T5940] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1946.122807][ T5940] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1946.146791][ T5940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1946.209220][ T5940] usb 2-1: selecting invalid altsetting 3 [ 1946.225585][ T5940] comedi comedi4: could not set alternate setting 3 in high speed [ 1946.248211][ T5940] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1946.275480][ T5940] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1946.357023][T32250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1946.442969][T32249] netlink: 'syz.7.6719': attribute type 1 has an invalid length. [ 1946.454124][T32249] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6719'. [ 1946.504474][T32253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1946.863961][T16963] Bluetooth: hci0: unexpected subevent 0x01 length: 14 < 18 [ 1947.175545][T32263] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1947.571570][T12921] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1947.771288][T12921] usb 8-1: Using ep0 maxpacket: 16 [ 1947.788373][T12921] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.812408][T12921] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1947.856560][T12921] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1947.886497][T12921] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1948.064627][T12921] usb 8-1: config 0 descriptor?? [ 1948.096073][T32278] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1948.117326][T12921] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1948.193980][T32280] fuse: Bad value for 'rootmode' [ 1948.361005][T12921] usb 8-1: USB disconnect, device number 68 [ 1948.668949][ T24] usb 2-1: USB disconnect, device number 93 [ 1949.101875][T32304] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1949.115584][ T24] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1949.330941][ T24] usb 2-1: device descriptor read/64, error -71 [ 1949.525620][T32311] ubi: mtd0 is already attached to ubi31 [ 1950.057703][T16963] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1950.181039][ T24] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1950.301101][T29668] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1950.360934][ T24] usb 2-1: device descriptor read/64, error -71 [ 1951.040996][ T24] usb usb2-port1: attempt power cycle [ 1951.400911][T29668] usb 8-1: Using ep0 maxpacket: 16 [ 1951.597765][T29668] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1951.789098][ T30] audit: type=1400 audit(2000000913.296:2875): avc: denied { bind } for pid=32327 comm="syz.1.6739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1951.815667][T32329] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6739'. [ 1951.843557][T32329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6739'. [ 1951.869776][T29668] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1951.937663][T29668] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1951.955162][T29668] usb 8-1: Product: syz [ 1951.959379][T29668] usb 8-1: Manufacturer: syz [ 1951.984844][T29668] usb 8-1: SerialNumber: syz [ 1951.996586][T29668] usb 8-1: config 0 descriptor?? [ 1952.016013][T29668] sr9700 8-1:0.0: probe with driver sr9700 failed with error -22 [ 1952.071164][ T793] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1952.186934][T32341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1952.241443][ T793] usb 4-1: Using ep0 maxpacket: 16 [ 1952.252294][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1952.353156][ T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1952.609784][ T793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1952.672232][ T793] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1952.746504][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.768618][ T793] usb 4-1: config 0 descriptor?? [ 1953.551813][T29668] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1953.882466][T17504] usb 8-1: USB disconnect, device number 69 [ 1954.011696][T29668] usb 7-1: Using ep0 maxpacket: 16 [ 1954.021980][T29668] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.034789][T29668] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1954.048431][T29668] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1954.057869][T29668] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.070374][T29668] usb 7-1: config 0 descriptor?? [ 1954.179976][T29668] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1955.184693][ T793] usbhid 4-1:0.0: can't add hid device: -71 [ 1955.211067][ T793] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1955.417805][ T5940] usb 7-1: USB disconnect, device number 54 [ 1955.690701][ T793] usb 4-1: USB disconnect, device number 88 [ 1955.930954][T29668] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 1956.108184][T29668] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1956.132277][T29668] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1956.153477][T29668] usb 8-1: can't read configurations, error -71 [ 1956.222761][T32377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.233593][T32377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.261747][ T30] audit: type=1400 audit(2000000917.736:2876): avc: denied { bind } for pid=32373 comm="syz.1.6753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1956.369690][ T30] audit: type=1400 audit(2000000917.736:2877): avc: denied { name_bind } for pid=32373 comm="syz.1.6753" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1956.430922][ T30] audit: type=1400 audit(2000000917.736:2878): avc: denied { node_bind } for pid=32373 comm="syz.1.6753" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1956.583774][ T30] audit: type=1400 audit(2000000917.736:2879): avc: denied { read } for pid=32373 comm="syz.1.6753" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1957.140987][T12921] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1957.505413][T12921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1957.515403][T12921] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 1957.531011][T12921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 250, changing to 11 [ 1957.545597][T12921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 228, changing to 7 [ 1957.590542][T12921] usb 4-1: New USB device found, idVendor=0e41, idProduct=4252, bcdDevice= 0.40 [ 1957.599911][T12921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.610520][T12921] usb 4-1: Product: syz [ 1957.619995][T12921] usb 4-1: Manufacturer: syz [ 1957.626424][T12921] usb 4-1: SerialNumber: syz [ 1958.129846][T32386] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1958.688386][T32407] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6760'. [ 1958.751463][T32366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1958.760096][T32366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1958.874836][T12921] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1958.919786][T12921] usb 4-1: MIDIStreaming interface descriptor not found [ 1958.976491][T12921] usb 4-1: too many endpoints [ 1959.006486][T32414] overlayfs: failed to clone upperpath [ 1959.061444][ T5929] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 1959.086197][T12921] usb 4-1: USB disconnect, device number 89 [ 1959.194404][T31597] udevd[31597]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1959.231516][ T5929] usb 8-1: Using ep0 maxpacket: 16 [ 1959.239453][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1959.257702][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1959.276434][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1959.299564][ T5929] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1959.311037][T17504] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 1959.334323][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.357930][ T5929] usb 8-1: config 0 descriptor?? [ 1959.473052][T17504] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1959.494314][T17504] usb 2-1: config 0 has no interface number 0 [ 1959.500493][T17504] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1959.531822][T17504] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1959.556543][T17504] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1959.580826][T17504] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1959.603847][T17504] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1959.651523][T17504] usb 2-1: Product: syz [ 1959.781079][T29668] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1959.890325][T17504] usb 2-1: SerialNumber: syz [ 1959.903929][ T5929] usbhid 8-1:0.0: can't add hid device: -71 [ 1959.916010][ T5929] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1959.938739][ T5929] usb 8-1: USB disconnect, device number 72 [ 1959.957167][T17504] usb 2-1: config 0 descriptor?? [ 1959.979531][T17504] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1959.995750][T17504] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input139 [ 1960.070961][T29668] usb 7-1: Using ep0 maxpacket: 16 [ 1960.087747][T29668] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1960.108185][T29668] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1960.133155][T16963] Bluetooth: hci2: unexpected subevent 0x01 length: 14 < 18 [ 1960.151091][T29668] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1960.170423][T29668] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.185199][T29668] usb 7-1: config 0 descriptor?? [ 1960.205046][T29668] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1962.255843][ C1] cm109_urb_ctl_callback: 6 callbacks suppressed [ 1962.255868][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1962.261499][ T5929] usb 2-1: USB disconnect, device number 97 [ 1962.262243][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1962.381237][T29668] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1962.436998][T12921] usb 7-1: USB disconnect, device number 55 [ 1962.470991][ T5929] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1962.601237][T29668] usb 4-1: Using ep0 maxpacket: 16 [ 1962.689126][T29668] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1962.710987][T29668] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1962.731246][T29668] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1962.754116][T29668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1962.784151][T29668] usb 4-1: config 0 descriptor?? [ 1963.294812][T29668] hid-picolcd 0003:04D8:F002.004D: global environment stack underflow [ 1963.307075][T29668] hid-picolcd 0003:04D8:F002.004D: item 0 4 1 11 parsing failed [ 1963.426632][T29668] hid-picolcd 0003:04D8:F002.004D: device report parse failed [ 1963.428169][T32455] overlayfs: failed to clone upperpath [ 1963.461252][T29668] hid-picolcd 0003:04D8:F002.004D: probe with driver hid-picolcd failed with error -22 [ 1963.594208][T29668] usb 4-1: USB disconnect, device number 90 [ 1963.839004][T32462] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1964.655416][T32459] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1964.800528][T32466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1964.987836][ T30] audit: type=1400 audit(2000000926.506:2880): avc: denied { ioctl } for pid=32478 comm="syz.3.6779" path="/135/file0/file0" dev="fuse" ino=64 ioctlcmd=0x921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 1965.064995][T32479] md: invalid raid superblock magic on ram0 [ 1965.072980][T32479] md: ram0 does not have a valid v0.0 superblock, not importing! [ 1965.092125][T32479] md: md_import_device returned -22 [ 1965.386161][T32491] netlink: 268 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1965.950975][ T5929] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1966.101332][ T5929] usb 7-1: Using ep0 maxpacket: 16 [ 1966.131928][ T5929] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1966.170350][ T5929] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1966.184227][ T5929] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1966.194136][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.220255][ T5929] usb 7-1: config 0 descriptor?? [ 1966.234873][ T5929] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1966.522964][T12921] usb 7-1: USB disconnect, device number 56 [ 1966.571098][ T793] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1966.618006][ T5929] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 1966.800743][ T5929] usb 8-1: Using ep0 maxpacket: 16 [ 1966.831090][ T793] usb 4-1: Using ep0 maxpacket: 8 [ 1966.837525][ T793] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1966.858974][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1966.861295][ T793] usb 4-1: config 0 has no interface number 0 [ 1966.878620][ T5929] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1966.909114][ T793] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1966.909915][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1966.939430][ T793] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1966.939620][ T5929] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1966.964286][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.973389][ T793] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1966.991681][ T5929] usb 8-1: config 0 descriptor?? [ 1966.994816][ T793] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1967.021000][ T793] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1967.050950][ T793] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1967.067352][ T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.139393][ T793] usb 4-1: config 0 descriptor?? [ 1967.159113][ T793] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1967.302205][T32513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1969.722941][T32521] netlink: 'syz.6.6790': attribute type 4 has an invalid length. [ 1969.747631][T32521] netlink: 17 bytes leftover after parsing attributes in process `syz.6.6790'. [ 1970.000981][ T5929] usbhid 8-1:0.0: can't add hid device: -71 [ 1970.007048][ T5929] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1970.037498][ T5929] usb 8-1: USB disconnect, device number 73 [ 1970.404933][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1970.600977][ T5929] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1970.697883][ T793] usb 4-1: USB disconnect, device number 91 [ 1970.709486][ T793] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1970.798566][ T5929] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1970.816988][ T5929] usb 7-1: config 0 has no interface number 0 [ 1970.839023][ T5929] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1970.868161][ T5929] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1970.896966][ T5929] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1970.899716][ T5929] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1970.951733][T32551] netlink: 268 bytes leftover after parsing attributes in process `syz.1.6796'. [ 1970.967200][ T5929] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1970.967227][ T5929] usb 7-1: Product: syz [ 1970.967243][ T5929] usb 7-1: SerialNumber: syz [ 1971.114739][T32557] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1971.122969][ T5929] usb 7-1: config 0 descriptor?? [ 1971.129136][ T5929] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1971.130010][ T5929] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input140 [ 1972.802277][T32565] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1973.311082][ T5929] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 1973.487591][T32569] ubi: mtd0 is already attached to ubi31 [ 1973.502215][T16963] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1973.910970][ T5929] usb 8-1: Using ep0 maxpacket: 16 [ 1973.918973][ T5929] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1973.929910][ T5929] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1973.943123][ T5929] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1973.953318][ T5929] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1973.967090][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1973.974252][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1973.981425][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1973.988539][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1973.995844][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1974.003141][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1974.010318][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1974.017404][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1974.024486][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1974.031577][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1974.048908][ T5929] usb 8-1: config 0 descriptor?? [ 1974.054548][T32195] usb 7-1: USB disconnect, device number 57 [ 1974.060526][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1974.077575][ T5929] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1974.089830][T32195] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1974.909091][T32195] usb 8-1: USB disconnect, device number 74 [ 1975.183973][T32581] loop5: detected capacity change from 0 to 7 [ 1975.192009][T32123] Dev loop5: unable to read RDB block 7 [ 1975.197983][T32123] loop5: unable to read partition table [ 1975.207255][T32123] loop5: partition table beyond EOD, truncated [ 1975.229651][T32581] Dev loop5: unable to read RDB block 7 [ 1975.241123][T32581] loop5: unable to read partition table [ 1975.247053][T32581] loop5: partition table beyond EOD, truncated [ 1975.267637][T32581] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1975.543229][T32587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1975.551322][T32195] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1975.925354][T32195] usb 4-1: Using ep0 maxpacket: 8 [ 1977.247704][T32195] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1977.268674][T32195] usb 4-1: config 0 has no interface number 0 [ 1977.278637][T32195] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1977.308810][T32195] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1977.580944][T32195] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1977.715188][T32195] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1977.745833][T32195] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1978.750967][T32195] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1979.004732][T32195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1979.141697][T32195] usb 4-1: config 0 descriptor?? [ 1979.175109][T32195] usb 4-1: can't set config #0, error -71 [ 1979.202093][T32195] usb 4-1: USB disconnect, device number 92 [ 1979.504446][T32625] netlink: 268 bytes leftover after parsing attributes in process `syz.5.6820'. [ 1979.731597][T12921] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1979.844309][T32633] nilfs2: Unknown parameter 'áAQú_ÂÂþUN ¢ÓZœìQ…cõ4‘˜+ s¡.T^Á íF¦}]Z¦Jž4÷' [ 1979.870239][ T30] audit: type=1400 audit(2000000941.346:2881): avc: denied { shutdown } for pid=32626 comm="syz.6.6821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1979.971127][T12921] usb 2-1: Using ep0 maxpacket: 16 [ 1980.071218][T12921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1980.159941][T12921] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1980.171031][T12921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1980.179350][T12921] usb 2-1: Product: syz [ 1980.204525][T12921] usb 2-1: Manufacturer: syz [ 1980.214413][T12921] usb 2-1: SerialNumber: syz [ 1980.234145][T12921] usb 2-1: config 0 descriptor?? [ 1980.327963][ T793] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 1980.481939][T32640] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1980.573674][ T793] usb 8-1: Using ep0 maxpacket: 16 [ 1980.697291][ T793] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1980.836978][ T793] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1980.991464][ T793] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1980.993558][T32645] loop2: detected capacity change from 0 to 7 [ 1981.000777][ T793] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1981.101059][ T793] usb 8-1: config 0 descriptor?? [ 1981.109388][ T793] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1981.148286][T31424] Dev loop2: unable to read RDB block 7 [ 1981.154417][T31424] loop2: unable to read partition table [ 1981.173842][T31424] loop2: partition table beyond EOD, truncated [ 1981.189117][T32645] Dev loop2: unable to read RDB block 7 [ 1981.225695][T32645] loop2: unable to read partition table [ 1981.249553][T32645] loop2: partition table beyond EOD, truncated [ 1981.278444][T32645] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1981.433537][ T5940] usb 8-1: USB disconnect, device number 75 [ 1981.931111][T22197] Bluetooth: hci0: command 0x0c1a tx timeout [ 1982.219878][ T793] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1982.222658][T12921] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 1982.290376][T12921] usb 2-1: USB disconnect, device number 98 [ 1982.380915][ T793] usb 7-1: Using ep0 maxpacket: 32 [ 1982.404986][ T793] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1982.427453][ T793] usb 7-1: config 0 has no interface number 0 [ 1982.448515][ T793] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1982.477552][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1982.495850][ T793] usb 7-1: Product: syz [ 1982.507695][ T793] usb 7-1: Manufacturer: syz [ 1982.517579][ T793] usb 7-1: SerialNumber: syz [ 1982.547077][ T793] usb 7-1: config 0 descriptor?? [ 1982.566998][ T793] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1982.600533][ T793] em28xx 7-1:0.132: Video interface 132 found: isoc [ 1982.710984][T29668] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 1982.840997][T29668] usb 8-1: device descriptor read/64, error -71 [ 1982.972383][ T793] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1983.100933][T29668] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 1983.251059][T29668] usb 8-1: device descriptor read/64, error -71 [ 1983.373987][T29668] usb usb8-port1: attempt power cycle [ 1983.493723][ T793] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1983.506973][ T793] em28xx 7-1:0.132: board has no eeprom [ 1983.742517][ T5929] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1983.760966][T29668] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 1983.854078][T29668] usb 8-1: device descriptor read/8, error -71 [ 1983.953473][ T5929] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1984.029596][ T5929] usb 2-1: config 0 has no interface number 0 [ 1984.050378][ T5929] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1984.077502][ T793] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1984.091412][ T793] em28xx 7-1:0.132: analog set to isoc mode. [ 1984.097574][T17504] em28xx 7-1:0.132: Registering V4L2 extension [ 1984.107750][ T5929] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1984.118211][ T793] usb 7-1: USB disconnect, device number 58 [ 1984.132015][ T793] em28xx 7-1:0.132: Disconnecting em28xx [ 1984.171395][T29668] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 1984.304639][ T5929] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1984.334959][ T5929] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1984.350659][T29668] usb 8-1: device descriptor read/8, error -71 [ 1984.360328][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1984.419864][T17504] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1984.475272][T29668] usb usb8-port1: unable to enumerate USB device [ 1984.481851][ T5929] usb 2-1: Product: syz [ 1984.486719][ T5929] usb 2-1: SerialNumber: syz [ 1984.493779][ T5929] usb 2-1: config 0 descriptor?? [ 1984.511305][ T5929] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1984.519745][ T5929] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input141 [ 1984.529957][T17504] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1984.549508][T32676] lo speed is unknown, defaulting to 1000 [ 1984.556329][T17504] em28xx 7-1:0.132: No AC97 audio processor [ 1984.822016][T17504] usb 7-1: Decoder not found [ 1984.826651][T17504] em28xx 7-1:0.132: failed to create media graph [ 1984.835942][T32676] lo speed is unknown, defaulting to 1000 [ 1984.846798][T17504] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1984.880936][ T29] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1984.913768][T17504] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1984.930916][ T793] em28xx 7-1:0.132: Closing input extension [ 1984.955216][ T793] em28xx 7-1:0.132: Freeing device [ 1984.972187][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1985.042835][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 1985.072215][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.291180][ T29] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1985.291238][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.291258][ T29] usb 4-1: Product: syz [ 1985.291273][ T29] usb 4-1: Manufacturer: syz [ 1985.291288][ T29] usb 4-1: SerialNumber: syz [ 1985.298250][ T29] usb 4-1: config 0 descriptor?? [ 1985.302798][ T29] sr9700 4-1:0.0: probe with driver sr9700 failed with error -22 [ 1985.550962][ T24] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1985.688757][ C1] cm109_urb_ctl_callback: 73 callbacks suppressed [ 1985.688780][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1985.689097][T29668] usb 2-1: USB disconnect, device number 99 [ 1985.695266][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1985.700911][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1985.728534][T29668] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1985.745436][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1985.757673][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1985.786286][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1985.804838][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1985.849393][ T24] usb 7-1: config 0 descriptor?? [ 1985.870223][ T24] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1985.879585][T32706] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1986.380973][T29668] usb 8-1: new high-speed USB device number 80 using dummy_hcd [ 1986.651527][T29668] usb 8-1: Using ep0 maxpacket: 32 [ 1986.664347][T29668] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1986.983970][T29668] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1986.996334][T29668] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1987.020951][T29668] usb 8-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1987.039321][T29668] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1987.124398][T29668] usb 8-1: Product: syz [ 1987.129665][T29668] usb 8-1: Manufacturer: syz [ 1987.134783][T29668] usb 8-1: SerialNumber: syz [ 1987.153053][T29668] usb 8-1: config 0 descriptor?? [ 1987.169685][T29668] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input142 [ 1987.223767][T12921] usb 4-1: USB disconnect, device number 93 [ 1987.284221][ C0] xpad 8-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 1988.041200][T12921] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1988.960422][T32195] usb 7-1: USB disconnect, device number 59 [ 1989.091015][T12921] usb 4-1: device descriptor read/64, error -71 [ 1989.114163][ T30] audit: type=1400 audit(2000000950.626:2882): avc: denied { wake_alarm } for pid=32731 comm="syz.5.6853" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1989.351332][ T29] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1989.401336][T12921] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1989.462084][T32195] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1989.523199][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 1989.535840][ T29] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1989.552431][T12921] usb 4-1: device descriptor read/64, error -71 [ 1989.559520][ T29] usb 2-1: config 0 has no interface number 0 [ 1989.580757][ T29] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1989.611044][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.619078][ T29] usb 2-1: Product: syz [ 1989.640881][ T29] usb 2-1: Manufacturer: syz [ 1989.651038][ T29] usb 2-1: SerialNumber: syz [ 1989.666232][T32195] usb 7-1: Using ep0 maxpacket: 8 [ 1989.675132][ T29] usb 2-1: config 0 descriptor?? [ 1989.688682][T32195] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1989.700044][T12921] usb usb4-port1: attempt power cycle [ 1989.707138][ T29] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1989.717859][T32195] usb 7-1: config 0 has no interface number 0 [ 1989.740972][ T29] em28xx 2-1:0.132: Video interface 132 found: isoc [ 1989.741794][T32195] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1989.782055][T32195] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1989.794117][T32195] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1989.805671][T32195] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1989.815858][T32195] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1989.829313][T32195] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1989.838707][T32195] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.868591][T32195] usb 7-1: config 0 descriptor?? [ 1989.881554][T32195] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1989.930543][T32744] lo speed is unknown, defaulting to 1000 [ 1989.938220][T32744] lo speed is unknown, defaulting to 1000 [ 1990.049276][ T5940] usb 8-1: USB disconnect, device number 80 [ 1990.055366][ C0] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 1990.120891][T12921] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1990.162933][T12921] usb 4-1: device descriptor read/8, error -71 [ 1990.171398][T32740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1990.402023][T12921] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1990.486218][T32754] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1990.914264][T32756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.926030][T32756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.945859][T12921] usb 4-1: device descriptor read/8, error -71 [ 1991.041248][ T29] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1991.066084][T12921] usb usb4-port1: unable to enumerate USB device [ 1991.103227][ T29] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1991.160518][ T29] em28xx 2-1:0.132: board has no eeprom [ 1991.231343][ T29] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1991.239401][ T29] em28xx 2-1:0.132: analog set to isoc mode. [ 1991.266662][T32692] em28xx 2-1:0.132: Registering V4L2 extension [ 1991.324627][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 1991.362692][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 1991.431579][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 1991.486555][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 1991.638286][T22197] Bluetooth: hci2: unexpected subevent 0x01 length: 14 < 18 [ 1991.672151][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 1991.681372][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 1991.690486][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 1991.699848][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 1991.739732][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 1991.752868][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 1991.797875][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 1991.807305][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 1991.825420][T32692] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 1991.845772][T32692] em28xx 2-1:0.132: Config register raw data: 0xfffffffb [ 1991.854004][T32692] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1991.862940][T32692] em28xx 2-1:0.132: No AC97 audio processor [ 1991.894330][T32692] usb 2-1: Decoder not found [ 1991.952282][T32692] em28xx 2-1:0.132: failed to create media graph [ 1991.959064][T32692] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1991.978876][ T24] usb 2-1: USB disconnect, device number 100 [ 1991.988406][ T24] em28xx 2-1:0.132: Disconnecting em28xx [ 1992.014648][ T304] ================================================================== [ 1992.019902][T32692] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1992.022744][ T304] BUG: KASAN: slab-use-after-free in v4l2_fh_init+0x27d/0x2c0 [ 1992.022778][ T304] Read of size 8 at addr ffff888054f28790 by task v4l_id/304 [ 1992.022791][ T304] [ 1992.022803][ T304] CPU: 0 UID: 0 PID: 304 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1992.022826][ T304] Tainted: [L]=SOFTLOCKUP [ 1992.022833][ T304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1992.022843][ T304] Call Trace: [ 1992.022849][ T304] [ 1992.022855][ T304] dump_stack_lvl+0x100/0x190 [ 1992.022880][ T304] print_report+0x156/0x4c9 [ 1992.022902][ T304] ? __virt_addr_valid+0x239/0x430 [ 1992.022926][ T304] ? v4l2_fh_init+0x27d/0x2c0 [ 1992.022947][ T304] kasan_report+0xdf/0x1e0 [ 1992.022963][ T304] ? v4l2_fh_init+0x27d/0x2c0 [ 1992.022987][ T304] v4l2_fh_init+0x27d/0x2c0 [ 1992.023008][ T304] v4l2_fh_open+0x64/0xa0 [ 1992.023030][ T304] em28xx_v4l2_open+0x11e/0x570 [ 1992.023053][ T304] v4l2_open+0x1d2/0x490 [ 1992.023067][ T304] ? __pfx_v4l2_open+0x10/0x10 [ 1992.023081][ T304] chrdev_open+0x234/0x6a0 [ 1992.023098][ T304] ? __pfx_chrdev_open+0x10/0x10 [ 1992.023114][ T304] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1992.023135][ T304] do_dentry_open+0x6d8/0x1660 [ 1992.023150][ T304] ? __pfx_chrdev_open+0x10/0x10 [ 1992.023173][ T304] vfs_open+0x82/0x3f0 [ 1992.023192][ T304] path_openat+0x208c/0x31a0 [ 1992.023211][ T304] ? __pfx_path_openat+0x10/0x10 [ 1992.023231][ T304] do_file_open+0x20e/0x430 [ 1992.023248][ T304] ? __pfx_do_file_open+0x10/0x10 [ 1992.023269][ T304] ? alloc_fd+0x476/0x790 [ 1992.023286][ T304] ? do_getname+0x191/0x390 [ 1992.023306][ T304] do_sys_openat2+0x10d/0x1e0 [ 1992.023325][ T304] ? __pfx_do_sys_openat2+0x10/0x10 [ 1992.023346][ T304] __x64_sys_openat+0x12d/0x210 [ 1992.023365][ T304] ? __pfx___x64_sys_openat+0x10/0x10 [ 1992.023386][ T304] ? do_user_addr_fault+0x8d6/0x12f0 [ 1992.023404][ T304] do_syscall_64+0x106/0xf80 [ 1992.023419][ T304] ? clear_bhb_loop+0x40/0x90 [ 1992.023436][ T304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.023451][ T304] RIP: 0033:0x7fa025aa7407 [ 1992.023465][ T304] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1992.023479][ T304] RSP: 002b:00007ffc0d21bde0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1992.023495][ T304] RAX: ffffffffffffffda RBX: 00007fa026146880 RCX: 00007fa025aa7407 [ 1992.023506][ T304] RDX: 0000000000000000 RSI: 00007ffc0d21df1a RDI: ffffffffffffff9c [ 1992.023516][ T304] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1992.023525][ T304] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1992.023534][ T304] R13: 00007ffc0d21c030 R14: 00007fa0262ad000 R15: 000055abd41df4d8 [ 1992.023550][ T304] [ 1992.023555][ T304] [ 1992.031571][ T29] usb 8-1: new high-speed USB device number 81 using dummy_hcd [ 1992.038855][ T304] Allocated by task 32692: [ 1992.046609][ T24] em28xx 2-1:0.132: Closing input extension [ 1992.048513][ T304] kasan_save_stack+0x30/0x50 [ 1992.048543][ T304] kasan_save_track+0x14/0x30 [ 1992.048565][ T304] __kasan_kmalloc+0xaa/0xb0 [ 1992.048586][ T304] em28xx_v4l2_init.cold+0x94/0x3503 [ 1992.048602][ T304] em28xx_init_extension+0x13a/0x200 [ 1992.346587][ T304] request_module_async+0x61/0x80 [ 1992.351602][ T304] process_one_work+0xa23/0x19a0 [ 1992.356521][ T304] worker_thread+0x5ef/0xe50 [ 1992.361090][ T304] kthread+0x370/0x450 [ 1992.365138][ T304] ret_from_fork+0x754/0xd80 [ 1992.369706][ T304] ret_from_fork_asm+0x1a/0x30 [ 1992.374463][ T304] [ 1992.376775][ T304] Freed by task 32692: [ 1992.380817][ T304] kasan_save_stack+0x30/0x50 [ 1992.385505][ T304] kasan_save_track+0x14/0x30 [ 1992.390165][ T304] kasan_save_free_info+0x3b/0x70 [ 1992.395176][ T304] __kasan_slab_free+0x5f/0x80 [ 1992.399921][ T304] kfree+0x1f6/0x6b0 [ 1992.403797][ T304] kref_put.isra.0+0x56/0x90 [ 1992.408370][ T304] em28xx_v4l2_init.cold+0x280/0x3503 [ 1992.413718][ T304] em28xx_init_extension+0x13a/0x200 [ 1992.418985][ T304] request_module_async+0x61/0x80 [ 1992.423988][ T304] process_one_work+0xa23/0x19a0 [ 1992.428906][ T304] worker_thread+0x5ef/0xe50 [ 1992.433474][ T304] kthread+0x370/0x450 [ 1992.437525][ T304] ret_from_fork+0x754/0xd80 [ 1992.442094][ T304] ret_from_fork_asm+0x1a/0x30 [ 1992.446841][ T304] [ 1992.449150][ T304] The buggy address belongs to the object at ffff888054f28000 [ 1992.449150][ T304] which belongs to the cache kmalloc-8k of size 8192 [ 1992.463181][ T304] The buggy address is located 1936 bytes inside of [ 1992.463181][ T304] freed 8192-byte region [ffff888054f28000, ffff888054f2a000) [ 1992.477143][ T304] [ 1992.479464][ T304] The buggy address belongs to the physical page: [ 1992.485866][ T304] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54f28 [ 1992.494615][ T304] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1992.503092][ T304] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1992.510619][ T304] page_type: f5(slab) [ 1992.514580][ T304] raw: 00fff00000000040 ffff88813fe41280 dead000000000100 dead000000000122 [ 1992.523167][ T304] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1992.531747][ T304] head: 00fff00000000040 ffff88813fe41280 dead000000000100 dead000000000122 [ 1992.540399][ T304] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1992.549239][ T304] head: 00fff00000000003 ffffea000153ca01 00000000ffffffff 00000000ffffffff [ 1992.557914][ T304] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1992.566574][ T304] page dumped because: kasan: bad access detected [ 1992.572976][ T304] page_owner tracks the page as allocated [ 1992.578672][ T304] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 32692, tgid 32692 (kworker/1:3), ts 1991274440407, free_ts 1991197651918 [ 1992.600445][ T304] post_alloc_hook+0x153/0x170 [ 1992.605199][ T304] get_page_from_freelist+0x111d/0x3140 [ 1992.610728][ T304] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1992.616609][ T304] new_slab+0xa6/0x6b0 [ 1992.620658][ T304] refill_objects+0x26b/0x400 [ 1992.625318][ T304] __pcs_replace_empty_main+0x1ab/0x660 [ 1992.630853][ T304] __kmalloc_cache_noprof+0x493/0x6f0 [ 1992.636216][ T304] em28xx_v4l2_init.cold+0x94/0x3503 [ 1992.641482][ T304] em28xx_init_extension+0x13a/0x200 [ 1992.646748][ T304] request_module_async+0x61/0x80 [ 1992.651753][ T304] process_one_work+0xa23/0x19a0 [ 1992.656670][ T304] worker_thread+0x5ef/0xe50 [ 1992.661333][ T304] kthread+0x370/0x450 [ 1992.665384][ T304] ret_from_fork+0x754/0xd80 [ 1992.669954][ T304] ret_from_fork_asm+0x1a/0x30 [ 1992.674701][ T304] page last free pid 31424 tgid 31424 stack trace: [ 1992.681180][ T304] __free_frozen_pages+0x7e1/0x10d0 [ 1992.686449][ T304] qlist_free_all+0x47/0xe0 [ 1992.690945][ T304] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1992.696414][ T304] __kasan_slab_alloc+0x69/0x90 [ 1992.701780][ T304] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 1992.707660][ T304] __alloc_skb+0x140/0x710 [ 1992.712059][ T304] netlink_alloc_large_skb+0x69/0x150 [ 1992.717411][ T304] netlink_sendmsg+0x680/0xda0 [ 1992.722156][ T304] ____sys_sendmsg+0x9e1/0xb70 [ 1992.726908][ T304] ___sys_sendmsg+0x190/0x1e0 [ 1992.731564][ T304] __sys_sendmsg+0x170/0x220 [ 1992.736139][ T304] do_syscall_64+0x106/0xf80 [ 1992.740707][ T304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1992.746582][ T304] [ 1992.748886][ T304] Memory state around the buggy address: [ 1992.754508][ T304] ffff888054f28680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1992.762562][ T304] ffff888054f28700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1992.770602][ T304] >ffff888054f28780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1992.778637][ T304] ^ [ 1992.783216][ T304] ffff888054f28800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1992.791271][ T304] ffff888054f28880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1992.799407][ T304] ================================================================== [ 1992.981084][ T30] audit: type=1400 audit(2000000954.456:2883): avc: denied { read } for pid=5161 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1993.045048][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 1993.062235][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1993.074937][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1993.089486][ T30] audit: type=1400 audit(2000000954.456:2884): avc: denied { search } for pid=5161 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1993.386025][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1993.399262][ T29] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1993.409067][ T30] audit: type=1400 audit(2000000954.456:2885): avc: denied { append } for pid=5161 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1993.432649][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.447404][ T29] usb 8-1: config 0 descriptor?? [ 1993.456083][ T30] audit: type=1400 audit(2000000954.456:2886): avc: denied { open } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1993.718082][ T30] audit: type=1400 audit(2000000954.456:2887): avc: denied { getattr } for pid=5161 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1993.984772][ T29] usbhid 8-1:0.0: can't add hid device: -71 [ 1993.991710][ T29] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1994.161469][ T304] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1994.168711][ T304] CPU: 0 UID: 0 PID: 304 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT(full) [ 1994.179149][ T304] Tainted: [L]=SOFTLOCKUP [ 1994.183466][ T304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1994.193503][ T304] Call Trace: [ 1994.196760][ T304] [ 1994.199690][ T304] dump_stack_lvl+0x100/0x190 [ 1994.204359][ T304] vpanic+0x552/0x970 [ 1994.208323][ T304] ? __pfx_vpanic+0x10/0x10 [ 1994.212810][ T304] ? v4l2_fh_init+0x27d/0x2c0 [ 1994.217477][ T304] panic+0xd1/0xe0 [ 1994.221180][ T304] ? __pfx_panic+0x10/0x10 [ 1994.225580][ T304] ? v4l2_fh_init+0x27d/0x2c0 [ 1994.230243][ T304] ? preempt_schedule_common+0x42/0xc0 [ 1994.235689][ T304] ? check_panic_on_warn+0x1f/0x90 [ 1994.240781][ T304] check_panic_on_warn.cold+0x19/0x34 [ 1994.246136][ T304] end_report.part.0+0x3a/0x90 [ 1994.250887][ T304] kasan_report.cold+0xe/0x18 [ 1994.255550][ T304] ? v4l2_fh_init+0x27d/0x2c0 [ 1994.260213][ T304] v4l2_fh_init+0x27d/0x2c0 [ 1994.264701][ T304] v4l2_fh_open+0x64/0xa0 [ 1994.269031][ T304] em28xx_v4l2_open+0x11e/0x570 [ 1994.273894][ T304] v4l2_open+0x1d2/0x490 [ 1994.278128][ T304] ? __pfx_v4l2_open+0x10/0x10 [ 1994.282876][ T304] chrdev_open+0x234/0x6a0 [ 1994.287273][ T304] ? __pfx_chrdev_open+0x10/0x10 [ 1994.292191][ T304] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1994.298508][ T304] do_dentry_open+0x6d8/0x1660 [ 1994.303250][ T304] ? __pfx_chrdev_open+0x10/0x10 [ 1994.308168][ T304] vfs_open+0x82/0x3f0 [ 1994.312221][ T304] path_openat+0x208c/0x31a0 [ 1994.316792][ T304] ? __pfx_path_openat+0x10/0x10 [ 1994.321711][ T304] do_file_open+0x20e/0x430 [ 1994.326194][ T304] ? __pfx_do_file_open+0x10/0x10 [ 1994.331217][ T304] ? alloc_fd+0x476/0x790 [ 1994.335527][ T304] ? do_getname+0x191/0x390 [ 1994.340014][ T304] do_sys_openat2+0x10d/0x1e0 [ 1994.344672][ T304] ? __pfx_do_sys_openat2+0x10/0x10 [ 1994.349870][ T304] __x64_sys_openat+0x12d/0x210 [ 1994.354707][ T304] ? __pfx___x64_sys_openat+0x10/0x10 [ 1994.360063][ T304] ? do_user_addr_fault+0x8d6/0x12f0 [ 1994.365332][ T304] do_syscall_64+0x106/0xf80 [ 1994.369900][ T304] ? clear_bhb_loop+0x40/0x90 [ 1994.374563][ T304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.380437][ T304] RIP: 0033:0x7fa025aa7407 [ 1994.384832][ T304] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1994.404420][ T304] RSP: 002b:00007ffc0d21bde0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1994.412811][ T304] RAX: ffffffffffffffda RBX: 00007fa026146880 RCX: 00007fa025aa7407 [ 1994.420764][ T304] RDX: 0000000000000000 RSI: 00007ffc0d21df1a RDI: ffffffffffffff9c [ 1994.428714][ T304] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1994.436662][ T304] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1994.444610][ T304] R13: 00007ffc0d21c030 R14: 00007fa0262ad000 R15: 000055abd41df4d8 [ 1994.452566][ T304] [ 1994.455677][ T304] Kernel Offset: disabled [ 1994.459983][ T304] Rebooting in 86400 seconds..