last executing test programs: 7m46.687189813s ago: executing program 1 (id=1810): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203821b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348071f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed2bf1f847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aea019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a06007c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d8c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687ea84afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb8052ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) iopl(0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xe68, 0x30, 0x200, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x78b, 0x81}, {0x7f, 0x5754, 0x2, 0x9, 0x8}, {0x9, 0xf7b, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0xe}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x81, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0xd, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x8, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x2}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x8, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x6}, {0x5, 0x10000, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x7, 0x7fffffff, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x1ff, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x200, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x3}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x3, 0x7, 0xd7d9, 0x8}, {0x42, 0x2, 0x6, 0x7, 0xae47, 0x5}, {0x6, 0x9c, 0x10000, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x3de, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x4, 0x401, 0x4, 0xffffffff, 0x80}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x5}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1000, 0x8, 0x6, 0x1}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0x0, 0x8, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x2, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0x4, 0xfffffff8, 0x7, 0x8, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x110001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x7, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x400003}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fd8000, 0x2, 0x0, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x3, 0x80000000, 0xae, 0x101}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0xfffffffb}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x200, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0xc0000000, 0x6, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x0, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x0, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x400005, 0x3}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x7, 0x8, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x8, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x8, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x7, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x9, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0x80f, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x6, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x5, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x5, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x9, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r6, &(0x7f0000000080)=[{&(0x7f0000003400)="273eebfecb7c0e923301b61c42cb1d11f41d00bdab2a3d983b065a56", 0x1c}, {&(0x7f0000003340)="b02c", 0x2}], 0x2) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sync() ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}}) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000002080)={0x1124, r7, 0x0, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_MODES={0x1110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "6150b8e2308e9280b14c7360178275ce8f6e6a966313a0f7d8d71ba9b85288e97570b1dd1f51e550ea4fabb6704d4978361222cf7fc3a9b1612abd2d602f9f58cea1a067321daa7a17ffdeba635aa29ff19d312e8c2af1070af5bc013ca5f88437b45ce325330c9ac672a11f462cfad735bfd8dfc93be72090fd3f62cc4857d6830d7102909237ce6f722915c41fb6ec98bb68a36c6ceaa9f88b631f9eee82a0883d54fcb557e5a13a419804424168bc68bafc910a8ef765075239fcd84f13819fbb318b2c51b35fca9e8baf4204d90b13607cb18d9f3a48c0005d2a61ae5cdd03b7506d"}, @ETHTOOL_A_BITSET_MASK={0x1e, 0x5, "e78ab154a7dea6f5217b35ba5e8fb160915ab69b00f40544d2c0"}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}]}]}, 0x1124}}, 0x80) close_range(r3, 0xffffffffffffffff, 0x0) 7m45.994462343s ago: executing program 1 (id=1813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r4, 0x894b, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000001300)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e21, 0x8, @loopback, 0xffffffff}}, [0x2, 0xe5, 0xffffffff, 0x8000, 0x6, 0x5, 0x0, 0x4, 0x5, 0x450, 0x0, 0x2413, 0x7, 0x10001, 0x4]}, &(0x7f00000000c0)=0x100) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) 7m45.402811811s ago: executing program 1 (id=1815): mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0xf0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xf, 0x8, 0x0, 0x10, 0x0, 0x0, 0x25dfdbfe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x20, @empty}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x4e24, @private=0xa010101}}]}, 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x2, 0x5}, 'syz0\x00', 0x1c}) ioctl$UI_DEV_CREATE(r3, 0x5501) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000280)=""/44, 0x2c) 7m45.045740771s ago: executing program 1 (id=1819): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0xf0ffffffffffff) 7m43.842618429s ago: executing program 1 (id=1823): syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000032540)=@newtaction={0x2a24, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x2a10, 0x1, [@m_police={0x2980, 0xc, 0x0, 0x0, {{0xb}, {0x1954, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xdc, 0x3, 0x80, 0x38, 0xacf, 0x6, 0x10000, 0x10000, 0xae5, 0x8, 0x2, 0x4, 0x7, 0xffff44da, 0x7ff, 0x6, 0xd9cf, 0x8, 0x58, 0x9, 0x3, 0x8, 0xfeb3, 0x4, 0x4, 0x5, 0x7, 0x100, 0x8f4, 0x80, 0x7, 0x4, 0x4, 0x9, 0xf, 0x0, 0x7, 0x10001, 0x80000000, 0x8, 0x0, 0x2, 0x7, 0x38, 0x8, 0x5, 0x1000, 0x1, 0x1, 0xbbf5, 0x52c, 0x0, 0x10001, 0x2, 0xffff, 0x0, 0x9, 0xd, 0xb, 0x4, 0xfffffffc, 0x800, 0x80000000, 0x3, 0x1, 0x3ff, 0x6, 0x7, 0x4, 0xff, 0xfffffff7, 0x7, 0x10, 0x200, 0xbe, 0xfffffffc, 0xfff, 0x1, 0x0, 0x8, 0x80000001, 0x5, 0x8, 0x8, 0x7, 0x4, 0x37, 0x6, 0x80000001, 0x1, 0x2, 0x8, 0x6, 0x1, 0x9, 0x5, 0xefe1, 0xc083, 0xf4, 0x6, 0x6, 0x0, 0x7fffffff, 0x63, 0x2, 0xf16, 0xffffffff, 0x25d7, 0x400, 0x1f, 0x0, 0x5, 0x8, 0x8, 0x0, 0x401, 0x9, 0x2, 0x3, 0x2, 0x84, 0x49d, 0xffffffff, 0x5, 0x0, 0x548, 0x4c2, 0xcddf, 0x7, 0x7a, 0xffffc000, 0x0, 0x7, 0x8, 0x5, 0x9, 0x7843, 0x6, 0x2, 0x1, 0x8, 0x3, 0xb4, 0xd4b, 0x6, 0x5, 0x5, 0x200, 0xa, 0x27, 0xfffffffe, 0x3, 0xffffffff, 0xfffffccf, 0x81, 0x3, 0xfffffff8, 0x6, 0x4, 0x1, 0xfffffffa, 0xa, 0x5, 0x8, 0x1000, 0x5, 0x1, 0x6, 0x81, 0x6, 0x5, 0x4, 0x7fff, 0x2, 0x800, 0x5, 0x2, 0x363, 0xffffffe3, 0x3, 0x6, 0x0, 0x1, 0x7, 0xfffffff7, 0x9, 0xfffffffd, 0x9, 0x7, 0x8, 0xc, 0x400, 0x1, 0x7fff, 0x5, 0xffff, 0x8000, 0xffff, 0x7, 0x2, 0x10, 0xffff0001, 0x0, 0x4, 0x9, 0x5, 0x4c7d, 0x2, 0x3, 0x6, 0x8, 0x1000, 0x1, 0x4, 0xfffffff8, 0x4, 0x4, 0x7fffffff, 0x10, 0x10001, 0x1, 0xc, 0xfffffffb, 0x0, 0x0, 0x8, 0xcca, 0x5, 0x3ae, 0xb, 0x0, 0x4, 0x0, 0x1, 0xfff, 0x5, 0x7, 0x4, 0x80000000, 0x4, 0x0, 0x72, 0x0, 0x401, 0x400, 0xfac, 0x4800000, 0x14, 0x240, 0x3, 0x7741, 0x5, 0x3, 0x1, 0x6d6a]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x0, 0x8, 0x8eae, 0x9, 0x5, 0x6, 0x9, 0x5, 0xd3, 0x71ff, 0x3, 0x200, 0x1, 0x7f, 0x8, 0x9, 0x9, 0xff, 0x3, 0x5468, 0x9, 0x4, 0x7, 0x1ff, 0x1c33, 0x9, 0x1, 0x80000001, 0x2, 0x6, 0x8, 0x3, 0x2, 0xfffffb87, 0x4, 0x9, 0x1, 0x4, 0x6, 0x6, 0x5, 0x3c32, 0x7ff, 0xf0, 0xfff, 0x3, 0x2, 0x2, 0x2, 0x5, 0xfffffffd, 0x8, 0x10000, 0x8, 0x2, 0xf0ad, 0x5, 0x2, 0x6, 0x9, 0x0, 0x6, 0x3ff, 0x4f5c, 0x7, 0x3, 0x40, 0xfb, 0x8, 0x2, 0x200, 0x6, 0xffff8000, 0x8, 0x101, 0x22ae9957, 0x2, 0x8001, 0x6d6, 0x6, 0x2, 0x1b, 0x7, 0x6, 0x3, 0x8, 0x5ef, 0x6, 0x4d6, 0x6, 0x7ff, 0x8, 0x3, 0x8, 0x1ff, 0x2, 0x6, 0x5, 0x3, 0xb5, 0xeab, 0x7, 0x9, 0x5, 0x8, 0xfffffff7, 0xfff, 0x2b60492, 0x80000000, 0x3, 0x2937ed9a, 0x81, 0xb07, 0x62, 0x2, 0x8, 0x0, 0x60d4, 0xea, 0x3, 0x3, 0x7ff, 0xca, 0x706, 0xfffffff9, 0x4c0, 0x3, 0x5a53e223, 0x7, 0x10001, 0x7, 0x4, 0x5, 0x4, 0x5, 0x401, 0x6, 0x0, 0x10001, 0x3a, 0x7f, 0xd888, 0x7fffffff, 0x1ff, 0x2, 0x3, 0x0, 0x9, 0x80000000, 0x796, 0x22, 0x7, 0x8, 0x5, 0x1e0000, 0x0, 0x5, 0x9d0, 0x7f, 0x7, 0x3, 0x2, 0x2, 0x0, 0x7, 0x0, 0x9, 0x9, 0x8, 0x0, 0x5, 0x40, 0x6, 0x0, 0x1ff, 0x371c, 0x3, 0x4, 0x5, 0x6, 0x63380000, 0x6, 0x3, 0xf, 0x5, 0x1ff8, 0x1, 0x8, 0x2ee5, 0x2, 0x8, 0x3, 0x4, 0x3, 0xd, 0x40, 0xfffffd5c, 0x36, 0x3, 0x2, 0x8, 0x9, 0x8, 0x8, 0xa, 0xfffff254, 0x6, 0x8, 0x5, 0x800, 0x8, 0x400, 0xfffffffb, 0x4, 0x4, 0x96, 0x78, 0x90, 0x2, 0x2, 0x88e, 0x3, 0xffff, 0x40, 0x928, 0x6, 0x3, 0x8, 0x1, 0xffffff1f, 0xe505, 0x2, 0x3, 0x4, 0x7f, 0x400, 0xb2c, 0x5, 0x2, 0x8, 0x80000001, 0x6, 0x8b, 0x4, 0x8000, 0x6be5, 0x40, 0x9, 0x8, 0x80000001, 0x10001, 0x9, 0x0, 0x0, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x3, 0x1, 0x400, 0xb3, {0x9, 0x0, 0x6, 0x3ff, 0x101, 0x742}, {0x7, 0x1, 0x4, 0xed, 0xfff8, 0x80000001}, 0x6, 0x9, 0xfffff001}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x200, 0x1, 0xffffffff, 0xa, 0x10000, {0x81, 0x1, 0x5, 0x1, 0x17}, {0x5, 0x2, 0x4, 0xf2, 0x4, 0xc6}, 0x9, 0xcc, 0x10}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x2, 0xb, 0xb3, 0x100, 0x8, 0x7, 0x9, 0x2, 0x3, 0x10000, 0x2000000, 0x9, 0x3a2e7b1c, 0xd25, 0x1ff, 0x8001, 0x0, 0x9, 0x3, 0x1000, 0x2cbd, 0xda28c249, 0x6, 0x9, 0xfff, 0x8, 0x0, 0xa, 0x9ef, 0xfffffffb, 0x8d05, 0x0, 0x27dc, 0x0, 0x8, 0x4, 0x5, 0x81, 0x1, 0x6, 0x3, 0x0, 0x8, 0x6, 0x60c, 0xf8000000, 0x4, 0x6, 0x1000, 0xfc4e00, 0xea, 0xfffffffc, 0x9, 0x9, 0x6, 0x6, 0x81, 0x1, 0x1, 0x4, 0x40, 0x4, 0xfffff511, 0x3, 0x3, 0x100, 0x6, 0x10000, 0x1, 0x9, 0x3, 0x50, 0x67ee, 0x4, 0x0, 0x6, 0xcba, 0x73d, 0x5, 0xad, 0xa, 0xcc9, 0x6, 0x5, 0x10, 0x5f66, 0x7f, 0x5, 0x3, 0x8cf7, 0x901, 0x8dea, 0x2, 0x4, 0x28, 0x8, 0x401, 0x3, 0xaed, 0xe, 0x2, 0x198c, 0x5, 0xf79, 0x7, 0x81, 0x9, 0x7, 0x0, 0x80000001, 0x5, 0x4, 0x9, 0x8, 0x5, 0xfff, 0x2, 0x8, 0x1, 0x6, 0xf94e, 0xace6, 0x9, 0x6, 0x15, 0xe, 0xfffffffa, 0x0, 0x1608, 0x4, 0x5, 0x4db, 0x2, 0x7, 0x0, 0x7, 0x0, 0x6, 0x9, 0x8b, 0xfffffff8, 0xd90, 0x2, 0x0, 0x3, 0x4, 0x6, 0x5, 0xf5, 0x6, 0xbebe, 0xff, 0x3, 0x3, 0x5, 0x800, 0x3, 0x9, 0xfc, 0x1, 0x3, 0x88b, 0x6, 0x9, 0x4, 0x6, 0x80000000, 0x200, 0xe4, 0x8, 0x3, 0x5, 0xfff, 0x8, 0x6, 0x7, 0x4, 0x4, 0x6, 0x6, 0x8, 0x14f866bb, 0x5, 0x5, 0xfffffff8, 0x6, 0x80000000, 0x82a, 0xffffff6f, 0xa, 0x1d33eda7, 0xfffffff9, 0xa0, 0x100, 0x6, 0x7fffffff, 0x0, 0xfffffff7, 0x0, 0xdbb6, 0x5, 0x9, 0xa981, 0x8, 0x6, 0x6052a77e, 0x7, 0x0, 0x4, 0x7, 0x6, 0xdd3, 0x6, 0x1, 0x0, 0x7fff, 0x8, 0x6, 0x80, 0x4b96, 0x9f50, 0x3, 0x2, 0x4, 0x9, 0x1, 0x5, 0x1, 0x6f87, 0xef8, 0x101, 0x2, 0x6, 0x7, 0x9, 0xe, 0x5, 0xffff, 0x9, 0x2, 0x4, 0x2b, 0x3, 0x5, 0x4, 0x5, 0x9, 0x3, 0x5, 0x2, 0x4, 0x40, 0x0, 0x7f46304c, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x6, 0x5, 0x7, 0x81, 0x4, 0xf, 0x7fffffff, 0x0, 0x2, 0x573, 0x3, 0xb09, 0x4, 0x2, 0x5, 0x4, 0x400040, 0x5, 0x800, 0x5, 0xd, 0x6, 0x3, 0x3, 0x1, 0x7, 0x4, 0x7ff, 0x7, 0x4, 0x3e5b, 0x2, 0x7, 0x2, 0xdd, 0xc, 0x1, 0x80000000, 0x7, 0x8, 0x841, 0x9, 0x3, 0x1, 0xd78e, 0xffffc19b, 0x9, 0x5, 0xe, 0x0, 0x2, 0x9a1, 0x5, 0x2, 0x7, 0x1, 0x7, 0x2, 0x4, 0x5, 0xffff, 0x4, 0x7fff, 0x8, 0x8b9, 0x4, 0x7, 0x953, 0xd5, 0xffffffff, 0x7, 0xdb3b, 0xfe1, 0x4, 0x4, 0x7, 0x4, 0x7, 0x4, 0x4, 0x4, 0x0, 0x7, 0x6, 0x83c1, 0x1, 0x8, 0x401, 0x2, 0xfffffffe, 0x1000, 0x8, 0x6, 0x6, 0x4, 0x400, 0x1, 0xfffff800, 0x2, 0x8, 0x6, 0xc4, 0x1, 0x9, 0xffffffff, 0x8, 0x2, 0x10000, 0x4, 0x759, 0x9, 0x8, 0xd5, 0x51a0, 0x4, 0x80, 0x9, 0x7fff, 0x101, 0x9, 0x200, 0x4, 0x1, 0xe5cf, 0x1, 0x0, 0x80000000, 0x6, 0x1, 0x5, 0x7, 0x0, 0x6, 0x4, 0x8, 0x7, 0x40, 0x5, 0x5, 0x3, 0x0, 0x101, 0xe, 0x3, 0xd1, 0x11, 0x7f, 0x9, 0xf, 0x6, 0x7fff, 0x10000, 0x10, 0x1ff, 0x5, 0xfffffffc, 0x2, 0x6, 0x89, 0x3, 0x9, 0x3, 0x4, 0x4, 0x9, 0x3, 0x4, 0x4, 0x5f7a, 0x5, 0xfffffffe, 0x80000000, 0x45, 0x1, 0x0, 0x401, 0xffff2e70, 0x25, 0xd, 0x0, 0x6, 0x9, 0x81, 0xb, 0x6646, 0xffff, 0x6, 0x6, 0x81, 0x400, 0xffff7fff, 0xe, 0x100, 0x1, 0x43, 0x7, 0x481, 0x1, 0x10000, 0x2d6, 0x0, 0x0, 0x1, 0x5d, 0x4, 0x80000001, 0x6d0, 0x400, 0x5, 0x3ff, 0x0, 0x1, 0x2, 0x8, 0x0, 0x3, 0xb, 0x6, 0x1, 0x7, 0x9, 0x7, 0xdee1, 0xffff, 0xfffffffd, 0xfffffd32, 0xffffffff, 0x0, 0xb, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x61, 0x6, 0xffffffff, 0x6, 0x7f, 0x4, 0x9, 0x1e948e70, 0x721, 0x6, 0x84b7, 0x2, 0x10001, 0xe, 0x5, 0x3, 0x5, 0x9, 0x2, 0x14, 0x7fffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x20, 0x7, 0xff, 0x2, 0x7, 0x8, 0xf1e40, 0x8, 0x9, 0xc000000, 0x3, 0x1c5ab42, 0x10001, 0x2, 0x7, 0x3, 0x80000000, 0x8000, 0x100, 0x2, 0x3, 0xb, 0x8, 0x180000, 0x4, 0x2, 0x9, 0x5, 0x5, 0x0, 0x5, 0xfffffffd, 0xe, 0x7, 0x76, 0x9, 0x401, 0xfc9, 0x5, 0x0, 0x0, 0x40000000, 0x5, 0xfffffff7, 0x6, 0xfffffffe, 0xe, 0x80000001, 0x7, 0x7fff, 0x3, 0x1, 0x10, 0x1, 0x3, 0x728f, 0x4, 0x73, 0x7, 0xd, 0xc, 0x8, 0x6, 0x8a, 0x401, 0x5, 0x4e, 0x6, 0x9, 0x9, 0x5, 0x8f1, 0x1, 0xa, 0x7, 0x2, 0x3e, 0x7, 0x3, 0x4, 0xffff8001, 0x8, 0xb27, 0x8, 0xffff5184, 0x9, 0x5818, 0xffffff01, 0xffffffff, 0xb, 0x1, 0x2, 0x59, 0x5, 0x0, 0x8c3, 0x9, 0x1, 0x400, 0x4, 0x9, 0x5, 0x1, 0x7f, 0xe00, 0x3, 0xe44000, 0x7, 0x8, 0x7, 0x80000000, 0x1ff, 0x5, 0x1374, 0x7, 0x9, 0x0, 0x6, 0x7f1c, 0x1, 0x0, 0x400, 0xdedf, 0x6, 0x7, 0x7, 0x6, 0x0, 0x5, 0xfffffff0, 0x4d40, 0x6, 0x7, 0xe2c, 0x5, 0x7b40, 0x0, 0x6, 0x5, 0x8000, 0x101, 0x3, 0xec, 0x8, 0x8, 0x6, 0x2, 0x2b1, 0x4, 0x4, 0x6, 0x6, 0x8, 0x7, 0x7, 0x200, 0x81, 0x0, 0x7, 0x4, 0x322, 0xffff8001, 0x8, 0xfffffffe, 0xe1, 0xfff, 0x9, 0x8, 0x6, 0x0, 0x8d, 0x2b62, 0x8000000, 0xc7, 0xcd5, 0x81, 0x7, 0x7, 0xcc3, 0x1, 0x8, 0x0, 0x401, 0xfffffffc, 0x1, 0x9, 0x7, 0xec0, 0x7, 0x301a9b55, 0xc5d, 0x6c15, 0xa02a, 0x8, 0xa0000, 0x8, 0x1, 0x6, 0x3, 0x7, 0x9, 0x5, 0x69c3, 0x401, 0xdc7, 0x80000000, 0x7, 0x5, 0x7fffffff, 0x3, 0x9, 0x62d, 0x5, 0x3, 0x85e, 0x2000, 0x0, 0x4, 0xffffffff, 0xff, 0x80000001, 0x1, 0x9, 0x9e, 0xa32, 0x6, 0x3, 0x9, 0xf05b, 0x9, 0x2, 0x1, 0x0, 0x0, 0x401, 0xc, 0x0, 0x2, 0x8, 0x1, 0x5, 0xf, 0x1, 0x7ff, 0xc, 0x0, 0x3, 0x4, 0x3, 0x80, 0x700, 0xb2, 0x3, 0xa4, 0x1]}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x3, 0x0, {0xc, 0x0, 0x7, 0x7, 0x5, 0x4}, {0x7, 0x2, 0x10, 0x1, 0xfffb, 0x200}, 0x60, 0x4, 0x5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x101, 0x4, 0x6, 0x2, 0xe, 0x4, 0x2, 0x3, 0x1, 0xfffffff9, 0x6, 0x9, 0x673, 0x10, 0x2, 0x7, 0x7, 0x3, 0x3cf, 0xfffffe01, 0x1, 0x7fff, 0x6, 0x8000, 0x9, 0x0, 0x1, 0x7f, 0x7, 0x8, 0x5, 0x5, 0xc, 0x5, 0x9, 0xddd, 0x7, 0xc, 0xffff, 0x1, 0x8596, 0xe3, 0x100, 0x7, 0xb0, 0x6, 0x7f, 0x9, 0xfffffff7, 0x80000001, 0x5, 0xb1, 0x0, 0x5, 0xa, 0x2, 0x5, 0x722b, 0x6, 0xe5, 0x2bbb, 0x5, 0x9, 0x759, 0x1, 0x5b6, 0x4, 0x3ff, 0x9, 0x5, 0xe9, 0xfffffffe, 0x2, 0x1, 0x0, 0x5, 0x5, 0xda, 0x400, 0x0, 0x0, 0xcc7e, 0x9, 0xd9, 0x7f, 0x0, 0x8001, 0xfffffbd3, 0xf, 0x1, 0x3, 0x8001, 0x81, 0xdca, 0x600000, 0x1, 0x0, 0x4, 0x40b, 0x4, 0xfffffff6, 0x401, 0x8, 0x0, 0x1, 0x2, 0x9, 0xc, 0x4, 0x3e2, 0x8, 0x8, 0x0, 0xe, 0x1, 0xe7f, 0xffffffff, 0xe0, 0x57, 0x5, 0x0, 0x9863, 0x5, 0x1, 0xad8, 0x0, 0x4, 0x1, 0x3, 0x1, 0x5, 0x8001, 0x401, 0x3, 0xdb, 0x10, 0x2ed, 0x5, 0x400, 0xd6, 0x90b, 0x2, 0x100, 0x18000000, 0x2, 0x9, 0x8, 0x2, 0x932, 0x5, 0x9, 0x1, 0x0, 0x8000, 0xf9a7, 0x6, 0x7f1, 0xd3fa, 0xe, 0x0, 0x2, 0x2, 0x1c1, 0x4, 0x2, 0x2d41, 0x405, 0xfffffffb, 0x81, 0x9, 0x5, 0xfffffe01, 0x7, 0x6, 0x401, 0x4, 0x401, 0x8, 0x1, 0x8001, 0x1000, 0x9, 0x7fff, 0x7f, 0x103a, 0x19e, 0x10000, 0x7ff, 0x7a4, 0xd, 0x0, 0x2, 0x7, 0xd, 0x68, 0x0, 0x5, 0x5, 0xb1d2b1b, 0x6, 0x7, 0x7, 0x9, 0x7fff, 0xbf, 0x1, 0x3, 0x4996, 0x1, 0x5, 0x81, 0x3, 0x100, 0x9, 0x2, 0x81, 0x9be5, 0x0, 0x0, 0x9, 0xc8, 0x4, 0xc5, 0xff, 0x124548d1, 0x851a, 0x4, 0x5, 0x5, 0x8, 0xa1, 0x401, 0x8001, 0xad, 0x7, 0x2976, 0x80000001, 0xfffff432, 0x5fa7, 0x0, 0x3, 0x81, 0x6, 0x8b, 0x418, 0x3, 0x9, 0x8, 0x0, 0x401, 0x1, 0x7, 0xfffffff9, 0x4, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x34cf}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0xbc5}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x8, 0x10, 0xff, 0x54d, {0xfe, 0x2, 0x3ff, 0x9, 0x7, 0x4}, {0x9, 0x1, 0x6, 0x3, 0x1000, 0xc0000}, 0x4, 0x5, 0x81}}]]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x2a24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x1bb92cb01482eb90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) 7m42.037032141s ago: executing program 1 (id=1825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) creat(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xdc) pwrite64(r1, &(0x7f0000000600)="3e072426aef40ecc", 0x8, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) chdir(&(0x7f0000000280)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x1813c1, 0x0) fchown(r4, 0xee01, 0x0) 7m41.750307095s ago: executing program 32 (id=1825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) creat(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xdc) pwrite64(r1, &(0x7f0000000600)="3e072426aef40ecc", 0x8, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) chdir(&(0x7f0000000280)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.log\x00', 0x1813c1, 0x0) fchown(r4, 0xee01, 0x0) 8.12500406s ago: executing program 4 (id=3517): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0xf00, 0x1000) socket$l2tp(0x2, 0x2, 0x73) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x128, 0x8, 0xfa04, 0x128, 0x6c02, 0x200, 0x194, 0x194, 0x200, 0x194, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {0x0, 0x74020000}, [@common=@inet=@hashlimit1={{0x58}, {'pimreg1\x00', {0xc, 0x1, 0x400, 0x14000, 0x80000000, 0x5, 0x1000, 0x20, 0x20}, {0x8}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote, [], 0x4e24, 0x4e23, 0x4e22, 0x4e20, 0x82, 0x80, 0x10, 0xdc74, 0x8}}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00', {}, {}, 0x1d}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1e, 0x6b8, 0x8, 0x7, 'snmp\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000001800000000000000600000085200000050000008500000097000000180100002020752500000000002020207b1af8ff00000000bfa10009000000000780766396e4f33e7cf039a6010000f8ffffffb702000008000000b703000009000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x3, 0x6, 0xa4c8, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0xffffffffffffffff], &(0x7f0000000500)=[{0x0, 0x5, 0x6, 0xc}, {0x5, 0x4, 0x7, 0x4}, {0x2, 0x2, 0xa, 0xb}, {0x1, 0x3, 0xe, 0x5}, {0x3, 0x1, 0x9, 0xb}], 0x10, 0x8, @void, @value}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r6, 0x0}]) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffd, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 7.922986535s ago: executing program 3 (id=3519): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) timerfd_create(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000380), 0x1, 0x8000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="f8", @ANYRES16=0x0, @ANYBLOB="65572abd7000f9dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0x1000000000000f, &(0x7f00000000c0)=0x7fffffff, 0x4) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r9, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000440)={0x0}) fcntl$notify(r9, 0x402, 0x11) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000240)={r10, 0x0, r9}) unshare(0x4020400) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0xe}, 0x6b6d, 0xc4, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9, 0x3, 0x0}) 6.835125256s ago: executing program 3 (id=3523): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) symlink(0x0, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) fsopen(0x0, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0xf8) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) writev(r5, 0x0, 0x0) read$FUSE(r5, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) 6.769132501s ago: executing program 0 (id=3525): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="fc0500001800010000000000000000000200000000000009000000000600150005000000d8051680d40501"], 0x5fc}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0}, &(0x7f0000cab000)=0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="1400a90000000000000000000000000000000001583a617ab50bab13a80c8a41475c0892d2093a159beef325bcf5a3bec0c4468df6de7f021972ea0735ded688d3513c4b153cbd91cefa0a3d746dd3132113043032a09c4f68e400e88235d786d2f345989767f2a5563dd5c63a56a4aba8f8b6aa558271efb307c70c4cdfd2c85f6dcafd75c437f46b165f4bddee4ab7db1c955822e50e2a66681e7d57b494381a29dde3704d86553dfa07e7bde6d9208d4508d2f899b880b21b955d8f37fe542432a82760a9ddc8d06a6e6dea2968707a1c7f952c9e103680d2da00"], 0x390}, 0x1, 0x0, 0x0, 0x24008801}, 0x24040005) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0}, 0xfffffeef) syz_fuse_handle_req(r3, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x4, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x8000, 0x8, r5, r4, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r8, r8) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640), &(0x7f0000000680)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x6000) r10 = socket(0x2a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xbc, 0x0, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10, 0x0, 0xe7, 0x2}}) 6.717240782s ago: executing program 0 (id=3526): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x6f4dad00}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000740)={0x20, 0x14, 0xee, "9e1ebd0cd5b40939065fb3238ce469b127169b9f1bb700f4753276b8e6bfdbfc1e1cb9c78006bc1143f730b2244a3ae9526a92db540744638cdc2797b67de69a84ad6a438bdd16cc8c99d6aa7edf45aecf01bf97cd3898070b0cc0b6b51841756f28919203548ffcd7b06d734f428d7fdc0326e071a48c5cf5b77f5a36e159362e7fa489ea34036123d3e789a3e7356320cad5a8a936ef327e3e484be3c880d5091696a4e6e0d29dff2b3da519f250eea88471091707462a743c180dd6855625820129a95e93319f68220988ad6a93346f2d699aca657f3148da0e3d823215ea519c2c1a31d6358ab93e31a2d0a3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffb963}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a0000003c000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0xc4}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2c8"], 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x2, 0x43, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902"], 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYRES8=r7], 0x2) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) write$FUSE_IOCTL(r8, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x800, 0x0, 0x10000, 0x8}}, 0x20) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) syz_emit_ethernet(0x175, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/360], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @link_local}) 4.614120632s ago: executing program 5 (id=3530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d00000002000090000000000240000005000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x48) io_setup(0x3, &(0x7f0000000000)) 4.436017284s ago: executing program 5 (id=3531): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="000200000000000007"], 0x20) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x3f00, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 4.39314748s ago: executing program 4 (id=3532): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 4.258741222s ago: executing program 4 (id=3533): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x4, 0x1, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5, &(0x7f00000000c0)=0xfffffff8, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {0x0, 0x1000, 0x80, 0xfffc}, 0x7, [0x0, 0x80000000, 0x9, 0x0, 0x8, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0xfffffffd], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4], [0x0, 0x401, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x401, 0x100000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) 3.440060952s ago: executing program 0 (id=3534): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b", 0x21}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000400)=[{0x7, 0xc1, 0x3, 0x7}]}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x4) connect$caif(r2, &(0x7f0000000040)=@rfm={0x25, 0x65, "b69a724fdc0000000004000000a72c78"}, 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x3, 0xd5, '\x00', 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.274712725s ago: executing program 2 (id=3535): r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$admmidi(&(0x7f0000000180), 0x100000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, 0x0, &(0x7f0000000280)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) syz_open_procfs(r5, &(0x7f00000000c0)='uid_map\x00') mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x7, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r6, &(0x7f0000000340)=[{0x0}], 0x1) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000140)=0x3, 0x12) 3.273139663s ago: executing program 3 (id=3536): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev}, 0x0, @in6=@local}}, 0xe8) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}, {}, {0x0, 0x2}]}, {[{}, {}, {0x4}, {}, {}, {0x1ff}, {0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}, {}, {[], [{}, {0x0, 0xfffffffd}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x8}]}, {}, {}, {}, {[{}, {}, {}, {0x3}]}], 0x80}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.272879055s ago: executing program 5 (id=3537): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x26, 0x4, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x143, 0x0, 0x1, [@typed={0x4, 0x1a}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008450}, 0xc000) 3.225299861s ago: executing program 4 (id=3538): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) close(0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') preadv(r1, &(0x7f0000000540), 0x0, 0xfffffffb, 0xbf6b) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x3}, @broadcast, @device_a, @from_mac=@device_b, {0xa, 0x9}}, 0x4000, 0x66, @default, @val, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.107831069s ago: executing program 5 (id=3539): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r7 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000020c0)={0x0, 0x1c, &(0x7f0000002140)=[@in6={0xa, 0x4e22, 0x3, @remote}]}, &(0x7f00000002c0)=0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000780)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000440)="97"}) (fail_nth: 1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 3.059990389s ago: executing program 3 (id=3540): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x63, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x2d, 0x0, 0x0, @ipv4, @local, {[@routing={0x29}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfc"}}}}}, 0x0) r2 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 2.567041448s ago: executing program 4 (id=3541): syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000008019078ac1414bbac1414aa0304907803000000450000000000001695ce995450213ac58ac75ada3bb948b9dfb69945"], 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, r6, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) (async) listen(r3, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x10}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) (async) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r7 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r7, &(0x7f0000000080)=[{&(0x7f0000000340)='L', 0x1}, {&(0x7f0000000380)="b7124e66ab551323eba9b414b38e610896aadc584ae8f9295ef5c09761168d1998a3202c271f2855d61412d617464d2e1081b39118b2e0d0a8a48ea2c13c9b5272ca77", 0x43}, {&(0x7f0000001580)="324e4eb2e660cd25e44e0f4024a6370dac719958b55fb650f5489a458eeb15a3d361c229c0dbfe8096a64731cf7ce524e2fdd3f2aeeb10ad98f42d24af501de8efcf1fa7e946874bf5d2a772df56fc0ca2ec7b4493c231b1ea09a29c8d073672361cf0eb6fd1276a15ea5834a43ea015ba8557e15109273d92cd92704ffad342ba27877abb418e8a6fb958dc87d60edeefbec479bbe938c1e4ce82b64d6cd2b8d29d67ec6134d5727065e00febf6c4c327712ad636ccc997ed7a952fd71e5f30b8029e3b22a9bf2698d13de55623d75cabbf3f47aeffd1169ddde7f49f930498f60296029a0346d063fb7d98b9a256a469809cd8a07c603db4bb96e48b53c4a0e3722d6a83e2d95a75472cd702a9097b726e207776aef8617e219afe9d31aaf068f29c124653f5f94a199a454f2eceba1ae2394da34a72c1e9fbabd1e7e8bae25a0cf00ec15736051cf5ddbeddd80c85443be9575a99ee9d4e7881e17388a8b5ca74c92c756e735710cfb56b9e222c487f52fe801366f533aa58bfb2a185608db6f10de3c2d6ec16e1eff45f7ea5c198db09618891decf277da8c24acf748a1f61724b548dbd4151b1227225102f775ddb8a90fd7112ca2f93b9a9c9ccec1f7cd0953f518ab7112ba8219a48fe262372a19379de2583b39d9c47d6c0015a4ec28f855dc572f3d3865102d115bece838ea5be0c6a330eb7faa91f69f1fb4e1fe3e54bb610f5333edc106da0d5d4ea6e181f31c6219abe32849d2d597a3eadff1d9f5d18d48c293d5a6915cc7757e71aa319c7e75ca9a7698212e3bdbb71774df60ff0f74c23bb91c0f0f97d5f62ff9a9bb302b17eb08294d2578fc0545834763fd492eecfb828bed3eb5eb8a588ab96542664cd7e8b2cbe69a0ab154457b3c5ffaa427cbf5b11e78bd9f2898f2f86aa428b8ae3bbcfd283840b0f14a3b09c8db068fbb14acf1829c5f9251aa1a0cc812c0cdcb6df16bf6f2b5b53beff2d46a1ae79cb75ffce987de01aebed4e086c02da012877915bb1f4a3f93a91e943d268dd9a290d3520b30e2357f5245d970f383d8153ff19afabb5b755d3b81f829086552c0daa6e9f0881285f8a2f55e8c01246550f22edddbfcb2c56a59c77f4341b271bbe6de8cb5ae5cb56db12b09e150aaadcdea5c7d45d40da3851096c0a5c7f11a6b0c98160f078cd7e907b765dc81bb676abc997c984f8457b86dd09b3279f7d0de06c34618add0a1a8467c3fe62b0e8aef40a647db1893df5865d56d7329bfe46c27713d2812509823af16473256de0e2e48f200aced3d08785c37077e969054f7c98a41306d8a07ae8cef27cbc21d1ec51520be4bdb6783d7a078e2a48814ba1d5082c4d891680fb10bf5c22598e2101784b8966c4cb2738d99e8fd369f9b8cb0f0c3a6747c7d693ed9a108e046b44e7fcb19e13f0da8ccb193ff3d2212e99b0cda78cd6f1fc66d9c7f9c84ef9ed62dfbc0b1b816a3814e10953fb42073ce3dc9460aca4efeb734df0ee9b9d17a7bcba949c926c7ff881122c9b130becd8993039a418bba7e491dc0967c73a8dea25cfb21bfc9017ea21ece88277c57dac00022cbcbecb076008b31c5cb2f32140bfafd30207f2930f7a3773ffa570fd7f4f46c6c9968ebb0cf352c1fdb43ef2d5b5c52e1f21bb3b0437ed3ff562dbc01b7dd0d930b3db9c8ec3c905e5267011851c0800fa4927a7d8302f3a3d2626f3fbf564db200b33a390a1d7f6208f39c09da7b06e5493590cf3b62b10551610e85939637d38a79b4d50a51ac269cd167eac8543aecadb0debccd3e5a7914aac1bb5d340984780b73db5d4b1e6bbe0c0534d3a7666acbe4b451c57b998c6270ff0a8672d55bbd9b4fe4a5200cf575b6744e23e0b5425bc5d9992e4aedfd9316e06f541e5c8cabd467aa24f77368a3222432a5aed305254c3705e39649528e958c1e316337a21bb0511404aab1c3d6a37d7c30110241a997d9634b6ae509450e60e495b7d1cbcce61d75e65564a249ebb7aa85b2deb8d9df3ce9544445c2d0710bd037b668fb07f11330882c868b6532bf77792299971f938d3e10a4aa70e984d108f92fd74345bd304b2f2b597fd3b89d6dba9ea6f3f9ebcbde08628344cf8c1d4bfe46a288226157e1575f01d75c83c7dc83c1df39d43756e1dd82bdd33e0b78084fb01dc53dee1e68b46bbb3990d06ceeda22593a42b3e6db6f24fb874e529419fee107e93f94862c5186878f5e8819e12a9e079df219e7f26832c9f5e2bc561fdae4d178f8d03256f26d148f06736d94bdc3d9766dead21076e69b62a5c5451ddda2795bc2945bfd638015e5e77e34623c3d33e96a2253d262254ff177f7274baa09571d0be89680a81a79cec32688dcb04f01aaf284d59597191f25e2f8a9414d995d2034945d85f724dab236895fbe3d32e828b4097fc54f56b4ae07cd0d7f87abfe5583d0198dc9526a75901ba8ed03e66007c27efe37fea66b43c6e3908262270b305ce5ac8b0334725e98aeb978a851389493d6219b603b5e67f518957fa99164da678df0432e7dd1003a3f23c9d8cfbfc257b86ba16bb80f8dac00102c3527d459ed8cecf0f8de97048ada6c6e9505d6412ec063b18f129bd8f05d0dad7762719217a6eee254045956d75aa71e6405d18f39c78cff855cd62939c83ecad8b7484181e1b62f6b8542496eab0a18b5441d353086f621690d1c8856d688bad51198e184aa1709027f1ac5b7fc455b3c6f5bb2d2e581b4cb86180cd5a395dceb0ccbbd8f5a3f0a9d0a71c258173b5ee0109e826c7b9a411c40876957b297912174d503d9051d7460011a8b4175394d8089fd97fd6d3354f8ae5baf8400f04ea4e5a22ceddfe4e48d6348a52f8e9e264530efd51f99cf00cf590752dfa48ee13f014c3095a716a9b7e6b6b39aa4800ea23338847de4cc10e7d8feba951b382ce9a003058f98038accb537d346397ddabadc1bde45a95af5537c235680a8266ab5378df8a276b1cb1090e9f86cb839917f469c45c97e98cc6501d797624f52e6ce81cb1f6d5820315b40867709a6a718ed21f19b0568bd2554571c90ac02b50909bd2d4cd9c6a357a7f08c6b1060b7a358ecbf9b0b6cac7f3bcc650d720e0c10301de84483054c7411e0151e80334843a0c4833998517aa5f1287d27979d2518f1596c6116c868fdc132367ee78c14d3de555e3f363ce78f99bff2928268c0e346e797097083edeb7f626d1ed60cdda08db680a4b1c3758bfdac893badd8cfdbcfa26124796d1fc625aa1b3ddc2f62cc14272a003a057c66006c94be80a82407ba9098bc5497728563524e9ed63df83c0349b7d5747dcff22128090eb6e6bbdff1b61c78c3e2345e39d5dabc053a20cebbeddc21dec40221f66ef8ef00f227e322e41103d3c9b1c74a460211c696192ba68e4422c7c8f99bf96ace228719c2ec30c18bdf17e259b5f3eb5ba77b18614a1ed00e5c1d3d78327a43c97cb81e1e3f05ca8ec741fa5ef07395233c58291c7026019d120c1004d1d0f8194ee6cf0e110ae916052b5e80d63b4371ebc291a5ea5d1e9eacf81ce9d1faddba8d556046f9e57746d2e94d35e9fea475aa8ed7b3fd5292aa79eef248b961977f42c26bd9c8bd59641ffee0de02966f6ed142d927afec6e24dd9003ae3c06bd1362f073c08430f92b03055779ec672af7d633b9e5a491a828861997ec7b33cf01c29fc68c9d11b576a5a569525d6579dd288d450d0110e19b3c0282f303b73128aa60942b5fd0081e61d8e57dca18ad22939380f0da265b689ef8afdaa99038f0a72d0eb302cbb993c3bacb53c651213e146bf4e48dc85cafd18862e7bd221741ec4f917326819cc8b0c2cef898c3643c2624f1af9d75a2105835dab6b3f25b2c958bab0feb01e1110a7a3c516012577f22e59dd7eb42fc741b7de873d52d57d42dee87aabfa77a5b6863ab6491c28748cafe0d039fe6a502424f85bc61b653a1f7a89ae7f40b3ad73d8f3b766aa986a60f860abf7a8d4092fc617996cf3b0397066e67e2290958df4b9609017f6e4d2bfaff15479ee98f38513ffcd7039c69bd8a4ef4ad2c9c38a1a91a07736bed90edd7cf6d770a43a25a28692ae54009eea57b015d20dca382061499124918adc27f04d9c3504f870a084867454b8e36ad6ba33bb798ab6abf07bd266b353e0bdec7c6d5154ac65c838f18418acd74ee5a2ff4fb17d4e643e4c563c3bcc11182fcd3472660603f045dbea784d4f0fef7cc433d185cd4d27196a5e411f7a2010a046cf32b94c6b6694613e8d363d84acae089f64cb87a18bccedb9bfdd79e67b088ff4f365fd1b98fa5c67895ebedeee59c0400e91c4c195a656c443c9e763006e98ffa10c50b0e05a85ce34d840d4752c2d59cce842bba63a355be5ae24fd202bcff59a814424f3797f5c7588fdb0c5d18ca715b361f3d06206211ae65e6c5b802044c5202f1ffcf36a290ab52c0e4f35ce3a043a9363463a7c25919372d7bbf78bff85438fd1d3ac85fa618474e5fd5c1256f789a579148b20d1dafd121b2a93e839f6d116c2a538345215512e6690d0da1679d51b26c7bc3293471a3e822fecb82bd4a0828f5c7ef10c7e6b6c07842bba743eb41c0403712cf978cf29f099c1a5fe6ce1926fb2dda25ae93eca13249faab99f1ee9792600d19deb4272a297c08f4e5fb313642655ca053fed584c08ef2654ee0b9765356585699479e74b14311c238f298a9b1cb6abda22ef352688b237f1ba520a00cff26a2c72f9ee41faec1e5bb2a966f6ea6e7bec396ceb77d29d6dadde142c3e9c993006972cd21ad8395e3c88e6ec605d21872b1975ad7ad2969f9bcd74a06fd3a966421dc11bd6a6ba95c69baf323c38506a423c2a006688f467f2e50465206660a13e5af19b6ac9cf1bc1484c039312071134d0a76e4be1c66c8d2940a4df853052c5f28d88ec409eae560d5146c061ed5eb925f66f3e201a446840a6ad4cc77ddf3b9da3fdf7e3ab1b071074b91574a4f6b26dcd880d5b707cd9b9e66c491ba25974c09c92aad1111c180bf4ca4e415ff156b6971ac1873abfde00dd0278a272ab06410bff707cd62498bbf50e88ab114ffdb6e388d6c7d965eea85c76b1b48715edfa9c0f45c6cf8269aa07bd71953030f762af7e9bef038c83273a4af2c3d8273bc9b353677f62926113db30c539f900b964550ac073997a6dcd4ca88206b4e5caf400d8ade86b9640a81e2580c958789a1b5d969102d41462aedd6ad9766dab4ff16127209157ea01732a28599ae6bd16c758a2613c56763174a93fd4f619282b1a2f14cacc020a31ad5860a0d2f0595c7b1e9bd8220ed8b291a0b58dfbdd12f04d98ce2a35ac19c9acd07881f94c7840bf1189fa53f5021391b5edcda09575d1b07fe9b3a043aa72abcfa811824ff46ec6ef02227bab2796ed261a910b74f23970f41a49ad4065947f836c5ff6947f2a71ad12839c364a624dd8f912fad70ac8cde0d422986dd7d1cf3bcc288f57e1fe2bc4b034e5718821879480e47167ce1b39d551155b7e51ec363a9e70478edd672821ff5c57a6b7816cab41652abe6295334ba01ff18fbc099658e7c438b28e08ba2a2761601f5c5093b21ff4723485ea940a9f917d212fc60b15d45548f159e5bcddd8fabefe05c816a068c4f3caec554399727b9b9b92ff1761099df57d4441a0c8a9e6606c9ed7a64d", 0xfbc}], 0x3, 0x8, 0x7, 0x17) 2.336802343s ago: executing program 3 (id=3542): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x4, 0x1, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5, &(0x7f00000000c0)=0xfffffff8, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {0x0, 0x1000, 0x80, 0xfffc}, 0x7, [0x0, 0x80000000, 0x9, 0x0, 0x8, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0xfffffffd], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4], [0x0, 0x401, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x401, 0x100000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) 2.283806714s ago: executing program 5 (id=3543): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x4, 0x1, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x5, &(0x7f00000000c0)=0xfffffff8, 0x0, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x3, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {0x0, 0x1000, 0x80, 0xfffc}, 0x7, [0x0, 0x80000000, 0x9, 0x0, 0x8, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0xfffffffd], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3d, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4], [0x0, 0x401, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x401, 0x100000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x6e2, 0x600, 0x1, 0x0, 0x0) 2.246218641s ago: executing program 2 (id=3544): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 1.23327552s ago: executing program 4 (id=3545): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) ioctl$TCFLSH(r0, 0x540b, 0x1) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001400), 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x12, r3, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000080)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xe2, 0x5, 0x259, 0x2, 0x34eb, 0x57, "466896a0bfa33398d79f1bfc4496a4f8824a296fe09642f2e6f2c9e9e1c32598f405f918fa33497694933903b16597911e02ccf981026446597eda833f2582405de19193f94a2251421d2fd4467e33101f67a16faa74ef62166a4136c2d8d74aed89d211cd8e0e501261b934487aff2b3132aed003f06340e43d9f0e80bc3bbe4c3a322606b8798839c61671f2637ca83dce09d18de600b4564b6a1c084582467dc5c8ffda940b1ccb43990a56421e38a22c3b035c4a7164d3f00d3e9b2de0c5927ac40067ce11d67260fb5284a14efffe502c49328078ed0334db1c64925014c6ec"}}, 0x1fa) 1.132005229s ago: executing program 5 (id=3546): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x18) r2 = io_uring_setup(0x7d2e, &(0x7f0000000180)={0x0, 0xffffffff, 0x2}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r2, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000540)=[0x7, 0xb09f], 0x2) fsync(0xffffffffffffffff) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xb, 0x8, 0x5, 0x40722, 0xe72, 0xb0c, 0x8, 0x38, 0x35, {0xffff945a, 0x1}, 0x3, 0xed}}) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc70e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x80, 0x5, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x2, 0x8, {0x9, 0x21, 0x9, 0xc, 0x1, {0x22, 0xebb}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x0, 0x9f, 0x1}}]}}}]}}]}}, 0x0) 902.184821ms ago: executing program 3 (id=3547): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$packet(0x11, 0x2, 0x300) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, &(0x7f0000000300)="f7b920e49a48d1", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1, 0x7], 0x0, 0x0, 0x2}}, 0x40) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0xb) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x62, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=0x0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYRESOCT=r4], 0xf0}, 0x1, 0x0, 0x0, 0x8}, 0x884) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) unshare(0x40020000) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f154, 0x8}) socket$pptp(0x18, 0x1, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8040, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x3, "ff00f700000000000000f2ffae88008300"}) syz_open_pts(r7, 0x141601) r8 = gettid() ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f00000003c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, 0xc, 0x4, 0x0, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000380)={0x0, 0x1, 0x1ff, 0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1f, 0x4, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 835.900873ms ago: executing program 2 (id=3548): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0xfffffffffffffc70) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) shutdown(r3, 0x1) (async) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYRES8=r2], 0x0) (async, rerun: 32) sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002280)=""/92, 0x5c}, {&(0x7f0000003cc0)=""/51, 0x33}, {&(0x7f0000002300)=""/145, 0x91}], 0x3, &(0x7f0000003900)=""/185, 0xb9}, 0x4000}, {{&(0x7f00000024c0)=@ax25={{}, [@bcast, @netrom, @remote, @default, @netrom, @netrom, @default, @null]}, 0x80, &(0x7f0000002740)=[{&(0x7f0000002540)=""/238, 0xee}, {&(0x7f0000002640)=""/208, 0xd0}], 0x2}, 0xf0a2}, {{&(0x7f0000002780)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/26, 0x1a}, {&(0x7f0000003840)=""/144, 0x90}, {&(0x7f0000003a80)=""/134, 0x86}, {&(0x7f00000039c0)=""/36, 0x24}, {&(0x7f0000003a00)=""/104, 0x68}, {&(0x7f0000003e00)=""/103, 0x67}, {&(0x7f0000003b40)=""/56, 0x38}, {&(0x7f0000003b80)=""/65, 0x41}], 0x9}, 0x8}], 0x3, 0x2, 0x0) (async) r7 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r7, 0x0, 0x0, 0x1, 0x3000) msgrcv(r7, 0x0, 0x0, 0x1, 0x0) (async, rerun: 32) msgsnd(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000"], 0x8, 0x800) (async, rerun: 32) msgrcv(r7, &(0x7f0000000000)={0x0, ""/102}, 0x6e, 0x2, 0x1800) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0x2, r8, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000003d40)=ANY=[@ANYBLOB="100000000000000067d1c22cf3604289509899c43d7ed1ebb177ed7e36d72a91020c1860ca7afe602bb5ed0938333fdf4f5e04b8cd70b73503bed2ca9cc0735b512c009fcbf1d2b0d66ea9065377ccada9085dd72fb1d0d44be96f7248fab5bbd14526704a1f5354992a6326b246864644c7f50bcd16901ecc2ee628e39967bf424af8ace5ad58a74ec6eca517f4a99ab44b9fd3bb90b3c69468531816de16865d8e3d7c45ce125ab24fe3d32b699f5b107e2716000000", @ANYRES64=r1], 0x10) r9 = socket$unix(0x1, 0x5, 0x0) getpeername(r9, 0x0, 0x0) (async) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r0, &(0x7f0000003d00)={0x20000000}) (async) io_setup(0x800, &(0x7f0000000100)) 449.124441ms ago: executing program 2 (id=3549): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x2, 0xfff, 0x2}) fcntl$lock(r0, 0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x81}) (fail_nth: 4) 422.716381ms ago: executing program 0 (id=3550): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev}, 0x0, @in6=@local}}, 0xe8) r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000ac0)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}}}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}, {}, {0x0, 0x2}]}, {[{}, {}, {0x4}, {}, {}, {0x1ff}, {0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}, {}, {[], [{}, {0x0, 0xfffffffd}]}, {}, {[], [{}, {}, {}, {}, {}, {}, {0x8}]}, {}, {}, {}, {[{}, {}, {}, {0x3}]}], 0x80}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r2, 0xffffffffffffffff, 0x0) 307.791182ms ago: executing program 0 (id=3551): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, &(0x7f00000002c0)=0x800084, 0x4) r1 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x8) syz_io_uring_setup(0x6b22, &(0x7f0000000380)={0x0, 0xb05c, 0x10, 0x4, 0x21b}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socketpair(0x10, 0x2, 0xb, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @local, 0x6}, 0x32) sendto$inet6(r2, &(0x7f0000000740)="800037bbfa9ba1db7402c88a67f97f13ad715eb8c0cd140fc0af39d7af2d0169401ca8f7041743609dd4dea2e7ca62a5d657d4d1ea895afcf7578c23314423f933ddfde75c6eb1d80c4c9dc13b8adb515873000000000000055c9f4a0d84d78284f29157ba6114216514497d215900009b48de5c10a63c66a0687dad9933ec94353c428e84ac102caf8a8b791b0000000000000000001e8385a302a2002407789ad51d90ee261be80b06170b1de97c749c2dbc149a973cf0647164fd87e797ab39f155574c76cbb37e54c37085f6c58742ac2f1da1d6a7a3b9d884ac6490f1ae735ffdd47960bd22c99608e7fe3eaa9e3adb09a52696b9a65dde3a51fbc2d9", 0xffffffffffffff28, 0x20000800, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in=@remote, @in6=@private2, 0x4e20, 0x0, 0x4e21, 0x552, 0x8, 0x120, 0x80, 0x2c}, {0xed5, 0x40, 0xc, 0x400, 0xe83, 0x320f, 0x3, 0xfff}, {0xfffffffffffff282, 0x7, 0x8000000000000000, 0x1}, 0xfffffffb, 0x6e6bbb, 0x0, 0x1, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x2b}, 0xa, @in6=@local, 0x3505, 0x0, 0x0, 0x2, 0x5, 0x6, 0xc}}, 0xe8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) pread64(0xffffffffffffffff, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000340)=@userptr={0xd, 0x3, 0x0, 0xe000, 0x4, {0x0, 0x2710}, {0x2, 0x8, 0x5, 0x2, 0x9, 0x20, "ce7f9a90"}, 0x7fffffff, 0x2, {&(0x7f0000000300)}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000080)=0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000740)=0xe) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000340)=0xff) write$UHID_INPUT(r7, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x3, 0x4, 0xe000, 0x4, {0x77359400}, {0x3, 0x0, 0xf, 0x6, 0x4, 0x1, "a91b63d9"}, 0x8, 0x1, {}, 0x101}) unshare(0x40400) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000240)={0xf0f046, 0x100000}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf250000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) 82.241993ms ago: executing program 2 (id=3552): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9540700000000000400b55467", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x63, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x2d, 0x0, 0x0, @ipv4, @local, {[@routing={0x29}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfc"}}}}}, 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 41.259851ms ago: executing program 2 (id=3553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) close(0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) listen(r2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 0s ago: executing program 0 (id=3554): syz_emit_ethernet(0x3e, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) r4 = socket(0x2b, 0x80801, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) bind$inet6(r4, &(0x7f0000000e80)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r6) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x9, 0x3, 0x0, 0x5749}]}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r8, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYRESHEX, @ANYRES64=r2, @ANYRES64=r1, @ANYRES32=r6, @ANYRESDEC=r0], 0x38}, 0x0) read$FUSE(r6, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0x0, r9, {0x7, 0x1f, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x14c, 0x94a4}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r10, r10, 0x0) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x400, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000380)={0xa0, 0x0, r9, {{0x0, 0x3, 0x4, 0x7, 0xf, 0x9, {0x1, 0x8, 0x80000000, 0xa1d, 0x7, 0x0, 0x5, 0x2, 0x844a, 0x8000, 0xb, r10, r11, 0x800, 0x3}}, {0x0, 0x2}}}, 0xa0) kernel console output (not intermixed with test programs): JECTION: forcing a failure. [ 930.220068][T18397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.233177][T18397] CPU: 0 UID: 0 PID: 18397 Comm: syz.4.3193 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 930.233201][T18397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 930.233212][T18397] Call Trace: [ 930.233219][T18397] [ 930.233226][T18397] dump_stack_lvl+0x16c/0x1f0 [ 930.233258][T18397] should_fail_ex+0x512/0x640 [ 930.233286][T18397] _copy_from_user+0x2e/0xd0 [ 930.233312][T18397] copy_msghdr_from_user+0x98/0x160 [ 930.233339][T18397] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 930.233376][T18397] ___sys_sendmsg+0xfe/0x1d0 [ 930.233403][T18397] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.233425][T18397] ? __lock_acquire+0x622/0x1c90 [ 930.233481][T18397] __sys_sendmsg+0x16d/0x220 [ 930.233507][T18397] ? __pfx___sys_sendmsg+0x10/0x10 [ 930.233548][T18397] do_syscall_64+0xcd/0x4c0 [ 930.233577][T18397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.233594][T18397] RIP: 0033:0x7f24dc58e929 [ 930.233609][T18397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.233625][T18397] RSP: 002b:00007f24dd387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.233642][T18397] RAX: ffffffffffffffda RBX: 00007f24dc7b6160 RCX: 00007f24dc58e929 [ 930.233654][T18397] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000007 [ 930.233664][T18397] RBP: 00007f24dd387090 R08: 0000000000000000 R09: 0000000000000000 [ 930.233675][T18397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.233684][T18397] R13: 0000000000000000 R14: 00007f24dc7b6160 R15: 00007ffe2e82ab28 [ 930.233707][T18397] [ 931.066159][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.072752][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.240054][T18425] binder_alloc: 18420: binder_alloc_buf, no vma [ 932.780461][ T43] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 932.835511][ T5894] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 932.930657][ T30] audit: type=1400 audit(2000000035.960:1351): avc: denied { cmd } for pid=18441 comm="syz.2.3206" path="socket:[61053]" dev="sockfs" ino=61053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 932.973857][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.134248][ T43] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 933.143781][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.151922][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 933.160094][ T5894] usb 4-1: config 0 has an invalid interface number: 61 but max is 1 [ 933.168622][ T43] usb 1-1: config 0 descriptor?? [ 933.174227][ T5894] usb 4-1: config 0 has an invalid interface number: 163 but max is 1 [ 933.185210][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 933.191446][ T5894] usb 4-1: config 0 has no interface number 0 [ 933.197852][ T5894] usb 4-1: config 0 has no interface number 1 [ 933.204194][ T5894] usb 4-1: config 0 interface 163 has no altsetting 0 [ 933.214422][ T5894] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 933.241528][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.261121][ T5894] usb 4-1: Product: syz [ 933.270681][ T5894] usb 4-1: Manufacturer: syz [ 933.283620][ T5894] usb 4-1: SerialNumber: syz [ 933.291004][ T5894] usb 4-1: config 0 descriptor?? [ 933.407934][ T5894] viperboard 4-1:0.61: version 0.00 found at bus 004 address 079 [ 933.422007][ T5894] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 933.432325][ T5894] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 933.448899][ T5894] viperboard 4-1:0.163: version 0.00 found at bus 004 address 079 [ 933.463642][ T5894] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 933.483772][ T5894] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 933.860585][ T43] pwc: recv_control_msg error -71 req 02 val 2700 [ 933.867610][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 933.885328][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 933.885928][T12359] usb 4-1: USB disconnect, device number 79 [ 933.898533][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 933.905954][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 933.912765][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 933.937358][ T5894] hid-generic C990:0003:0000.0022: unknown main item tag 0x0 [ 933.944803][ T5894] hid-generic C990:0003:0000.0022: unknown main item tag 0x0 [ 934.081449][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 934.088663][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 934.098179][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 934.105115][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 934.115426][ T5894] hid-generic C990:0003:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz1 [ 934.127145][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 934.573097][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 934.594774][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 934.615772][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 934.622927][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 934.635816][ T5894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=5894 comm=kworker/1:5 [ 934.664850][T18452] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 934.676084][ T43] pwc: Registered as video103. [ 934.737934][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input82 [ 934.820959][ T43] usb 1-1: USB disconnect, device number 46 [ 936.244191][ T43] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 936.400333][T18480] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 936.530562][ T43] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 936.607365][ T43] usb 1-1: config 0 has no interface number 0 [ 936.694689][T18464] netlink: 'syz.4.3212': attribute type 4 has an invalid length. [ 936.703920][ T43] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 936.760959][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.953302][ T43] usb 1-1: Product: syz [ 937.063376][ T43] usb 1-1: Manufacturer: syz [ 937.130069][ T43] usb 1-1: SerialNumber: syz [ 937.180330][T18482] 9pnet_virtio: no channels available for device 127.0.0.1 [ 937.191729][ T43] usb 1-1: config 0 descriptor?? [ 937.415298][ T5894] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 937.425235][T18357] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 937.445260][ T5926] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 937.568024][ T5894] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 937.576484][ T5894] usb 3-1: config 0 has no interface number 0 [ 937.582596][ T5894] usb 3-1: config 0 interface 156 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 937.585353][T18357] usb 6-1: Using ep0 maxpacket: 16 [ 937.594795][ T5894] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 937.610239][ T5894] usb 3-1: config 0 interface 156 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 937.621904][ T5894] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 937.622030][T18357] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 937.631447][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.645811][ T5926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.651431][ T5894] usb 3-1: config 0 descriptor?? [ 937.661720][ T5926] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 937.666835][ T5894] gspca_main: spca561-2.14.0 probing abcd:cdee [ 937.680361][T18357] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 937.699930][T18357] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.710366][T18357] usb 6-1: Product: syz [ 937.716036][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.724205][T18357] usb 6-1: Manufacturer: syz [ 937.730360][T18357] usb 6-1: SerialNumber: syz [ 937.735907][ T5926] usb 4-1: config 0 descriptor?? [ 937.743808][T18357] usb 6-1: config 0 descriptor?? [ 937.750731][ T5926] pwc: Askey VC010 type 2 USB webcam detected. [ 938.033005][T18357] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 938.042781][T18357] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 938.331402][T18493] syz.0.3215: attempt to access beyond end of device [ 938.331402][T18493] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 939.159843][ T5894] spca561 3-1:0.156: probe with driver spca561 failed with error -22 [ 939.431910][ T5894] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 939.465031][ T5894] usb 3-1: MIDIStreaming interface descriptor not found [ 939.571456][T18357] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 939.643686][ T5926] pwc: recv_control_msg error -71 req 02 val 2700 [ 939.653597][T18357] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 939.665517][ T5926] pwc: recv_control_msg error -71 req 02 val 2c00 [ 939.679982][T18357] em28xx 6-1:0.0: board has no eeprom [ 939.688278][ T5926] pwc: recv_control_msg error -71 req 04 val 1000 [ 939.700907][ T5926] pwc: recv_control_msg error -71 req 04 val 1300 [ 939.709648][ T5926] pwc: recv_control_msg error -71 req 04 val 1400 [ 939.716659][ T5926] pwc: recv_control_msg error -71 req 02 val 2000 [ 939.723495][ T5926] pwc: recv_control_msg error -71 req 02 val 2100 [ 939.730539][ T5926] pwc: recv_control_msg error -71 req 04 val 1500 [ 939.741991][ T5926] pwc: recv_control_msg error -71 req 02 val 2500 [ 939.749086][ T5926] pwc: recv_control_msg error -71 req 02 val 2400 [ 939.749370][T18502] FAULT_INJECTION: forcing a failure. [ 939.749370][T18502] name failslab, interval 1, probability 0, space 0, times 0 [ 939.755920][ T5926] pwc: recv_control_msg error -71 req 02 val 2600 [ 939.756251][ T5926] pwc: recv_control_msg error -71 req 02 val 2900 [ 939.782278][T18357] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 939.790233][T18357] em28xx 6-1:0.0: dvb set to bulk mode. [ 939.796582][T12359] em28xx 6-1:0.0: Binding DVB extension [ 939.807254][T18502] CPU: 1 UID: 0 PID: 18502 Comm: syz.4.3222 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 939.807279][T18502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 939.807289][T18502] Call Trace: [ 939.807295][T18502] [ 939.807302][T18502] dump_stack_lvl+0x16c/0x1f0 [ 939.807323][T18357] usb 6-1: USB disconnect, device number 35 [ 939.807332][T18502] should_fail_ex+0x512/0x640 [ 939.807359][T18502] should_failslab+0xc2/0x120 [ 939.807381][T18502] __kmalloc_cache_noprof+0x6a/0x3e0 [ 939.807400][T18502] ? sctp_add_bind_addr+0xae/0x3f0 [ 939.807425][T18502] sctp_add_bind_addr+0xae/0x3f0 [ 939.807450][T18502] sctp_copy_local_addr_list+0x39d/0x5a0 [ 939.807470][T18502] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 939.807489][T18502] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 939.807510][T18502] ? sctp_bind_addr_copy+0xe0/0x530 [ 939.807532][T18502] sctp_bind_addr_copy+0xe0/0x530 [ 939.807558][T18502] sctp_connect_new_asoc+0x1d7/0x790 [ 939.807579][T18502] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 939.807604][T18502] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 939.807629][T18502] sctp_sendmsg+0x15f9/0x1ee0 [ 939.807655][T18502] ? __pfx_sctp_sendmsg+0x10/0x10 [ 939.807678][T18502] ? __pfx_sock_has_perm+0x10/0x10 [ 939.807704][T18502] ? __import_iovec+0x1dd/0x650 [ 939.807728][T18502] ? __pfx_sctp_sendmsg+0x10/0x10 [ 939.807756][T18502] inet_sendmsg+0x11c/0x140 [ 939.807777][T18502] ____sys_sendmsg+0x973/0xc70 [ 939.807796][T18502] ? copy_msghdr_from_user+0x10a/0x160 [ 939.807818][T18502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 939.807838][T18502] ? hrtimer_start_range_ns+0x47e/0xfc0 [ 939.807855][T18502] ? find_held_lock+0x2b/0x80 [ 939.807879][T18502] ___sys_sendmsg+0x134/0x1d0 [ 939.807903][T18502] ? __pfx____sys_sendmsg+0x10/0x10 [ 939.807938][T18502] ? find_held_lock+0x2b/0x80 [ 939.807973][T18502] __sys_sendmmsg+0x200/0x420 [ 939.807998][T18502] ? __pfx___sys_sendmmsg+0x10/0x10 [ 939.808028][T18502] ? __pfx_sched_clock_cpu+0x10/0x10 [ 939.808062][T18502] ? handle_softirqs+0x5be/0x8e0 [ 939.808090][T18502] __x64_sys_sendmmsg+0x9c/0x100 [ 939.808111][T18502] ? lockdep_hardirqs_on+0x7c/0x110 [ 939.808132][T18502] do_syscall_64+0xcd/0x4c0 [ 939.808156][T18502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.808172][T18502] RIP: 0033:0x7f24dc58e929 [ 939.808184][T18502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.808198][T18502] RSP: 002b:00007f24dd3c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 939.808214][T18502] RAX: ffffffffffffffda RBX: 00007f24dc7b5fa0 RCX: 00007f24dc58e929 [ 939.808224][T18502] RDX: 0000000000000001 RSI: 0000200000002fc0 RDI: 0000000000000004 [ 939.808233][T18502] RBP: 00007f24dd3c9090 R08: 0000000000000000 R09: 0000000000000000 [ 939.808243][T18502] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000002 [ 939.808252][T18502] R13: 0000000000000000 R14: 00007f24dc7b5fa0 R15: 00007ffe2e82ab28 [ 939.808275][T18502] [ 940.105268][T12359] em28xx 6-1:0.0: Registering input extension [ 940.111687][ T5926] pwc: recv_control_msg error -71 req 02 val 2800 [ 940.118659][ T5926] pwc: recv_control_msg error -71 req 04 val 1100 [ 940.125530][ T5926] pwc: recv_control_msg error -71 req 04 val 1200 [ 940.133377][ T5926] pwc: Registered as video103. [ 940.168394][ T43] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 940.196342][ T43] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 940.220596][ T5926] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input84 [ 940.230421][ T43] asix 1-1:0.251: probe with driver asix failed with error -71 [ 940.232908][ T43] usb 1-1: USB disconnect, device number 47 [ 940.253486][T18357] em28xx 6-1:0.0: Disconnecting em28xx [ 940.265069][T18357] em28xx 6-1:0.0: Closing input extension [ 940.279975][T18357] em28xx 6-1:0.0: Freeing device [ 940.290405][ T5926] usb 4-1: USB disconnect, device number 80 [ 940.484792][ T5899] usb 3-1: USB disconnect, device number 30 [ 940.509484][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3224'. [ 940.537219][T18513] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3224'. [ 940.725402][ T43] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 940.961643][ T43] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 941.208061][ T43] usb 1-1: config 0 has no interface number 0 [ 941.228428][ T43] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 942.225751][ T43] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 942.241702][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.255484][ T43] usb 1-1: Product: syz [ 942.259750][ T43] usb 1-1: Manufacturer: syz [ 942.264486][ T43] usb 1-1: SerialNumber: syz [ 942.273945][ T43] usb 1-1: config 0 descriptor?? [ 942.284823][ T43] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 942.332128][T18531] binder: 18530:18531 ioctl c0306201 0 returned -14 [ 943.135484][T18538] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 943.175580][ T5926] usb 1-1: USB disconnect, device number 48 [ 943.192781][ T5926] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 944.085307][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 944.255707][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.275309][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 944.301131][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.328308][ T43] usb 3-1: config 0 descriptor?? [ 944.344356][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 944.577359][T18567] FAULT_INJECTION: forcing a failure. [ 944.577359][T18567] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 944.591370][T18567] CPU: 1 UID: 0 PID: 18567 Comm: syz.5.3239 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 944.591394][T18567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 944.591405][T18567] Call Trace: [ 944.591411][T18567] [ 944.591417][T18567] dump_stack_lvl+0x16c/0x1f0 [ 944.591448][T18567] should_fail_ex+0x512/0x640 [ 944.591478][T18567] should_fail_alloc_page+0xe7/0x130 [ 944.591505][T18567] prepare_alloc_pages+0x3c2/0x610 [ 944.591532][T18567] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 944.591557][T18567] ? ip_skb_dst_mtu+0x487/0xe90 [ 944.591581][T18567] ? __pfx_ip_finish_output2+0x10/0x10 [ 944.591599][T18567] ? ip_skb_dst_mtu+0x496/0xe90 [ 944.591632][T18567] ? __pfx_ip_skb_dst_mtu+0x10/0x10 [ 944.591650][T18567] ? __pfx_nf_hook+0x10/0x10 [ 944.591669][T18567] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 944.591692][T18567] ? __ip_finish_output+0x116/0x950 [ 944.591721][T18567] ? ip_output+0x142/0x2a0 [ 944.591738][T18567] ? __pfx_ip_output+0x10/0x10 [ 944.591758][T18567] ? ip_send_skb+0x177/0x560 [ 944.591776][T18567] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 944.591799][T18567] ? policy_nodemask+0xea/0x4e0 [ 944.591826][T18567] alloc_pages_mpol+0x1fb/0x550 [ 944.591851][T18567] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 944.591874][T18567] ? udp_sendmsg+0x3c8/0x29f0 [ 944.591902][T18567] folio_alloc_mpol_noprof+0x36/0x2f0 [ 944.591936][T18567] vma_alloc_folio_noprof+0xed/0x1e0 [ 944.591962][T18567] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 944.591987][T18567] ? rcu_read_unlock+0x2d/0xb0 [ 944.592012][T18567] do_wp_page+0x1136/0x4f20 [ 944.592046][T18567] ? __pfx_do_wp_page+0x10/0x10 [ 944.592075][T18567] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 944.592101][T18567] __handle_mm_fault+0x2223/0x5490 [ 944.592128][T18567] ? __pfx___handle_mm_fault+0x10/0x10 [ 944.592145][T18567] ? __pfx_mt_find+0x10/0x10 [ 944.592176][T18567] ? find_vma+0xbf/0x140 [ 944.592200][T18567] ? __pfx_find_vma+0x10/0x10 [ 944.592228][T18567] handle_mm_fault+0x589/0xd10 [ 944.592248][T18567] ? __pkru_allows_pkey+0x21/0xb0 [ 944.592274][T18567] do_user_addr_fault+0x7a6/0x1370 [ 944.592300][T18567] ? rcu_is_watching+0x12/0xc0 [ 944.592324][T18567] exc_page_fault+0x5c/0xb0 [ 944.592350][T18567] asm_exc_page_fault+0x26/0x30 [ 944.592367][T18567] RIP: 0010:__put_user_4+0xd/0x20 [ 944.592392][T18567] Code: 66 89 01 31 c9 0f 01 ca e9 d0 5a 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 944.592407][T18567] RSP: 0018:ffffc90003acfcf0 EFLAGS: 00050202 [ 944.592422][T18567] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000007ff8 [ 944.592433][T18567] RDX: ffff88802d448000 RSI: ffffffff894ef009 RDI: ffffffff8c1575a0 [ 944.592444][T18567] RBP: 0000000000000000 R08: 24349432358cc39f R09: 0000000000000000 [ 944.592454][T18567] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000040000 [ 944.592464][T18567] R13: 0000200000007fc0 R14: 00000000000003ff R15: 0000000000000400 [ 944.592483][T18567] ? __sys_sendmmsg+0x229/0x420 [ 944.592510][T18567] __sys_sendmmsg+0x234/0x420 [ 944.592535][T18567] ? __pfx___sys_sendmmsg+0x10/0x10 [ 944.592566][T18567] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 944.592602][T18567] ? fput+0x70/0xf0 [ 944.592625][T18567] ? ksys_write+0x1ac/0x250 [ 944.592637][T18567] ? __pfx_ksys_write+0x10/0x10 [ 944.592652][T18567] __x64_sys_sendmmsg+0x9c/0x100 [ 944.592667][T18567] ? lockdep_hardirqs_on+0x7c/0x110 [ 944.592683][T18567] do_syscall_64+0xcd/0x4c0 [ 944.592699][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.592709][T18567] RIP: 0033:0x7fb19e58e929 [ 944.592718][T18567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.592728][T18567] RSP: 002b:00007fb19f36a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 944.592737][T18567] RAX: ffffffffffffffda RBX: 00007fb19e7b6080 RCX: 00007fb19e58e929 [ 944.592743][T18567] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 944.592749][T18567] RBP: 00007fb19f36a090 R08: 0000000000000000 R09: 0000000000000000 [ 944.592755][T18567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.592761][T18567] R13: 0000000000000000 R14: 00007fb19e7b6080 R15: 00007ffde081b8e8 [ 944.592775][T18567] [ 945.010519][T18568] Falling back ldisc for ttyS3. [ 945.214816][ T43] pwc: recv_control_msg error -71 req 02 val 2700 [ 945.239293][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 945.282354][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 945.347943][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 945.355772][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 945.363652][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 945.371789][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 945.379914][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 945.389421][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 945.397201][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 945.398828][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 945.400204][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 945.402774][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 945.411867][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 945.413423][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 945.423359][ T43] pwc: Registered as video103. [ 945.436384][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input85 [ 945.465721][ T43] usb 3-1: USB disconnect, device number 31 [ 945.930233][T18583] input: syz0 as /devices/virtual/input/input86 [ 946.511109][ T30] audit: type=1400 audit(2000000048.960:1352): avc: denied { setattr } for pid=18575 comm="syz.5.3241" name="file0" dev="tmpfs" ino=1414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 946.568234][T18585] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3242'. [ 946.904791][T18582] ceph: No mds server is up or the cluster is laggy [ 946.912845][ T5894] libceph: connect (1)[c::]:6789 error -101 [ 946.927265][ T30] audit: type=1400 audit(2000000049.950:1353): avc: denied { read write } for pid=15194 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 946.952393][ T5894] libceph: mon0 (1)[c::]:6789 connect error [ 947.018548][ T30] audit: type=1400 audit(2000000049.950:1354): avc: denied { open } for pid=15194 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 947.177324][ T30] audit: type=1400 audit(2000000049.950:1355): avc: denied { ioctl } for pid=15194 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 947.285378][ T43] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 947.450442][ T43] usb 6-1: config 0 has an invalid interface number: 189 but max is 0 [ 947.703542][ T43] usb 6-1: config 0 has no interface number 0 [ 947.727329][ T43] usb 6-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 947.738479][ T43] usb 6-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 947.750573][ T43] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 947.764536][T18596] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3245'. [ 947.818690][ T43] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 947.838280][ T43] usb 6-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 947.890665][ T43] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 947.901516][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.921148][ T43] usb 6-1: Product: syz [ 948.093944][ T43] usb 6-1: Manufacturer: syz [ 948.110034][ T43] usb 6-1: SerialNumber: syz [ 948.128153][ T43] usb 6-1: config 0 descriptor?? [ 948.136082][T18591] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 948.156483][ T43] ums-alauda 6-1:0.189: USB Mass Storage device detected [ 948.221368][ T43] scsi host1: usb-storage 6-1:0.189 [ 948.360823][ T43] usb 6-1: USB disconnect, device number 36 [ 948.656858][T12495] Bluetooth: hci1: command 0x0405 tx timeout [ 948.964732][ T30] audit: type=1400 audit(2000000051.990:1356): avc: denied { allowed } for pid=18603 comm="syz.5.3246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 949.145281][T18562] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3238'. [ 949.312649][T13764] Bluetooth: hci5: Frame reassembly failed (-84) [ 949.560511][T18608] binder: 18607:18608 ioctl c0306201 200000000ac0 returned -14 [ 949.658993][T18608] kvm: MONITOR instruction emulated as NOP! [ 950.115202][T18627] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 950.151475][T18627] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 950.409189][T18629] FAULT_INJECTION: forcing a failure. [ 950.409189][T18629] name failslab, interval 1, probability 0, space 0, times 0 [ 950.425477][T18629] CPU: 1 UID: 0 PID: 18629 Comm: syz.0.3250 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 950.425504][T18629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 950.425514][T18629] Call Trace: [ 950.425520][T18629] [ 950.425528][T18629] dump_stack_lvl+0x16c/0x1f0 [ 950.425559][T18629] should_fail_ex+0x512/0x640 [ 950.425582][T18629] ? __kmalloc_noprof+0xbf/0x510 [ 950.425612][T18629] ? __list_lru_init+0xe8/0x4c0 [ 950.425632][T18629] should_failslab+0xc2/0x120 [ 950.425657][T18629] __kmalloc_noprof+0xd2/0x510 [ 950.425684][T18629] __list_lru_init+0xe8/0x4c0 [ 950.425706][T18629] alloc_super+0x8bf/0xbd0 [ 950.425733][T18629] sget_fc+0x116/0xc20 [ 950.425754][T18629] ? __pfx_set_anon_super_fc+0x10/0x10 [ 950.425775][T18629] ? __pfx_mqueue_fill_super+0x10/0x10 [ 950.425793][T18629] get_tree_nodev+0x28/0x190 [ 950.425816][T18629] mqueue_get_tree+0xf1/0x130 [ 950.425833][T18629] vfs_get_tree+0x8e/0x340 [ 950.425850][T18629] fc_mount+0x18/0x110 [ 950.425869][T18629] mq_init_ns+0x426/0x620 [ 950.425892][T18629] copy_ipcs+0x383/0x610 [ 950.425910][T18629] ? copy_utsname+0xab/0x470 [ 950.425931][T18629] create_new_namespaces+0x20a/0xa90 [ 950.425952][T18629] ? security_capable+0x7e/0x260 [ 950.425975][T18629] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 950.425999][T18629] ksys_unshare+0x45b/0xa40 [ 950.426022][T18629] ? __pfx_ksys_unshare+0x10/0x10 [ 950.426045][T18629] ? ksys_write+0x1ac/0x250 [ 950.426074][T18629] __x64_sys_unshare+0x31/0x40 [ 950.426096][T18629] do_syscall_64+0xcd/0x4c0 [ 950.426123][T18629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.426142][T18629] RIP: 0033:0x7f6a5a78e929 [ 950.426157][T18629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.426174][T18629] RSP: 002b:00007f6a5b639038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 950.426191][T18629] RAX: ffffffffffffffda RBX: 00007f6a5a9b6160 RCX: 00007f6a5a78e929 [ 950.426203][T18629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c040000 [ 950.426213][T18629] RBP: 00007f6a5b639090 R08: 0000000000000000 R09: 0000000000000000 [ 950.426224][T18629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.426234][T18629] R13: 0000000000000000 R14: 00007f6a5a9b6160 R15: 00007ffe8d34b2e8 [ 950.426257][T18629] [ 950.758475][T18115] Bluetooth: hci1: command 0x0405 tx timeout [ 951.529875][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 951.546100][T12495] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 951.559944][ T43] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 951.867814][T18170] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 951.964387][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.988280][ T43] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 952.005301][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.030525][ T43] usb 1-1: config 0 descriptor?? [ 952.039112][ T30] audit: type=1400 audit(2000000055.070:1357): avc: denied { name_bind } for pid=18652 comm="syz.4.3261" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 952.061483][T18170] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 952.073037][T18170] usb 6-1: config 0 has no interface number 0 [ 952.075317][T18653] netlink: 284 bytes leftover after parsing attributes in process `syz.4.3261'. [ 952.081932][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 952.097187][T18170] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 952.111055][ T30] audit: type=1400 audit(2000000055.140:1358): avc: denied { watch } for pid=18652 comm="syz.4.3261" path="/589/file1" dev="tmpfs" ino=3198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 952.134429][T18170] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.142799][T18170] usb 6-1: Product: syz [ 952.147322][T18170] usb 6-1: Manufacturer: syz [ 952.151997][T18170] usb 6-1: SerialNumber: syz [ 952.186710][T18170] usb 6-1: config 0 descriptor?? [ 952.289866][T18658] mkiss: ax0: crc mode is auto. [ 952.521628][ T43] pwc: recv_control_msg error -71 req 02 val 2b00 [ 952.529388][ T43] pwc: recv_control_msg error -71 req 02 val 2700 [ 952.537545][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 952.544388][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 952.553567][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 952.561847][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 952.569405][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 952.576394][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 952.583091][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 952.590005][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 952.608744][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 952.617027][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 952.624410][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 952.631440][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 952.639288][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 952.648301][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 952.656991][ T43] pwc: Registered as video103. [ 952.686974][T18660] ip6t_srh: unknown srh invflags 5F00 [ 952.726206][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input87 [ 952.739628][ T43] usb 1-1: USB disconnect, device number 49 [ 952.877514][T18665] tmpfs: Unknown parameter 'euid<00000000000000000000' [ 952.911400][T18665] lo speed is unknown, defaulting to 1000 [ 953.259240][T18670] syz.5.3255: attempt to access beyond end of device [ 953.259240][T18670] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 954.515941][T18170] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 954.548686][T18170] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 954.564768][T18170] asix 6-1:0.251: probe with driver asix failed with error -71 [ 954.591344][T18170] usb 6-1: USB disconnect, device number 37 [ 954.744099][T18689] FAULT_INJECTION: forcing a failure. [ 954.744099][T18689] name failslab, interval 1, probability 0, space 0, times 0 [ 954.769696][T18689] CPU: 1 UID: 0 PID: 18689 Comm: syz.5.3273 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 954.769724][T18689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 954.769734][T18689] Call Trace: [ 954.769740][T18689] [ 954.769748][T18689] dump_stack_lvl+0x16c/0x1f0 [ 954.769778][T18689] should_fail_ex+0x512/0x640 [ 954.769806][T18689] should_failslab+0xc2/0x120 [ 954.769830][T18689] __kmalloc_cache_noprof+0x6a/0x3e0 [ 954.769852][T18689] ? __hw_addr_add_ex+0x3c9/0x7c0 [ 954.769884][T18689] __hw_addr_add_ex+0x3c9/0x7c0 [ 954.769908][T18689] ? __pfx___hw_addr_add_ex+0x10/0x10 [ 954.769926][T18689] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 954.769959][T18689] ? __pfx_reg_vif_setup+0x10/0x10 [ 954.769985][T18689] dev_addr_init+0x161/0x250 [ 954.770008][T18689] ? __pfx_dev_addr_init+0x10/0x10 [ 954.770039][T18689] alloc_netdev_mqs+0x3d2/0x1570 [ 954.770073][T18689] vif_add+0xe52/0x1650 [ 954.770088][T18689] ? avc_has_perm_noaudit+0x117/0x3b0 [ 954.770113][T18689] ? __pfx_vif_add+0x10/0x10 [ 954.770129][T18689] ? find_held_lock+0x2b/0x80 [ 954.770149][T18689] ? __might_fault+0xe3/0x190 [ 954.770170][T18689] ? __might_fault+0xe3/0x190 [ 954.770189][T18689] ? __might_fault+0x13b/0x190 [ 954.770217][T18689] ? _copy_from_user+0x59/0xd0 [ 954.770243][T18689] ? copy_from_sockptr_offset.constprop.0+0xe5/0x170 [ 954.770260][T18689] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 954.770288][T18689] ip_mroute_setsockopt+0xe2a/0x1040 [ 954.770315][T18689] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 954.770356][T18689] do_ip_setsockopt+0x2ae/0x3240 [ 954.770385][T18689] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 954.770414][T18689] ? sock_has_perm+0x259/0x2f0 [ 954.770434][T18689] ? __pfx_sock_has_perm+0x10/0x10 [ 954.770454][T18689] ? selinux_netlbl_socket_setsockopt+0x183/0x470 [ 954.770483][T18689] ip_setsockopt+0x59/0xf0 [ 954.770510][T18689] raw_setsockopt+0xb7/0x2a0 [ 954.770536][T18689] ? __pfx_raw_setsockopt+0x10/0x10 [ 954.770562][T18689] ? selinux_socket_setsockopt+0x6a/0x80 [ 954.770581][T18689] ? sock_common_setsockopt+0x2e/0xf0 [ 954.770600][T18689] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 954.770618][T18689] do_sock_setsockopt+0x221/0x470 [ 954.770636][T18689] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 954.770674][T18689] __sys_setsockopt+0x1a0/0x230 [ 954.770704][T18689] __x64_sys_setsockopt+0xbd/0x160 [ 954.770726][T18689] ? do_syscall_64+0x91/0x4c0 [ 954.770751][T18689] ? lockdep_hardirqs_on+0x7c/0x110 [ 954.770774][T18689] do_syscall_64+0xcd/0x4c0 [ 954.770801][T18689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.770819][T18689] RIP: 0033:0x7fb19e58e929 [ 954.770833][T18689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.770850][T18689] RSP: 002b:00007fb19f38b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 954.770872][T18689] RAX: ffffffffffffffda RBX: 00007fb19e7b5fa0 RCX: 00007fb19e58e929 [ 954.770884][T18689] RDX: 00000000000000ca RSI: 0000000000000000 RDI: 0000000000000003 [ 954.770894][T18689] RBP: 00007fb19f38b090 R08: 0000000000000010 R09: 0000000000000000 [ 954.770904][T18689] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 954.770915][T18689] R13: 0000000000000000 R14: 00007fb19e7b5fa0 R15: 00007ffde081b8e8 [ 954.770942][T18689] [ 955.723075][T18708] fuse: Unknown parameter '0177777777777777777777700000000000000000000' [ 955.735784][T18708] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3275'. [ 955.786587][T18707] dummy0: entered promiscuous mode [ 956.044350][T18707] sp0: Synchronizing with TNC [ 956.068193][ T30] audit: type=1400 audit(2000000000.190:1359): avc: denied { ioctl } for pid=18710 comm="syz.3.3278" path="socket:[63633]" dev="sockfs" ino=63633 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 956.102977][ T30] audit: type=1400 audit(2000000000.360:1360): avc: denied { setopt } for pid=18699 comm="syz.2.3277" lport=54379 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 956.305316][ T5899] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 956.469063][ T5899] usb 4-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 956.482904][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.543650][ T5899] usb 4-1: Product: syz [ 956.551659][ T5899] usb 4-1: Manufacturer: syz [ 956.563865][ T5899] usb 4-1: SerialNumber: syz [ 956.566777][T18718] dlm: no local IP address has been set [ 956.586744][ T5899] usb 4-1: config 0 descriptor?? [ 956.594619][T18718] dlm: cannot start dlm midcomms -107 [ 956.617551][ T5899] pwc: Samsung SNC-35E (v3.0) USB webcam detected. [ 956.685291][T18357] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 956.838805][ T5899] pwc: Failed to set LED on/off time (-71) [ 956.870693][T18357] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.897285][ T5899] pwc: send_video_command error -71 [ 956.924714][ T5899] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 956.945106][T18357] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 956.986361][ T5899] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 957.012116][T18357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.083596][ T5899] usb 4-1: USB disconnect, device number 81 [ 957.164087][T18357] usb 3-1: config 0 descriptor?? [ 957.231212][T18357] pwc: Askey VC010 type 2 USB webcam detected. [ 957.713622][T18357] pwc: recv_control_msg error -71 req 02 val 2b00 [ 957.723607][T18357] pwc: recv_control_msg error -71 req 02 val 2700 [ 958.266761][ T30] audit: type=1400 audit(2000000002.520:1361): avc: denied { write } for pid=18726 comm="syz.3.3283" lport=45148 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 958.528537][T18733] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 958.537308][T18733] overlayfs: missing 'lowerdir' [ 958.557477][ T30] audit: type=1400 audit(2000000002.520:1362): avc: denied { map } for pid=18726 comm="syz.3.3283" path="socket:[62671]" dev="sockfs" ino=62671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 958.582150][T18357] pwc: recv_control_msg error -71 req 02 val 2c00 [ 958.589330][ T30] audit: type=1400 audit(2000000002.520:1363): avc: denied { read } for pid=18726 comm="syz.3.3283" path="socket:[62671]" dev="sockfs" ino=62671 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 958.613368][T18357] pwc: recv_control_msg error -71 req 04 val 1000 [ 958.620381][T18357] pwc: recv_control_msg error -71 req 04 val 1300 [ 958.669231][T18357] pwc: recv_control_msg error -71 req 04 val 1400 [ 958.676132][T18357] pwc: recv_control_msg error -71 req 02 val 2000 [ 958.686372][T18357] pwc: recv_control_msg error -71 req 02 val 2100 [ 958.693674][T18357] pwc: recv_control_msg error -71 req 04 val 1500 [ 958.701363][T18357] pwc: recv_control_msg error -71 req 02 val 2500 [ 958.708740][T18357] pwc: recv_control_msg error -71 req 02 val 2400 [ 958.715835][T18357] pwc: recv_control_msg error -71 req 02 val 2600 [ 958.756895][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3285'. [ 958.829582][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3285'. [ 958.867260][T18357] pwc: recv_control_msg error -71 req 02 val 2900 [ 958.939014][T18357] pwc: recv_control_msg error -71 req 02 val 2800 [ 958.964703][T18740] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 959.029273][T18357] pwc: recv_control_msg error -71 req 04 val 1100 [ 959.076105][T18357] pwc: recv_control_msg error -71 req 04 val 1200 [ 959.083690][T18736] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3285'. [ 959.126652][T18357] pwc: Registered as video103. [ 959.132927][T18357] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input89 [ 959.221385][T18357] usb 3-1: USB disconnect, device number 32 [ 959.247029][T18751] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=18751 comm=syz.3.3290 [ 959.261704][T18750] tmpfs: Unknown parameter 'euid<00000000000000000000' [ 959.282587][T18750] lo speed is unknown, defaulting to 1000 [ 959.363492][T18757] netlink: 'syz.0.3292': attribute type 1 has an invalid length. [ 959.777164][T18761] (syz.5.3293,18761,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 959.786243][T18761] (syz.5.3293,18761,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 960.454481][T18771] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 961.044138][T18772] binder_alloc: 18767: binder_alloc_buf, no vma [ 961.765325][T18170] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 961.927691][T18170] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.949039][T18170] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 961.972026][T18170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.082391][T18170] usb 1-1: config 0 descriptor?? [ 962.092045][T18170] pwc: Askey VC010 type 2 USB webcam detected. [ 962.601891][T18170] pwc: recv_control_msg error -71 req 02 val 2b00 [ 962.616242][T18170] pwc: recv_control_msg error -71 req 02 val 2700 [ 962.624351][T18170] pwc: recv_control_msg error -71 req 02 val 2c00 [ 962.636767][T18170] pwc: recv_control_msg error -71 req 04 val 1000 [ 962.656864][T18170] pwc: recv_control_msg error -71 req 04 val 1300 [ 962.683945][T18170] pwc: recv_control_msg error -71 req 04 val 1400 [ 962.719802][T18170] pwc: recv_control_msg error -71 req 02 val 2000 [ 962.730837][T18170] pwc: recv_control_msg error -71 req 02 val 2100 [ 962.750152][T18170] pwc: recv_control_msg error -71 req 04 val 1500 [ 962.853165][T18170] pwc: recv_control_msg error -71 req 02 val 2500 [ 962.870519][T18170] pwc: recv_control_msg error -71 req 02 val 2400 [ 962.884610][T18170] pwc: recv_control_msg error -71 req 02 val 2600 [ 962.901032][T18170] pwc: recv_control_msg error -71 req 02 val 2900 [ 962.932060][T18170] pwc: recv_control_msg error -71 req 02 val 2800 [ 962.947379][T18170] pwc: recv_control_msg error -71 req 04 val 1100 [ 962.954985][T18170] pwc: recv_control_msg error -71 req 04 val 1200 [ 962.985809][T18170] pwc: Registered as video103. [ 963.003892][T18170] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input90 [ 963.015400][ T30] audit: type=1400 audit(2000000007.260:1364): avc: denied { setopt } for pid=18793 comm="syz.2.3302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 963.096235][ T5899] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 963.104394][T18170] usb 1-1: USB disconnect, device number 50 [ 963.225334][ T5899] usb 5-1: device descriptor read/64, error -71 [ 963.615499][ T5899] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 963.705303][T18170] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 963.771730][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3306'. [ 963.788017][ T5899] usb 5-1: device descriptor read/64, error -71 [ 963.802527][ T30] audit: type=1400 audit(2000000008.050:1365): avc: denied { unmount } for pid=15194 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 963.831576][T18806] netlink: 196 bytes leftover after parsing attributes in process `syz.5.3306'. [ 963.906723][T18170] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.918035][T18170] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 963.918414][ T5899] usb usb5-port1: attempt power cycle [ 964.195972][T18170] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 964.223111][T18170] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.374288][T18170] usb 1-1: config 0 descriptor?? [ 964.969387][T18797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.978807][T18797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.034992][ T5899] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 965.043465][T12359] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 965.066368][ T5899] usb 5-1: device descriptor read/8, error -71 [ 965.256880][T18797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 965.289360][T12359] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 965.312249][T12359] usb 6-1: config 0 has no interface number 0 [ 965.335305][ T5899] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 965.437210][T12359] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 965.488034][ T5899] usb 5-1: device descriptor read/8, error -71 [ 965.534404][T12359] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.631190][T12359] usb 6-1: Product: syz [ 965.648715][ T5899] usb usb5-port1: unable to enumerate USB device [ 965.727295][T18170] kye 0003:0458:0138.0023: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.0-1/input0 [ 965.727960][T12359] usb 6-1: Manufacturer: syz [ 965.744824][T12359] usb 6-1: SerialNumber: syz [ 965.751965][T12359] usb 6-1: config 0 descriptor?? [ 965.790786][T18828] netlink: 324 bytes leftover after parsing attributes in process `syz.3.3312'. [ 965.821303][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3312'. [ 965.873274][ T5899] usb 1-1: USB disconnect, device number 51 [ 966.265836][T18170] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 966.476494][T18170] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.497087][T18170] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 966.557457][T18170] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.631403][T18837] syz.5.3308: attempt to access beyond end of device [ 966.631403][T18837] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 966.690315][T18170] usb 5-1: config 0 descriptor?? [ 966.783660][T18170] pwc: Askey VC010 type 2 USB webcam detected. [ 967.506107][T18170] pwc: recv_control_msg error -71 req 02 val 2700 [ 967.513558][T18170] pwc: recv_control_msg error -71 req 02 val 2c00 [ 967.527291][T18170] pwc: recv_control_msg error -71 req 04 val 1000 [ 967.547756][T18170] pwc: recv_control_msg error -71 req 04 val 1300 [ 967.567557][T18170] pwc: recv_control_msg error -71 req 04 val 1400 [ 967.574691][T18170] pwc: recv_control_msg error -71 req 02 val 2000 [ 967.587917][T18170] pwc: recv_control_msg error -71 req 02 val 2100 [ 967.618558][T18170] pwc: recv_control_msg error -71 req 04 val 1500 [ 967.683323][T18170] pwc: recv_control_msg error -71 req 02 val 2500 [ 967.723403][T18170] pwc: recv_control_msg error -71 req 02 val 2400 [ 967.762782][T18170] pwc: recv_control_msg error -71 req 02 val 2600 [ 967.995475][T18170] pwc: recv_control_msg error -71 req 02 val 2900 [ 968.054103][T18170] pwc: recv_control_msg error -71 req 02 val 2800 [ 968.121845][T12359] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 968.137414][T18170] pwc: recv_control_msg error -71 req 04 val 1100 [ 968.179635][T18170] pwc: recv_control_msg error -71 req 04 val 1200 [ 968.185316][T12359] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 968.203994][T18170] pwc: Registered as video103. [ 968.308735][T18170] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input91 [ 968.345471][T12359] asix 6-1:0.251: probe with driver asix failed with error -71 [ 968.349521][T18170] usb 5-1: USB disconnect, device number 69 [ 968.405542][T12359] usb 6-1: USB disconnect, device number 38 [ 969.177339][T18115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 969.215037][T18115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 969.223717][T18115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 969.234379][T18115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 969.244660][T18115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 969.409304][T18855] lo speed is unknown, defaulting to 1000 [ 969.641751][T18855] chnl_net:caif_netlink_parms(): no params data found [ 969.789621][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3322'. [ 969.798896][T18870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3322'. [ 970.259611][ T30] audit: type=1400 audit(2000000014.520:1366): avc: denied { accept } for pid=18874 comm="syz.5.3323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 970.503218][T18855] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.521521][T18855] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.591092][T18855] bridge_slave_0: entered allmulticast mode [ 970.620144][T18855] bridge_slave_0: entered promiscuous mode [ 970.665629][T18855] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.690651][T18855] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.719145][T18855] bridge_slave_1: entered allmulticast mode [ 970.745311][T18855] bridge_slave_1: entered promiscuous mode [ 970.828885][T18855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.838175][T12359] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 970.866695][T18855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.924576][T18855] team0: Port device team_slave_0 added [ 970.937472][T18855] team0: Port device team_slave_1 added [ 970.995223][T12359] usb 1-1: Using ep0 maxpacket: 32 [ 971.003015][T12359] usb 1-1: unable to get BOS descriptor or descriptor too short [ 971.019758][T12359] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.071709][T12359] usb 1-1: config 0 has no interfaces? [ 971.458411][T18115] Bluetooth: hci3: command tx timeout [ 971.497674][T18855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.504743][T18855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.616694][T12359] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 971.617392][T18855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.625901][T12359] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.625923][T12359] usb 1-1: Product: syz [ 971.625938][T12359] usb 1-1: Manufacturer: syz [ 971.625952][T12359] usb 1-1: SerialNumber: syz [ 971.663734][T12359] usb 1-1: config 0 descriptor?? [ 971.666521][T18855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.675900][T18855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.702408][T18855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.851420][T18855] hsr_slave_0: entered promiscuous mode [ 971.866346][T18855] hsr_slave_1: entered promiscuous mode [ 971.872008][ T30] audit: type=1400 audit(2000000016.130:1367): avc: denied { bind } for pid=18890 comm="syz.5.3327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 971.872601][T18855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 971.924460][T18855] Cannot create hsr debugfs directory [ 971.937817][T12359] usb 1-1: USB disconnect, device number 52 [ 972.400109][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.412068][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.423837][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 972.512472][T18898] mkiss: ax0: crc mode is auto. [ 972.593700][T18904] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 972.666838][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.681422][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.691986][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 972.774423][ T1155] Bluetooth: hci5: Frame reassembly failed (-84) [ 972.848581][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.848691][ T30] audit: type=1400 audit(2000000017.110:1368): avc: denied { shutdown } for pid=18901 comm="syz.2.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 972.881122][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.962670][ T30] audit: type=1400 audit(2000000017.140:1369): avc: denied { write } for pid=18901 comm="syz.2.3329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 973.020683][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 973.544961][T12495] Bluetooth: hci3: command tx timeout [ 973.811530][ T36] bond0: (slave netdevsim0): Releasing backup interface [ 973.859315][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.871277][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.884010][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 974.846003][T12495] Bluetooth: hci5: command 0x1003 tx timeout [ 974.864363][T18115] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 975.564756][T18934] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18934 comm=syz.2.3338 [ 975.618331][T18115] Bluetooth: hci3: command tx timeout [ 976.279142][ T36] team0: Port device bond0 removed [ 976.290868][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.301320][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.318123][ T36] bond0 (unregistering): Released all slaves [ 976.465554][ T36] bond1 (unregistering): Released all slaves [ 976.708179][T18945] nvme_fabrics: missing parameter 'transport=%s' [ 976.721572][T18945] nvme_fabrics: missing parameter 'nqn=%s' [ 976.743641][ T36] bond2 (unregistering): Released all slaves [ 977.006958][ T36] bond3 (unregistering): (slave veth5): Releasing active interface [ 977.016685][ T36] bond3 (unregistering): Released all slaves [ 977.027385][T18932] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 977.122748][T18950] Bluetooth: MGMT ver 1.23 [ 977.129376][ T36] tipc: Disabling bearer [ 977.155392][ T30] audit: type=1326 audit(2000000021.400:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4062d8e929 code=0x7ffc0000 [ 977.178870][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.197639][ T36] tipc: Disabling bearer [ 977.235603][ T36] tipc: Left network mode [ 977.264503][ T30] audit: type=1326 audit(2000000021.450:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4062d8e929 code=0x7ffc0000 [ 977.289570][ T30] audit: type=1326 audit(2000000021.450:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f4062d8e929 code=0x7ffc0000 [ 977.322091][ T30] audit: type=1326 audit(2000000021.450:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4062d8e929 code=0x7ffc0000 [ 977.360075][ T30] audit: type=1326 audit(2000000021.450:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4062d8e929 code=0x7ffc0000 [ 977.388244][ T30] audit: type=1326 audit(2000000021.450:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4062d8e929 code=0x7ffc0000 [ 977.411642][ C0] vkms_vblank_simulate: vblank timer overrun [ 977.424143][ T30] audit: type=1326 audit(2000000021.450:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4062d8e929 code=0x7ffc0000 [ 977.511161][ T30] audit: type=1326 audit(2000000021.450:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4062d8e929 code=0x7ffc0000 [ 977.535372][ T30] audit: type=1326 audit(2000000021.450:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4062d8e929 code=0x7ffc0000 [ 977.562244][ T30] audit: type=1326 audit(2000000021.450:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18949 comm="syz.2.3343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4062d8e929 code=0x7ffc0000 [ 977.705511][ T5933] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 977.792907][T18115] Bluetooth: hci3: command tx timeout [ 978.120157][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 978.259112][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.270752][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.282194][ T5933] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 978.369140][ T5933] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 978.425238][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.458161][ T5933] usb 3-1: config 0 descriptor?? [ 978.538300][T18855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 978.669281][T18970] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 18970 comm: syz.5.3349) [ 978.675394][T18855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 978.695902][T18968] netlink: 'syz.0.3348': attribute type 1 has an invalid length. [ 978.703693][T18968] netlink: 'syz.0.3348': attribute type 2 has an invalid length. [ 978.746504][T18855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 978.777477][T18855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 978.839920][ T36] hsr_slave_0: left promiscuous mode [ 978.870849][ T5933] hid-u2fzero 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 978.879473][ T5933] hid-u2fzero 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 978.888773][ T5933] hid-u2fzero 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 978.896349][ T36] veth1_macvtap: left promiscuous mode [ 978.896659][ T5933] hid-u2fzero 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 978.909266][ T36] veth0_macvtap: left promiscuous mode [ 978.918156][ T5933] hid-u2fzero 0003:10C4:8ACF.0024: unknown main item tag 0x0 [ 978.919511][ T36] veth1_vlan: left promiscuous mode [ 978.927499][ T5933] hid-u2fzero 0003:10C4:8ACF.0024: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 978.944533][ T36] veth0_vlan: left promiscuous mode [ 978.946999][ T5933] hid-u2fzero 0003:10C4:8ACF.0024: U2F Zero LED initialised [ 978.964739][ T5933] hid-u2fzero 0003:10C4:8ACF.0024: U2F Zero RNG initialised [ 979.027088][T18977] trusted_key: encrypted_key: insufficient parameters specified [ 979.433281][T18994] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 979.915760][ T36] team0 (unregistering): Port device team_slave_1 removed [ 979.961681][ T36] team0 (unregistering): Port device team_slave_0 removed [ 980.432208][T18983] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 980.521520][ T973] usb 3-1: USB disconnect, device number 33 [ 980.614175][T18855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.696920][T18855] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.781061][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.788238][ T5953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.842644][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.849822][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.280004][ T973] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 981.306172][ T36] IPVS: stop unused estimator thread 0... [ 981.554144][T19017] lo speed is unknown, defaulting to 1000 [ 981.676187][ T973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.825013][ T973] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 981.838988][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.872276][ T973] usb 6-1: config 0 descriptor?? [ 981.881673][ T973] pwc: Askey VC010 type 2 USB webcam detected. [ 981.917658][T18855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.020770][T19035] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 982.540676][ T973] pwc: recv_control_msg error -71 req 02 val 2700 [ 982.550581][ T973] pwc: recv_control_msg error -71 req 02 val 2c00 [ 982.592916][T18855] veth0_vlan: entered promiscuous mode [ 982.597470][ T973] pwc: recv_control_msg error -71 req 04 val 1000 [ 982.610531][ T973] pwc: recv_control_msg error -71 req 04 val 1300 [ 982.620897][ T973] pwc: recv_control_msg error -71 req 04 val 1400 [ 982.634571][ T973] pwc: recv_control_msg error -71 req 02 val 2000 [ 982.635064][T18855] veth1_vlan: entered promiscuous mode [ 982.647093][ T973] pwc: recv_control_msg error -71 req 02 val 2100 [ 983.846362][ T973] pwc: recv_control_msg error -71 req 04 val 1500 [ 983.853163][ T973] pwc: recv_control_msg error -71 req 02 val 2500 [ 983.863149][ T973] pwc: recv_control_msg error -71 req 02 val 2400 [ 983.872912][ T973] pwc: recv_control_msg error -71 req 02 val 2600 [ 983.880493][ T973] pwc: recv_control_msg error -71 req 02 val 2900 [ 983.894010][T18855] veth0_macvtap: entered promiscuous mode [ 983.895510][ T973] pwc: recv_control_msg error -71 req 02 val 2800 [ 983.906839][ T973] pwc: recv_control_msg error -71 req 04 val 1100 [ 983.916465][ T973] pwc: recv_control_msg error -71 req 04 val 1200 [ 983.955802][ T973] pwc: Registered as video103. [ 983.962157][ T973] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input94 [ 983.967938][T18855] veth1_macvtap: entered promiscuous mode [ 984.046011][ T973] usb 6-1: USB disconnect, device number 39 [ 984.082257][T19051] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 984.271178][T18855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.695701][ T973] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 984.727310][T18855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.772351][T18855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.781438][T18855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.801498][T18855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.810346][T18855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.908249][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.995241][ T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 985.009094][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.019874][ T973] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 985.037409][ T973] usb 6-1: config 0 has no interface number 0 [ 985.045655][ T973] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 985.057848][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.075207][ T973] usb 6-1: Product: syz [ 985.078691][ T5953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.079461][ T973] usb 6-1: Manufacturer: syz [ 985.098441][ T973] usb 6-1: SerialNumber: syz [ 985.111733][ T973] usb 6-1: config 0 descriptor?? [ 985.120439][ T5953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.159016][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.170343][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.221101][ T43] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 985.392157][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.404013][ T43] usb 3-1: config 0 descriptor?? [ 985.435448][T12359] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 985.657403][T19074] lo speed is unknown, defaulting to 1000 [ 986.025420][T12359] usb 4-1: Using ep0 maxpacket: 8 [ 986.032217][T12359] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 986.043158][T12359] usb 4-1: config 179 has no interface number 0 [ 986.050671][T12359] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 986.062344][T12359] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 986.076621][T12359] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 986.089010][T12359] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 986.361819][T12359] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 986.375706][T12359] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 986.384892][T12359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.001353][T19085] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 987.048351][T19065] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 987.302321][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3377'. [ 987.313434][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3377'. [ 987.339457][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 987.339474][ T30] audit: type=1400 audit(2000000031.570:1412): avc: denied { write } for pid=19089 comm="syz.0.3378" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 987.411344][T12359] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input95 [ 987.685073][T12359] usb 4-1: USB disconnect, device number 82 [ 987.685126][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 987.685165][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 987.805394][T12359] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 988.079160][ T973] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 988.085059][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 988.119594][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 988.139830][ T43] usb 3-1: USB disconnect, device number 34 [ 988.173986][ T973] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 988.209963][ T973] asix 6-1:0.251: probe with driver asix failed with error -71 [ 988.245674][ T973] usb 6-1: USB disconnect, device number 40 [ 988.934035][ T30] audit: type=1400 audit(2000000033.190:1413): avc: denied { ioctl } for pid=19112 comm="syz.4.3385" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 988.959267][ C0] vkms_vblank_simulate: vblank timer overrun [ 989.306951][ T30] audit: type=1400 audit(2000000033.400:1414): avc: denied { watch_reads } for pid=19112 comm="syz.4.3385" path="pipe:[63132]" dev="pipefs" ino=63132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 989.606498][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3387'. [ 989.615495][T19122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3387'. [ 990.095604][T12359] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 990.267307][T12359] usb 6-1: Using ep0 maxpacket: 8 [ 990.274635][T12359] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 990.285461][ T5933] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 990.287366][T12359] usb 6-1: config 0 has no interface number 0 [ 990.299547][T12359] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 990.313472][T12359] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 990.327723][ T973] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 990.336351][T12359] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 990.351341][T12359] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 990.364977][T12359] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 990.376977][T12359] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.385223][ T5878] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 990.407478][T12359] usb 6-1: config 0 descriptor?? [ 990.437558][T12359] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 990.511763][ T973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.530076][ T973] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 990.547556][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.570638][ T973] usb 4-1: config 0 descriptor?? [ 990.605296][ T973] pwc: Askey VC010 type 2 USB webcam detected. [ 990.698859][T19125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.720565][T19125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.503819][ T5933] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 991.512581][ T5933] usb 5-1: config 0 has no interface number 0 [ 991.524614][ T5933] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 991.540211][ T5933] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 991.553244][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.564859][ T5933] usb 5-1: Product: syz [ 991.569178][ T5933] usb 5-1: Manufacturer: syz [ 991.574042][ T5933] usb 5-1: SerialNumber: syz [ 991.584987][ T5933] usb 5-1: config 0 descriptor?? [ 991.594672][ T5933] yurex 5-1:0.50: USB YUREX device now attached to Yurex #1 [ 991.617352][T19142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3394'. [ 991.665407][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 991.666637][ T973] pwc: recv_control_msg error -71 req 02 val 2700 [ 991.672783][ T5878] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 991.680749][ T973] pwc: recv_control_msg error -71 req 02 val 2c00 [ 991.692677][ T5878] usb 3-1: config 4 has no interface number 0 [ 991.699269][ T5878] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 991.700844][ T973] pwc: recv_control_msg error -71 req 04 val 1000 [ 991.709195][ T5878] usb 3-1: config 4 interface 51 altsetting 2 endpoint 0x82 has invalid maxpacket 14144, setting to 1024 [ 991.709223][ T5878] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 991.709246][ T5878] usb 3-1: config 4 interface 51 has no altsetting 0 [ 991.746591][ T5878] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 991.749198][ T973] pwc: recv_control_msg error -71 req 04 val 1300 [ 991.762776][ T973] pwc: recv_control_msg error -71 req 04 val 1400 [ 991.773044][ T973] pwc: recv_control_msg error -71 req 02 val 2000 [ 991.775648][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.780511][ T973] pwc: recv_control_msg error -71 req 02 val 2100 [ 991.789502][ T5878] usb 3-1: Product: syz [ 991.804025][ T973] pwc: recv_control_msg error -71 req 04 val 1500 [ 991.810135][ T5878] usb 3-1: Manufacturer: syz [ 991.815067][ T5878] usb 3-1: SerialNumber: syz [ 991.822892][T19133] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 991.830591][T19133] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 991.833214][ T973] pwc: recv_control_msg error -71 req 02 val 2500 [ 991.849147][ T973] pwc: recv_control_msg error -71 req 02 val 2400 [ 991.977349][ T973] pwc: recv_control_msg error -71 req 02 val 2600 [ 991.984881][ T973] pwc: recv_control_msg error -71 req 02 val 2900 [ 991.994022][ T973] pwc: recv_control_msg error -71 req 02 val 2800 [ 992.001656][ T973] pwc: recv_control_msg error -71 req 04 val 1100 [ 992.010671][ T973] pwc: recv_control_msg error -71 req 04 val 1200 [ 992.508857][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.515287][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.541525][T19133] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 992.543334][ T43] usb 5-1: USB disconnect, device number 70 [ 992.585447][T19133] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 992.598879][ T973] pwc: Registered as video103. [ 992.600373][ T43] yurex 5-1:0.50: USB YUREX #1 now disconnected [ 992.652838][ T973] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input96 [ 992.659133][ T5878] cdc_eem 3-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.2-1, CDC EEM Device, ba:30:9c:8d:8d:3b [ 992.733654][ T973] usb 4-1: USB disconnect, device number 83 [ 992.842561][ T30] audit: type=1400 audit(2000000037.070:1415): avc: denied { checkpoint_restore } for pid=19149 comm="syz.3.3396" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 993.478438][ T43] usb 6-1: USB disconnect, device number 41 [ 993.756948][ T5878] usb 3-1: USB disconnect, device number 35 [ 993.763601][ T5878] cdc_eem 3-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.2-1, CDC EEM Device [ 993.797363][ T43] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 993.856679][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'. [ 995.572931][ T5899] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 995.861190][ T43] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 995.976832][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 995.987155][ T5899] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 995.996428][ T5899] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 996.010748][ T5899] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 996.033329][ T5899] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 996.071365][ T5899] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 996.098412][ T5899] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 996.115464][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.137544][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 996.179187][T19181] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3406'. [ 996.199885][ T43] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 996.209266][ T43] usb 5-1: config 1 has no interface number 1 [ 996.215728][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 996.253983][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 996.264332][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.273606][ T43] usb 5-1: Product: syz [ 996.277926][ T43] usb 5-1: Manufacturer: syz [ 996.284520][ T43] usb 5-1: SerialNumber: syz [ 996.368609][ T5899] usb 4-1: usb_control_msg returned -32 [ 996.374217][ T5899] usbtmc 4-1:16.0: can't read capabilities [ 996.403723][T19183] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 996.592147][ T43] usb 5-1: failed to enable PITCH for EP 0x82 [ 996.685253][ T43] usb 5-1: USB disconnect, device number 71 [ 997.039296][T19192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3410'. [ 997.545216][ T5885] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 997.685226][ T5899] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 998.200243][ T5885] usb 6-1: Using ep0 maxpacket: 16 [ 998.825765][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 998.838358][ T5885] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 998.848644][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.852595][T19217] hugetlbfs: Unknown parameter 'nrGs' [ 998.862793][ T5885] usb 6-1: Product: syz [ 998.895624][ T30] audit: type=1400 audit(2000000043.110:1416): avc: denied { remount } for pid=19216 comm="syz.2.3418" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 998.901129][ T5885] usb 6-1: Manufacturer: syz [ 998.930097][ T5885] usb 6-1: SerialNumber: syz [ 998.976700][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 999.064908][ T5899] usb 5-1: config 7 has an invalid interface number: 172 but max is 0 [ 999.076370][ T5885] usb 6-1: config 0 descriptor?? [ 999.120644][ T30] audit: type=1400 audit(2000000043.190:1417): avc: denied { create } for pid=19216 comm="syz.2.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 999.122283][ T5885] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 999.150557][ T5894] usb 4-1: USB disconnect, device number 84 [ 999.155175][ T5899] usb 5-1: config 7 has no interface number 0 [ 999.191042][ T5899] usb 5-1: config 7 interface 172 has no altsetting 0 [ 999.280502][ T30] audit: type=1400 audit(2000000043.200:1418): avc: denied { listen } for pid=19216 comm="syz.2.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 999.326799][ T5899] usb 5-1: New USB device found, idVendor=0582, idProduct=0044, bcdDevice=ae.41 [ 999.336115][ T5885] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 999.342261][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.353082][ T5899] usb 5-1: Product: syz [ 999.357792][ T30] audit: type=1400 audit(2000000043.200:1419): avc: denied { setopt } for pid=19216 comm="syz.2.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 999.377660][ T5899] usb 5-1: Manufacturer: syz [ 999.382247][ T5899] usb 5-1: SerialNumber: syz [ 999.386895][T12359] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1000.251923][ T5899] usb 5-1: USB disconnect, device number 72 [ 1000.264188][T12359] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 1000.273713][T12359] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.298795][T12359] usb 3-1: config 0 has no interface number 0 [ 1000.313571][T12359] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1000.323134][T12359] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.332602][ T5885] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1000.343893][T12359] usb 3-1: Product: syz [ 1000.350428][T19228] kAFS: No cell specified [ 1000.350851][ T30] audit: type=1400 audit(2000000044.610:1420): avc: denied { mounton } for pid=19227 comm="syz.0.3422" path="/161/file0" dev="tmpfs" ino=874 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1000.380001][T12359] usb 3-1: Manufacturer: syz [ 1000.384884][T12359] usb 3-1: SerialNumber: syz [ 1000.426655][T12359] usb 3-1: config 0 descriptor?? [ 1000.485467][T12359] hub 3-1:0.31: bad descriptor, ignoring hub [ 1000.494194][T12359] hub 3-1:0.31: probe with driver hub failed with error -5 [ 1001.065400][ T5885] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1001.073411][ T5885] em28xx 6-1:0.0: board has no eeprom [ 1001.080179][T12359] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 1001.086581][T12359] uvcvideo 3-1:0.31: Entity type for entity Output 6 was not initialized! [ 1001.098935][T12359] usb 3-1: Failed to create links for entity 6 [ 1001.105318][T12359] usb 3-1: Failed to register entities (-22). [ 1001.126560][T12359] usb 3-1: USB disconnect, device number 36 [ 1001.165670][ T5885] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1001.181010][ T5885] em28xx 6-1:0.0: dvb set to bulk mode. [ 1001.189437][ T5899] em28xx 6-1:0.0: Binding DVB extension [ 1001.262648][ T5899] em28xx 6-1:0.0: Registering input extension [ 1001.295266][ T5894] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1001.304092][ T5885] usb 6-1: USB disconnect, device number 42 [ 1001.313533][ T5885] em28xx 6-1:0.0: Disconnecting em28xx [ 1001.321231][ T5885] em28xx 6-1:0.0: Closing input extension [ 1001.334715][ T5885] em28xx 6-1:0.0: Freeing device [ 1001.650219][T19235] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1001.734875][T19237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 1001.743861][T19237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3423'. [ 1001.796815][ T5894] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1001.826057][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.943729][ T5894] usb 1-1: config 0 descriptor?? [ 1002.295969][ T5885] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1002.476751][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.487726][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.503191][ T5885] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1002.513488][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.524164][ T5885] usb 6-1: config 0 descriptor?? [ 1002.565254][ T43] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 1002.705340][ T5894] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1002.726627][ T43] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1002.734927][ T43] usb 5-1: config 0 has no interface number 0 [ 1002.747513][ T43] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1002.757030][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.765680][ T43] usb 5-1: Product: syz [ 1002.772821][ T43] usb 5-1: Manufacturer: syz [ 1002.779112][ T43] usb 5-1: SerialNumber: syz [ 1002.786120][ T43] usb 5-1: config 0 descriptor?? [ 1002.858183][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.870058][ T5894] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1002.879624][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.890128][ T5894] usb 3-1: config 0 descriptor?? [ 1002.897992][ T5894] pwc: Askey VC010 type 2 USB webcam detected. [ 1002.941911][ T5885] lenovo 0003:17EF:6047.0025: unknown main item tag 0x0 [ 1002.949457][ T5885] lenovo 0003:17EF:6047.0025: unknown main item tag 0x0 [ 1002.957842][ T5885] lenovo 0003:17EF:6047.0025: unknown main item tag 0x0 [ 1002.964833][ T5885] lenovo 0003:17EF:6047.0025: unknown main item tag 0x0 [ 1002.971955][ T5885] lenovo 0003:17EF:6047.0025: unknown main item tag 0x0 [ 1002.981088][ T5885] lenovo 0003:17EF:6047.0025: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 1003.085242][ T5899] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1003.144333][T19240] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3424'. [ 1003.169846][T19240] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19240 comm=syz.5.3424 [ 1003.189153][ T5885] lenovo 0003:17EF:6047.0025: Failed to switch F7/9/11 mode: -71 [ 1003.197597][ T5885] lenovo 0003:17EF:6047.0025: Failed to switch middle button: -71 [ 1003.206064][ T5885] lenovo 0003:17EF:6047.0025: Fn-lock setting failed: -71 [ 1003.213534][ T5885] lenovo 0003:17EF:6047.0025: Sensitivity setting failed: -71 [ 1003.226612][ T5885] usb 6-1: USB disconnect, device number 43 [ 1003.240587][ T5899] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1003.250277][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.260455][ T5899] usb 4-1: Product: syz [ 1003.264657][ T5899] usb 4-1: Manufacturer: syz [ 1003.269858][ T5899] usb 4-1: SerialNumber: syz [ 1003.279513][ T5899] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1003.302908][T12359] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1003.302927][ T5894] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1003.321915][ T5894] pwc: recv_control_msg error -71 req 02 val 2700 [ 1003.329870][ T5894] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1003.337864][ T5894] pwc: recv_control_msg error -71 req 04 val 1000 [ 1003.345408][ T5894] pwc: recv_control_msg error -71 req 04 val 1300 [ 1003.352559][ T5894] pwc: recv_control_msg error -71 req 04 val 1400 [ 1003.360264][ T5894] pwc: recv_control_msg error -71 req 02 val 2000 [ 1003.367256][ T5894] pwc: recv_control_msg error -71 req 02 val 2100 [ 1003.374189][ T5894] pwc: recv_control_msg error -71 req 04 val 1500 [ 1003.382202][ T5894] pwc: recv_control_msg error -71 req 02 val 2500 [ 1003.389286][ T5894] pwc: recv_control_msg error -71 req 02 val 2400 [ 1003.396445][ T5894] pwc: recv_control_msg error -71 req 02 val 2600 [ 1003.403420][ T5894] pwc: recv_control_msg error -71 req 02 val 2900 [ 1003.452597][ T5899] usb 1-1: USB disconnect, device number 53 [ 1003.570482][ T5894] pwc: recv_control_msg error -71 req 02 val 2800 [ 1003.577558][ T5894] pwc: recv_control_msg error -71 req 04 val 1100 [ 1003.584362][ T5894] pwc: recv_control_msg error -71 req 04 val 1200 [ 1003.606316][ T5894] pwc: Registered as video103. [ 1003.612785][ T5894] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input98 [ 1003.632107][ T5894] usb 3-1: USB disconnect, device number 37 [ 1003.726435][T19258] syz.4.3427: attempt to access beyond end of device [ 1003.726435][T19258] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1003.768571][ T5878] usb 4-1: USB disconnect, device number 85 [ 1004.093523][T19257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3431'. [ 1004.151965][ T30] audit: type=1400 audit(2000000048.410:1421): avc: denied { listen } for pid=19256 comm="syz.0.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1004.175061][ T30] audit: type=1400 audit(2000000048.430:1422): avc: denied { accept } for pid=19256 comm="syz.0.3431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1004.258481][ T30] audit: type=1400 audit(2000000048.520:1423): avc: denied { lock } for pid=19256 comm="syz.0.3431" path="/dev/video36" dev="devtmpfs" ino=1045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1004.337747][T12359] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1004.338605][T12359] ath9k_htc: Failed to initialize the device [ 1004.341946][ T5878] usb 4-1: ath9k_htc: USB layer deinitialized [ 1004.521437][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'. [ 1004.521689][T19271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'. [ 1005.151758][ T43] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1005.151791][ T43] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1005.151984][ T43] asix 5-1:0.251: probe with driver asix failed with error -71 [ 1005.154898][ T43] usb 5-1: USB disconnect, device number 73 [ 1005.376779][ T30] audit: type=1400 audit(2000000049.630:1424): avc: denied { setopt } for pid=19274 comm="syz.2.3435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1005.778643][T19288] misc userio: Invalid payload size [ 1006.017369][T12359] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 1006.890637][T12359] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1006.890669][T12359] usb 4-1: config 0 has no interface number 0 [ 1007.015059][T12359] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1007.015089][T12359] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.015108][T12359] usb 4-1: Product: syz [ 1007.015271][T12359] usb 4-1: Manufacturer: syz [ 1007.015287][T12359] usb 4-1: SerialNumber: syz [ 1007.025474][T12359] usb 4-1: config 0 descriptor?? [ 1008.246157][T19309] FAULT_INJECTION: forcing a failure. [ 1008.246157][T19309] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.246185][T19309] CPU: 1 UID: 0 PID: 19309 Comm: syz.0.3445 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1008.246206][T19309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1008.246216][T19309] Call Trace: [ 1008.246222][T19309] [ 1008.246229][T19309] dump_stack_lvl+0x16c/0x1f0 [ 1008.246258][T19309] should_fail_ex+0x512/0x640 [ 1008.246281][T19309] ? __kvmalloc_node_noprof+0x124/0x620 [ 1008.246305][T19309] should_failslab+0xc2/0x120 [ 1008.246328][T19309] __kvmalloc_node_noprof+0x137/0x620 [ 1008.246349][T19309] ? bpf_test_init.isra.0+0x9e/0x140 [ 1008.246372][T19309] ? bpf_test_run_xdp_live+0x13b/0x500 [ 1008.246395][T19309] ? kasan_save_stack+0x33/0x60 [ 1008.246419][T19309] ? bpf_test_run_xdp_live+0x13b/0x500 [ 1008.246443][T19309] bpf_test_run_xdp_live+0x13b/0x500 [ 1008.246471][T19309] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1008.246506][T19309] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1008.246555][T19309] ? _copy_from_user+0x59/0xd0 [ 1008.246580][T19309] ? bpf_test_init.isra.0+0x6b/0x140 [ 1008.246606][T19309] bpf_prog_test_run_xdp+0x824/0x1590 [ 1008.246632][T19309] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1008.246651][T19309] ? __pfx___might_fault+0x10/0x10 [ 1008.246676][T19309] ? fput+0x70/0xf0 [ 1008.246701][T19309] ? __bpf_prog_get+0x97/0x2a0 [ 1008.246720][T19309] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1008.246737][T19309] __sys_bpf+0x1485/0x4d80 [ 1008.246763][T19309] ? __pfx___sys_bpf+0x10/0x10 [ 1008.246785][T19309] ? ksys_write+0x190/0x250 [ 1008.246808][T19309] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1008.246850][T19309] ? fput+0x70/0xf0 [ 1008.246874][T19309] ? ksys_write+0x1ac/0x250 [ 1008.246893][T19309] ? __pfx_ksys_write+0x10/0x10 [ 1008.246918][T19309] __x64_sys_bpf+0x78/0xc0 [ 1008.246939][T19309] ? lockdep_hardirqs_on+0x7c/0x110 [ 1008.246962][T19309] do_syscall_64+0xcd/0x4c0 [ 1008.246989][T19309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.247006][T19309] RIP: 0033:0x7f6a5a78e929 [ 1008.247020][T19309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1008.247036][T19309] RSP: 002b:00007f6a5b67b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1008.247053][T19309] RAX: ffffffffffffffda RBX: 00007f6a5a9b5fa0 RCX: 00007f6a5a78e929 [ 1008.247064][T19309] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 1008.247074][T19309] RBP: 00007f6a5b67b090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.247083][T19309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.247093][T19309] R13: 0000000000000000 R14: 00007f6a5a9b5fa0 R15: 00007ffe8d34b2e8 [ 1008.247116][T19309] [ 1008.625330][T19313] syz.3.3439: attempt to access beyond end of device [ 1008.625330][T19313] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1010.059635][T12359] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1010.059666][T12359] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 1010.060162][T12359] asix 4-1:0.251: probe with driver asix failed with error -71 [ 1010.134133][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1010.407803][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1010.425587][T12359] usb 4-1: USB disconnect, device number 86 [ 1010.868604][T12359] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1011.292644][T12359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.326969][T12359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.340001][T12359] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1011.551166][T12359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.563616][T12359] usb 4-1: config 0 descriptor?? [ 1011.756342][T19342] lo speed is unknown, defaulting to 1000 [ 1011.771795][ T30] audit: type=1326 audit(2000000056.030:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1011.851479][ T30] audit: type=1326 audit(2000000056.070:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1011.864043][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3456'. [ 1011.890149][T12359] usbhid 4-1:0.0: can't add hid device: -71 [ 1011.918527][T12359] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1011.940034][T12359] usb 4-1: USB disconnect, device number 87 [ 1011.945324][ T30] audit: type=1326 audit(2000000056.070:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1012.023067][ T30] audit: type=1326 audit(2000000056.070:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1012.070236][ T30] audit: type=1326 audit(2000000056.070:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1012.127480][ T30] audit: type=1326 audit(2000000056.070:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1012.153983][ T30] audit: type=1326 audit(2000000056.070:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1012.205275][ T30] audit: type=1326 audit(2000000056.070:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1012.235263][ T30] audit: type=1326 audit(2000000056.070:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1012.379046][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3459'. [ 1012.388380][ T30] audit: type=1326 audit(2000000056.070:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19343 comm="syz.4.3455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1012.479887][T19355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3459'. [ 1012.667350][T19363] netlink: 1572 bytes leftover after parsing attributes in process `syz.3.3459'. [ 1012.687299][T19363] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3459'. [ 1013.785313][ T5885] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1013.925410][T19392] netlink: 'syz.2.3469': attribute type 7 has an invalid length. [ 1013.936543][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.950579][ T5885] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1013.961337][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.972217][ T5885] usb 4-1: config 0 descriptor?? [ 1013.979857][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 1015.004046][ T5885] pwc: recv_control_msg error -71 req 02 val 2b00 [ 1015.019351][ T5885] pwc: recv_control_msg error -71 req 02 val 2700 [ 1015.033735][ T5885] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1015.041804][ T5885] pwc: recv_control_msg error -71 req 04 val 1000 [ 1015.058075][ T5885] pwc: recv_control_msg error -71 req 04 val 1300 [ 1015.074138][ T5885] pwc: recv_control_msg error -71 req 04 val 1400 [ 1015.080775][T19402] syz.5.3471: attempt to access beyond end of device [ 1015.080775][T19402] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1015.081269][ T5885] pwc: recv_control_msg error -71 req 02 val 2000 [ 1015.101820][T19402] syz.5.3471: attempt to access beyond end of device [ 1015.101820][T19402] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1015.125065][T19402] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1015.145596][ T5885] pwc: recv_control_msg error -71 req 02 val 2100 [ 1015.152425][ T5885] pwc: recv_control_msg error -71 req 04 val 1500 [ 1015.159380][ T5885] pwc: recv_control_msg error -71 req 02 val 2500 [ 1015.166270][ T5885] pwc: recv_control_msg error -71 req 02 val 2400 [ 1015.173047][ T5885] pwc: recv_control_msg error -71 req 02 val 2600 [ 1015.179934][ T5885] pwc: recv_control_msg error -71 req 02 val 2900 [ 1015.186795][ T5885] pwc: recv_control_msg error -71 req 02 val 2800 [ 1015.193769][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 1015.200663][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 1015.222008][T19402] syz.5.3471: attempt to access beyond end of device [ 1015.222008][T19402] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1015.226799][ T5885] pwc: Registered as video103. [ 1015.250147][T19402] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1015.261280][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input99 [ 1015.282740][ T5885] usb 4-1: USB disconnect, device number 88 [ 1015.317637][T19402] syz.5.3471: attempt to access beyond end of device [ 1015.317637][T19402] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1015.365539][T19402] syz.5.3471: attempt to access beyond end of device [ 1015.365539][T19402] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1015.455371][T12359] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1015.505741][T19402] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1015.667132][T19402] syz.5.3471: attempt to access beyond end of device [ 1015.667132][T19402] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1015.723438][T19410] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1015.732957][T19402] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1015.750817][T12359] usb 1-1: Using ep0 maxpacket: 16 [ 1015.757715][T19402] syz.5.3471: attempt to access beyond end of device [ 1015.757715][T19402] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1015.773138][T19415] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1015.781656][T19402] syz.5.3471: attempt to access beyond end of device [ 1015.781656][T19402] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1015.785611][T12359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.795002][T19402] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1015.825531][T19402] syz.5.3471: attempt to access beyond end of device [ 1015.825531][T19402] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1015.838748][T12359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.851037][T12359] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1015.864642][T19402] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1015.881561][T19402] syz.5.3471: attempt to access beyond end of device [ 1015.881561][T19402] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1015.921783][T12359] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1015.935318][T12359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.953188][T19402] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1015.965227][T12359] usb 1-1: config 0 descriptor?? [ 1016.002107][T19402] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1016.053773][T19402] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1016.208068][T19426] tmpfs: Unknown parameter 'euid<00000000000000000000' [ 1016.305556][T19423] lo speed is unknown, defaulting to 1000 [ 1016.432802][T12359] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 1016.452771][T12359] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 1016.460156][T12359] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 1016.467315][T12359] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 1016.474347][T12359] shield 0003:0955:7214.0026: unknown main item tag 0x0 [ 1016.483557][T12359] input: HID 0955:7214 Haptics as /devices/virtual/input/input100 [ 1016.499905][T12359] shield 0003:0955:7214.0026: Registered Thunderstrike controller [ 1016.508427][T12359] shield 0003:0955:7214.0026: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1016.632102][T19404] random: crng reseeded on system resumption [ 1016.710956][T19404] lo speed is unknown, defaulting to 1000 [ 1016.734771][T19404] lo speed is unknown, defaulting to 1000 [ 1016.776424][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1016.776466][ T30] audit: type=1326 audit(2000000061.030:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19433 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1016.911386][T19404] lo speed is unknown, defaulting to 1000 [ 1016.993447][ T30] audit: type=1326 audit(2000000061.100:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19433 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1017.144350][T19404] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1017.185344][ T30] audit: type=1326 audit(2000000061.100:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19433 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1017.255017][T19404] lo speed is unknown, defaulting to 1000 [ 1017.273871][T19404] lo speed is unknown, defaulting to 1000 [ 1017.280305][ T30] audit: type=1326 audit(2000000061.100:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19433 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1017.308793][T19404] lo speed is unknown, defaulting to 1000 [ 1017.319453][T19404] lo speed is unknown, defaulting to 1000 [ 1017.329985][T19404] lo speed is unknown, defaulting to 1000 [ 1017.337734][ T30] audit: type=1326 audit(2000000061.100:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19433 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1017.365408][T19404] lo speed is unknown, defaulting to 1000 [ 1017.386860][ T5878] usb 1-1: USB disconnect, device number 54 [ 1017.400038][ T30] audit: type=1326 audit(2000000061.110:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19433 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1017.423914][ T30] audit: type=1326 audit(2000000061.110:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19433 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1017.479105][ T5885] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1017.490760][ T5885] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1017.505233][ T5885] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1017.523847][ T5885] shield 0003:0955:7214.0026: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1017.547444][ T30] audit: type=1326 audit(2000000061.110:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19433 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1017.575876][ T30] audit: type=1326 audit(2000000061.130:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19433 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1017.599786][ T30] audit: type=1326 audit(2000000061.130:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19433 comm="syz.4.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3019b8e929 code=0x7ffc0000 [ 1018.795409][ T5878] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1018.855327][ T5933] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1018.945215][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 1018.959544][ T5878] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 1018.974924][ T5878] usb 6-1: config 0 has no interface number 0 [ 1018.981173][ T5878] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1018.992189][ T5878] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1019.004077][ T5878] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1019.015256][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 1019.020482][ T5878] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1019.049793][ T5933] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1019.060949][ T5933] usb 1-1: config 0 has no interface number 0 [ 1019.067194][ T5878] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1019.076401][ T5933] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1019.087329][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.095635][ T5933] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1019.108785][ T5878] usb 6-1: config 0 descriptor?? [ 1019.121776][ T5933] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1019.158452][ T5878] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1019.168787][ T5933] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1019.213970][ T5933] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1019.256487][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.317556][ T5933] usb 1-1: config 0 descriptor?? [ 1019.487915][T19466] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1019.513176][ T5885] usb 6-1: USB disconnect, device number 44 [ 1019.516870][T19466] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1019.529363][ T5933] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1019.529488][ T5885] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 1019.838167][ T5933] usb 1-1: USB disconnect, device number 55 [ 1019.853662][T19466] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1019.861083][T19466] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1019.861914][ T5933] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 1019.910602][T19466] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1019.929875][T19466] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1019.939943][T19466] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1019.950375][T19466] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1020.435808][T19484] can: request_module (can-proto-3) failed. [ 1020.508465][ T5933] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1020.697850][ T5933] usb 5-1: config 5 has an invalid interface number: 128 but max is 2 [ 1020.807895][T12495] Bluetooth: hci4: command 0x0406 tx timeout [ 1020.815477][ T5933] usb 5-1: config 5 has an invalid interface number: 246 but max is 2 [ 1020.823653][ T5933] usb 5-1: config 5 has an invalid interface number: 173 but max is 2 [ 1020.837061][ T5933] usb 5-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 1020.845853][ T5933] usb 5-1: config 5 has no interface number 0 [ 1020.851917][ T5933] usb 5-1: config 5 has no interface number 1 [ 1020.858798][ T5933] usb 5-1: config 5 has no interface number 2 [ 1020.865221][ T5933] usb 5-1: config 5 interface 128 altsetting 110 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1020.875560][ T5933] usb 5-1: config 5 interface 246 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1020.885449][ T5933] usb 5-1: config 5 interface 173 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1020.896445][ T5933] usb 5-1: config 5 interface 173 altsetting 15 has a duplicate endpoint with address 0x2, skipping [ 1020.907286][ T5933] usb 5-1: config 5 interface 173 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 1020.918136][ T5933] usb 5-1: config 5 interface 173 altsetting 15 has a duplicate endpoint with address 0x2, skipping [ 1020.928931][ T5933] usb 5-1: config 5 interface 173 altsetting 15 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1020.940250][ T5933] usb 5-1: config 5 interface 173 altsetting 15 has a duplicate endpoint with address 0x1, skipping [ 1020.951134][ T5933] usb 5-1: config 5 interface 173 altsetting 15 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 1021.045584][ T5933] usb 5-1: config 5 interface 173 altsetting 15 has a duplicate endpoint with address 0x82, skipping [ 1021.056628][ T5933] usb 5-1: config 5 interface 173 altsetting 15 has a duplicate endpoint with address 0x5, skipping [ 1021.067791][ T5933] usb 5-1: config 5 interface 173 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 1021.079327][ T5933] usb 5-1: config 5 interface 173 altsetting 15 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 1021.100437][ T5933] usb 5-1: config 5 interface 128 has no altsetting 0 [ 1021.111041][ T5933] usb 5-1: config 5 interface 246 has no altsetting 0 [ 1021.133821][ T5933] usb 5-1: config 5 interface 173 has no altsetting 0 [ 1021.212529][ T5933] usb 5-1: Dual-Role OTG device on HNP port [ 1021.223873][ T5933] usb 5-1: New USB device found, idVendor=19d2, idProduct=1277, bcdDevice=c7.f3 [ 1021.566584][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.579140][ T5933] usb 5-1: Product: syz [ 1021.583390][ T5933] usb 5-1: Manufacturer: syz [ 1021.590377][ T5933] usb 5-1: SerialNumber: syz [ 1021.927950][T12495] Bluetooth: hci1: command 0x0405 tx timeout [ 1021.935644][T12495] Bluetooth: hci3: command 0x0c1a tx timeout [ 1022.365434][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1022.365450][ T30] audit: type=1400 audit(2000000066.290:1543): avc: denied { sqpoll } for pid=19512 comm="syz.0.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1022.902953][T12495] Bluetooth: hci4: command 0x0406 tx timeout [ 1023.089670][T19504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3502'. [ 1023.103402][T19504] unsupported nlmsg_type 40 [ 1023.110455][ T5933] option 5-1:5.128: GSM modem (1-port) converter detected [ 1023.197970][T19532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3508'. [ 1023.640274][ T5933] usb 5-1: USB disconnect, device number 74 [ 1023.649064][ T5933] option 5-1:5.128: device disconnected [ 1023.661167][T19535] xt_policy: neither incoming nor outgoing policy selected [ 1023.940225][T12495] Bluetooth: hci1: command 0x0405 tx timeout [ 1024.015350][T12495] Bluetooth: hci3: command 0x0c1a tx timeout [ 1024.657881][T19559] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1024.717220][T19561] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1025.225242][ T5878] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1025.909495][ T5878] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1025.922580][ T5878] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1025.933209][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1025.946393][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1025.958594][ T5878] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1025.974779][ T5878] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1026.045256][T12495] Bluetooth: hci1: command 0x0405 tx timeout [ 1026.051376][ T30] audit: type=1326 audit(2000000070.260:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19568 comm="syz.3.3519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe0ab8e929 code=0x7fc00000 [ 1026.074979][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1026.092540][ T5878] usb 5-1: Product: syz [ 1026.175255][T12495] Bluetooth: hci3: command 0x0c1a tx timeout [ 1026.182258][ T5878] usb 5-1: Manufacturer: syz [ 1026.191854][T19578] syz.5.3521 (19578): /proc/19577/oom_adj is deprecated, please use /proc/19577/oom_score_adj instead. [ 1026.248155][ T5878] cdc_wdm 5-1:1.0: skipping garbage [ 1026.270580][ T5878] cdc_wdm 5-1:1.0: skipping garbage [ 1026.284496][ T30] audit: type=1400 audit(2000000070.540:1545): avc: denied { ioctl } for pid=19585 comm="syz.0.3525" path="socket:[67434]" dev="sockfs" ino=67434 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1026.351039][ T5878] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1026.377002][ T5878] cdc_wdm 5-1:1.0: Unknown control protocol [ 1026.985724][T19595] xt_hashlimit: max too large, truncated to 1048576 [ 1027.595387][ T5878] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1027.706337][ T43] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1027.725789][ T5878] usb 1-1: device descriptor read/64, error -71 [ 1027.975467][ T5878] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1028.125515][ T5878] usb 1-1: device descriptor read/64, error -71 [ 1028.265075][ T5878] usb usb1-port1: attempt power cycle [ 1028.645251][T12359] usb 5-1: USB disconnect, device number 75 [ 1028.685286][ T5878] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1028.715685][ T5878] usb 1-1: device descriptor read/8, error -71 [ 1029.435401][ T5878] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1029.935503][ T5878] usb 1-1: device not accepting address 59, error -71 [ 1029.952792][ T5878] usb usb1-port1: unable to enumerate USB device [ 1030.181769][T19627] af_packet: tpacket_rcv: packet too big, clamped from 99 to 4294967286. macoff=82 [ 1030.222549][T19631] FAULT_INJECTION: forcing a failure. [ 1030.222549][T19631] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.235437][T19631] CPU: 0 UID: 0 PID: 19631 Comm: syz.5.3539 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1030.235461][T19631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1030.235470][T19631] Call Trace: [ 1030.235476][T19631] [ 1030.235482][T19631] dump_stack_lvl+0x16c/0x1f0 [ 1030.235512][T19631] should_fail_ex+0x512/0x640 [ 1030.235536][T19631] ? fs_reclaim_acquire+0xae/0x150 [ 1030.235556][T19631] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1030.235579][T19631] should_failslab+0xc2/0x120 [ 1030.235601][T19631] __kmalloc_noprof+0xd2/0x510 [ 1030.235629][T19631] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1030.235656][T19631] ? tomoyo_profile+0x47/0x60 [ 1030.235685][T19631] tomoyo_path_number_perm+0x245/0x580 [ 1030.235703][T19631] ? tomoyo_path_number_perm+0x237/0x580 [ 1030.235726][T19631] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1030.235781][T19631] ? find_held_lock+0x2b/0x80 [ 1030.235802][T19631] ? hook_file_ioctl_common+0x145/0x410 [ 1030.235836][T19631] ? __fget_files+0x20e/0x3c0 [ 1030.235865][T19631] security_file_ioctl+0x9b/0x240 [ 1030.235896][T19631] __x64_sys_ioctl+0xb7/0x210 [ 1030.235918][T19631] do_syscall_64+0xcd/0x4c0 [ 1030.235945][T19631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.235962][T19631] RIP: 0033:0x7fb19e58e929 [ 1030.235976][T19631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.235992][T19631] RSP: 002b:00007fb19f36a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.236008][T19631] RAX: ffffffffffffffda RBX: 00007fb19e7b6080 RCX: 00007fb19e58e929 [ 1030.236019][T19631] RDX: 0000200000000240 RSI: 00000000c0306201 RDI: 0000000000000008 [ 1030.236030][T19631] RBP: 00007fb19f36a090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.236040][T19631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.236051][T19631] R13: 0000000000000000 R14: 00007fb19e7b6080 R15: 00007ffde081b8e8 [ 1030.236077][T19631] [ 1030.236201][T19631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1030.475331][T19631] binder: 19626:19631 ioctl c0306201 200000000240 returned -11 [ 1030.716958][T19635] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1032.238024][ T30] audit: type=1400 audit(2000000076.500:1546): avc: denied { bind } for pid=19655 comm="syz.3.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1032.304217][ T30] audit: type=1400 audit(2000000076.530:1547): avc: denied { listen } for pid=19655 comm="syz.3.3547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1032.358765][T19656] lo speed is unknown, defaulting to 1000 [ 1032.376350][T19656] lo speed is unknown, defaulting to 1000 [ 1032.468081][ T30] audit: type=1400 audit(2000000076.730:1548): avc: denied { connect } for pid=19659 comm="syz.0.3534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1032.521554][T19660] kvm: pic: non byte write [ 1032.585247][T12359] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1032.607633][T19666] FAULT_INJECTION: forcing a failure. [ 1032.607633][T19666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1032.624867][T19666] CPU: 1 UID: 0 PID: 19666 Comm: syz.2.3549 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1032.624894][T19666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1032.624905][T19666] Call Trace: [ 1032.624911][T19666] [ 1032.624918][T19666] dump_stack_lvl+0x16c/0x1f0 [ 1032.624950][T19666] should_fail_ex+0x512/0x640 [ 1032.624977][T19666] _copy_to_user+0x32/0xd0 [ 1032.625004][T19666] simple_read_from_buffer+0xcb/0x170 [ 1032.625027][T19666] proc_fail_nth_read+0x197/0x270 [ 1032.625049][T19666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1032.625072][T19666] ? rw_verify_area+0xcf/0x680 [ 1032.625091][T19666] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1032.625121][T19666] vfs_read+0x1e4/0xc60 [ 1032.625144][T19666] ? __pfx___mutex_lock+0x10/0x10 [ 1032.625169][T19666] ? __pfx_vfs_read+0x10/0x10 [ 1032.625196][T19666] ? __fget_files+0x20e/0x3c0 [ 1032.625226][T19666] ksys_read+0x12a/0x250 [ 1032.625247][T19666] ? __pfx_ksys_read+0x10/0x10 [ 1032.625268][T19666] ? fput+0x70/0xf0 [ 1032.625299][T19666] do_syscall_64+0xcd/0x4c0 [ 1032.625327][T19666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.625345][T19666] RIP: 0033:0x7f4062d8d33c [ 1032.625360][T19666] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1032.625376][T19666] RSP: 002b:00007f4063caa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1032.625394][T19666] RAX: ffffffffffffffda RBX: 00007f4062fb5fa0 RCX: 00007f4062d8d33c [ 1032.625405][T19666] RDX: 000000000000000f RSI: 00007f4063caa0a0 RDI: 0000000000000004 [ 1032.625416][T19666] RBP: 00007f4063caa090 R08: 0000000000000000 R09: 0000000000000000 [ 1032.625426][T19666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1032.625436][T19666] R13: 0000000000000000 R14: 00007f4062fb5fa0 R15: 00007fffe2a60618 [ 1032.625461][T19666] [ 1032.745184][T12359] usb 5-1: Using ep0 maxpacket: 16 [ 1032.761150][ T43] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1032.807686][T12359] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1032.811605][ T30] audit: type=1400 audit(2000000077.070:1549): avc: denied { create } for pid=19669 comm="syz.0.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1032.835337][T12359] usb 5-1: config 0 has no interface number 0 [ 1032.852426][ T30] audit: type=1400 audit(2000000077.080:1550): avc: denied { connect } for pid=19669 comm="syz.0.3551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1032.909129][T12359] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1032.910717][T12359] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1032.931531][T19671] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3551'. [ 1032.935176][T12359] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1032.965204][T12359] usb 5-1: Product: syz [ 1032.975258][T12359] usb 5-1: SerialNumber: syz [ 1032.987748][T12359] usb 5-1: config 0 descriptor?? [ 1033.008948][T12359] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 1033.017378][T12359] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input104 [ 1033.036692][T12359] ------------[ cut here ]------------ [ 1033.042465][T12359] URB ffff8880358ee000 submitted while active [ 1033.049865][T12359] WARNING: CPU: 0 PID: 12359 at drivers/usb/core/urb.c:379 usb_submit_urb+0x152b/0x1790 [ 1033.059955][T12359] Modules linked in: [ 1033.064339][T12359] CPU: 0 UID: 0 PID: 12359 Comm: kworker/0:1 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1033.076565][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1033.080320][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1033.086830][T12359] Workqueue: usb_hub_wq hub_event [ 1033.099508][T12359] RIP: 0010:usb_submit_urb+0x152b/0x1790 [ 1033.105183][T12359] Code: fd eb cb bb fe ff ff ff e9 70 f3 ff ff e8 4d a5 86 fa c6 05 f8 07 5b 09 01 90 48 c7 c7 80 13 73 8c 48 89 de e8 f6 69 45 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 40 f3 ff ff 48 89 ef [ 1033.124950][T12359] RSP: 0018:ffffc90005396e98 EFLAGS: 00010286 [ 1033.131126][T12359] RAX: 0000000000000000 RBX: ffff8880358ee000 RCX: ffffc9001e0fe000 [ 1033.139164][T12359] RDX: 0000000000100000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 1033.147174][T12359] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1033.151161][ T43] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1033.155479][T12359] R10: 0000000000000001 R11: ffffffffffffee48 R12: ffff88803d417810 [ 1033.155496][T12359] R13: ffff88803d4178a0 R14: ffff88803d417850 R15: 0000000000000000 [ 1033.155510][T12359] FS: 0000000000000000(0000) GS:ffff888124754000(0000) knlGS:0000000000000000 [ 1033.155530][T12359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1033.155544][T12359] CR2: 0000001b31b1cff8 CR3: 000000006bf2e000 CR4: 00000000003526f0 [ 1033.155557][T12359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000003004144 [ 1033.155569][T12359] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1033.155582][T12359] Call Trace: [ 1033.167298][ T43] usb 6-1: can't read configurations, error -71 [ 1033.171140][T12359] [ 1033.231400][T12359] ? lockdep_hardirqs_on+0x7c/0x110 [ 1033.236660][T12359] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1033.242493][T12359] cm109_input_open+0x271/0x480 [ 1033.247466][T12359] input_open_device+0x230/0x390 [ 1033.252586][T12359] ? __pfx_cm109_input_open+0x10/0x10 [ 1033.258035][T12359] kbd_connect+0x103/0x160 [ 1033.262467][T12359] input_attach_handler.isra.0+0x184/0x260 [ 1033.268339][T12359] input_register_device+0xa84/0x1130 [ 1033.273725][T12359] cm109_usb_probe+0x122f/0x17c0 [ 1033.278781][T12359] usb_probe_interface+0x303/0x9c0 [ 1033.283933][T12359] ? __pfx_usb_probe_interface+0x10/0x10 [ 1033.289745][T12359] really_probe+0x23e/0xa90 [ 1033.294269][T12359] __driver_probe_device+0x1de/0x440 [ 1033.299638][T12359] driver_probe_device+0x4c/0x1b0 [ 1033.304675][T12359] __device_attach_driver+0x1df/0x310 [ 1033.310085][T12359] ? __pfx___device_attach_driver+0x10/0x10 [ 1033.316051][T12359] bus_for_each_drv+0x156/0x1e0 [ 1033.320910][T12359] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1033.326320][T12359] ? lockdep_hardirqs_on+0x7c/0x110 [ 1033.331527][T12359] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1033.337381][T12359] __device_attach+0x1e4/0x4b0 [ 1033.342152][T12359] ? __pfx___device_attach+0x10/0x10 [ 1033.347525][T12359] ? do_raw_spin_unlock+0x172/0x230 [ 1033.352752][T12359] bus_probe_device+0x17f/0x1c0 [ 1033.357778][T12359] device_add+0x1148/0x1a70 [ 1033.362292][T12359] ? __pfx_device_add+0x10/0x10 [ 1033.367184][T12359] ? mark_held_locks+0x49/0x80 [ 1033.371980][T12359] usb_set_configuration+0x1187/0x1e20 [ 1033.377548][T12359] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1033.383642][T12359] usb_generic_driver_probe+0xb1/0x110 [ 1033.389122][T12359] usb_probe_device+0xef/0x3e0 [ 1033.393893][T12359] ? __pfx_usb_probe_device+0x10/0x10 [ 1033.399313][T12359] really_probe+0x23e/0xa90 [ 1033.403832][T12359] __driver_probe_device+0x1de/0x440 [ 1033.409187][T12359] ? usb_driver_applicable+0x1c7/0x220 [ 1033.414653][T12359] driver_probe_device+0x4c/0x1b0 [ 1033.419720][T12359] __device_attach_driver+0x1df/0x310 [ 1033.425103][T12359] ? __pfx___device_attach_driver+0x10/0x10 [ 1033.431027][T12359] bus_for_each_drv+0x156/0x1e0 [ 1033.435925][T12359] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1033.441302][T12359] ? lockdep_hardirqs_on+0x7c/0x110 [ 1033.446542][T12359] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1033.452379][T12359] __device_attach+0x1e4/0x4b0 [ 1033.458353][T12359] ? __pfx___device_attach+0x10/0x10 [ 1033.463655][T12359] ? do_raw_spin_unlock+0x172/0x230 [ 1033.469134][T12359] bus_probe_device+0x17f/0x1c0 [ 1033.474032][T12359] device_add+0x1148/0x1a70 [ 1033.478578][T12359] ? __pfx_device_add+0x10/0x10 [ 1033.483445][T12359] ? add_device_randomness+0xb7/0xf0 [ 1033.488779][T12359] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1033.494685][T12359] usb_new_device+0xd07/0x1a20 [ 1033.499503][T12359] ? do_raw_spin_lock+0x12c/0x2b0 [ 1033.504529][T12359] ? __pfx_usb_new_device+0x10/0x10 [ 1033.509772][T12359] ? mark_held_locks+0x49/0x80 [ 1033.514557][T12359] hub_event+0x2eb7/0x4fa0 [ 1033.519041][T12359] ? __pfx_hub_event+0x10/0x10 [ 1033.523806][T12359] ? interval_tree_insert+0x110/0x3a0 [ 1033.529289][T12359] ? rcu_is_watching+0x12/0xc0 [ 1033.534089][T12359] process_one_work+0x9cf/0x1b70 [ 1033.539097][T12359] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 1033.545653][T12359] ? __pfx_process_one_work+0x10/0x10 [ 1033.551061][T12359] ? assign_work+0x1a0/0x250 [ 1033.555692][T12359] worker_thread+0x6c8/0xf10 [ 1033.560457][T12359] ? __kthread_parkme+0x19e/0x250 [ 1033.565560][T12359] ? __pfx_worker_thread+0x10/0x10 [ 1033.570681][T12359] kthread+0x3c5/0x780 [ 1033.574756][T12359] ? __pfx_kthread+0x10/0x10 [ 1033.579403][T12359] ? rcu_is_watching+0x12/0xc0 [ 1033.584209][T12359] ? __pfx_kthread+0x10/0x10 [ 1033.588857][T12359] ret_from_fork+0x5d7/0x6f0 [ 1033.593467][T12359] ? __pfx_kthread+0x10/0x10 [ 1033.598125][T12359] ret_from_fork_asm+0x1a/0x30 [ 1033.599738][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1033.602919][T12359] [ 1033.610321][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1033.612857][T12359] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1033.612873][T12359] CPU: 0 UID: 0 PID: 12359 Comm: kworker/0:1 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1033.612894][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1033.612906][T12359] Workqueue: usb_hub_wq hub_event [ 1033.612927][T12359] Call Trace: [ 1033.612934][T12359] [ 1033.612946][T12359] dump_stack_lvl+0x3d/0x1f0 [ 1033.612973][T12359] panic+0x71c/0x800 [ 1033.612997][T12359] ? __pfx_panic+0x10/0x10 [ 1033.613020][T12359] ? show_trace_log_lvl+0x29b/0x3e0 [ 1033.613055][T12359] ? usb_submit_urb+0x152b/0x1790 [ 1033.613071][T12359] check_panic_on_warn+0xab/0xb0 [ 1033.613095][T12359] __warn+0xf6/0x3c0 [ 1033.613118][T12359] ? usb_submit_urb+0x152b/0x1790 [ 1033.613134][T12359] report_bug+0x3c3/0x580 [ 1033.613156][T12359] ? usb_submit_urb+0x152b/0x1790 [ 1033.613173][T12359] handle_bug+0x184/0x210 [ 1033.613191][T12359] exc_invalid_op+0x17/0x50 [ 1033.613207][T12359] asm_exc_invalid_op+0x1a/0x20 [ 1033.613223][T12359] RIP: 0010:usb_submit_urb+0x152b/0x1790 [ 1033.613238][T12359] Code: fd eb cb bb fe ff ff ff e9 70 f3 ff ff e8 4d a5 86 fa c6 05 f8 07 5b 09 01 90 48 c7 c7 80 13 73 8c 48 89 de e8 f6 69 45 fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 40 f3 ff ff 48 89 ef [ 1033.613254][T12359] RSP: 0018:ffffc90005396e98 EFLAGS: 00010286 [ 1033.613267][T12359] RAX: 0000000000000000 RBX: ffff8880358ee000 RCX: ffffc9001e0fe000 [ 1033.613278][T12359] RDX: 0000000000100000 RSI: ffffffff817ae375 RDI: 0000000000000001 [ 1033.613288][T12359] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1033.613298][T12359] R10: 0000000000000001 R11: ffffffffffffee48 R12: ffff88803d417810 [ 1033.613308][T12359] R13: ffff88803d4178a0 R14: ffff88803d417850 R15: 0000000000000000 [ 1033.613328][T12359] ? __warn_printk+0x1a5/0x350 [ 1033.613354][T12359] ? usb_submit_urb+0x152a/0x1790 [ 1033.613368][T12359] ? lockdep_hardirqs_on+0x7c/0x110 [ 1033.613390][T12359] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1033.613420][T12359] cm109_input_open+0x271/0x480 [ 1033.613442][T12359] input_open_device+0x230/0x390 [ 1033.613461][T12359] ? __pfx_cm109_input_open+0x10/0x10 [ 1033.613483][T12359] kbd_connect+0x103/0x160 [ 1033.613507][T12359] input_attach_handler.isra.0+0x184/0x260 [ 1033.613531][T12359] input_register_device+0xa84/0x1130 [ 1033.613556][T12359] cm109_usb_probe+0x122f/0x17c0 [ 1033.613587][T12359] usb_probe_interface+0x303/0x9c0 [ 1033.613612][T12359] ? __pfx_usb_probe_interface+0x10/0x10 [ 1033.613634][T12359] really_probe+0x23e/0xa90 [ 1033.613661][T12359] __driver_probe_device+0x1de/0x440 [ 1033.613686][T12359] driver_probe_device+0x4c/0x1b0 [ 1033.613710][T12359] __device_attach_driver+0x1df/0x310 [ 1033.613734][T12359] ? __pfx___device_attach_driver+0x10/0x10 [ 1033.613755][T12359] bus_for_each_drv+0x156/0x1e0 [ 1033.613775][T12359] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1033.613794][T12359] ? lockdep_hardirqs_on+0x7c/0x110 [ 1033.613816][T12359] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1033.613841][T12359] __device_attach+0x1e4/0x4b0 [ 1033.613863][T12359] ? __pfx___device_attach+0x10/0x10 [ 1033.613887][T12359] ? do_raw_spin_unlock+0x172/0x230 [ 1033.613910][T12359] bus_probe_device+0x17f/0x1c0 [ 1033.613934][T12359] device_add+0x1148/0x1a70 [ 1033.613957][T12359] ? __pfx_device_add+0x10/0x10 [ 1033.613973][T12359] ? mark_held_locks+0x49/0x80 [ 1033.614006][T12359] usb_set_configuration+0x1187/0x1e20 [ 1033.614043][T12359] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1033.614059][T12359] usb_generic_driver_probe+0xb1/0x110 [ 1033.614076][T12359] usb_probe_device+0xef/0x3e0 [ 1033.614095][T12359] ? __pfx_usb_probe_device+0x10/0x10 [ 1033.614115][T12359] really_probe+0x23e/0xa90 [ 1033.614140][T12359] __driver_probe_device+0x1de/0x440 [ 1033.614161][T12359] ? usb_driver_applicable+0x1c7/0x220 [ 1033.614184][T12359] driver_probe_device+0x4c/0x1b0 [ 1033.614207][T12359] __device_attach_driver+0x1df/0x310 [ 1033.614231][T12359] ? __pfx___device_attach_driver+0x10/0x10 [ 1033.614253][T12359] bus_for_each_drv+0x156/0x1e0 [ 1033.614272][T12359] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1033.614292][T12359] ? lockdep_hardirqs_on+0x7c/0x110 [ 1033.614314][T12359] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1033.614340][T12359] __device_attach+0x1e4/0x4b0 [ 1033.614362][T12359] ? __pfx___device_attach+0x10/0x10 [ 1033.614386][T12359] ? do_raw_spin_unlock+0x172/0x230 [ 1033.614408][T12359] bus_probe_device+0x17f/0x1c0 [ 1033.614431][T12359] device_add+0x1148/0x1a70 [ 1033.614451][T12359] ? __pfx_device_add+0x10/0x10 [ 1033.614466][T12359] ? add_device_randomness+0xb7/0xf0 [ 1033.614493][T12359] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 1033.614520][T12359] usb_new_device+0xd07/0x1a20 [ 1033.614543][T12359] ? do_raw_spin_lock+0x12c/0x2b0 [ 1033.614560][T12359] ? __pfx_usb_new_device+0x10/0x10 [ 1033.614580][T12359] ? mark_held_locks+0x49/0x80 [ 1033.614607][T12359] hub_event+0x2eb7/0x4fa0 [ 1033.614654][T12359] ? __pfx_hub_event+0x10/0x10 [ 1033.614671][T12359] ? interval_tree_insert+0x110/0x3a0 [ 1033.614707][T12359] ? rcu_is_watching+0x12/0xc0 [ 1033.614731][T12359] process_one_work+0x9cf/0x1b70 [ 1033.614757][T12359] ? __pfx_nsim_dev_hwstats_traffic_work+0x10/0x10 [ 1033.614775][T12359] ? __pfx_process_one_work+0x10/0x10 [ 1033.614801][T12359] ? assign_work+0x1a0/0x250 [ 1033.614828][T12359] worker_thread+0x6c8/0xf10 [ 1033.614854][T12359] ? __kthread_parkme+0x19e/0x250 [ 1033.614877][T12359] ? __pfx_worker_thread+0x10/0x10 [ 1033.614894][T12359] kthread+0x3c5/0x780 [ 1033.614909][T12359] ? __pfx_kthread+0x10/0x10 [ 1033.614927][T12359] ? rcu_is_watching+0x12/0xc0 [ 1033.614951][T12359] ? __pfx_kthread+0x10/0x10 [ 1033.614967][T12359] ret_from_fork+0x5d7/0x6f0 [ 1033.614988][T12359] ? __pfx_kthread+0x10/0x10 [ 1033.615004][T12359] ret_from_fork_asm+0x1a/0x30 [ 1033.615040][T12359] [ 1034.167144][T12359] Kernel Offset: disabled [ 1034.171447][T12359] Rebooting in 86400 seconds..