last executing test programs: 9m13.714407208s ago: executing program 32 (id=98): open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x8000) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 8m47.31030774s ago: executing program 4 (id=199): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x772bc000) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x836b, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x1}, 0xe) close(r0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) r3 = syz_io_uring_setup(0x1cbc, &(0x7f0000000200)={0x0, 0x8d4a, 0x400, 0x2, 0x2f4}, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000300)="81", 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x20, 0x5, 0x3, "d34e8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x6, @sdr={0x4f565559, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x220000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) prlimit64(r4, 0x7, &(0x7f0000000580)={0x1, 0x5b}, &(0x7f0000000340)) r5 = syz_open_dev$swradio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000000240)) r6 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{0x5, 0x4, 0x3, 0x0, 'syz1\x00', 0x620}, 0x1, 0x400, 0xfffffff8, r6, 0x4, 0x5, 'syz0\x00', &(0x7f0000000080)=['/dev/vbi#\x00', '/dev/vbi#\x00', ':', '\\\x00'], 0x17}) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 8m44.299570635s ago: executing program 4 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x44, r1, 0x11, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x115}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) 8m43.96922238s ago: executing program 4 (id=212): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r3, 0x0, &(0x7f0000000200)) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000180)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000000c0)=[0x100000000]}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1000000, 0x4) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r6, 0x5501) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000300)={0x2020}, 0x2020) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 8m43.022286317s ago: executing program 4 (id=218): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000b40)=ANY=[], 0xfffffece, 0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000530000/0x3000)=nil) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r3, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) open$dir(0x0, 0x0, 0x1c0) getdents64(r4, &(0x7f0000000300)=""/152, 0x98) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 8m41.416830651s ago: executing program 4 (id=226): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x772bc000) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x836b, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xe, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x1}, 0xe) close(r0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) r3 = syz_io_uring_setup(0x1cbc, &(0x7f0000000200)={0x0, 0x8d4a, 0x400, 0x2, 0x2f4}, &(0x7f0000000100), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000300)="81", 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x20, 0x5, 0x3, "d34e8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000000c0)={0x6, @sdr={0x4f565559, 0x5}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) syz_open_dev$video(&(0x7f00000001c0), 0x1, 0x220000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) prlimit64(r4, 0x7, &(0x7f0000000580)={0x1, 0x5b}, &(0x7f0000000340)) r5 = syz_open_dev$swradio(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000000240)) r6 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000003c0)={{0x5, 0x4, 0x3, 0x0, 'syz1\x00', 0x620}, 0x1, 0x400, 0xfffffff8, r6, 0x4, 0x5, 'syz0\x00', &(0x7f0000000080)=['/dev/vbi#\x00', '/dev/vbi#\x00', ':', '\\\x00'], 0x17}) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 8m34.604222572s ago: executing program 4 (id=247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r4, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000000c0)=[0x100000000]}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1000000, 0x4) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 8m33.85358599s ago: executing program 33 (id=247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r4, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x200, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000580), &(0x7f00000000c0)=[0x100000000]}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1000000, 0x4) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, 0x0) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 8m31.987439794s ago: executing program 2 (id=256): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) pwritev2(r1, &(0x7f0000000580)=[{&(0x7f0000000e80)='Y', 0x1}], 0x1, 0x4, 0x3ff, 0x18) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0xa, 0x7ff}, 0x28) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3f9, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 8m31.664098889s ago: executing program 2 (id=258): mkdir(0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0x2, 0x4) shmctl$SHM_LOCK(0x0, 0xb) r1 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r1, &(0x7f0000ff6000/0x4000)=nil, 0x7000) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000079c0)={0x1a8, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x144, 0x6, 0x0, 0x1, [@nested={0x140, 0xac, 0x0, 0x1, [@nested={0x13c, 0x13e, 0x0, 0x1, [@nested={0x138, 0xa0, 0x0, 0x1, [@nested={0x134, 0x61, 0x0, 0x1, [@nested={0x130, 0x9d, 0x0, 0x1, [@nested={0x12c, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x4, 0xa5}, @nested={0x119, 0x90, 0x0, 0x1, [@nested={0xe5, 0x44, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @str='GPL\x00'}, @generic="a4f2bdc07e8cc0404f617143e4f7b263ba6fc1453ff8932426cb0b2024dd0f1b7350887762644cd52aa6864acdf7e959a84b3dad1bc88841ef786cbde7d6215a38138e3e97b04c17bbc1841901c1583a335075ea5754b2eaa78293f03551b0562fb5a45f1f7cbb3d6e117248069b9fb39c95d130e184c9b4c03c06137216485441b97dd59aa0e33633390ce64bf88da83639f53a9b25264f438337448c8ad49b7c34940dd9f68826e015c57dcb", @typed={0x4, 0x13a}, @nested={0x25, 0x5b, 0x0, 0x1, [@generic="bc6dad2ec06ca4d4fe3dd7c279ab0ab97e40888491432f6bcceedf366490a5e0ca"]}]}, @generic="f0d1352a224aadf38cc0be9a1bfc6ea31cfe9abdfc6e08360d8cf57b7256e18c92263487faf40caf4b040e15ce"]}]}]}]}]}]}]}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x5}, 0x0) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmctl$SHM_UNLOCK(0x0, 0xc) 8m31.466609447s ago: executing program 2 (id=260): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3f, 0x2, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 8m31.160360477s ago: executing program 2 (id=262): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000b40)=ANY=[], 0xfffffece, 0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000530000/0x3000)=nil) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r3, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) open$dir(0x0, 0x0, 0x1c0) getdents64(r4, &(0x7f0000000300)=""/152, 0x98) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 8m30.239356097s ago: executing program 2 (id=265): r0 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x20, 0xf, 0x28, 0xfffff038}, {0x20, 0x1f, 0xf6, 0xfffff024}, {0x6, 0x80, 0xf2}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001440)=@deltclass={0x24, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xf}, {0x4, 0x2}, {0x1, 0xb}}}, 0x24}}, 0x44880) r1 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000280)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e5, 0x6, 0x2, 0x8, 0x9, 0x0, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 8m26.258509269s ago: executing program 2 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, '\x00'}) syz_genetlink_get_family_id$batadv(0x0, r1) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001680)='ns/time\x00') r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x80000006}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x2f) futex(0x0, 0x100, 0x5, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r5, 0x402, 0x8000003d) close_range(r4, 0xffffffffffffffff, 0x3f) 8m25.924799682s ago: executing program 34 (id=273): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, '\x00'}) syz_genetlink_get_family_id$batadv(0x0, r1) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001680)='ns/time\x00') r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f028, 0x80000006}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x3, 0x2f) futex(0x0, 0x100, 0x5, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r5, 0x402, 0x8000003d) close_range(r4, 0xffffffffffffffff, 0x3f) 8m12.239131312s ago: executing program 7 (id=274): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000b40)=ANY=[], 0xfffffece, 0x800) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000530000/0x3000)=nil) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r3, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) open$dir(0x0, 0x0, 0x1c0) getdents64(r4, &(0x7f0000000300)=""/152, 0x98) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 8m11.16251446s ago: executing program 7 (id=310): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(0x0, &(0x7f0000000780)='./file2\x00') accept4(r1, &(0x7f0000000400)=@ieee802154, &(0x7f0000000380)=0x80, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000002c0)=[@code={0x1, 0x60, {"48b84b000000000000000f23c00f21f835030007000f23f8b9a00d00000f320f79445c74c4817be64eeb66b82a010f00d82e0fc7b9f21ee6dc6426f3450fc737c4c1f56c8f030000000f073e3e0f08"}}], 0x60}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0xc, 0x7, 0x0, 0x4000000000180, 0x5, 0x10, 0xf1, 0xffffffffffff18c4, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 8m6.15217812s ago: executing program 7 (id=328): r0 = socket$alg(0x26, 0x5, 0x0) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000080)={[{@dyn}, {@flock_openafs}]}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3017, 0x4, 0x1000, 0x10000, 0x5}) ioctl$SYNC_IOC_FILE_INFO(r2, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x178b, &(0x7f0000000180)={0x0, 0x20000, 0x13291, 0x4000004, 0x3a}, &(0x7f0000000100), &(0x7f000001fa00)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f00000002c0)={0x0, 0x9d62, 0x8e60db6a13d49a16, 0x2, 0x7}, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r7 = accept4(r0, 0x0, 0x0, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x5, 0x8, {{0x5, 0x4, 0x3, 0x28, 0x14, 0x64, 0x0, 0x4, 0x39, 0x0, @remote, @broadcast}}}}) 8m5.873757093s ago: executing program 35 (id=328): r0 = socket$alg(0x26, 0x5, 0x0) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000080)={[{@dyn}, {@flock_openafs}]}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xc, 0x8580) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3017, 0x4, 0x1000, 0x10000, 0x5}) ioctl$SYNC_IOC_FILE_INFO(r2, 0x40103e05, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x178b, &(0x7f0000000180)={0x0, 0x20000, 0x13291, 0x4000004, 0x3a}, &(0x7f0000000100), &(0x7f000001fa00)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r4, 0x21, &(0x7f00000002c0)={0x0, 0x9d62, 0x8e60db6a13d49a16, 0x2, 0x7}, 0x1) r6 = socket$packet(0x11, 0x3, 0x300) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r7 = accept4(r0, 0x0, 0x0, 0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x1c, 0xfffffffffffffffd, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000000c0)={'tunl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x5, 0x8, {{0x5, 0x4, 0x3, 0x28, 0x14, 0x64, 0x0, 0x4, 0x39, 0x0, @remote, @broadcast}}}}) 7m22.150108205s ago: executing program 8 (id=476): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x80, 0x7, 0x8, "3b6feb62", "f16c06b3"}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x40}, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c0003800800"], 0x38}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000003000900000000060015000400000014001680100008800c0003800800"], 0x38}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) (async) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="48c5177a"], 0x69) (async) write$binfmt_elf32(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="48c5177a"], 0x69) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_RATE={0x6, 0x5, {0xe, 0xff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="4f3bf5835e00000040225121d695ef8fbec24ff7f6358ca3fb8c78cfa5e1f14f1b257f402ec564f7598a5f621e681aaa4bae02fa4d2903aab763584fabdc78e373ccbea9b62b9e757a3c0750cc4c5f5cca4ca1c93efe7e321af497c19d1c9c08f37bdc225b08cdf4d5db622d8eac4169e69f08e0693618c8fbbc5ed5e4b9d3b2271dfd06cf51a5936ba405", 0x8b}], 0x1) 7m18.437788302s ago: executing program 8 (id=485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_exit\x00', r0}, 0x18) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') 7m18.19307267s ago: executing program 8 (id=486): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) accept4(r1, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r6 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000540)={0x0, 0xf, 0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r6, 0x0, 0x0) syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x85fca17044c426d3, 0x7, 0x1, 0x3, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa2, 0x50, 0x2, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0xf8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xa, 0x9, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0xfe, 0xf}}]}}}]}}]}}, &(0x7f00000007c0)={0xfffffe74, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x0, 0x4, 0x6, 0x10}, 0xe0, &(0x7f0000000100)=ANY=[@ANYBLOB="050fe000060710020c90040059100a66ec86bee522b0b1b2118bd8a0e011067cfa5ef123f12d5e20ed3ce8f0f0f3f61a91ed7a4edf47d95008ed31c77855ffdf04b30338a5c1a75e00ddf78f8234c0f467c98efcac5fd9cea6c4cf3cc4e8cba0e5d74b83990b100102080081020900f90a1003000d00017f267f5c10027855f487ed9d19ccd30cf7464455195dabbd1dfb0f5fc44951954de2fe1ae47cb5b8c0a94f2b54be07d9a406bcd23d3b16631ec73a6950480ac91c0d391a3b0392a3fd879abeea59a40c06b734071884948cab8d38bbde7df20a1003020d0000010600"], 0x7, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x421}}, {0xd7, &(0x7f0000000240)=@string={0xd7, 0x3, "c9d424f432b49a130862b54106cc891f98225a6b2b52d56afa1f0474244367a801f5e6112ee6439401dc97d0d0d59927f3091c94fb9e338caf237ab86032de2f60290ebba9d996225461ac430ec27fc1e616766fc9bf92172898453d7c8a951b44aee3643fc94227452cbb21ff6751e6b25063fa9b5f4752770460ff7d563daf8e8e809b55c28152a2b730a55e386a51739097149a7101df79b82edd40cd166bbc5fb5ca77faad23812893b47bd07fb0c24ea449d6619129550f0aa179388d9978fad7de752fadc7182e4e422977d6e402739ea0bd"}}, {0xe6, &(0x7f0000000440)=ANY=[@ANYBLOB="e603f47a92a2016c8cc01e0d0ef575a1faee33ec99d481a9f33f078194a5e6186d0f06f3d5ff40d5f2a4d8fac813a2f762c22eb6a0ba44c7539165c627240d694e4c4705d1f115eb072ee8a7780dc9d49868c9f5268d8b2fed66e61897c3e1f8ce6da2bca9d64dcff71916fa49f21b8c6f74a0146eae7bc4cc7a51cb4794f9e283531cda0142edc633c41ebc381628bf700eb71a7afe71f25faa415b423d0e7006f781f0a3eca04d293136e93f0e944d7f8ffdcfb3889ac2bc7dfaadd25af98e781a1dfebd478c5107c37d59fa438fa5c96c51753cb811fbfe433d29af6da7d2436547910342"]}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x458}}, {0xe5, &(0x7f0000000580)=@string={0xe5, 0x3, "75611ae225d16753bc06ee6d82c47b8efb81d40f74929742d581a2206eae008154dee368d679ac867d224580c75d394934a8d39239a86c12bcc0575ecfbbfef62e22372c142df03b436896a15f9586fdfc9b6ec8e5eaa8d20e3273a316dc28b38a5c8255c27ee1f36305035b0a4b9a5e02cbe1deec110e0bc6f620a19426fe8d9871b6d5ddd3a450c4183c99f8ae503dc4655c8638bdeb92c28da0cea23c0a2f0ceae6095de0cdcc0d5e551e89e78bec92b990132c3ebd6519f3559153892981a271e38f51c07886c840334dcae5de4120fda20ab530e667c923e68bb656abf01be3da"}}, {0xdb, &(0x7f0000000680)=@string={0xdb, 0x3, "c74d371e39ed23b9d5a6cd61b18ef2c74e2d40ac27a26979afce176f2068916a9465391bd52caa563fe4ec667ae1a328a4034a946f09d787fde19e3904b5d3ca019448113935081f0161ce9611451647c2f23a81fb4b3e57e66db5d16747b578ebc27f0efca8a51c8f20843141ce8d657dd4bc626d7fd5c434c414cabc0a0f627eb711a61243d3e7b501a551fce764804e802323106900c03b58f1fecd78c192b8ff06fea1353a0c16faa878aaabdd13794268f037620b5048a086931327f201b3e654f367f5c749747e5932ebda4ef5b9d43b47fc9697b15f"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40b}}]}) 7m10.874667577s ago: executing program 8 (id=505): openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) sendmsg(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x4045) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xd55, {0x4, 0x2, 0x0, 0x7, 0x20000009, 0x40, {0x2, 0xfffffffffffffffb, 0x4, 0x100000001, 0x0, 0x10000000, 0x6, 0x3, 0x80000002, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000180)=@v3={0x3000000, [{0x8000, 0x8}, {0x4, 0x2}]}, 0x18, 0x2) 7m9.434354575s ago: executing program 8 (id=510): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x8001, @loopback, 0x3}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000d0000000091122200000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(r4) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r6, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) 7m5.833556556s ago: executing program 8 (id=520): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000790a3c81c08fd1034a004a00010000000000000000000a0080"], 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(r2, 0x0, 0x8800) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000110000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xc, 0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r7}, 0x10) 6m50.645016769s ago: executing program 36 (id=520): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000790a3c81c08fd1034a004a00010000000000000000000a0080"], 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) sendmsg$nl_route(r2, 0x0, 0x8800) r3 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000110000001801000020646c2500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xc, 0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r7}, 0x10) 5m57.737992253s ago: executing program 9 (id=730): prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149882, 0x60) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000300)={0x7fff, 0x6}, &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) fsetxattr$security_ima(r4, &(0x7f0000000480), 0x0, 0x0, 0x3) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x11, 0x10, 0x0, &(0x7f0000002f00)) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) close(r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x28) 5m56.739837s ago: executing program 9 (id=732): r0 = socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0xfffffffffffffff7, 0x4, 0x8, 0xc12, 0x100000000, 0xfffffffffffffffc, 0x3, 0x0, 0x10}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd2a, 0x25dfdbfb, {0x2, 0x10, 0x20, 0x0, 0x0, 0x0, 0xfd, 0x9, 0x200}, ["", ""]}, 0x1c}}, 0x8800) 5m56.559822753s ago: executing program 9 (id=734): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x10012, &(0x7f0000000040)={[{@name={'name', 0x3d, '_))%['}}]}) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x1a, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002000010000000000000000000280000000002c4d5918b62152df7d26efd6def506c7a2f022df94d10200041e0101fffe10000b000000d7c378c1ab5ca5f747d925aa92f27c2aa750abd136aa458422f8f66dc05197904d185e099412423f62942340411377c6f40f0a0800000000000000000000003c7a5937"], 0x30}, 0x1, 0x0, 0x0, 0x48090}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$rds(0x15, 0x5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000680)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x400}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x80000, 0x0, 0xfffffffffffffffc}, 0x0, 0x0) 5m56.387410629s ago: executing program 9 (id=738): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000b40)=ANY=[], 0xfffffece, 0x800) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r2 = syz_open_dev$evdev(&(0x7f0000000200), 0x8, 0x822b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000530000/0x3000)=nil) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x800, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r3, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) open$dir(0x0, 0x0, 0x1c0) getdents64(r4, &(0x7f0000000300)=""/152, 0x98) close(0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) 5m54.949881995s ago: executing program 9 (id=742): r0 = syz_io_uring_setup(0x1244, &(0x7f0000010180)={0x0, 0x2f25, 0x800, 0x1, 0x98}, &(0x7f0000000900)=0x0, &(0x7f0000010200)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f00000004c0)=[0xffffffffffffffff, r0], 0x2, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x200007) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000200)=0x590, 0x4) r7 = syz_open_dev$dri(&(0x7f0000000340), 0x1, 0x8c0200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x200, 0x0, &(0x7f0000000180), &(0x7f00000004c0), &(0x7f00000004c0), &(0x7f00000000c0)}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000380)=0x1000000, 0x4) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, 0x0, 0x0) 5m49.769173285s ago: executing program 9 (id=759): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) unshare(0x2c020400) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000580), &(0x7f00000001c0)=[0xff, 0x5, 0x9, 0x401, 0xffffffff, 0x0, 0xffff]}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1000000, 0x4) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) 5m48.665907515s ago: executing program 37 (id=759): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) unshare(0x2c020400) syz_clone(0x5948000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000580), &(0x7f00000001c0)=[0xff, 0x5, 0x9, 0x401, 0xffffffff, 0x0, 0xffff]}) openat$vcsa(0xffffffffffffff9c, 0x0, 0x800, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000140)=0x1000000, 0x4) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0xc0) 9.446173775s ago: executing program 3 (id=1934): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d80000007b0081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) 8.594560364s ago: executing program 3 (id=1940): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000000000904"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) read$FUSE(r0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r6 = getpid() setpriority(0x2, r6, 0x7) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800090400080000000000000a000000000008000000000008001e000100"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r7, 0x2f, 0x2, 0x0, 0x2, 0x8, @loopback, @dev={0xfe, 0x80, '\x00', 0x42}, 0x8, 0x80, 0x102b, 0x9}}) 7.666399824s ago: executing program 1 (id=1944): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) socket$inet(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@flushpolicy={0x68, 0x12, 0x105, 0x0, 0x25dfdbfd, "", [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd2b, 0x70bd28, 0x70bd29, 0x3}}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010101, @in=@broadcast, 0xa, 0x6, 0x9}}, @srcaddr={0x14, 0xd, @in=@private=0xa010102}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.955099337s ago: executing program 5 (id=1946): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa4", 0x89, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 6.643420471s ago: executing program 3 (id=1948): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x5f, 0x20044779, &(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000cc0)="b2182bd904812ac584d91707161cad9b3b14f21bd46ced28244c6daf1734b2b004614d58c187deb00ae8468d9cc84a4d7eb76cb62ec21fa7032ea5c45724431aa011e991ce19908d98244ed3ec6222389287d3664fa5335f0edc6ac5df1c641b2c54fe2f3ca6c9b2070f542c88f87944f8fd4ddb76d62fd895bf3a2d8330ed73ef848c79caf8f41ed627e3da1c9cfb5051699f4a5a49817b353b8241b618354642aaf98b078e70111f973ef6b7d0ae74bc49b725e16decbee2f50294ba026b216b10b9aca50b9939d5dc10464151bc263fcfff9c1131b7d75d7cb0", 0xdb}], 0x1}}], 0x1, 0x480e0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000100)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x121500) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000280)=0x3) sendmmsg$inet(r1, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000001340)) 5.981486711s ago: executing program 5 (id=1949): socket(0xa, 0x3, 0x1003a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e00000000000000000c000080080021007a87a1b50b1000", @ANYBLOB], 0x1c}], 0x1}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) 5.955709195s ago: executing program 0 (id=1950): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) r1 = socket(0x40000000015, 0x5, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000030000000400010005"], 0x50) close(0x3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x1f, 0x7, 0x80000000, 0x14, @dev={0xfe, 0x80, '\x00', 0x25}, @private1, 0x10, 0x7, 0xa992390, 0x6bc8000}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000400)=[@timestamp], 0x1) write$binfmt_misc(r8, &(0x7f0000000b00), 0x91) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) splice(r7, 0x0, r2, 0x0, 0x8f, 0x5) sendmsg$nl_route(r8, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_getnexthop={0x24, 0x6a, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x44) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 5.450065315s ago: executing program 1 (id=1951): r0 = syz_open_dev$dri(&(0x7f00000007c0), 0x1ff, 0x101901) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x1, 0x80, 0x9, 0x2, {{0x1d, 0x4, 0x1, 0x25, 0x74, 0x64, 0x0, 0x1, 0x4, 0x0, @local, @empty, {[@lsrr={0x83, 0x17, 0x48, [@multicast1, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x50, [@dev={0xac, 0x14, 0x14, 0x3e}]}, @rr={0x7, 0x23, 0x80, [@dev={0xac, 0x14, 0x14, 0x10}, @local, @private=0xa010101, @local, @multicast2, @broadcast, @local, @remote]}, @generic={0x83, 0x6, "f5d3f531"}, @rr={0x7, 0x13, 0x97, [@empty, @private=0xa010100, @multicast2, @remote]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000e00)=@delchain={0x11bc, 0x65, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0xffe0}, {0x8, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc}}, @TCA_CHAIN={0x8, 0xb, 0x3fa}, @filter_kind_options=@f_basic={{0xa}, {0x1174, 0x2, [@TCA_BASIC_POLICE={0x8a0, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x0, 0xca, 0x0, 0x9, {0x3, 0x2, 0x4, 0x5, 0x6, 0x4}, {0x5d, 0x0, 0xe61a, 0x1, 0x96, 0x6}, 0x400, 0xffff, 0xe}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcce4, 0x8, 0xff, 0x3592625e, 0x9, 0x184, 0x2, 0x4, 0x4, 0x9b3, 0x2, 0xf9, 0xa, 0x5, 0x3, 0x5, 0x6, 0x7fff, 0xffffffff, 0x7fffffff, 0xfe000, 0x9, 0x6, 0x6, 0x7fff, 0xb, 0xfffffff2, 0x9, 0x1, 0x9, 0x4, 0xe48, 0x0, 0xff, 0xe0e, 0x2, 0xc29c, 0xa9, 0x8, 0x0, 0x80, 0x2, 0x8532, 0x9, 0xdf96, 0x3, 0x9, 0x400, 0x7ff, 0x8001, 0x7, 0x3, 0x9, 0x2, 0x3, 0x1, 0x9, 0xd5, 0x5, 0x1, 0xe, 0x8, 0x0, 0x2, 0x10000, 0x6, 0x8, 0xff, 0xfffffc01, 0x10000, 0x2, 0xaa, 0x1, 0x80d, 0xb13, 0x9, 0x0, 0x2, 0x4, 0x6, 0x4, 0x2, 0x0, 0x80000000, 0x7, 0x3, 0x8, 0xfffeffff, 0x6, 0x70, 0xfffffcf4, 0x1, 0x9, 0x4a, 0xfffffff4, 0x8, 0x80, 0xffffff83, 0x9, 0x7ff, 0x0, 0xfff, 0x3, 0xd7, 0x4, 0x3, 0x5, 0x8, 0x81, 0x8001, 0x7, 0x6, 0xfffffffa, 0x0, 0x9, 0x72, 0x2, 0x519b7f02, 0x4, 0x3, 0x3, 0x9, 0x10000, 0x5, 0x10001, 0x3, 0xf70000, 0x3, 0x7d1, 0x7, 0x8, 0x9, 0xe2b, 0x3, 0xcca, 0x8, 0x8, 0x2, 0x4, 0xffffffff, 0x5, 0x4, 0x8beb, 0x77a9aeb5, 0x800, 0x8, 0x5, 0x1e, 0x5, 0xfffff000, 0x30, 0x2, 0x10001, 0x0, 0x5, 0x5, 0x80000001, 0x101, 0x3, 0x0, 0x4, 0x60, 0x6, 0x5ce, 0x6, 0x1, 0x8, 0x80000000, 0x7, 0x1, 0x10001, 0x3, 0x8, 0x3, 0x85, 0x9, 0x0, 0x9, 0x5, 0x9, 0x8, 0x0, 0x400, 0x7, 0x1, 0x0, 0x5, 0x8, 0x84, 0x200000, 0x7f, 0x5, 0x1, 0x9, 0x3, 0x2, 0x9, 0x2, 0xd1, 0x1, 0x4, 0x0, 0x7, 0xf51, 0x1, 0x6, 0x8e3, 0x3, 0x400, 0x61cd, 0xf3, 0x5, 0x9, 0xf, 0x1, 0x7, 0x7, 0xa7b, 0x3, 0x6, 0x39, 0x80000001, 0x1, 0xb, 0xa76, 0x7, 0x1, 0x60000, 0x9, 0x4, 0x4, 0x8, 0x80, 0xb, 0xb, 0x0, 0x8, 0x3fb9, 0x6, 0x8, 0x1, 0x5, 0x1ff, 0x3, 0x7, 0x1, 0xa4000000, 0x1, 0x0, 0x4, 0x5, 0x9, 0xa, 0x7ff, 0x0, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x38, 0xd2, 0x4, 0x40, 0x4, 0x0, 0x6, 0x9, 0x7, 0x4, 0x7, 0x5, 0x7, 0x9, 0x2, 0xffffc2c6, 0xf, 0x40, 0x7ff, 0x0, 0xfffeffff, 0x7b, 0x1af, 0x1ff, 0x0, 0x5, 0x4, 0x1, 0x5, 0x1, 0xda2, 0xb, 0x6, 0x400, 0x2, 0x1, 0x4, 0x0, 0x8, 0x5, 0xbf, 0x9, 0x6, 0x4, 0x1, 0x0, 0x8, 0x6, 0x7f, 0x6, 0x2, 0xe, 0xa, 0x6, 0x8, 0x5, 0xbf3, 0x2cb, 0x7b7, 0x101, 0xfffffff8, 0x57b, 0x443b, 0x5, 0x2, 0x2, 0x7, 0xb, 0x8001, 0x8, 0x7a, 0xa6, 0x8, 0x9, 0x10001, 0x6, 0x3, 0x6, 0x3, 0x6, 0xc, 0xfffffffc, 0x95a, 0x9, 0x7, 0x80, 0x80000000, 0x8, 0x4bb, 0x0, 0xe, 0x0, 0x6, 0x204, 0x0, 0x8, 0x7, 0x1609, 0x4, 0x94, 0x8, 0x7fffffff, 0x0, 0xff, 0x8, 0x9, 0x6c, 0x401, 0xd, 0x4, 0x1, 0x0, 0x1, 0xffffffff, 0x9, 0x7, 0xd, 0x100, 0x1, 0x6, 0x1ff, 0x80000000, 0x3d50, 0xff, 0x100, 0x5, 0x89, 0x7ec89a67, 0x9, 0xf, 0xdcf7, 0xfff, 0x8, 0x4, 0xffffffff, 0x2000000, 0xe2a, 0xc3f, 0x3, 0xd, 0x0, 0x80000000, 0x9, 0xf78, 0x1, 0x3, 0x5, 0x1000, 0x9, 0x7d4255b8, 0x7, 0x6, 0x6177, 0x10000, 0x1, 0x3, 0x10, 0x1, 0xfffffb1f, 0x100, 0xdc9, 0xf689, 0x4427a163, 0x4, 0x7ff, 0x3, 0xeee, 0xc, 0x1, 0x9093, 0x2, 0x8, 0x2, 0x7, 0xd, 0xd, 0x9, 0x8, 0x9, 0x2, 0x5, 0x3ff, 0x93, 0x8f, 0x800, 0x6, 0x9, 0x7f, 0x70, 0x6, 0x9, 0x7, 0xfffffffd, 0xe, 0x401, 0x9e70, 0x5, 0x5, 0x3, 0x4, 0x9, 0x3a73, 0x9, 0x1, 0x0, 0xaf0d, 0x800, 0x8, 0x0, 0xfffffffc, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x6, 0x7fff, 0xe99, 0xfffffffd, 0x5dbc, 0x200, 0x9, 0x100, 0x9, 0x61, 0x4, 0x10000, 0x9, 0x617, 0x7, 0x0, 0x8, 0xf6b, 0xfffffff9, 0x1, 0x7f, 0x100, 0x7, 0x4, 0x0, 0xfffffffe, 0xa358, 0x9, 0x6, 0x4, 0x3efb, 0x3a4, 0x7, 0x8, 0x8001, 0x10000, 0xbbc0, 0x9, 0x2, 0x5, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x44c9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0xe6c9, 0x9, 0x8, {0x6, 0x1, 0x5, 0x8, 0x1, 0xe2}, {0x8, 0x0, 0x5, 0x1, 0x7, 0x1}, 0xa, 0x7, 0x10000}}]}, @TCA_BASIC_POLICE={0x8b0, 0x4, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x4468, 0x8f, 0x2, 0x15d, 0x8, 0x1, 0xd, 0x6, 0x4, 0x6, 0x3, 0x4464, 0xcab4, 0xd, 0xa, 0x0, 0x66d9d47, 0xb1, 0x100, 0x3ff, 0xbe, 0x5, 0x3, 0x4, 0x8, 0x400, 0x6, 0x80000000, 0xd, 0xf, 0x6, 0x61cce2e9, 0x1ff, 0x6, 0xbde9, 0x1000, 0x6, 0x9, 0x6, 0x72, 0x4, 0x4, 0x2, 0x200, 0x1ff, 0x0, 0x4, 0x7fff, 0xd66, 0x6, 0x1000, 0x3, 0x3, 0x0, 0x80000001, 0x3, 0x4e0, 0x400, 0x7, 0x2, 0x5, 0x8, 0x36ade434, 0x5, 0xf, 0x80000000, 0x8, 0x6, 0xdf, 0x2, 0x1, 0x3, 0xf, 0x66d9, 0x1, 0x10001, 0x0, 0xfffffffc, 0x6, 0x8fd, 0x3, 0x401, 0x9, 0x8e4a, 0x3, 0x2, 0x4, 0x9, 0x7, 0x8, 0x401, 0x100, 0x63df, 0x10001, 0x80, 0x1, 0x2, 0x7f, 0xd, 0x9, 0x10, 0x9, 0xf, 0x0, 0x8, 0xffffffff, 0x0, 0xfff, 0x5, 0x0, 0x8cee, 0x6, 0xc7f, 0x4, 0xfffffffd, 0x0, 0xfff, 0xb, 0x4, 0x9, 0x1, 0x9, 0xe4, 0x5, 0x80, 0x4, 0xc, 0x8, 0x3, 0x40, 0x7, 0x3, 0x8, 0x9, 0x5, 0x1, 0xffffffff, 0x0, 0x3, 0x7, 0xe, 0x0, 0x8d, 0x0, 0x2, 0x0, 0x0, 0x7, 0x7, 0xd, 0x3, 0x1, 0xff, 0x2, 0x200, 0xd, 0x7, 0x5, 0x2, 0x8, 0x9, 0x8, 0x2f5c, 0x0, 0x7, 0x2, 0x2, 0x2, 0x6, 0x800, 0x3, 0xd71, 0x7, 0x6, 0x572, 0x0, 0x4, 0x7, 0x3598, 0x1000, 0x8, 0x5, 0x7, 0x3, 0x10, 0x4, 0x837, 0x9, 0x9, 0x1000, 0x9, 0x54d8, 0xfffffff9, 0x5, 0x8, 0x2c000, 0x486, 0x7, 0x92, 0xffffff4a, 0x6, 0x0, 0x800, 0x4, 0xd0b, 0x7, 0x1ff, 0x2, 0xfffffe01, 0x80, 0x4f, 0x3, 0x0, 0x68b5, 0x4, 0x7, 0xfffffffb, 0xffff1e38, 0x0, 0x2, 0xa7, 0x3, 0x9, 0x43f801b, 0x6, 0x0, 0xc3b, 0x3b, 0x7fffffff, 0x4, 0x0, 0xb8, 0x75, 0x6736, 0x5, 0x4, 0x5, 0x2, 0x7, 0x0, 0x59f5, 0x3, 0x4, 0x928f, 0x1, 0x1, 0xe4, 0x3, 0xbb3, 0x5, 0x7, 0x0, 0x2, 0x0, 0xf59b]}, @TCA_POLICE_RATE={0x404, 0x2, [0x590f, 0x7, 0x80000001, 0x5, 0xffffe83c, 0xfffffff7, 0x7, 0x7fffffff, 0x8, 0x9, 0x1, 0x0, 0x3, 0xcb1, 0x9, 0x401, 0xffffffff, 0x3, 0x100, 0x10, 0x3, 0x4, 0x80, 0x7f, 0x8, 0x6, 0x8, 0x3, 0xa, 0x5, 0x9, 0xffffffff, 0x3ff, 0xfffffbff, 0x1, 0x0, 0x9, 0xb0, 0x9, 0x101, 0x8, 0x7e1, 0x7fff, 0x3ec1, 0x8, 0xfffffff7, 0xe, 0x58f, 0xf, 0x9, 0x38, 0x6, 0x5, 0x6, 0x7, 0x5, 0xc, 0xd56d, 0x2, 0x2, 0x0, 0x6, 0x401, 0x4e9, 0x40, 0x0, 0xff, 0x7fffffff, 0x80000000, 0x9, 0x80000000, 0x25, 0xb, 0x2, 0xfffffd2f, 0x1800000, 0x2, 0x9, 0x9, 0x3, 0xfff, 0xd, 0x3, 0xa, 0x0, 0x81, 0x7, 0x0, 0x1000, 0x9, 0xe, 0xbe69, 0x80000000, 0x10, 0x81, 0x7, 0x7f, 0x8, 0xfffffffb, 0x2, 0xffff0001, 0x4, 0x0, 0x80000000, 0x2, 0x3, 0x27, 0x9, 0x10001, 0x100, 0x9, 0x0, 0x5896, 0x800, 0x2, 0x1, 0x1, 0x6, 0x6, 0x2, 0x0, 0x6, 0xf, 0x7, 0x2, 0xaff, 0x0, 0x7fffffff, 0x3, 0xb340, 0x101, 0x1400, 0xff, 0x6, 0x100, 0xc2, 0x3, 0x10001, 0x40, 0x5, 0x5, 0x6, 0x2, 0xc, 0xd, 0x85, 0x3, 0x2, 0x7, 0x6, 0x1, 0x2, 0x8, 0x8, 0x8, 0x2, 0x2bf, 0x8, 0xd2f, 0x3, 0xfffffff7, 0x9, 0x0, 0x1, 0x9, 0x80000001, 0x4, 0x2000, 0x2, 0x3, 0xffffffff, 0x9, 0x8, 0x143e71a7, 0x56, 0x2, 0x6, 0x40, 0x65, 0x9, 0x8, 0x7, 0x6, 0xe06, 0x4, 0xffff, 0x6, 0x8001, 0x1, 0x9, 0xdf, 0xfff, 0x8, 0x8257, 0x6, 0x4, 0x3, 0x8, 0x0, 0x100, 0x1, 0x7, 0x4, 0x1, 0x5, 0x3206, 0xc138, 0x5, 0x101, 0xffffffff, 0x9, 0x8, 0x5, 0x602, 0xf, 0x81, 0x3, 0x80000000, 0xf, 0x729, 0x40, 0x1, 0x1, 0xb, 0x4, 0x5, 0x2, 0x2, 0x8001, 0x100000, 0x1, 0xa, 0x3, 0x9, 0x6, 0x0, 0x1ff, 0xd7bf, 0x2, 0xa, 0xc, 0x9, 0x1, 0x7, 0x6, 0x6, 0x5, 0x4, 0x6, 0x7, 0xc, 0xbc, 0x6, 0x71b61373, 0x0, 0xb6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7bcb, 0x20000000, 0x1, 0x80, 0x0, {0x1, 0x2, 0x200, 0x9, 0xb}, {0x9, 0x2, 0x5b39, 0x0, 0x0, 0x8}, 0x6, 0x6, 0x100}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x9, 0x5, 0xffff, {0xf8, 0x3, 0x62, 0x7, 0x2, 0xa}, {0x2, 0x1, 0x2, 0x101, 0x8, 0x4}, 0x9f, 0x7, 0x8}}]}, @TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xb}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xc0}}]}, 0x11bc}, 0x1, 0x0, 0x0, 0x50084}, 0x41) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) dup3(r4, r5, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0), &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) openat$dir(0xffffffffffffff9c, 0x0, 0x40600, 0x20) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000040), 0x10) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r9, 0x400442c9, &(0x7f0000000080)={0x8, @random="c005b0f96711"}) sendmsg$netlink(r8, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0x7, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @rand_addr=0x64010101}}, {{0x2, 0x2, @local}}}, 0x108) r10 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb6668", 0x6, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r11, r10, r11}, 0x0, 0x0, 0x0) 4.953950099s ago: executing program 6 (id=1952): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 4.902534202s ago: executing program 0 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000340)={0x80000001, {{0xa, 0x4e21, 0x8, @loopback, 0x101}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmmsg(r1, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0x11e7}) socket$inet6(0xa, 0x3, 0xff) listen(0xffffffffffffffff, 0x5) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000080) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d06, &(0x7f0000000040)={0x200}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0xc) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x521281, 0x0) epoll_create(0x1ff) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="125b75f53d014003000000106d0427c24000010203010902240001010cd40509040002020301010109216d00080122bb050905810320000e0505"], &(0x7f0000000300)={0x0, 0x0, 0x3d, &(0x7f0000000100)={0x5, 0xf, 0x3d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x5, 0xf}, @wireless={0xb, 0x10, 0x1, 0xc, 0x51, 0x3, 0xad, 0x4c4, 0xfe}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x0, 0xf00f, 0xfff7, [0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xe9, 0x10, 0x6, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x5, 0x3, 0x7, 0x5}]}, 0x2, [{0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="5e03010000001299de751df47519a72d7c16c107fecd2ff02b920d6a3d808702fcc88a795368000000000000"]}, {0x2, &(0x7f0000000200)=@string={0x2}}]}) 4.75454405s ago: executing program 3 (id=1954): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="009e6cc2d96aa31c1ac8156c63", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x5, 0x0, 0x0, 0x6, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r5, 0x40082102, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r6, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) r8 = socket$inet6(0xa, 0x3, 0x8) recvfrom(r8, 0x0, 0x0, 0x40000100, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x8, &(0x7f0000000040)=0xb, 0x4) sendmmsg$inet6(r8, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) 4.716981528s ago: executing program 5 (id=1955): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = accept4$x25(0xffffffffffffffff, &(0x7f00000002c0)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x80800) r2 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x8, 0x2005, 0x10000}, {0x8, 0x2}, {0x4}, 0x0, 0x10, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x6}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000380)={0x8, 0xc}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) setxattr$security_evm(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), &(0x7f0000000280)=@sha1={0x1, "6f7168ed866abfbc5842616a8522de0e8dbc81c6"}, 0x15, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000001440)={r1, r2, 0x3c, 0x9c, &(0x7f0000001380)="44f659cfc3d9726ab2617d4e6cf241d3859a30306e306d87f61b5d10b93de5f5168ac50732030cc000f9d02793352dac5ff68eb23fc126e98bcb11fc1aca527a8ec31b01f336618d048f88a9257794f85278cdea69fb9e173fc831f60c86f3b922a10ad78d6cba91ceee741a3ada67aa3f45d5ec3203386403f92c8415d18134fcc1f1b683fe6778c1957711ac01736187604ca0bb16ba7b4fa7cad4", 0xe, 0x5, 0x61b3, 0x9, 0x1, 0x0, 0x800, 'syz1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r7, 0x0) 4.714169263s ago: executing program 1 (id=1956): futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000580)=0xe) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x6) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) 4.610160356s ago: executing program 6 (id=1957): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) stat(&(0x7f0000000040)='.\x00', &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 3.645229851s ago: executing program 5 (id=1958): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x129442, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)=0x12) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xcc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sg(0x0, 0x2, 0x12001) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close(r0) 3.501114614s ago: executing program 1 (id=1959): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffbf}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r2 = signalfd4(r0, 0x0, 0x0, 0x800) sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8=r2], 0x18}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(r3, 0xffffffffffffffff, 0x0) 3.387418333s ago: executing program 6 (id=1960): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xa693}, 0x8) 3.348131569s ago: executing program 0 (id=1961): syz_usb_connect(0x2, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000019792e20b4070a0102010102030109022b0001000000440904bd00023467c3000905000000000000000705e37e1b82e609050b02"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002280)={'vlan0\x00'}) fstat(r0, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}}}}}}, 0x0) 2.559463966s ago: executing program 3 (id=1962): prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000300)={0x7fff, 0x6}, &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x11, 0x10, 0x0, &(0x7f0000002f00)) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x28) 1.621950248s ago: executing program 3 (id=1963): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000340)={0x80000001, {{0xa, 0x4e21, 0x8, @loopback, 0x101}}}, 0x88) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0x11e7}) socket$inet6(0xa, 0x3, 0xff) listen(0xffffffffffffffff, 0x5) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000080) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d06, &(0x7f0000000040)={0x200}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0xc) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x521281, 0x0) epoll_create(0x1ff) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="125b75f53d014003000000106d0427c24000010203010902240001010cd40509040002020301010109216d00080122bb050905810320000e0505"], &(0x7f0000000300)={0x0, 0x0, 0x3d, &(0x7f0000000100)={0x5, 0xf, 0x3d, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x5, 0xf}, @wireless={0xb, 0x10, 0x1, 0xc, 0x51, 0x3, 0xad, 0x4c4, 0xfe}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x0, 0xf00f, 0xfff7, [0x0]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xe9, 0x10, 0x6, 0x7, 0x4}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa0, 0x5, 0x3, 0x7, 0x5}]}, 0x2, [{0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="5e03010000001299de751df47519a72d7c16c107fecd2ff02b920d6a3d808702fcc88a795368000000000000"]}, {0x2, &(0x7f0000000200)=@string={0x2}}]}) 1.618642251s ago: executing program 0 (id=1964): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r11, 0x4b70, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, 0x0) r12 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) setns(r12, 0x10000000) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r13, &(0x7f0000000040)={0x40002000}) 1.59179237s ago: executing program 6 (id=1965): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x58, 0x2, 0x4, 0x0, 0x7}, 0x14) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff0000000002000000e0000009f9ff0f0005000000030005007217440502000000e00000010000000000"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0xd, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000080)="ac", 0xfffd, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0xc5f}, 0x1c) 1.209470535s ago: executing program 5 (id=1966): socket(0xa, 0x3, 0x1003a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00250e00000000000000000c000080080021007a87a1b50b1000", @ANYBLOB], 0x1c}], 0x1}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) 1.083687601s ago: executing program 1 (id=1967): r0 = syz_open_dev$dri(&(0x7f00000007c0), 0x1ff, 0x101901) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000280)={'gretap0\x00', 0x0, 0x1, 0x80, 0x9, 0x2, {{0x1d, 0x4, 0x1, 0x25, 0x74, 0x64, 0x0, 0x1, 0x4, 0x0, @local, @empty, {[@lsrr={0x83, 0x17, 0x48, [@multicast1, @loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0x50, [@dev={0xac, 0x14, 0x14, 0x3e}]}, @rr={0x7, 0x23, 0x80, [@dev={0xac, 0x14, 0x14, 0x10}, @local, @private=0xa010101, @local, @multicast2, @broadcast, @local, @remote]}, @generic={0x83, 0x6, "f5d3f531"}, @rr={0x7, 0x13, 0x97, [@empty, @private=0xa010100, @multicast2, @remote]}]}}}}}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000e00)=@delchain={0x11bc, 0x65, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0xffe0}, {0x8, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc}}, @TCA_CHAIN={0x8, 0xb, 0x3fa}, @filter_kind_options=@f_basic={{0xa}, {0x1174, 0x2, [@TCA_BASIC_POLICE={0x8a0, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc, 0x0, 0xca, 0x0, 0x9, {0x3, 0x2, 0x4, 0x5, 0x6, 0x4}, {0x5d, 0x0, 0xe61a, 0x1, 0x96, 0x6}, 0x400, 0xffff, 0xe}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcce4, 0x8, 0xff, 0x3592625e, 0x9, 0x184, 0x2, 0x4, 0x4, 0x9b3, 0x2, 0xf9, 0xa, 0x5, 0x3, 0x5, 0x6, 0x7fff, 0xffffffff, 0x7fffffff, 0xfe000, 0x9, 0x6, 0x6, 0x7fff, 0xb, 0xfffffff2, 0x9, 0x1, 0x9, 0x4, 0xe48, 0x0, 0xff, 0xe0e, 0x2, 0xc29c, 0xa9, 0x8, 0x0, 0x80, 0x2, 0x8532, 0x9, 0xdf96, 0x3, 0x9, 0x400, 0x7ff, 0x8001, 0x7, 0x3, 0x9, 0x2, 0x3, 0x1, 0x9, 0xd5, 0x5, 0x1, 0xe, 0x8, 0x0, 0x2, 0x10000, 0x6, 0x8, 0xff, 0xfffffc01, 0x10000, 0x2, 0xaa, 0x1, 0x80d, 0xb13, 0x9, 0x0, 0x2, 0x4, 0x6, 0x4, 0x2, 0x0, 0x80000000, 0x7, 0x3, 0x8, 0xfffeffff, 0x6, 0x70, 0xfffffcf4, 0x1, 0x9, 0x4a, 0xfffffff4, 0x8, 0x80, 0xffffff83, 0x9, 0x7ff, 0x0, 0xfff, 0x3, 0xd7, 0x4, 0x3, 0x5, 0x8, 0x81, 0x8001, 0x7, 0x6, 0xfffffffa, 0x0, 0x9, 0x72, 0x2, 0x519b7f02, 0x4, 0x3, 0x3, 0x9, 0x10000, 0x5, 0x10001, 0x3, 0xf70000, 0x3, 0x7d1, 0x7, 0x8, 0x9, 0xe2b, 0x3, 0xcca, 0x8, 0x8, 0x2, 0x4, 0xffffffff, 0x5, 0x4, 0x8beb, 0x77a9aeb5, 0x800, 0x8, 0x5, 0x1e, 0x5, 0xfffff000, 0x30, 0x2, 0x10001, 0x0, 0x5, 0x5, 0x80000001, 0x101, 0x3, 0x0, 0x4, 0x60, 0x6, 0x5ce, 0x6, 0x1, 0x8, 0x80000000, 0x7, 0x1, 0x10001, 0x3, 0x8, 0x3, 0x85, 0x9, 0x0, 0x9, 0x5, 0x9, 0x8, 0x0, 0x400, 0x7, 0x1, 0x0, 0x5, 0x8, 0x84, 0x200000, 0x7f, 0x5, 0x1, 0x9, 0x3, 0x2, 0x9, 0x2, 0xd1, 0x1, 0x4, 0x0, 0x7, 0xf51, 0x1, 0x6, 0x8e3, 0x3, 0x400, 0x61cd, 0xf3, 0x5, 0x9, 0xf, 0x1, 0x7, 0x7, 0xa7b, 0x3, 0x6, 0x39, 0x80000001, 0x1, 0xb, 0xa76, 0x7, 0x1, 0x60000, 0x9, 0x4, 0x4, 0x8, 0x80, 0xb, 0xb, 0x0, 0x8, 0x3fb9, 0x6, 0x8, 0x1, 0x5, 0x1ff, 0x3, 0x7, 0x1, 0xa4000000, 0x1, 0x0, 0x4, 0x5, 0x9, 0xa, 0x7ff, 0x0, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x38, 0xd2, 0x4, 0x40, 0x4, 0x0, 0x6, 0x9, 0x7, 0x4, 0x7, 0x5, 0x7, 0x9, 0x2, 0xffffc2c6, 0xf, 0x40, 0x7ff, 0x0, 0xfffeffff, 0x7b, 0x1af, 0x1ff, 0x0, 0x5, 0x4, 0x1, 0x5, 0x1, 0xda2, 0xb, 0x6, 0x400, 0x2, 0x1, 0x4, 0x0, 0x8, 0x5, 0xbf, 0x9, 0x6, 0x4, 0x1, 0x0, 0x8, 0x6, 0x7f, 0x6, 0x2, 0xe, 0xa, 0x6, 0x8, 0x5, 0xbf3, 0x2cb, 0x7b7, 0x101, 0xfffffff8, 0x57b, 0x443b, 0x5, 0x2, 0x2, 0x7, 0xb, 0x8001, 0x8, 0x7a, 0xa6, 0x8, 0x9, 0x10001, 0x6, 0x3, 0x6, 0x3, 0x6, 0xc, 0xfffffffc, 0x95a, 0x9, 0x7, 0x80, 0x80000000, 0x8, 0x4bb, 0x0, 0xe, 0x0, 0x6, 0x204, 0x0, 0x8, 0x7, 0x1609, 0x4, 0x94, 0x8, 0x7fffffff, 0x0, 0xff, 0x8, 0x9, 0x6c, 0x401, 0xd, 0x4, 0x1, 0x0, 0x1, 0xffffffff, 0x9, 0x7, 0xd, 0x100, 0x1, 0x6, 0x1ff, 0x80000000, 0x3d50, 0xff, 0x100, 0x5, 0x89, 0x7ec89a67, 0x9, 0xf, 0xdcf7, 0xfff, 0x8, 0x4, 0xffffffff, 0x2000000, 0xe2a, 0xc3f, 0x3, 0xd, 0x0, 0x80000000, 0x9, 0xf78, 0x1, 0x3, 0x5, 0x1000, 0x9, 0x7d4255b8, 0x7, 0x6, 0x6177, 0x10000, 0x1, 0x3, 0x10, 0x1, 0xfffffb1f, 0x100, 0xdc9, 0xf689, 0x4427a163, 0x4, 0x7ff, 0x3, 0xeee, 0xc, 0x1, 0x9093, 0x2, 0x8, 0x2, 0x7, 0xd, 0xd, 0x9, 0x8, 0x9, 0x2, 0x5, 0x3ff, 0x93, 0x8f, 0x800, 0x6, 0x9, 0x7f, 0x70, 0x6, 0x9, 0x7, 0xfffffffd, 0xe, 0x401, 0x9e70, 0x5, 0x5, 0x3, 0x4, 0x9, 0x3a73, 0x9, 0x1, 0x0, 0xaf0d, 0x800, 0x8, 0x0, 0xfffffffc, 0x7fffffff, 0x9, 0x3ff, 0x6, 0x6, 0x7fff, 0xe99, 0xfffffffd, 0x5dbc, 0x200, 0x9, 0x100, 0x9, 0x61, 0x4, 0x10000, 0x9, 0x617, 0x7, 0x0, 0x8, 0xf6b, 0xfffffff9, 0x1, 0x7f, 0x100, 0x7, 0x4, 0x0, 0xfffffffe, 0xa358, 0x9, 0x6, 0x4, 0x3efb, 0x3a4, 0x7, 0x8, 0x8001, 0x10000, 0xbbc0, 0x9, 0x2, 0x5, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x44c9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0xe6c9, 0x9, 0x8, {0x6, 0x1, 0x5, 0x8, 0x1, 0xe2}, {0x8, 0x0, 0x5, 0x1, 0x7, 0x1}, 0xa, 0x7, 0x10000}}]}, @TCA_BASIC_POLICE={0x8b0, 0x4, [@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0xa, 0x4468, 0x8f, 0x2, 0x15d, 0x8, 0x1, 0xd, 0x6, 0x4, 0x6, 0x3, 0x4464, 0xcab4, 0xd, 0xa, 0x0, 0x66d9d47, 0xb1, 0x100, 0x3ff, 0xbe, 0x5, 0x3, 0x4, 0x8, 0x400, 0x6, 0x80000000, 0xd, 0xf, 0x6, 0x61cce2e9, 0x1ff, 0x6, 0xbde9, 0x1000, 0x6, 0x9, 0x6, 0x72, 0x4, 0x4, 0x2, 0x200, 0x1ff, 0x0, 0x4, 0x7fff, 0xd66, 0x6, 0x1000, 0x3, 0x3, 0x0, 0x80000001, 0x3, 0x4e0, 0x400, 0x7, 0x2, 0x5, 0x8, 0x36ade434, 0x5, 0xf, 0x80000000, 0x8, 0x6, 0xdf, 0x2, 0x1, 0x3, 0xf, 0x66d9, 0x1, 0x10001, 0x0, 0xfffffffc, 0x6, 0x8fd, 0x3, 0x401, 0x9, 0x8e4a, 0x3, 0x2, 0x4, 0x9, 0x7, 0x8, 0x401, 0x100, 0x63df, 0x10001, 0x80, 0x1, 0x2, 0x7f, 0xd, 0x9, 0x10, 0x9, 0xf, 0x0, 0x8, 0xffffffff, 0x0, 0xfff, 0x5, 0x0, 0x8cee, 0x6, 0xc7f, 0x4, 0xfffffffd, 0x0, 0xfff, 0xb, 0x4, 0x9, 0x1, 0x9, 0xe4, 0x5, 0x80, 0x4, 0xc, 0x8, 0x3, 0x40, 0x7, 0x3, 0x8, 0x9, 0x5, 0x1, 0xffffffff, 0x0, 0x3, 0x7, 0xe, 0x0, 0x8d, 0x0, 0x2, 0x0, 0x0, 0x7, 0x7, 0xd, 0x3, 0x1, 0xff, 0x2, 0x200, 0xd, 0x7, 0x5, 0x2, 0x8, 0x9, 0x8, 0x2f5c, 0x0, 0x7, 0x2, 0x2, 0x2, 0x6, 0x800, 0x3, 0xd71, 0x7, 0x6, 0x572, 0x0, 0x4, 0x7, 0x3598, 0x1000, 0x8, 0x5, 0x7, 0x3, 0x10, 0x4, 0x837, 0x9, 0x9, 0x1000, 0x9, 0x54d8, 0xfffffff9, 0x5, 0x8, 0x2c000, 0x486, 0x7, 0x92, 0xffffff4a, 0x6, 0x0, 0x800, 0x4, 0xd0b, 0x7, 0x1ff, 0x2, 0xfffffe01, 0x80, 0x4f, 0x3, 0x0, 0x68b5, 0x4, 0x7, 0xfffffffb, 0xffff1e38, 0x0, 0x2, 0xa7, 0x3, 0x9, 0x43f801b, 0x6, 0x0, 0xc3b, 0x3b, 0x7fffffff, 0x4, 0x0, 0xb8, 0x75, 0x6736, 0x5, 0x4, 0x5, 0x2, 0x7, 0x0, 0x59f5, 0x3, 0x4, 0x928f, 0x1, 0x1, 0xe4, 0x3, 0xbb3, 0x5, 0x7, 0x0, 0x2, 0x0, 0xf59b]}, @TCA_POLICE_RATE={0x404, 0x2, [0x590f, 0x7, 0x80000001, 0x5, 0xffffe83c, 0xfffffff7, 0x7, 0x7fffffff, 0x8, 0x9, 0x1, 0x0, 0x3, 0xcb1, 0x9, 0x401, 0xffffffff, 0x3, 0x100, 0x10, 0x3, 0x4, 0x80, 0x7f, 0x8, 0x6, 0x8, 0x3, 0xa, 0x5, 0x9, 0xffffffff, 0x3ff, 0xfffffbff, 0x1, 0x0, 0x9, 0xb0, 0x9, 0x101, 0x8, 0x7e1, 0x7fff, 0x3ec1, 0x8, 0xfffffff7, 0xe, 0x58f, 0xf, 0x9, 0x38, 0x6, 0x5, 0x6, 0x7, 0x5, 0xc, 0xd56d, 0x2, 0x2, 0x0, 0x6, 0x401, 0x4e9, 0x40, 0x0, 0xff, 0x7fffffff, 0x80000000, 0x9, 0x80000000, 0x25, 0xb, 0x2, 0xfffffd2f, 0x1800000, 0x2, 0x9, 0x9, 0x3, 0xfff, 0xd, 0x3, 0xa, 0x0, 0x81, 0x7, 0x0, 0x1000, 0x9, 0xe, 0xbe69, 0x80000000, 0x10, 0x81, 0x7, 0x7f, 0x8, 0xfffffffb, 0x2, 0xffff0001, 0x4, 0x0, 0x80000000, 0x2, 0x3, 0x27, 0x9, 0x10001, 0x100, 0x9, 0x0, 0x5896, 0x800, 0x2, 0x1, 0x1, 0x6, 0x6, 0x2, 0x0, 0x6, 0xf, 0x7, 0x2, 0xaff, 0x0, 0x7fffffff, 0x3, 0xb340, 0x101, 0x1400, 0xff, 0x6, 0x100, 0xc2, 0x3, 0x10001, 0x40, 0x5, 0x5, 0x6, 0x2, 0xc, 0xd, 0x85, 0x3, 0x2, 0x7, 0x6, 0x1, 0x2, 0x8, 0x8, 0x8, 0x2, 0x2bf, 0x8, 0xd2f, 0x3, 0xfffffff7, 0x9, 0x0, 0x1, 0x9, 0x80000001, 0x4, 0x2000, 0x2, 0x3, 0xffffffff, 0x9, 0x8, 0x143e71a7, 0x56, 0x2, 0x6, 0x40, 0x65, 0x9, 0x8, 0x7, 0x6, 0xe06, 0x4, 0xffff, 0x6, 0x8001, 0x1, 0x9, 0xdf, 0xfff, 0x8, 0x8257, 0x6, 0x4, 0x3, 0x8, 0x0, 0x100, 0x1, 0x7, 0x4, 0x1, 0x5, 0x3206, 0xc138, 0x5, 0x101, 0xffffffff, 0x9, 0x8, 0x5, 0x602, 0xf, 0x81, 0x3, 0x80000000, 0xf, 0x729, 0x40, 0x1, 0x1, 0xb, 0x4, 0x5, 0x2, 0x2, 0x8001, 0x100000, 0x1, 0xa, 0x3, 0x9, 0x6, 0x0, 0x1ff, 0xd7bf, 0x2, 0xa, 0xc, 0x9, 0x1, 0x7, 0x6, 0x6, 0x5, 0x4, 0x6, 0x7, 0xc, 0xbc, 0x6, 0x71b61373, 0x0, 0xb6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7bcb, 0x20000000, 0x1, 0x80, 0x0, {0x1, 0x2, 0x200, 0x9, 0xb}, {0x9, 0x2, 0x5b39, 0x0, 0x0, 0x8}, 0x6, 0x6, 0x100}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x10000000, 0x9, 0x5, 0xffff, {0xf8, 0x3, 0x62, 0x7, 0x2, 0xa}, {0x2, 0x1, 0x2, 0x101, 0x8, 0x4}, 0x9f, 0x7, 0x8}}]}, @TCA_BASIC_POLICE={0x18, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xb}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xc0}}]}, 0x11bc}, 0x1, 0x0, 0x0, 0x50084}, 0x41) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) dup3(r4, r5, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0), &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) openat$dir(0xffffffffffffff9c, 0x0, 0x40600, 0x20) io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @local}}}, 0x108) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000040), 0x10) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r9, 0x400442c9, &(0x7f0000000080)={0x8, @random="c005b0f96711"}) sendmsg$netlink(r8, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x10, 0x0, 0x25dfdbff, 0x80000}, 0x7, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000000)={0x2, {{0x2, 0x4e26, @rand_addr=0x64010101}}, {{0x2, 0x2, @local}}}, 0x108) r10 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb6668", 0x6, 0xfffffffffffffffe) r11 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r11, r10, r11}, 0x0, 0x0, 0x0) 800.192271ms ago: executing program 1 (id=1968): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010203296fb608229084d488ff0102030109021200010495008109041e800056a7f602"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f00000002c0)=[{0x1a00, 0x9a01, 0x0, 0x0}], 0x1}) 791.427026ms ago: executing program 0 (id=1969): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) unshare(0x42000000) 575.295532ms ago: executing program 0 (id=1970): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x10000000008, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x0, 0x4000) recvmmsg(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/44, 0x2c}, {&(0x7f0000001000)=""/86, 0x56}, {&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000500)=""/81, 0x51}, {&(0x7f00000011c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/39, 0x27}], 0x6}, 0x8}, {{&(0x7f0000000740)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000007c0)=""/234, 0xea}, {&(0x7f00000008c0)=""/44, 0x2c}, {&(0x7f0000002140)=""/167, 0xa7}, {&(0x7f00000009c0)=""/107, 0x6b}, {&(0x7f0000000a40)=""/84, 0x54}, {&(0x7f0000000d80)=""/76, 0x4c}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/186, 0xba}, {&(0x7f0000000380)=""/38, 0x26}, {&(0x7f0000000680)=""/61, 0x3d}], 0xa, &(0x7f0000000580)=""/83, 0x53}, 0x400049}, {{&(0x7f0000000e00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000b40), 0x28, &(0x7f0000000ec0)=""/111, 0x6f}, 0xfffffffa}], 0x3, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$uinput_user_dev(r3, 0x0, 0x0) syz_io_uring_setup(0x57d6, &(0x7f0000000000)={0x0, 0xc847, 0x1, 0x1, 0x44, 0x0, r3}, &(0x7f00000000c0), &(0x7f0000000100)) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x3, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000001100), &(0x7f0000001080)=0x8) read$msr(r4, &(0x7f000001b700)=""/102392, 0x18ff8) socket$kcm(0x10, 0x2, 0x0) 446.50246ms ago: executing program 6 (id=1971): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) stat(&(0x7f0000000040)='.\x00', &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 30.373658ms ago: executing program 6 (id=1972): syz_io_uring_setup(0x44cd, 0x0, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x181341, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5414, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000080000000200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000080)={0x0, 0xf000, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, r5, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x34}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0x30}}, 0x40) 0s ago: executing program 5 (id=1973): prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) mmap(&(0x7f00003d0000/0x1000)=nil, 0x1000, 0x0, 0xb5972, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000300)={0x7fff, 0x6}, &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x11, 0x10, 0x0, &(0x7f0000002f00)) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000001"], 0x0, 0x2a}, 0x28) kernel console output (not intermixed with test programs): face 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 477.742942][ T43] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 477.752528][ T5847] usb 7-1: USB disconnect, device number 28 [ 477.774323][ T5979] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 477.792589][ T43] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 477.794235][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1372'. [ 477.803851][ T5979] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 477.827147][ T43] usb 2-1: USB disconnect, device number 17 [ 477.844101][ T5979] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 477.857154][ T43] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 477.870693][ T5979] usb 6-1: Manufacturer: syz [ 477.877427][ T5979] usb 6-1: config 0 descriptor?? [ 477.897986][ T43] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 477.913880][ T43] visor 2-1:1.0: device disconnected [ 478.028294][T12104] sctp: [Deprecated]: syz.0.1372 (pid 12104) Use of int in max_burst socket option. [ 478.028294][T12104] Use struct sctp_assoc_value instead [ 478.045884][T12104] overlayfs: failed to clone upperpath [ 478.181548][ T5979] rc_core: IR keymap rc-hauppauge not found [ 478.187609][ T5979] Registered IR keymap rc-empty [ 478.199737][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.240435][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.261810][ T5979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 478.290316][ T5979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input70 [ 478.309545][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.343999][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.425859][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.563121][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.600304][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.638444][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.656174][T12124] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1378'. [ 478.680521][T12119] wlan0 speed is unknown, defaulting to 1000 [ 478.696781][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.707808][T12096] SELinux: ebitmap start bit (402653440) is beyond the end of the bitmap (1472) [ 478.740270][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.781824][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.817902][T12096] SELinux: failed to load policy [ 478.946105][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 478.995537][ T5979] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 479.022836][ T5979] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 479.059668][ T5979] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 479.195933][ T5979] usb 6-1: USB disconnect, device number 69 [ 479.900262][ T5847] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 480.113208][T12150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1386'. [ 480.409633][ T5847] usb 7-1: Using ep0 maxpacket: 8 [ 480.547465][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1386'. [ 480.556811][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 480.712442][ T5979] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 480.933491][ T5847] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.944526][ T5847] usb 7-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 480.953807][ T5847] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.962679][ T6031] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 480.964154][ T5847] usb 7-1: config 0 descriptor?? [ 481.083894][ T5979] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 481.092478][ T5979] usb 4-1: config 0 has no interface number 0 [ 481.107016][ T5979] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 481.117214][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.127491][ T5979] usb 4-1: Product: syz [ 481.132646][ T5979] usb 4-1: Manufacturer: syz [ 481.137443][ T5979] usb 4-1: SerialNumber: syz [ 481.148567][ T5979] usb 4-1: config 0 descriptor?? [ 481.240229][ T6031] usb 6-1: Using ep0 maxpacket: 8 [ 481.248462][ T6031] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 481.261225][ T6031] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 481.270564][ T6031] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 481.606590][ T6031] usb 6-1: Product: syz [ 481.611050][ T6031] usb 6-1: Manufacturer: syz [ 481.615680][ T6031] usb 6-1: SerialNumber: syz [ 481.621176][ T5979] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 481.622730][T12135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.637054][ T5979] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 481.644074][T12135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.657267][ T5979] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 481.666526][ T5979] usb 4-1: media controller created [ 481.690822][ T5847] usbhid 7-1:0.0: can't add hid device: -71 [ 481.703323][ T5847] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 481.730964][ T5847] usb 7-1: USB disconnect, device number 29 [ 481.753626][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 481.845001][ T6031] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 481.857233][ T6031] usb 6-1: Handspring Visor / Palm OS: port 216, is for unknown use [ 481.866332][ T6031] usb 6-1: Handspring Visor / Palm OS: port 253, is for unknown use [ 481.876724][ T6031] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 482.100565][ T6031] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 482.116439][ T6031] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 482.140145][ T6031] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 482.395241][ T6031] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 482.460382][ T6031] usb 6-1: USB disconnect, device number 70 [ 482.485273][ T6031] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 482.506683][ T6031] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 482.518407][ T6031] visor 6-1:1.0: device disconnected [ 482.926300][ T5979] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 483.605623][ T5979] usb 4-1: USB disconnect, device number 51 [ 484.557857][T12193] input: syz0 as /devices/virtual/input/input71 [ 484.718080][T12198] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1399'. [ 485.360821][T12198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1399'. [ 485.501138][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1399'. [ 486.293329][T12222] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1403'. [ 486.303405][ T30] audit: type=1400 audit(1756633402.270:654): avc: denied { read } for pid=12213 comm="syz.0.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 486.751658][ T5916] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 486.759280][ T6031] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 486.940593][ T6031] usb 2-1: Using ep0 maxpacket: 8 [ 486.947198][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.969250][ T6031] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 487.007143][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.500699][ T5916] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 487.509856][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.526857][ T6031] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 487.540743][ T6031] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 487.552289][ T6031] usb 2-1: Product: syz [ 487.553044][ T5916] usb 4-1: config 0 descriptor?? [ 487.562162][ T6031] usb 2-1: Manufacturer: syz [ 487.566766][ T6031] usb 2-1: SerialNumber: syz [ 488.073413][ T5916] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 488.109631][ T6031] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 488.308645][ T6031] usb 2-1: Handspring Visor / Palm OS: port 216, is for unknown use [ 488.317161][ T5916] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 488.328452][ T6031] usb 2-1: Handspring Visor / Palm OS: port 253, is for unknown use [ 488.336560][ T6031] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 488.344247][ T6031] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 488.352673][ T6031] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 488.364175][ T6031] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 488.380989][ T6031] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 488.391887][ T6031] usb 2-1: USB disconnect, device number 18 [ 488.397910][ T5916] cp2112 0003:10C4:EA90.0021: Part Number: 0x82 Device Version: 0xFE [ 488.408633][ T6031] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 488.419538][ T6031] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 488.429400][ T6031] visor 2-1:1.0: device disconnected [ 488.882484][ T5916] cp2112 0003:10C4:EA90.0021: error requesting SMBus config [ 488.945462][ T5916] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -32 [ 489.322080][ T6031] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 489.385331][T12259] 9pnet_fd: Insufficient options for proto=fd [ 489.517382][T12261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1417'. [ 489.535409][ T6031] usb 6-1: device descriptor read/64, error -71 [ 490.216767][T12263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 490.225970][T12263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1417'. [ 490.585472][T12269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1420'. [ 490.848909][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 490.857940][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1420'. [ 491.136585][ T6031] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 491.642702][ T5937] usb 4-1: USB disconnect, device number 52 [ 491.710270][ T6031] usb 6-1: device descriptor read/64, error -71 [ 492.280773][ T6031] usb usb6-port1: attempt power cycle [ 492.328171][T12260] delete_channel: no stack [ 493.153271][T12298] input: syz0 as /devices/virtual/input/input72 [ 493.262764][ T5937] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 493.473287][ T5937] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 493.563011][ T5937] usb 4-1: config 0 has no interface number 0 [ 493.570005][ T5937] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 493.588425][ T5937] usb 4-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 493.649469][ T5937] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 493.726188][ T5937] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 493.784906][ T5937] usb 4-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 493.855002][ T5937] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 493.922817][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.977046][ T5937] usb 4-1: Product: syz [ 493.984006][ T5937] usb 4-1: Manufacturer: syz [ 493.992086][ T5937] usb 4-1: SerialNumber: syz [ 494.001933][ T5937] usb 4-1: config 0 descriptor?? [ 494.007634][T12279] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 494.016700][ T5937] ums-alauda 4-1:0.189: USB Mass Storage device detected [ 494.143507][ T30] audit: type=1400 audit(1756633410.110:655): avc: denied { unmount } for pid=6347 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 494.604979][ T5937] scsi host1: usb-storage 4-1:0.189 [ 494.735394][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.758049][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.760406][ T5979] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 494.782718][ T5916] usb 4-1: USB disconnect, device number 53 [ 495.001928][ T5979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.028516][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 495.044774][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 495.054694][ T5979] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 495.103511][ T5979] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 495.130325][ T5937] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 495.188632][ T5979] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 495.201207][ T5979] usb 2-1: Manufacturer: syz [ 495.237640][ T5979] usb 2-1: config 0 descriptor?? [ 495.330725][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 495.622394][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.639579][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.667101][ T5937] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 495.691211][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.704639][ T5937] usb 6-1: config 0 descriptor?? [ 495.711498][ T5979] rc_core: IR keymap rc-hauppauge not found [ 495.722986][ T5979] Registered IR keymap rc-empty [ 495.728058][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 495.773750][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 495.806344][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 495.822598][ T30] audit: type=1400 audit(1756633411.780:656): avc: denied { execheap } for pid=12333 comm="syz.3.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 495.971287][ T5979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 495.985912][ T5979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input73 [ 496.008369][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 496.114161][T12310] wlan0 speed is unknown, defaulting to 1000 [ 496.165291][T12346] SELinux: ebitmap start bit (402653440) is beyond the end of the bitmap (1472) [ 496.268678][T12346] SELinux: failed to load policy [ 496.281255][ T5937] koneplus 0003:1E7D:2D51.0022: unknown main item tag 0x0 [ 496.288426][ T5937] koneplus 0003:1E7D:2D51.0022: unknown main item tag 0x0 [ 496.296859][ T5937] koneplus 0003:1E7D:2D51.0022: unknown main item tag 0x0 [ 496.304273][ T5937] koneplus 0003:1E7D:2D51.0022: unknown main item tag 0x0 [ 496.312427][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 496.320258][ T5937] koneplus 0003:1E7D:2D51.0022: unknown main item tag 0x0 [ 496.340891][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 496.371136][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 496.393350][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 496.407844][ T5937] koneplus 0003:1E7D:2D51.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 496.451148][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 496.494291][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 496.572415][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 496.611721][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 496.700734][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 496.745591][ T5937] usb 6-1: USB disconnect, device number 74 [ 496.801017][ T5979] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 496.861012][ T5979] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 496.925892][ T5979] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 496.998483][T12351] fido_id[12351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 497.178456][ T5937] usb 2-1: USB disconnect, device number 19 [ 497.300312][ T5979] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 497.317876][T12365] binder: 12364:12365 ioctl c0306201 0 returned -14 [ 497.450551][ T5979] usb 4-1: Using ep0 maxpacket: 8 [ 497.461637][ T5979] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 497.472154][ T5979] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 497.487077][ T5979] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 497.496190][ T9] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 497.504459][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.513506][ T5979] usb 4-1: Product: 㠿 [ 497.607470][ T5979] usb 4-1: Manufacturer: Щ [ 497.612409][ T5979] usb 4-1: SerialNumber: ᰁ [ 497.636131][ T6031] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 497.636855][T12356] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 497.651346][T12356] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 497.664060][ T9] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 497.675119][ T9] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.684864][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 497.691685][ T9] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 497.700898][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.839254][ T6031] usb 6-1: config 0 has an invalid interface number: 189 but max is 0 [ 497.879543][ T9] usb 7-1: config 0 descriptor?? [ 498.027579][ T6031] usb 6-1: config 0 has no interface number 0 [ 498.141404][ T6031] usb 6-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 498.172698][ T6031] usb 6-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 498.197628][ T6031] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 498.210877][ T6031] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 498.222780][ T6031] usb 6-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 498.239527][ T6031] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 498.265268][ T6031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.278482][ T6031] usb 6-1: Product: syz [ 498.282950][ T6031] usb 6-1: Manufacturer: syz [ 498.287953][ T6031] usb 6-1: SerialNumber: syz [ 498.296595][ T6031] usb 6-1: config 0 descriptor?? [ 498.304149][T12367] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 498.316358][ T6031] ums-alauda 6-1:0.189: USB Mass Storage device detected [ 498.396947][ T6031] scsi host1: usb-storage 6-1:0.189 [ 498.446565][ T5979] usb 4-1: USB disconnect, device number 54 [ 498.587812][T12367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.055890][T12367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.089541][ T9] hid-steam 0003:28DE:1102.0023: unknown main item tag 0x0 [ 499.089831][ T5979] usb 6-1: USB disconnect, device number 75 [ 499.102326][ T9] hid-steam 0003:28DE:1102.0023: unknown main item tag 0x0 [ 499.112211][ T9] hid-steam 0003:28DE:1102.0023: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 499.184851][ T9] hid-steam 0003:28DE:1102.0023: Steam Controller 'XXXXXXXXXX' connected [ 499.201190][ T9] input: Steam Controller as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:28DE:1102.0023/input/input74 [ 499.312628][ T9] hid-steam 0003:28DE:1102.0024: unknown main item tag 0x0 [ 499.319876][ T9] hid-steam 0003:28DE:1102.0024: unknown main item tag 0x0 [ 499.359684][ T9] hid-steam 0003:28DE:1102.0024: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.6-1/input0 [ 499.730977][ T9] usb 7-1: USB disconnect, device number 30 [ 499.871640][ T9] hid-steam 0003:28DE:1102.0023: Steam Controller 'XXXXXXXXXX' disconnected [ 499.904380][T12387] fido_id[12387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 500.428577][ T6031] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 500.689138][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 500.818254][ T6031] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 500.894976][ T6031] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 500.908874][ T6031] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 500.918602][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.931046][T12391] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 500.946346][ T6031] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.015852][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.022367][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.030260][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 501.157588][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.161932][ T5853] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 501.177110][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.191033][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 501.200074][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.263085][ T9] usb 2-1: config 0 descriptor?? [ 502.453464][ T9] koneplus 0003:1E7D:2D51.0025: unknown main item tag 0x0 [ 502.472047][ T9] koneplus 0003:1E7D:2D51.0025: unknown main item tag 0x0 [ 502.502867][ T9] koneplus 0003:1E7D:2D51.0025: unknown main item tag 0x0 [ 502.534352][ T9] koneplus 0003:1E7D:2D51.0025: unknown main item tag 0x0 [ 502.569072][ T9] koneplus 0003:1E7D:2D51.0025: unknown main item tag 0x0 [ 502.632133][ T9] koneplus 0003:1E7D:2D51.0025: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 502.925836][ T43] usb 2-1: USB disconnect, device number 20 [ 503.093183][ T30] audit: type=1400 audit(1756633419.060:657): avc: denied { accept } for pid=12433 comm="syz.6.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 503.547788][ T5916] usb 6-1: USB disconnect, device number 76 [ 504.917103][ T30] audit: type=1400 audit(1756633420.850:658): avc: denied { write } for pid=12456 comm="syz.5.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 504.964942][T12447] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 505.070731][ T30] audit: type=1400 audit(1756633420.850:659): avc: denied { listen } for pid=12456 comm="syz.5.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 505.145363][ T30] audit: type=1400 audit(1756633420.860:660): avc: denied { accept } for pid=12456 comm="syz.5.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 506.257926][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 506.267570][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1478'. [ 506.276636][T12473] netlink: 'syz.1.1478': attribute type 11 has an invalid length. [ 506.284533][T12473] netlink: 'syz.1.1478': attribute type 13 has an invalid length. [ 506.410052][T12473] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.418278][T12473] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.428386][T12473] bridge0: entered allmulticast mode [ 507.241857][T12472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1478'. [ 507.613475][T12484] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1481'. [ 508.805864][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1486'. [ 509.020222][ T6031] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 509.820307][ T6031] usb 2-1: Using ep0 maxpacket: 32 [ 509.865403][ T6031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.940354][ T6031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.431130][ T6031] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 510.448652][ T6031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.667688][ T6031] usb 2-1: config 0 descriptor?? [ 511.190387][ T6031] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 511.210377][ T6031] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 511.220276][ T6031] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 511.235040][ T6031] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 511.757399][ T6031] koneplus 0003:1E7D:2D51.0026: unknown main item tag 0x0 [ 511.768128][ T6031] koneplus 0003:1E7D:2D51.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 512.268605][ T6031] usb 2-1: USB disconnect, device number 21 [ 512.960583][ T5916] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 513.592924][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 513.605197][ T5916] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.679981][T12555] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1503'. [ 513.740429][ T5916] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.901013][ T5916] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 514.025727][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.064334][ T5916] usb 7-1: Product: syz [ 514.070302][ T5916] usb 7-1: Manufacturer: syz [ 514.100353][ T5916] usb 7-1: SerialNumber: syz [ 514.153377][ T5916] usb 7-1: config 0 descriptor?? [ 514.220847][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1503'. [ 514.229941][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1503'. [ 516.525251][ T30] audit: type=1400 audit(1756633432.220:661): avc: denied { write } for pid=12573 comm="syz.5.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 516.901442][ T976] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 516.972377][ T5937] usb 7-1: USB disconnect, device number 31 [ 517.154564][ T976] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 517.678883][ T976] usb 2-1: config 0 has no interface number 0 [ 517.770329][ T976] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 517.843238][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.872380][ T976] usb 2-1: Product: syz [ 517.891410][ T976] usb 2-1: Manufacturer: syz [ 517.924032][ T976] usb 2-1: SerialNumber: syz [ 517.940255][ T5916] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 517.961747][ T976] usb 2-1: config 0 descriptor?? [ 518.124850][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 518.180052][ T5916] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.190381][ T976] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 518.229328][ T976] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 518.240944][ T5916] usb 7-1: config 0 has no interfaces? [ 518.265737][ T5916] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 518.285128][ T976] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 518.288982][ T30] audit: type=1400 audit(1756633434.250:662): avc: denied { write } for pid=12599 comm="syz.3.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 518.322101][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.338622][ T5916] usb 7-1: config 0 descriptor?? [ 518.346969][ T976] usb 2-1: media controller created [ 518.377181][ T976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.475891][ T9] usb 7-1: USB disconnect, device number 32 [ 519.552966][ T976] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 519.823989][ T30] audit: type=1400 audit(1756633435.680:663): avc: denied { validate_trans } for pid=12607 comm="syz.3.1520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 519.988572][ T976] usb 2-1: USB disconnect, device number 22 [ 520.662566][ T30] audit: type=1400 audit(1756633436.620:664): avc: denied { mount } for pid=12621 comm="syz.3.1523" name="/" dev="configfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 520.817387][T12629] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1524'. [ 521.043292][ T30] audit: type=1400 audit(1756633436.630:665): avc: denied { search } for pid=12621 comm="syz.3.1523" name="/" dev="configfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 521.076610][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.105700][ T30] audit: type=1400 audit(1756633436.630:666): avc: denied { setattr } for pid=12621 comm="syz.3.1523" name="/" dev="configfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 521.229194][T12633] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1525'. [ 521.671534][T12639] syz.5.1527 (12639) used obsolete PPPIOCDETACH ioctl [ 522.114468][T12637] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1527'. [ 522.123602][T12637] netlink: 'syz.5.1527': attribute type 7 has an invalid length. [ 522.291377][T12637] netlink: 'syz.5.1527': attribute type 8 has an invalid length. [ 522.299189][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1527'. [ 522.322125][T12637] erspan0: entered promiscuous mode [ 522.329035][T12637] gretap0: entered promiscuous mode [ 522.462428][ T30] audit: type=1400 audit(1756633438.420:667): avc: denied { read } for pid=12636 comm="syz.5.1527" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 522.496652][ T30] audit: type=1800 audit(1756633438.450:668): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1527" name="/" dev="9p" ino=2 res=0 errno=0 [ 522.590223][ T30] audit: type=1326 audit(1756633438.530:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306c18ebe9 code=0x7ffc0000 [ 522.676711][ T30] audit: type=1326 audit(1756633438.530:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306c18ebe9 code=0x7ffc0000 [ 522.747120][ T30] audit: type=1326 audit(1756633438.530:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f306c18ebe9 code=0x7ffc0000 [ 522.948497][ T30] audit: type=1326 audit(1756633438.530:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306c18ebe9 code=0x7ffc0000 [ 522.971910][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.298060][ T30] audit: type=1326 audit(1756633438.530:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306c18ebe9 code=0x7ffc0000 [ 523.389741][ T30] audit: type=1326 audit(1756633438.530:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f306c18ebe9 code=0x7ffc0000 [ 523.778874][ T30] audit: type=1326 audit(1756633438.530:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306c18ebe9 code=0x7ffc0000 [ 523.810231][ T5937] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 524.045777][ T5937] usb 6-1: config 0 has an invalid interface number: 189 but max is 0 [ 524.054733][ T5937] usb 6-1: config 0 has no interface number 0 [ 524.061936][ T5937] usb 6-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 524.123244][ T5937] usb 6-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 524.161188][ T43] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 524.188886][ T5937] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 524.200979][ T30] audit: type=1326 audit(1756633438.530:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12644 comm="syz.6.1530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f306c18ebe9 code=0x7ffc0000 [ 524.216714][ T5937] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 524.286156][ T5937] usb 6-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 524.420271][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 524.437273][T12678] netlink: 'syz.6.1538': attribute type 12 has an invalid length. [ 524.492060][ T5937] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 524.501333][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.523230][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 524.545822][ T5937] usb 6-1: Product: syz [ 524.551980][ T5937] usb 6-1: Manufacturer: syz [ 524.575859][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.586078][ T5937] usb 6-1: SerialNumber: syz [ 524.594295][ T43] usb 2-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 524.606086][ T5937] usb 6-1: config 0 descriptor?? [ 524.620395][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.620572][T12680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=12680 comm=syz.3.1539 [ 524.628847][T12666] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 524.659528][ T5937] ums-alauda 6-1:0.189: USB Mass Storage device detected [ 524.669151][ T43] usb 2-1: config 0 descriptor?? [ 524.702322][ T5937] scsi host1: usb-storage 6-1:0.189 [ 524.720219][ T976] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 524.954861][ T976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 525.143123][T12666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.232886][T12689] input: syz0 as /devices/virtual/input/input75 [ 525.381652][ T5916] usb 2-1: USB disconnect, device number 23 [ 525.596873][T12666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.625588][ T976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 525.647777][ T976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 525.696136][ T6031] usb 6-1: USB disconnect, device number 77 [ 525.716686][ T976] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 525.731974][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.747634][ T976] usb 7-1: Product: syz [ 525.754865][ T976] usb 7-1: Manufacturer: syz [ 525.762098][ T976] usb 7-1: SerialNumber: syz [ 525.776526][ T976] usb 7-1: config 0 descriptor?? [ 525.996894][ T976] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 527.222573][T12710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1548'. [ 527.447372][ T6031] usb 7-1: USB disconnect, device number 33 [ 527.890541][ T5979] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 528.172394][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 528.181654][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1548'. [ 528.194796][ T5979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 528.218777][ T5979] usb 2-1: not running at top speed; connect to a high speed hub [ 528.232023][ T5979] usb 2-1: config 129 has an invalid interface number: 145 but max is 0 [ 528.242433][ T5979] usb 2-1: config 129 has no interface number 0 [ 528.248738][ T5979] usb 2-1: config 129 interface 145 has no altsetting 0 [ 528.258023][ T5979] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= d.2f [ 528.270891][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.302749][ T5979] usb 2-1: Product: syz [ 528.307388][ T5979] usb 2-1: Manufacturer: syz [ 528.326927][ T5979] usb 2-1: SerialNumber: syz [ 528.357919][T12721] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1552'. [ 528.603372][ T5979] usb 2-1: USB disconnect, device number 24 [ 529.690250][ T5937] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 529.854014][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.870327][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.881545][ T5937] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 529.933368][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.170273][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 530.170289][ T30] audit: type=1400 audit(1756633446.080:711): avc: denied { audit_write } for pid=12741 comm="syz.1.1558" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 530.328078][T12751] wlan0 speed is unknown, defaulting to 1000 [ 530.376213][ T5937] usb 4-1: config 0 descriptor?? [ 530.907740][ T5937] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 531.030655][ T5937] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 531.543298][ T5937] cp2112 0003:10C4:EA90.0028: Part Number: 0x82 Device Version: 0xFE [ 532.127765][T12778] input: syz0 as /devices/virtual/input/input76 [ 532.538471][ T5937] usb 4-1: USB disconnect, device number 55 [ 533.654722][T12791] wlan0 speed is unknown, defaulting to 1000 [ 533.961849][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1570'. [ 534.691173][T12800] netlink: 'syz.6.1571': attribute type 4 has an invalid length. [ 535.337431][ T30] audit: type=1400 audit(1756633451.290:712): avc: denied { ioctl } for pid=12807 comm="syz.6.1575" path="socket:[40930]" dev="sockfs" ino=40930 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 535.450079][T12813] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1574'. [ 535.910276][ T6031] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 537.073412][ T6031] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.752812][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 537.752846][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 537.752867][ T6031] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 537.753771][ T6031] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 537.795652][ T6031] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 537.803865][ T6031] usb 4-1: Manufacturer: syz [ 537.941935][ T6031] usb 4-1: config 0 descriptor?? [ 537.950198][T12816] mkiss: ax0: crc mode is auto. [ 538.026121][ T30] audit: type=1400 audit(1756633453.990:713): avc: denied { ioctl } for pid=12825 comm="syz.1.1578" path="socket:[40946]" dev="sockfs" ino=40946 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 538.533531][T12814] wlan0 speed is unknown, defaulting to 1000 [ 538.596985][T12835] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 538.680327][T12835] SELinux: failed to load policy [ 538.770264][ T6031] rc_core: IR keymap rc-hauppauge not found [ 538.777173][ T6031] Registered IR keymap rc-empty [ 538.782210][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 538.820791][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 538.851844][ T6031] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 539.053222][ T6031] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input78 [ 539.087002][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1580'. [ 539.179901][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.180210][T12844] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1581'. [ 539.207840][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.235636][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 539.244752][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1580'. [ 539.267806][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.290290][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.320283][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.362463][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 539.408035][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 540.579286][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 540.690304][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 540.760323][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 540.919310][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 540.985491][ T6031] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 541.458306][ T6031] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 541.578882][ T6031] usb 4-1: USB disconnect, device number 56 [ 545.363785][T12913] : entered promiscuous mode [ 545.550230][ T6031] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 545.640390][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 545.812716][ T6031] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 545.833058][ T6031] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 545.860242][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 545.867071][ T6031] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 545.889698][ T6031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.900390][ T6031] usb 7-1: Product: syz [ 545.905004][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 545.914340][ T6031] usb 7-1: Manufacturer: syz [ 545.922866][ T6031] usb 7-1: SerialNumber: syz [ 545.928140][ T9] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 545.963371][ T9] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 545.981151][ T9] usb 4-1: Product: syz [ 545.986707][ T9] usb 4-1: Manufacturer: syz [ 545.991382][ T9] usb 4-1: SerialNumber: syz [ 546.198132][T12911] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1598'. [ 546.227760][ T9] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 546.237335][T12911] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1598'. [ 546.247882][ T9] usb 4-1: Handspring Visor / Palm OS: port 216, is for unknown use [ 546.259164][ T9] usb 4-1: Handspring Visor / Palm OS: port 253, is for unknown use [ 546.373555][T12921] wlan0 speed is unknown, defaulting to 1000 [ 546.546637][ T9] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 546.555019][ T9] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 546.566337][ T9] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 546.585288][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 546.596440][ T9] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 546.711982][ T9] usb 4-1: USB disconnect, device number 57 [ 546.759203][ T6031] usb 7-1: 0:2 : does not exist [ 546.869461][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 547.267140][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 547.291348][ T6031] usb 7-1: USB disconnect, device number 34 [ 547.305305][ T9] visor 4-1:1.0: device disconnected [ 547.369809][T10560] udevd[10560]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.003050][ T43] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 549.193656][ T43] usb 6-1: config 0 has an invalid interface number: 189 but max is 0 [ 549.222609][ T43] usb 6-1: config 0 has no interface number 0 [ 549.233686][ T43] usb 6-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 549.582933][ T43] usb 6-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 549.617629][ T43] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 549.632418][ T43] usb 6-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 549.652772][ T43] usb 6-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 549.695118][ T43] usb 6-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 549.727325][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.747535][ T43] usb 6-1: Product: syz [ 549.755439][ T43] usb 6-1: Manufacturer: syz [ 549.780223][ T43] usb 6-1: SerialNumber: syz [ 550.391400][ T43] usb 6-1: config 0 descriptor?? [ 550.396881][T12953] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 550.416101][ T43] ums-alauda 6-1:0.189: USB Mass Storage device detected [ 550.448472][ T43] scsi host1: usb-storage 6-1:0.189 [ 550.742675][T12973] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1616'. [ 550.775509][T12976] FAULT_INJECTION: forcing a failure. [ 550.775509][T12976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.850272][T12976] CPU: 0 UID: 0 PID: 12976 Comm: syz.1.1617 Not tainted syzkaller #0 PREEMPT(full) [ 550.850299][T12976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 550.850310][T12976] Call Trace: [ 550.850316][T12976] [ 550.850323][T12976] dump_stack_lvl+0x16c/0x1f0 [ 550.850347][T12976] should_fail_ex+0x512/0x640 [ 550.850371][T12976] _copy_from_user+0x2e/0xd0 [ 550.850395][T12976] copy_msghdr_from_user+0x98/0x160 [ 550.850416][T12976] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 550.850448][T12976] ___sys_sendmsg+0xfe/0x1d0 [ 550.850469][T12976] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.850521][T12976] __sys_sendmsg+0x16d/0x220 [ 550.850541][T12976] ? __pfx___sys_sendmsg+0x10/0x10 [ 550.850583][T12976] do_syscall_64+0xcd/0x4c0 [ 550.850605][T12976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.850623][T12976] RIP: 0033:0x7f74f0b8ebe9 [ 550.850637][T12976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.850654][T12976] RSP: 002b:00007f74eedf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.850672][T12976] RAX: ffffffffffffffda RBX: 00007f74f0dc5fa0 RCX: 00007f74f0b8ebe9 [ 550.850684][T12976] RDX: 0000000000000840 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 550.850698][T12976] RBP: 00007f74eedf6090 R08: 0000000000000000 R09: 0000000000000000 [ 550.850708][T12976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.850719][T12976] R13: 00007f74f0dc6038 R14: 00007f74f0dc5fa0 R15: 00007ffe8a063488 [ 550.850743][T12976] [ 551.035351][T12953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.043908][T12953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.687526][ T2981] scsi 1:0:0:0: Direct-Access Olympus MAUSB-10 (Alauda 0102 PQ: 0 ANSI: 0 CCS [ 551.722924][ T976] usb 6-1: USB disconnect, device number 78 [ 552.194485][T12998] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1619'. [ 553.270413][ T6031] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 553.519721][ T6031] usb 7-1: Using ep0 maxpacket: 32 [ 553.608796][ T6031] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.620664][ T6031] usb 7-1: config 0 has no interfaces? [ 553.626263][ T6031] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 553.674955][ T6031] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.775672][ T6031] usb 7-1: config 0 descriptor?? [ 554.722728][ T24] usb 7-1: USB disconnect, device number 35 [ 554.953157][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 555.169546][T13029] wlan0 speed is unknown, defaulting to 1000 [ 555.359206][T13034] binder: 13028:13034 ioctl c0306201 0 returned -14 [ 555.545999][T13037] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1630'. [ 555.780236][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 555.970225][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 555.982507][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 555.993306][T13046] vivid-000: ================= START STATUS ================= [ 556.001611][T13046] vivid-000: Radio HW Seek Mode: Bounded [ 556.001915][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.009297][T13046] vivid-000: Radio Programmable HW Seek: false [ 556.024837][T13046] vivid-000: RDS Rx I/O Mode: Block I/O [ 556.031527][T13046] vivid-000: Generate RBDS Instead of RDS: false [ 556.040173][ T24] usb 4-1: Product: syz [ 556.042200][T13046] vivid-000: RDS Reception: true [ 556.051700][T13046] vivid-000: RDS Program Type: 0 inactive [ 556.058075][T13046] vivid-000: RDS PS Name: [ 556.060218][ T5937] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 556.074710][T13046] inactive [ 556.077915][T13046] vivid-000: RDS Radio Text: [ 556.078052][ T24] usb 4-1: Manufacturer: syz [ 556.078064][T13046] [ 556.078113][ T24] usb 4-1: SerialNumber: syz [ 556.099333][T13046] inactive [ 556.108257][T13046] vivid-000: RDS Traffic Announcement: false inactive [ 556.222298][T13046] vivid-000: RDS Traffic Program: false inactive [ 556.244984][ T24] usb 4-1: config 0 descriptor?? [ 556.266440][T13046] vivid-000: RDS Music: false inactive [ 556.285051][T13046] vivid-000: ================== END STATUS ================== [ 556.350407][ T24] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 556.359440][ T5937] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.377197][ T5937] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 556.399620][ T5937] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 556.444020][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.483651][ T24] pwc: Warning: more than 1 configuration available. [ 556.500472][ T24] pwc: Failed to set LED on/off time (-71) [ 556.506633][ T24] pwc: send_video_command error -71 [ 556.520702][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 556.531238][T13042] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 556.543874][ T5937] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 556.558737][ T24] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 556.691215][ T24] usb 4-1: USB disconnect, device number 58 [ 556.748354][ T5853] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 557.224034][T13059] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 557.309927][T13060] input: syz0 as /devices/virtual/input/input79 [ 557.741745][ T24] usb 7-1: USB disconnect, device number 36 [ 557.798774][T13066] FAULT_INJECTION: forcing a failure. [ 557.798774][T13066] name failslab, interval 1, probability 0, space 0, times 0 [ 557.962373][T13067] netlink: 'syz.3.1639': attribute type 29 has an invalid length. [ 557.970690][T13067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 558.577899][T13066] CPU: 0 UID: 0 PID: 13066 Comm: syz.1.1638 Not tainted syzkaller #0 PREEMPT(full) [ 558.577926][T13066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.577936][T13066] Call Trace: [ 558.577942][T13066] [ 558.577949][T13066] dump_stack_lvl+0x16c/0x1f0 [ 558.577973][T13066] should_fail_ex+0x512/0x640 [ 558.577992][T13066] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 558.578011][T13066] should_failslab+0xc2/0x120 [ 558.578031][T13066] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 558.578050][T13066] ? __d_alloc+0x32/0xae0 [ 558.578072][T13066] __d_alloc+0x32/0xae0 [ 558.578095][T13066] d_alloc_parallel+0x111/0x1480 [ 558.578125][T13066] ? find_held_lock+0x2b/0x80 [ 558.578150][T13066] ? __pfx_d_alloc_parallel+0x10/0x10 [ 558.578177][T13066] ? __d_lookup+0x266/0x4a0 [ 558.578206][T13066] lookup_open.isra.0+0x665/0x1580 [ 558.578238][T13066] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 558.578281][T13066] ? lookup_fast+0x156/0x610 [ 558.578301][T13066] path_openat+0x893/0x2cb0 [ 558.578330][T13066] ? __pfx_path_openat+0x10/0x10 [ 558.578357][T13066] do_filp_open+0x20b/0x470 [ 558.578378][T13066] ? __pfx_do_filp_open+0x10/0x10 [ 558.578417][T13066] ? alloc_fd+0x471/0x7d0 [ 558.578452][T13066] do_sys_openat2+0x11b/0x1d0 [ 558.578476][T13066] ? __pfx_do_sys_openat2+0x10/0x10 [ 558.578503][T13066] ? __fget_files+0x20e/0x3c0 [ 558.578527][T13066] __x64_sys_openat+0x174/0x210 [ 558.578551][T13066] ? __pfx___x64_sys_openat+0x10/0x10 [ 558.578574][T13066] ? ksys_write+0x1ac/0x250 [ 558.578601][T13066] do_syscall_64+0xcd/0x4c0 [ 558.578623][T13066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.578641][T13066] RIP: 0033:0x7f74f0b8ebe9 [ 558.578655][T13066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.578671][T13066] RSP: 002b:00007f74eedd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 558.578687][T13066] RAX: ffffffffffffffda RBX: 00007f74f0dc6090 RCX: 00007f74f0b8ebe9 [ 558.578697][T13066] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 558.578708][T13066] RBP: 00007f74eedd5090 R08: 0000000000000000 R09: 0000000000000000 [ 558.578718][T13066] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 558.578728][T13066] R13: 00007f74f0dc6128 R14: 00007f74f0dc6090 R15: 00007ffe8a063488 [ 558.578752][T13066] [ 558.813255][ T30] audit: type=1400 audit(1756633473.950:714): avc: denied { mounton } for pid=13061 comm="syz.3.1639" path="/331/file0" dev="fuse" ino=72057594037927945 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 558.951426][T13069] binder: 13068:13069 ioctl c0306201 0 returned -14 [ 559.860314][ T6031] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 560.118449][ T6031] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.137164][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 560.148365][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 560.158084][ T6031] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 560.179472][ T6031] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 560.188571][ T6031] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 560.196686][ T6031] usb 4-1: Manufacturer: syz [ 560.216064][ T6031] usb 4-1: config 0 descriptor?? [ 560.620184][ T6031] rc_core: IR keymap rc-hauppauge not found [ 560.626102][ T6031] Registered IR keymap rc-empty [ 560.631241][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 560.683230][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 560.714700][T13085] wlan0 speed is unknown, defaulting to 1000 [ 560.731094][ T6031] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 560.819810][ T6031] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input80 [ 560.864534][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 560.917218][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 560.952140][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 560.990251][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 561.070285][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 561.200287][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 561.240588][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 561.270203][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 561.294107][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 561.322254][ T6031] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 561.351548][ T6031] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 561.363305][ T6031] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 561.404775][ T6031] usb 4-1: USB disconnect, device number 59 [ 562.204982][T13111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1652'. [ 562.374021][ T30] audit: type=1400 audit(1756633478.340:715): avc: denied { ioctl } for pid=13117 comm="syz.3.1653" path="socket:[42730]" dev="sockfs" ino=42730 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 562.511126][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.517459][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.622358][T13121] wlan0 speed is unknown, defaulting to 1000 [ 563.254700][T13133] binder: 13127:13133 ioctl c0306201 0 returned -14 [ 564.274758][T13149] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 564.283162][T13149] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 564.293061][T13149] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 564.306945][ T30] audit: type=1400 audit(1756633480.260:716): avc: denied { firmware_load } for pid=13148 comm="syz.0.1662" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 564.589541][T13157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1663'. [ 565.289620][T13166] input: syz0 as /devices/virtual/input/input81 [ 566.980905][T13165] wlan0 speed is unknown, defaulting to 1000 [ 567.090175][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 567.240383][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 567.284476][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.315790][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.325894][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 567.377208][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.947843][ T9] usb 4-1: config 0 descriptor?? [ 568.575812][ T9] koneplus 0003:1E7D:2D51.0029: unknown main item tag 0x0 [ 568.603213][ T9] koneplus 0003:1E7D:2D51.0029: unknown main item tag 0x0 [ 568.625508][ T9] koneplus 0003:1E7D:2D51.0029: unknown main item tag 0x0 [ 568.695532][ T9] koneplus 0003:1E7D:2D51.0029: unknown main item tag 0x0 [ 568.716459][ T9] koneplus 0003:1E7D:2D51.0029: unknown main item tag 0x0 [ 568.770886][ T9] koneplus 0003:1E7D:2D51.0029: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 569.018407][T13204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=13204 comm=syz.5.1675 [ 569.331764][ T43] usb 4-1: USB disconnect, device number 60 [ 569.362809][T13200] fido_id[13200]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 569.777377][ T976] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 569.935554][ T976] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 569.945215][ T976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.954673][ T976] usb 7-1: Product: syz [ 569.959180][ T976] usb 7-1: Manufacturer: syz [ 569.964520][ T976] usb 7-1: SerialNumber: syz [ 570.042443][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 570.212910][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 570.284533][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.327709][ T9] usb 2-1: config 0 has no interfaces? [ 570.333636][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 570.342755][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.362168][ T9] usb 2-1: config 0 descriptor?? [ 570.425299][T13228] : entered promiscuous mode [ 570.614986][T13234] wlan0 speed is unknown, defaulting to 1000 [ 571.101333][ T9] usb 2-1: USB disconnect, device number 25 [ 571.772152][ T30] audit: type=1400 audit(1756633487.740:717): avc: denied { override_creds } for pid=13246 comm="syz.3.1686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 572.307205][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 572.486007][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 572.495815][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 572.507982][ T10] usb 2-1: config 0 has no interfaces? [ 572.514396][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 572.526683][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.819777][ T10] usb 2-1: config 0 descriptor?? [ 573.031725][ T43] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 573.040962][ T24] usb 2-1: USB disconnect, device number 26 [ 573.062137][ T976] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 573.085272][ T976] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 573.134448][T13266] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1691'. [ 573.180234][ T43] usb 4-1: device descriptor read/64, error -71 [ 573.517918][ T976] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 573.540773][ T976] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 573.560306][ T976] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 573.595085][ T976] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 573.758095][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1691'. [ 573.767085][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1691'. [ 574.062816][ T43] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 574.091370][ T976] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 574.188607][ T976] usb 7-1: USB disconnect, device number 37 [ 574.240279][ T43] usb 4-1: device descriptor read/64, error -71 [ 574.359161][ T43] usb usb4-port1: attempt power cycle [ 574.750257][ T30] audit: type=1400 audit(1756633490.590:718): avc: denied { setopt } for pid=13280 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 574.780288][ T43] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 574.904023][ T43] usb 4-1: device descriptor read/8, error -71 [ 575.270441][ T43] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 575.339692][ T43] usb 4-1: device descriptor read/8, error -71 [ 575.480328][ T43] usb usb4-port1: unable to enumerate USB device [ 575.963749][T13257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.147272][T13302] FAULT_INJECTION: forcing a failure. [ 576.147272][T13302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.160714][T13303] kAFS: No cell specified [ 576.210210][T13302] CPU: 1 UID: 0 PID: 13302 Comm: syz.5.1702 Not tainted syzkaller #0 PREEMPT(full) [ 576.210237][T13302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.210248][T13302] Call Trace: [ 576.210253][T13302] [ 576.210260][T13302] dump_stack_lvl+0x16c/0x1f0 [ 576.210286][T13302] should_fail_ex+0x512/0x640 [ 576.210309][T13302] _copy_to_user+0x32/0xd0 [ 576.210334][T13302] cec_ioctl+0x663/0x2970 [ 576.210357][T13302] ? __pfx_cec_ioctl+0x10/0x10 [ 576.210386][T13302] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 576.210405][T13302] ? do_vfs_ioctl+0x128/0x14f0 [ 576.210430][T13302] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 576.210454][T13302] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 576.210488][T13302] ? hook_file_ioctl_common+0x145/0x410 [ 576.210519][T13302] ? selinux_file_ioctl+0x180/0x270 [ 576.210543][T13302] ? selinux_file_ioctl+0xb4/0x270 [ 576.210568][T13302] ? __pfx_cec_ioctl+0x10/0x10 [ 576.210587][T13302] __x64_sys_ioctl+0x18b/0x210 [ 576.210615][T13302] do_syscall_64+0xcd/0x4c0 [ 576.210636][T13302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.210654][T13302] RIP: 0033:0x7f539ad8ebe9 [ 576.210669][T13302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.210686][T13302] RSP: 002b:00007f539bcce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.210704][T13302] RAX: ffffffffffffffda RBX: 00007f539afc5fa0 RCX: 00007f539ad8ebe9 [ 576.210715][T13302] RDX: 0000200000000140 RSI: 00000000c05c6104 RDI: 0000000000000003 [ 576.210726][T13302] RBP: 00007f539bcce090 R08: 0000000000000000 R09: 0000000000000000 [ 576.210737][T13302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.210747][T13302] R13: 00007f539afc6038 R14: 00007f539afc5fa0 R15: 00007ffed71d5f08 [ 576.210771][T13302] [ 576.401071][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.554549][T13304] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1701'. [ 577.534850][T13328] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 577.600356][ T30] audit: type=1400 audit(1756633493.530:719): avc: denied { read } for pid=13327 comm="syz.3.1711" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 578.310185][ T5937] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 578.480427][ T5937] usb 7-1: device descriptor read/64, error -71 [ 578.730402][ T5937] usb 7-1: new full-speed USB device number 39 using dummy_hcd [ 578.771812][ T976] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 578.830226][ T6031] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 578.930433][T13346] usb usb8: usbfs: process 13346 (syz.1.1717) did not claim interface 0 before use [ 578.963201][ T976] usb 6-1: Using ep0 maxpacket: 8 [ 578.963311][ T5937] usb 7-1: device descriptor read/64, error -71 [ 578.976856][ T976] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 578.986704][ T976] usb 6-1: config 0 has no interface number 0 [ 578.996778][ T976] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 579.009188][ T976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.017802][ T976] usb 6-1: Product: syz [ 579.022145][ T6031] usb 4-1: Using ep0 maxpacket: 32 [ 579.028952][ T976] usb 6-1: Manufacturer: syz [ 579.034866][ T976] usb 6-1: SerialNumber: syz [ 579.040007][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.052097][ T6031] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.063744][ T976] usb 6-1: config 0 descriptor?? [ 579.073598][ T6031] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 579.080449][ T5937] usb usb7-port1: attempt power cycle [ 579.128023][ T6031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.144119][ T6031] usb 4-1: config 0 descriptor?? [ 579.416892][ T976] usb 6-1: Found UVC 0.04 device syz (046d:08c3) [ 579.423499][ T976] usb 6-1: No valid video chain found. [ 579.439149][ T976] usb 6-1: USB disconnect, device number 79 [ 579.461381][ T5937] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 579.481567][ T5937] usb 7-1: device descriptor read/8, error -71 [ 579.560664][ T6031] koneplus 0003:1E7D:2D51.002A: unknown main item tag 0x0 [ 579.569892][ T6031] koneplus 0003:1E7D:2D51.002A: unknown main item tag 0x0 [ 579.579385][ T6031] koneplus 0003:1E7D:2D51.002A: unknown main item tag 0x0 [ 579.593852][ T6031] koneplus 0003:1E7D:2D51.002A: unknown main item tag 0x0 [ 579.603291][ T6031] koneplus 0003:1E7D:2D51.002A: unknown main item tag 0x0 [ 579.630858][ T6031] koneplus 0003:1E7D:2D51.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 579.720425][ T5937] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 579.742587][ T5937] usb 7-1: device descriptor read/8, error -71 [ 579.850556][ T5937] usb usb7-port1: unable to enumerate USB device [ 579.980880][ T6031] usb 4-1: USB disconnect, device number 65 [ 580.884278][ T30] audit: type=1400 audit(1756633496.850:720): avc: denied { map } for pid=13365 comm="syz.6.1725" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 581.370745][ T30] audit: type=1400 audit(1756633496.850:721): avc: denied { execute } for pid=13365 comm="syz.6.1725" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 581.742150][T13384] kAFS: No cell specified [ 583.420393][ T6031] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 583.736525][ T6031] usb 2-1: Using ep0 maxpacket: 16 [ 583.746797][ T6031] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 583.762404][ T6031] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.785708][ T6031] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 583.804169][ T6031] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 583.819910][ T6031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.834505][ T6031] usb 2-1: Product: syz [ 583.864682][ T6031] usb 2-1: Manufacturer: syz [ 583.873798][ T6031] usb 2-1: SerialNumber: syz [ 584.111987][T13411] binder: 13410:13411 ioctl c0306201 0 returned -14 [ 584.909933][ T6031] usb 2-1: 0:2 : does not exist [ 585.440576][ T5937] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 585.613138][ T5937] usb 7-1: Using ep0 maxpacket: 8 [ 585.628092][T13391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.639539][ T5937] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 585.665280][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.692898][T13391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.736041][ T5937] usb 7-1: Product: syz [ 585.739040][ T6031] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 585.761014][ T5937] usb 7-1: Manufacturer: syz [ 585.786156][ T5937] usb 7-1: SerialNumber: syz [ 585.795148][T13425] wlan0 speed is unknown, defaulting to 1000 [ 585.820272][ T6031] usb 2-1: USB disconnect, device number 27 [ 585.855106][ T5937] usb 7-1: config 0 descriptor?? [ 585.876576][ T5937] radio-usb-si4713 7-1:0.0: Si4713 development board discovered: (10C4:8244) [ 586.144044][T13428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1743'. [ 586.201574][T10560] udevd[10560]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.716547][T13436] binder: 13434:13436 ioctl c0306201 0 returned -14 [ 586.907785][T13420] sctp: [Deprecated]: syz.6.1741 (pid 13420) Use of int in maxseg socket option. [ 586.907785][T13420] Use struct sctp_assoc_value instead [ 587.488531][T13440] netlink: 'syz.1.1746': attribute type 11 has an invalid length. [ 587.502767][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1746'. [ 587.736047][ T5937] radio-usb-si4713 7-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 587.884780][ T5937] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 588.200206][ T30] audit: type=1400 audit(1756633504.160:722): avc: denied { bind } for pid=13447 comm="syz.3.1748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 588.438543][ T9] usb 7-1: USB disconnect, device number 42 [ 588.477121][T13456] : entered promiscuous mode [ 590.803993][T13478] sctp: [Deprecated]: syz.0.1757 (pid 13478) Use of int in max_burst socket option deprecated. [ 590.803993][T13478] Use struct sctp_assoc_value instead [ 590.821829][T13475] binder: 13474:13475 ioctl c0306201 0 returned -14 [ 590.846391][ T30] audit: type=1400 audit(1756633506.810:723): avc: denied { create } for pid=13477 comm="syz.0.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 591.121109][T13484] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1758'. [ 591.261871][ T30] audit: type=1400 audit(1756633507.220:724): avc: denied { write } for pid=13480 comm="syz.1.1758" lport=51365 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 591.624794][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1758'. [ 591.660389][ T9] usb 6-1: new full-speed USB device number 80 using dummy_hcd [ 591.671213][T13499] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1758'. [ 591.750923][ T30] audit: type=1400 audit(1756633507.670:725): avc: denied { getopt } for pid=13480 comm="syz.1.1758" lport=51365 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 591.821652][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.832141][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 591.841524][ T9] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 591.852434][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.885249][ T9] usb 6-1: config 0 descriptor?? [ 592.583547][T13499] pim6reg1: entered promiscuous mode [ 592.589108][T13499] pim6reg1: entered allmulticast mode [ 593.309641][T13520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1764'. [ 594.372602][ T5979] usb 6-1: USB disconnect, device number 80 [ 594.435223][T13532] netlink: 'syz.5.1769': attribute type 2 has an invalid length. [ 594.775042][T13541] binder: 13540:13541 ioctl c0306201 0 returned -14 [ 595.360179][ T5979] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 595.510268][ T5979] usb 7-1: Using ep0 maxpacket: 32 [ 595.542829][ T5979] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 595.553311][ T5979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.631629][ T5979] usb 7-1: config 0 descriptor?? [ 596.101651][ T5979] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 596.210695][ T5979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 596.239049][ T5979] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 596.246246][ T5979] usb 7-1: media controller created [ 596.259682][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 596.365315][T13560] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1776'. [ 596.431055][ T6031] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 596.587925][ T6031] usb 6-1: Using ep0 maxpacket: 32 [ 596.612941][ T6031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.626694][ T6031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.650731][ T6031] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 596.660282][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 596.678173][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.701509][ T6031] usb 6-1: config 0 descriptor?? [ 596.770875][T13562] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1777'. [ 596.830176][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 596.840593][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 596.859790][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.869561][ T9] usb 2-1: Product: syz [ 596.880308][ T9] usb 2-1: Manufacturer: syz [ 596.885047][ T9] usb 2-1: SerialNumber: syz [ 596.901363][ T9] usb 2-1: config 0 descriptor?? [ 596.927028][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 597.110523][ T5979] az6027: usb out operation failed. (-71) [ 597.116281][ T5979] stb0899_attach: Driver disabled by Kconfig [ 597.121017][ T6031] koneplus 0003:1E7D:2D51.002B: unknown main item tag 0x0 [ 597.122632][ T5979] az6027: no front-end attached [ 597.122632][ T5979] [ 597.138822][ T5979] az6027: usb out operation failed. (-71) [ 597.139341][ T6031] koneplus 0003:1E7D:2D51.002B: unknown main item tag 0x0 [ 597.145026][ T5979] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 597.154197][ T6031] koneplus 0003:1E7D:2D51.002B: unknown main item tag 0x0 [ 597.167224][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'. [ 597.172190][ T5979] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input83 [ 597.187339][ T6031] koneplus 0003:1E7D:2D51.002B: unknown main item tag 0x0 [ 597.188188][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1778'. [ 597.201060][ T6031] koneplus 0003:1E7D:2D51.002B: unknown main item tag 0x0 [ 597.206150][ T5979] dvb-usb: schedule remote query interval to 400 msecs. [ 597.218099][ T5979] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 597.238416][ T5979] usb 7-1: USB disconnect, device number 43 [ 597.259521][ T6031] koneplus 0003:1E7D:2D51.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 597.326574][ T5979] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 597.554132][ T5979] usb 6-1: USB disconnect, device number 81 [ 597.798423][T13579] wlan0 speed is unknown, defaulting to 1000 [ 598.249131][T13579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1780'. [ 598.462851][ T9] gspca_stk1135: reg_w 0xf err -71 [ 598.469064][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 598.477920][ T9] gspca_stk1135: Sensor write failed [ 598.565070][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 598.571780][ T9] gspca_stk1135: Sensor write failed [ 598.577078][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 598.583800][ T9] gspca_stk1135: Sensor read failed [ 598.590334][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 598.596819][ T9] gspca_stk1135: Sensor read failed [ 598.789542][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 598.806535][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 598.820146][ T9] gspca_stk1135: Sensor read failed [ 598.876248][T13601] netlink: 'syz.5.1786': attribute type 11 has an invalid length. [ 598.890188][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 598.912815][ T9] gspca_stk1135: Sensor read failed [ 598.935742][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 598.942174][T13601] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1786'. [ 598.968970][ T9] gspca_stk1135: Sensor write failed [ 598.989222][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 598.996731][ T9] gspca_stk1135: Sensor write failed [ 599.026911][ T9] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 599.200643][ T9] usb 2-1: USB disconnect, device number 28 [ 599.399986][T13614] FAULT_INJECTION: forcing a failure. [ 599.399986][T13614] name failslab, interval 1, probability 0, space 0, times 0 [ 599.458067][T13614] CPU: 1 UID: 0 PID: 13614 Comm: syz.6.1791 Not tainted syzkaller #0 PREEMPT(full) [ 599.458093][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.458103][T13614] Call Trace: [ 599.458109][T13614] [ 599.458116][T13614] dump_stack_lvl+0x16c/0x1f0 [ 599.458139][T13614] should_fail_ex+0x512/0x640 [ 599.458159][T13614] ? fs_reclaim_acquire+0xae/0x150 [ 599.458185][T13614] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 599.458211][T13614] should_failslab+0xc2/0x120 [ 599.458231][T13614] __kmalloc_noprof+0xd2/0x510 [ 599.458255][T13614] tomoyo_realpath_from_path+0xc2/0x6e0 [ 599.458283][T13614] ? tomoyo_profile+0x47/0x60 [ 599.458303][T13614] tomoyo_path_number_perm+0x245/0x580 [ 599.458324][T13614] ? tomoyo_path_number_perm+0x237/0x580 [ 599.458349][T13614] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 599.458373][T13614] ? find_held_lock+0x2b/0x80 [ 599.458425][T13614] ? find_held_lock+0x2b/0x80 [ 599.458445][T13614] ? hook_file_ioctl_common+0x145/0x410 [ 599.458469][T13614] ? __fget_files+0x20e/0x3c0 [ 599.458494][T13614] security_file_ioctl+0x9b/0x240 [ 599.458521][T13614] __x64_sys_ioctl+0xb7/0x210 [ 599.458549][T13614] do_syscall_64+0xcd/0x4c0 [ 599.458571][T13614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.458588][T13614] RIP: 0033:0x7f306c18ebe9 [ 599.458602][T13614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.458619][T13614] RSP: 002b:00007f306cfa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.458635][T13614] RAX: ffffffffffffffda RBX: 00007f306c3c5fa0 RCX: 00007f306c18ebe9 [ 599.458646][T13614] RDX: 0000200000000040 RSI: 0000000000003b87 RDI: 0000000000000003 [ 599.458656][T13614] RBP: 00007f306cfa9090 R08: 0000000000000000 R09: 0000000000000000 [ 599.458666][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.458676][T13614] R13: 00007f306c3c6038 R14: 00007f306c3c5fa0 R15: 00007ffc4b9b72c8 [ 599.458701][T13614] [ 599.458709][T13614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 599.790958][ T43] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 599.985958][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 599.996569][ T43] usb 4-1: config 0 has no interface number 0 [ 600.014034][ T43] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 600.299575][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.343636][ T43] usb 4-1: Product: syz [ 600.384506][ T43] usb 4-1: Manufacturer: syz [ 600.429260][ T43] usb 4-1: SerialNumber: syz [ 600.503477][ T43] usb 4-1: config 0 descriptor?? [ 600.853940][ T43] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 600.880648][ T43] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 600.898538][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 600.939423][ T43] usb 4-1: media controller created [ 601.004276][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 601.740483][T13637] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1796'. [ 602.152306][ T43] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 602.239879][ T43] usb 4-1: USB disconnect, device number 66 [ 602.290234][ T6031] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 602.371682][ T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 602.541810][ T6031] usb 7-1: config 0 has an invalid interface number: 189 but max is 0 [ 602.550001][ T6031] usb 7-1: config 0 has no interface number 0 [ 602.557157][ T6031] usb 7-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 602.568248][ T6031] usb 7-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 602.728149][ T6031] usb 7-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 602.739534][ T6031] usb 7-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 602.754175][ T6031] usb 7-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 602.768221][ T9] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 602.776546][ T9] usb 2-1: config 0 has no interface number 0 [ 602.783083][ T9] usb 2-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 602.794366][ T9] usb 2-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 602.806328][ T6031] usb 7-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 602.815581][ T9] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 602.826936][ T6031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.845470][ T6031] usb 7-1: Product: syz [ 602.849672][ T9] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 602.868887][ T6031] usb 7-1: Manufacturer: syz [ 602.875781][ T6031] usb 7-1: SerialNumber: syz [ 602.880469][ T9] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 602.897912][ T6031] usb 7-1: config 0 descriptor?? [ 602.903557][T13644] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 602.912663][ T9] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 602.923289][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.932770][ T6031] ums-alauda 7-1:0.189: USB Mass Storage device detected [ 602.940426][ T9] usb 2-1: Product: syz [ 602.944956][ T9] usb 2-1: Manufacturer: syz [ 602.952551][ T6031] scsi host1: usb-storage 7-1:0.189 [ 602.958343][ T9] usb 2-1: SerialNumber: syz [ 603.084629][ T9] usb 2-1: config 0 descriptor?? [ 603.097993][T13646] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 603.114799][ T9] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 603.616941][T13644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.631437][ T9] scsi host2: usb-storage 2-1:0.189 [ 603.642742][T13644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.681510][ T9] usb 7-1: USB disconnect, device number 44 [ 603.695587][T13671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.753890][T13671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.043965][ T6031] usb 2-1: USB disconnect, device number 29 [ 604.111838][T13677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1806'. [ 604.700168][ T6031] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 606.269022][ T6031] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 606.280456][ T6031] usb 7-1: config 0 has no interface number 0 [ 606.295063][ T6031] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 606.304727][ T6031] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.320362][ T6031] usb 7-1: Product: syz [ 606.332106][ T6031] usb 7-1: Manufacturer: syz [ 606.345251][ T6031] usb 7-1: SerialNumber: syz [ 606.427584][ T6031] usb 7-1: config 0 descriptor?? [ 606.665193][ T6031] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 606.707180][ T6031] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 606.834991][T13711] fuse: Bad value for 'fd' [ 606.868351][ T6031] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 606.877152][ T6031] usb 7-1: media controller created [ 606.916079][ T6031] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 607.983775][T13718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 608.023173][ T6031] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 608.164115][ T6031] usb 7-1: USB disconnect, device number 45 [ 608.461375][T13728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1822'. [ 608.903242][ T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 609.149230][T13736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1824'. [ 609.416988][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1824'. [ 609.426079][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1824'. [ 610.065113][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 610.097895][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.100706][T13740] vlan0: entered promiscuous mode [ 610.120176][T13740] bridge0: entered promiscuous mode [ 610.147734][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.223123][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 610.260279][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.319335][ T9] usb 4-1: config 0 descriptor?? [ 610.650288][ T6031] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 610.765038][ T9] savu 0003:1E7D:2D5A.002C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 610.801915][ T6031] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.813244][ T6031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 610.825545][ T6031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 610.835706][ T6031] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 610.866995][ T6031] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 610.908497][ T6031] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 611.000268][ T6031] usb 6-1: Manufacturer: syz [ 611.020879][ T6031] usb 6-1: config 0 descriptor?? [ 611.040165][T13760] sctp: [Deprecated]: syz.1.1831 (pid 13760) Use of int in maxseg socket option. [ 611.040165][T13760] Use struct sctp_assoc_value instead [ 611.153846][ T9] usb 4-1: USB disconnect, device number 67 [ 611.410199][ T6031] rc_core: IR keymap rc-hauppauge not found [ 611.448099][ T6031] Registered IR keymap rc-empty [ 611.457334][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 611.480189][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 611.516015][ T6031] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 611.544642][ T6031] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input86 [ 611.643320][T13753] wlan0 speed is unknown, defaulting to 1000 [ 612.262912][T13772] SELinux: ebitmap start bit (402653440) is beyond the end of the bitmap (1472) [ 612.283220][T13776] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1834'. [ 612.331484][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 612.350367][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 612.375179][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 612.378360][T13772] SELinux: failed to load policy [ 612.381416][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 612.410362][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 612.430473][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 612.480215][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 612.500218][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 612.530179][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 612.580227][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 612.610286][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 612.641643][ T6031] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 612.669577][ T6031] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 612.701243][ T6031] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 612.740379][ T5979] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 612.773192][ T6031] usb 6-1: USB disconnect, device number 82 [ 613.000325][ T5979] usb 4-1: Using ep0 maxpacket: 32 [ 613.188662][ T30] audit: type=1400 audit(1756633529.140:726): avc: denied { ioctl } for pid=13782 comm="syz.1.1836" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 613.806734][ T5979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.819021][ T5979] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 613.828854][ T5979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.890000][ T5979] usb 4-1: Product: syz [ 613.914719][ T5979] usb 4-1: Manufacturer: syz [ 613.955642][ T5979] usb 4-1: SerialNumber: syz [ 613.989714][ T5979] usb 4-1: config 0 descriptor?? [ 614.009345][ T5979] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 614.292638][T13803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 614.452038][ T5979] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 614.517214][ T5979] usb 4-1: USB disconnect, device number 68 [ 614.904195][T10560] udevd[10560]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 615.070211][ T43] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 615.250255][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 615.259803][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.270539][ T43] usb 6-1: config 0 has no interfaces? [ 615.282749][ T43] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 615.486702][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.487845][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1845'. [ 615.515201][ T43] usb 6-1: config 0 descriptor?? [ 615.581647][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 615.733993][ T43] usb 6-1: USB disconnect, device number 83 [ 615.832926][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 615.843438][ T10] usb 2-1: config 0 has no interface number 0 [ 615.853769][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 615.864241][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.875082][ T10] usb 2-1: Product: syz [ 615.879303][ T10] usb 2-1: Manufacturer: syz [ 615.893073][ T10] usb 2-1: SerialNumber: syz [ 615.907027][ T10] usb 2-1: config 0 descriptor?? [ 616.234873][ T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 616.253316][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 616.264859][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 616.286938][ T10] usb 2-1: media controller created [ 616.310368][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 616.657379][T13842] FAULT_INJECTION: forcing a failure. [ 616.657379][T13842] name failslab, interval 1, probability 0, space 0, times 0 [ 616.670063][T13842] CPU: 1 UID: 0 PID: 13842 Comm: syz.5.1851 Not tainted syzkaller #0 PREEMPT(full) [ 616.670089][T13842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 616.670099][T13842] Call Trace: [ 616.670105][T13842] [ 616.670112][T13842] dump_stack_lvl+0x16c/0x1f0 [ 616.670137][T13842] should_fail_ex+0x512/0x640 [ 616.670156][T13842] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 616.670186][T13842] should_failslab+0xc2/0x120 [ 616.670206][T13842] __kmalloc_cache_noprof+0x6a/0x3e0 [ 616.670239][T13842] ? bpf_get_raw_tracepoint+0x9c/0x2d0 [ 616.670260][T13842] ? bpf_raw_tp_link_attach+0x191/0x630 [ 616.670287][T13842] bpf_raw_tp_link_attach+0x191/0x630 [ 616.670312][T13842] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 616.670335][T13842] ? find_held_lock+0x2b/0x80 [ 616.670358][T13842] ? __fget_files+0x204/0x3c0 [ 616.670389][T13842] ? fput+0x9b/0xd0 [ 616.670412][T13842] ? __bpf_prog_get+0x97/0x2a0 [ 616.670431][T13842] __sys_bpf+0x23c2/0x4de0 [ 616.670457][T13842] ? __pfx___sys_bpf+0x10/0x10 [ 616.670480][T13842] ? ksys_write+0x190/0x250 [ 616.670503][T13842] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 616.670539][T13842] ? fput+0x9b/0xd0 [ 616.670561][T13842] ? ksys_write+0x1ac/0x250 [ 616.670578][T13842] ? __pfx_ksys_write+0x10/0x10 [ 616.670601][T13842] __x64_sys_bpf+0x78/0xc0 [ 616.670624][T13842] ? lockdep_hardirqs_on+0x7c/0x110 [ 616.670643][T13842] do_syscall_64+0xcd/0x4c0 [ 616.670666][T13842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.670683][T13842] RIP: 0033:0x7f539ad8ebe9 [ 616.670697][T13842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.670714][T13842] RSP: 002b:00007f539bc8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 616.670731][T13842] RAX: ffffffffffffffda RBX: 00007f539afc6180 RCX: 00007f539ad8ebe9 [ 616.670743][T13842] RDX: 0000000000000010 RSI: 0000200000000600 RDI: 0000000000000011 [ 616.670754][T13842] RBP: 00007f539bc8c090 R08: 0000000000000000 R09: 0000000000000000 [ 616.670764][T13842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.670775][T13842] R13: 00007f539afc6218 R14: 00007f539afc6180 R15: 00007ffed71d5f08 [ 616.670800][T13842] [ 617.434742][ T10] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 617.660796][T13851] fuse: Bad value for 'fd' [ 618.475588][ T10] usb 2-1: USB disconnect, device number 30 [ 619.424799][ T43] IPVS: starting estimator thread 0... [ 619.545511][T13870] IPVS: using max 37 ests per chain, 88800 per kthread [ 619.791836][T13873] sctp: [Deprecated]: syz.1.1858 (pid 13873) Use of int in maxseg socket option. [ 619.791836][T13873] Use struct sctp_assoc_value instead [ 619.920137][ T5979] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 619.993179][ T30] audit: type=1326 audit(1756633535.960:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13882 comm="syz.5.1863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f539ad8ebe9 code=0x0 [ 620.529354][ T43] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 620.545561][ T5979] usb 7-1: not running at top speed; connect to a high speed hub [ 620.557500][ T5979] usb 7-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 620.571480][ T5979] usb 7-1: config 1 interface 0 has no altsetting 0 [ 620.586158][ T5979] usb 7-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 620.748359][ T5979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.810784][ T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 620.819223][ T43] usb 4-1: config 0 has no interface number 0 [ 620.845325][ T43] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 620.870857][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.885200][ T5979] usb 7-1: Product: syz [ 620.951692][ T43] usb 4-1: Product: syz [ 620.956009][ T5979] usb 7-1: SerialNumber: syz [ 620.961811][ T43] usb 4-1: Manufacturer: syz [ 620.976375][ T43] usb 4-1: SerialNumber: syz [ 620.990970][ T43] usb 4-1: config 0 descriptor?? [ 621.784822][ T43] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 622.180885][ T43] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 622.531332][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 622.571281][ T43] usb 4-1: media controller created [ 622.597234][ T5979] usbhid 7-1:1.0: can't add hid device: -71 [ 622.606843][ T5979] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 622.701164][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.782739][ T5979] usb 7-1: USB disconnect, device number 46 [ 623.588296][ T43] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 623.903974][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.911923][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.942341][ T43] usb 4-1: USB disconnect, device number 69 [ 624.081291][ T9] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 624.379246][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 624.964590][T13933] input: syz0 as /devices/virtual/input/input88 [ 625.338325][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 625.352993][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.366125][ T9] usb 6-1: Product: syz [ 625.370402][ T9] usb 6-1: Manufacturer: syz [ 625.376219][ T9] usb 6-1: SerialNumber: syz [ 625.392576][ T9] usb 6-1: config 0 descriptor?? [ 625.401016][ T9] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 625.615981][T13943] FAULT_INJECTION: forcing a failure. [ 625.615981][T13943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.629135][T13943] CPU: 1 UID: 0 PID: 13943 Comm: syz.3.1874 Not tainted syzkaller #0 PREEMPT(full) [ 625.629158][T13943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.629169][T13943] Call Trace: [ 625.629175][T13943] [ 625.629182][T13943] dump_stack_lvl+0x16c/0x1f0 [ 625.629207][T13943] should_fail_ex+0x512/0x640 [ 625.629231][T13943] _copy_to_iter+0x29f/0x1710 [ 625.629258][T13943] ? chacha_block_generic+0x211/0x330 [ 625.629281][T13943] ? __pfx__copy_to_iter+0x10/0x10 [ 625.629317][T13943] get_random_bytes_user+0x17f/0x3c0 [ 625.629344][T13943] ? __pfx_get_random_bytes_user+0x10/0x10 [ 625.629374][T13943] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 625.629403][T13943] ? import_ubuf+0x1b6/0x220 [ 625.629426][T13943] __x64_sys_getrandom+0x183/0x290 [ 625.629451][T13943] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 625.629489][T13943] do_syscall_64+0xcd/0x4c0 [ 625.629512][T13943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.629531][T13943] RIP: 0033:0x7f030e98ebe9 [ 625.629545][T13943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.629562][T13943] RSP: 002b:00007f030cbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 625.629579][T13943] RAX: ffffffffffffffda RBX: 00007f030ebc6180 RCX: 00007f030e98ebe9 [ 625.629591][T13943] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 625.629602][T13943] RBP: 00007f030cbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 625.629612][T13943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.629623][T13943] R13: 00007f030ebc6218 R14: 00007f030ebc6180 R15: 00007ffd5f8ce768 [ 625.629647][T13943] [ 625.833441][ T9] pwc: Warning: more than 1 configuration available. [ 625.870145][ T6031] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 626.005408][ T9] pwc: Failed to set LED on/off time (-71) [ 626.017286][ T9] pwc: send_video_command error -71 [ 626.025613][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 626.043271][ T9] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 626.150356][ T9] usb 6-1: USB disconnect, device number 84 [ 626.270614][ T6031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.367220][ T6031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.420178][ T6031] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 626.429646][ T6031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.440877][ T6031] usb 2-1: config 0 descriptor?? [ 626.510413][ T5937] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 626.690656][ T5937] usb 4-1: Using ep0 maxpacket: 32 [ 626.718666][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.729554][ T5937] usb 4-1: config 0 has no interfaces? [ 626.746393][ T5937] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 626.772331][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.806112][ T5937] usb 4-1: config 0 descriptor?? [ 626.854885][ T6031] cp2112 0003:10C4:EA90.002D: unknown main item tag 0x0 [ 626.875251][ T6031] cp2112 0003:10C4:EA90.002D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 627.043699][T13948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1877'. [ 627.054342][ T6031] cp2112 0003:10C4:EA90.002D: Part Number: 0x82 Device Version: 0xFE [ 627.069239][T13948] netlink: 'syz.3.1877': attribute type 7 has an invalid length. [ 627.077498][T13948] netlink: 'syz.3.1877': attribute type 8 has an invalid length. [ 627.085499][T13948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 627.097881][ T5847] usb 4-1: USB disconnect, device number 70 [ 627.894280][ T6031] usb 2-1: USB disconnect, device number 31 [ 627.984771][T13967] sctp: [Deprecated]: syz.6.1882 (pid 13967) Use of int in maxseg socket option. [ 627.984771][T13967] Use struct sctp_assoc_value instead [ 628.105061][T13970] vlan3: entered allmulticast mode [ 628.110242][T13970] veth0_to_hsr: entered allmulticast mode [ 628.220222][ T5847] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 628.380121][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 628.551616][ T5847] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 628.560585][ T5847] usb 4-1: config 179 has no interface number 0 [ 628.567115][ T5847] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 628.579393][ T5847] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 628.592098][ T5847] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 628.603837][ T5847] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 628.615826][ T5847] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 628.629565][ T5847] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 628.639126][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.650531][T13968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 628.802967][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 629.319405][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1888'. [ 629.383004][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.401174][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.441577][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 629.443120][ T5937] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input89 [ 629.567446][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 629.725833][T13968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.737418][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.787705][ T9] usb 2-1: config 0 descriptor?? [ 629.816035][T13968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.215079][ T30] audit: type=1400 audit(1756633546.170:728): avc: denied { append } for pid=13978 comm="syz.1.1885" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 630.408853][ T5847] usb 4-1: USB disconnect, device number 71 [ 630.414875][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 630.414918][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 630.423050][T14002] netlink: 'syz.6.1892': attribute type 1 has an invalid length. [ 630.444787][T14002] netlink: 'syz.6.1892': attribute type 1 has an invalid length. [ 631.052531][ T5979] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 631.270180][ T5979] usb 7-1: Using ep0 maxpacket: 32 [ 631.300668][ T5979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.341391][ T5979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.355424][ T5979] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 631.368314][ T5979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.403505][ T5979] usb 7-1: config 0 descriptor?? [ 631.520255][ T976] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 631.553736][T14016] sctp: [Deprecated]: syz.0.1899 (pid 14016) Use of int in maxseg socket option. [ 631.553736][T14016] Use struct sctp_assoc_value instead [ 631.682579][ T976] usb 4-1: config index 0 descriptor too short (expected 5947, got 441) [ 631.709112][ T976] usb 4-1: config 99 has too many interfaces: 186, using maximum allowed: 32 [ 631.718943][ T976] usb 4-1: config 99 has an invalid descriptor of length 0, skipping remainder of the config [ 631.730197][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 631.736142][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 631.744053][ T976] usb 4-1: config 99 has 0 interfaces, different from the descriptor's value: 186 [ 631.755281][ T9] usb 2-1: USB disconnect, device number 32 [ 631.761345][ T976] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.0e [ 631.774722][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.839026][ T5979] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 631.846325][ T5979] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 631.853570][ T5979] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 631.860848][ T5979] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 631.867974][ T5979] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 631.877821][ T5979] koneplus 0003:1E7D:2D51.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 631.989113][ T976] usb 4-1: string descriptor 0 read error: -32 [ 632.922254][ T5979] usb 7-1: USB disconnect, device number 47 [ 633.109411][T14032] wlan0 speed is unknown, defaulting to 1000 [ 633.287942][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'. [ 633.684771][T14040] vlan0: entered allmulticast mode [ 633.778974][T14040] veth0_to_hsr: entered allmulticast mode [ 633.785388][T14040] bridge2: port 1(vlan0) entered blocking state [ 634.267357][T14040] bridge2: port 1(vlan0) entered disabled state [ 634.345357][T14040] vlan0: entered promiscuous mode [ 634.359057][T14040] veth0_to_hsr: entered promiscuous mode [ 634.464424][ T43] usb 4-1: USB disconnect, device number 72 [ 634.900297][ T43] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 635.143921][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.163671][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 635.175186][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 635.185341][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 635.363209][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 635.388475][ T43] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 635.407027][ T43] usb 4-1: Manufacturer: syz [ 635.422264][ T43] usb 4-1: config 0 descriptor?? [ 635.445955][T14061] netlink: 'syz.5.1910': attribute type 11 has an invalid length. [ 636.010521][ T43] rc_core: IR keymap rc-hauppauge not found [ 636.026612][T14070] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 636.037523][ T43] Registered IR keymap rc-empty [ 636.046661][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 636.080345][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 636.140961][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 636.168252][T14051] wlan0 speed is unknown, defaulting to 1000 [ 636.180197][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input90 [ 636.218596][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 636.318377][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 636.351003][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 636.370544][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 636.373245][T14076] SELinux: ebitmap start bit (402653440) is beyond the end of the bitmap (1472) [ 636.394112][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 636.424878][T14076] SELinux: failed to load policy [ 636.440606][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 636.499552][ T30] audit: type=1400 audit(1756633552.460:729): avc: denied { setattr } for pid=14084 comm="syz.6.1916" name="file0" dev="tmpfs" ino=1646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 636.606480][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.170196][T14090] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1916'. [ 637.196872][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.230929][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.250749][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.321621][ T43] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 637.521763][T14092] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1918'. [ 637.545983][ T43] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 637.572525][ T43] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 637.597609][ T43] usb 4-1: USB disconnect, device number 73 [ 638.236358][ T30] audit: type=1326 audit(1756633554.200:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f0b8ebe9 code=0x7ffc0000 [ 638.276519][ T30] audit: type=1326 audit(1756633554.200:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14073 comm="syz.1.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74f0b8ebe9 code=0x7ffc0000 [ 639.439892][T14116] ptrace attach of "./syz-executor exec"[5843] was attempted by "./syz-executor exec"[14116] [ 639.524262][T14121] sctp: [Deprecated]: syz.3.1925 (pid 14121) Use of int in maxseg socket option. [ 639.524262][T14121] Use struct sctp_assoc_value instead [ 639.650497][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 639.832954][T14125] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1927'. [ 639.881518][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.958353][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.021714][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 640.059463][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.093301][ T9] usb 2-1: config 0 descriptor?? [ 640.587740][ T9] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0 [ 640.602975][ T9] cp2112 0003:10C4:EA90.002F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 640.786974][ T9] cp2112 0003:10C4:EA90.002F: Part Number: 0x82 Device Version: 0xFE [ 641.760236][ T9] usb 2-1: reset high-speed USB device number 33 using dummy_hcd [ 642.761515][T14153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=14153 comm=syz.3.1934 [ 642.868071][T14154] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 642.877106][T14154] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 643.039005][T14158] ptrace attach of "./syz-executor exec"[6347] was attempted by "./syz-executor exec"[14158] [ 643.321457][ T976] usb 2-1: USB disconnect, device number 33 [ 643.820186][ T6031] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 644.142652][ T6031] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.191891][ T6031] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 644.206504][ T6031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.223273][ T6031] usb 4-1: Product: syz [ 644.232955][ T6031] usb 4-1: Manufacturer: syz [ 644.243702][ T6031] usb 4-1: SerialNumber: syz [ 644.260481][ T6031] usb 4-1: config 0 descriptor?? [ 644.275059][ T6031] usb 4-1: ucan: probing device on interface #0 [ 644.287822][ T6031] usb 4-1: ucan: invalid EP count (0) [ 644.298876][ T6031] usb 4-1: ucan: probe failed; try to update the device firmware [ 644.910476][ T976] usb 4-1: USB disconnect, device number 74 [ 644.955684][ T30] audit: type=1400 audit(1756633560.900:732): avc: denied { nlmsg_read } for pid=14175 comm="syz.1.1944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 645.066645][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1945'. [ 646.120277][ T30] audit: type=1400 audit(1756633562.080:733): avc: denied { write } for pid=14187 comm="syz.3.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 646.183221][T14192] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1948' sets config #1 [ 647.085877][T14201] binder: 14199:14201 ioctl c0306201 0 returned -14 [ 647.851795][T14220] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 647.858957][T14220] overlayfs: failed to set xattr on upper [ 647.864723][T14220] overlayfs: ...falling back to redirect_dir=nofollow. [ 647.871572][T14220] overlayfs: ...falling back to index=off. [ 647.877381][T14220] overlayfs: ...falling back to uuid=null. [ 647.891776][ T30] audit: type=1400 audit(1756633563.700:734): avc: denied { ioctl } for pid=14212 comm="syz.5.1955" path="socket:[46563]" dev="sockfs" ino=46563 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 648.004283][T14223] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 648.334903][ T30] audit: type=1400 audit(1756633563.810:735): avc: denied { mounton } for pid=14212 comm="syz.5.1955" path="/file0" dev="ramfs" ino=47789 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 648.608718][T14229] netlink: 'syz.5.1958': attribute type 11 has an invalid length. [ 650.504349][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1964'. [ 650.952394][T14254] bridge1: port 1(veth3) entered blocking state [ 650.964226][T14254] bridge1: port 1(veth3) entered disabled state [ 650.990307][T14254] veth3: entered allmulticast mode [ 651.005997][T14254] veth3: entered promiscuous mode [ 651.049958][T14255] vlan2: entered allmulticast mode [ 651.055289][T14255] veth0_to_hsr: entered allmulticast mode [ 651.061730][T14255] bridge1: port 2(vlan2) entered blocking state [ 651.069242][T14255] bridge1: port 2(vlan2) entered disabled state [ 651.091756][T14255] vlan2: entered promiscuous mode [ 651.170172][ T5979] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 651.178889][T14255] veth0_to_hsr: entered promiscuous mode [ 651.188365][T14262] binder: 14258:14262 ioctl c0306201 0 returned -14 [ 651.346646][T14267] wlan0 speed is unknown, defaulting to 1000 [ 651.442001][ T5979] usb 4-1: device descriptor read/64, error -71 [ 651.530148][ T976] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 651.740222][ T976] usb 2-1: Using ep0 maxpacket: 8 [ 651.747310][ T976] usb 2-1: unable to get BOS descriptor or descriptor too short [ 651.765834][ T976] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 651.770496][ T5979] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 651.829143][ T976] usb 2-1: config 4 has no interface number 0 [ 651.843645][ T976] usb 2-1: config 4 interface 30 has no altsetting 0 [ 651.856421][ T976] usb 2-1: string descriptor 0 read error: -22 [ 651.868495][ T976] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 651.913883][ T976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.922347][ T5979] usb 4-1: device descriptor read/64, error -71 [ 651.932922][ T976] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 651.949615][ T976] dw2102: su3000_power_ctrl: 1, initialized 0 [ 651.963910][ T976] dvb-usb: bulk message failed: -22 (2/0) [ 652.004609][ T976] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 652.030443][ T5979] usb usb4-port1: attempt power cycle [ 652.052982][ T976] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 652.095237][ T976] usb 2-1: media controller created [ 652.197103][T14265] dvb-usb: bulk message failed: -22 (1/0) [ 652.226808][T14265] dw2102: i2c transfer failed. [ 652.262947][T14265] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN NOPTI [ 652.275012][T14265] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 652.283394][T14265] CPU: 1 UID: 0 PID: 14265 Comm: syz.1.1968 Not tainted syzkaller #0 PREEMPT(full) [ 652.292736][T14265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 652.302775][T14265] RIP: 0010:su3000_i2c_transfer+0x52a/0xf30 [ 652.308648][T14265] Code: 08 0f b6 00 83 e2 07 38 d0 7f 08 84 c0 0f 85 c9 08 00 00 48 8d 7d 01 45 0f b6 6c 24 02 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 38 38 d0 7f 08 84 c0 0f 85 f2 08 00 00 49 8d 7c 24 03 [ 652.328229][T14265] RSP: 0018:ffffc9000bf87c40 EFLAGS: 00010202 [ 652.334280][T14265] RAX: 0000000000000002 RBX: ffff88805ed5e7c0 RCX: ffffc9000cceb000 [ 652.342228][T14265] RDX: 0000000000000001 RSI: ffffffff87fba86e RDI: 0000000000000011 [ 652.350176][T14265] RBP: 0000000000000010 R08: 0000000000000005 R09: 0000000000000000 [ 652.358119][T14265] R10: 0000000080000000 R11: fffffffffffc5ab8 R12: ffff88807c50e600 [ 652.366066][T14265] R13: 0000000000000010 R14: 0000000000000001 R15: dffffc0000000000 [ 652.374013][T14265] FS: 00007f74eedf66c0(0000) GS:ffff8881247b8000(0000) knlGS:0000000000000000 [ 652.382917][T14265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.389474][T14265] CR2: 00007f306c3bb900 CR3: 00000000610aa000 CR4: 00000000003526f0 [ 652.397430][T14265] DR0: 0000000000000000 DR1: 0000000000000025 DR2: 0000000000000000 [ 652.405388][T14265] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 652.413333][T14265] Call Trace: [ 652.416598][T14265] [ 652.419518][T14265] __i2c_transfer+0x6b3/0x2190 [ 652.424274][T14265] ? lockdep_hardirqs_on+0x7c/0x110 [ 652.429445][T14265] ? __pfx___i2c_transfer+0x10/0x10 [ 652.434620][T14265] ? rt_mutex_slowtrylock+0xc9/0x100 [ 652.439882][T14265] i2c_transfer+0x1da/0x380 [ 652.444360][T14265] i2cdev_ioctl_rdwr+0x373/0x710 [ 652.449285][T14265] i2cdev_ioctl+0x5ff/0x820 [ 652.453765][T14265] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 652.458767][T14265] ? selinux_file_ioctl+0x180/0x270 [ 652.463941][T14265] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 652.468942][T14265] __x64_sys_ioctl+0x18b/0x210 [ 652.473686][T14265] do_syscall_64+0xcd/0x4c0 [ 652.478184][T14265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.484047][T14265] RIP: 0033:0x7f74f0b8ebe9 [ 652.488435][T14265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.508013][T14265] RSP: 002b:00007f74eedf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.516395][T14265] RAX: ffffffffffffffda RBX: 00007f74f0dc5fa0 RCX: 00007f74f0b8ebe9 [ 652.524337][T14265] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 652.532279][T14265] RBP: 00007f74f0c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 652.540220][T14265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.548160][T14265] R13: 00007f74f0dc6038 R14: 00007f74f0dc5fa0 R15: 00007ffe8a063488 [ 652.556124][T14265] [ 652.559123][T14265] Modules linked in: [ 652.563320][T14265] ---[ end trace 0000000000000000 ]--- [ 652.684743][T14265] RIP: 0010:su3000_i2c_transfer+0x52a/0xf30 [ 652.693131][ T30] audit: type=1400 audit(1756633568.650:736): avc: denied { read } for pid=5202 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 652.715271][T14265] Code: 08 0f b6 00 83 e2 07 38 d0 7f 08 84 c0 0f 85 c9 08 00 00 48 8d 7d 01 45 0f b6 6c 24 02 48 89 f8 48 89 fa 48 c1 e8 03 83 e2 07 <42> 0f b6 04 38 38 d0 7f 08 84 c0 0f 85 f2 08 00 00 49 8d 7c 24 03 [ 652.735420][ T30] audit: type=1400 audit(1756633568.650:737): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.757640][T14265] RSP: 0018:ffffc9000bf87c40 EFLAGS: 00010202 [ 652.796591][ T30] audit: type=1400 audit(1756633568.650:738): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.818801][ T30] audit: type=1400 audit(1756633568.650:739): avc: denied { add_name } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 652.850281][ T5979] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 652.861815][T14265] RAX: 0000000000000002 RBX: ffff88805ed5e7c0 RCX: ffffc9000cceb000 [ 652.874207][T14265] RDX: 0000000000000001 RSI: ffffffff87fba86e RDI: 0000000000000011 [ 652.882470][ T30] audit: type=1400 audit(1756633568.650:740): avc: denied { create } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 652.883155][T14265] RBP: 0000000000000010 R08: 0000000000000005 R09: 0000000000000000 [ 653.192401][T14265] R10: 0000000080000000 R11: fffffffffffc5ab8 R12: ffff88807c50e600 [ 653.203245][ T5979] usb 4-1: device descriptor read/8, error -71 [ 653.216599][T14265] R13: 0000000000000010 R14: 0000000000000001 R15: dffffc0000000000 [ 653.218021][ T30] audit: type=1400 audit(1756633568.650:741): avc: denied { append open } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 653.227700][T14265] FS: 00007f74eedf66c0(0000) GS:ffff8881247b8000(0000) knlGS:0000000000000000 [ 653.248334][ T30] audit: type=1400 audit(1756633568.650:742): avc: denied { getattr } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 653.256878][T14265] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.279444][ C0] vkms_vblank_simulate: vblank timer overrun [ 653.292288][T14265] CR2: 00007ffc4b9b5da8 CR3: 00000000610aa000 CR4: 00000000003526f0 [ 653.301364][T14265] DR0: 0000000000000000 DR1: 0000000000000025 DR2: 0000000000000000 [ 653.309345][T14265] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 653.319004][T14265] Kernel panic - not syncing: Fatal exception [ 653.325235][T14265] Kernel Offset: disabled [ 653.329531][T14265] Rebooting in 86400 seconds..